Analysis
-
max time kernel
17s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
22/01/2025, 02:27
Behavioral task
behavioral1
Sample
92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Resource
android-x86-arm-20240624-en
General
-
Target
92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
-
Size
3.6MB
-
MD5
0366ae0abf0ada8aed90322bfe07dfd5
-
SHA1
2f0779ce64f02944e87674745cb446c5bc620607
-
SHA256
92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
-
SHA512
52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
-
SSDEEP
98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.systemservice
Processes
-
com.systemservice1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4258
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5dedb05c4680a3658907ca3e871e61d7e
SHA119f21fd91de7d6af8ce6cfd73bbeeaad05e303fa
SHA256816f1163a169d2bd338bd12afe7795936f31758fc0cb64401517144d438c8f99
SHA512606fb03c2b9cf1f5b64c1d7b33926c2ccd2be8afda47307e49b4c1ea63ee55f2fbf81bb81612ee635fb6c588d8f8db28aad4b6d53afe53e1ecd008ca944f4979
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
68KB
MD5c7f4943bc1c1979c2af29c5ac55faa26
SHA1f5d20c15fe81b91740b0acd07862849909f88018
SHA2562bafbd4c2d5b70b7d4541ca13dcfc22900a6a6a035db1d9664839981c53e56a0
SHA5127713a03374377e20277394e8fedbd28a514841b6d77acd8579ec5a25d448fb18819981e4b6c63e69641a2ec8088334fce0db97b303cb0e60711d2fb81cebc324
-
Filesize
36KB
MD5045489a0639eee27bca52f48828cd93d
SHA1436e7966e7c019273c44faa4d8c5709b816dfda3
SHA2560151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
SHA512c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e
-
Filesize
16KB
MD57237409e0640cfab7bdbd429bf821a3b
SHA14c3da934842f8d4835dfe2a9c275a300e5123309
SHA2565c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
-
Filesize
16KB
MD5095ce92e099460e387f524c9e3d3fb42
SHA11557ff8647f2dd6b0502620ae9e848bb8ced4aff
SHA2569c964ee04cad61850afe553abe33ba8dc6f89f86906251131ef6bfb16a9befd2
SHA512b2569d18237e023810e12cb2eeb7376f20cac589df2ad6ef10b16bd9c8b17926cafb366ba9bf2012a32736ac88158182f6355db4cdcadcb5c90212a9dab65d02
-
Filesize
16KB
MD54260bbb027b2bf5f12876d75ae8eaba0
SHA1cfa0a5d2e1e1988e0407c8f52335087b000d96cf
SHA25645cf341a8235aded6314382d720cd25214cb8a54c1aa2f1cb4dc2845d440e249
SHA5126cb242716e7f32fb83ad5034c7b2804ce7ed1be57c5e6e23aa0bc82605d7d0ad7959ffd6f459ce399992f9f0affd276d467a9c5bcefe220160b448cea6175572
-
Filesize
16KB
MD5c283f01f28c7bbab5cd8466efd368136
SHA14cf68cc47df053ade1e027ba096c0bcc9f5cfe89
SHA2560a8ddb59ba5f006f174a02f2e7d6c2def3ee0cd074dfadd2a5242a8a2660fbc5
SHA512d1d12e81e8855f0f3316b0534448a4d833d52e96ab9ee9f5a11e8197122e63618b0d2880e24012ac555388d56d08f441a96292a74298fa10e73aade1cf712f54
-
Filesize
16KB
MD51b4a0a164f2edfffb7867310e18852d3
SHA15b4210802ce72942d1a3322b087785001eaf63aa
SHA2569cdb65b030c1327ff73bee91d3c20ae72ca895a1178c114a0f518ce87cda0b22
SHA5129662687a4e78489bd1489e053d3e46b133f931bfd515ead230e80a2be25ccbd032a37be37d94f2bdd874ad25bd55be5af125397f45a0e6470fdf0d010005f0d8
-
Filesize
16KB
MD5835cfc7decf507cdc5e54f602e3f9699
SHA14a55d424cb32e766554672cb2d0b3804fc47552f
SHA25629257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852
SHA5122ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d
-
Filesize
512B
MD5d7c9e20289b06c4ad709ddf01b99cc4e
SHA16995ed8c1afd5441044cc966ed492e272bbb56e4
SHA256ca203903ce50965749206d4e577fe1dc745e44a349c0dba1687ba9a82488d5b3
SHA512e2b12ef1eaf78aa836eb6b16801d5bab7fa91b8385eb038393dfa637a91849c9e156d4255e09874dace8fd0c3104601a1d6369d399fd9e79dd3a04b9fcf4deeb
-
Filesize
36KB
MD5bb31c3b6a371558fb796ad2d078dc50f
SHA16cad0dddd4297c54a58e861366a0186a80fd9d8f
SHA25680d1b3e09c0344527534fd02f47f0c729b0b1bb8de03db6f6a11a12c82db0b81
SHA51265901054bc21f80f1897baf653e93da4c54f579a06b16c5d65fdaadd7add2480a713287f9bc15e7597036aab49e3b5ee0a6e11d7dea56274231fa75d0f85cce2
-
Filesize
4KB
MD52cd739b87e0c95790b9baa5329d51636
SHA1876eb1f454fceb6518f2c60877b77b4f304c712c
SHA256fd887bf610ea0cff3536b4dcb6ecd2856355f6638de7175592dbe730f16efa78
SHA5123d91e92c3d1619b7c529c9dbd22551a4db2a82377e4aa83dd6cd13820cc6fe9e4dbd5d9c45e9f449f6935aa00162ee03a9d5b1fdeb798ff4dcb2855cd3f7cf7a
-
Filesize
4KB
MD57dfc846a1d5b3dbb4866a4b090e67c76
SHA1a8fddb7ac908602f9fc83939dcab064fa7ba138e
SHA25621c8e36c87aa28b541dcb087c32d9296f8454614b2909e27b680b01b7b0ef659
SHA5123cf020dbe9bb7f64f304cfe93dcae340d3e565c5de649323441fd39a32f5f9ac5d7b19277403f965ae3a6d5d6e7e763b233bf5c2d63bffb99dec40c0e05705a4
-
Filesize
4KB
MD55c3871be1b0ac9b08a57c74920d135b3
SHA128563e51f54b945af05ef1b782983b6353653fd8
SHA256f17af41f90565683b9677249a636ca79b5cb0f1bd33cfb3c3e920c95623de829
SHA51230f25a70c38461a03a049b148fe36537e30746527ebf1edbed5bc082dd45e95766fe7e779085a66f0e1c17f58d1938d6cb78b96f2d8fa7775ca475a647da66ae
-
Filesize
4KB
MD549d2bb5efc4dd9ccdced1c4ca6313b41
SHA162ed72479fe81d2e8af2358fe469cee43a7e438b
SHA256e86ba1ac0ccf2ece34e7b029216fe25f937b5269785f573bdc79ee9687937bc0
SHA512549427fb9d8af5367c64877bcd565fd625caaa030c93392ced70a2e8137e915b964e5eba3f5fded29df9393d1d9bd86950fca75734c7c131d8ef49ff58321d8e
-
Filesize
4KB
MD5f6cd3a2c8fb181e873bce4948b3bd382
SHA1573eccf21db471dd5ff36fce6f00e03c185b1c2d
SHA25617c8f4ce3388a935d63a05e419d9b12434b4d75e88644b1b2bb1dce03644a19d
SHA5128ba9d09fece19eb8bc7c35d90e5c85013a8b7c7044210800eb814ef37e8cf60878889982ea31f30e28100c64320a561b8dfe0dc167ae2fe092a3610063d9a104
-
Filesize
90B
MD5778f6ecf3b41a0414eada5aa277b7307
SHA1303ae2a726ff5d2543ba7fff20322a662bcae25a
SHA2568ad824d75041a3303ae9bc07b1973acd31c90fdb942730a324e9c07f107690ed
SHA5121fde7c03706569a2dc13cc3a4eb56ac9ed03356ec3f2e2348692179d4c4f4a7703b402ea3e451263539690f7dd7390843139e9641a48c516fb53ac31b711fcca
-
Filesize
556B
MD557753723feeccf438f8a6c1424779e30
SHA1e6b7d4555c9cec5f02622cdca2ff5f896025dc80
SHA25630f9de7228bfec20893a05416d3f55fdb8359af2cafc6f351fb4e84bc4aaeae0
SHA51275db65aab0765dc58d5ed47ec27661378065930d75a3b3e4f9ec2591dda39170f6768870ddaa8dddfe64e497e1c38d2d16e722d89e5c838a706db2e473a3e9df
-
Filesize
3KB
MD504762a406cd2a623dc92fd3afe872131
SHA18502155e8e0656ad084263e5a07dc23e30eab2e7
SHA2564420e56e3a8d89c034ddf2b9a56939cfd15e4d0ca8707cfd1059b6ecbaebe433
SHA5125251971c679e4a7a6a1ec1414c5a96460852188e59e796caaf72348d45cfcc15715a971e553ffe9bed435d0ab9f8d35c25c16d3eed2d6e1ed1503926dc8c898e