Analysis
-
max time kernel
10s -
max time network
149s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
15-02-2025 18:37
Static task
static1
Behavioral task
behavioral1
Sample
3476006a8f64bfe72a8b04477f6005293b5854cfbc58bee2ea28e59b58f0e316.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
77bd99fc14c25843d7ce183443119b5d7a1f524c00f5a9e2dcccc22f8dae6042.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral3
Sample
77bd99fc14c25843d7ce183443119b5d7a1f524c00f5a9e2dcccc22f8dae6042.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral4
Sample
77bd99fc14c25843d7ce183443119b5d7a1f524c00f5a9e2dcccc22f8dae6042.apk
Resource
android-x64-arm64-20240624-en
Behavioral task
behavioral5
Sample
a1de866d5f75b3f31becb07f4660e2a3cc29d242888be38fadb5a54657156745.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral6
Sample
a1de866d5f75b3f31becb07f4660e2a3cc29d242888be38fadb5a54657156745.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral7
Sample
a1de866d5f75b3f31becb07f4660e2a3cc29d242888be38fadb5a54657156745.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
77bd99fc14c25843d7ce183443119b5d7a1f524c00f5a9e2dcccc22f8dae6042.apk
-
Size
2.6MB
-
MD5
40981142bcde486676e5eea7bcdfadbb
-
SHA1
b61860a7ef0ec87174b92c59c6b68265a32619c4
-
SHA256
77bd99fc14c25843d7ce183443119b5d7a1f524c00f5a9e2dcccc22f8dae6042
-
SHA512
584e8dbd93b9d89c29d3b7180f524a1d3077cad2fc10542db15f8a604290f475ddd2ddcbabbf5a406f048d224bcadd00348abfcce39f9885a569ef6e2a9ec090
-
SSDEEP
49152:J/G52p3JiUhiZu/Rtzr52jvAOpPK4Nc5hFV3MM0b9kpYgs6V/Dce7q5px671:Rvp5piZmpCvBpPKr3r8MIWpYMV/6pS
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener Madsal.com -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock Madsal.com -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo Madsal.com -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo Madsal.com
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
Filesize
16KB
MD5e9f4ab5e0b4289b9dbf2dc80ead28ca4
SHA1252bc65d2b3f6a1d87cecf06b39b9e2bdf02d416
SHA2566e1ef985d28e965b889a125226e96056bc3a7294d3b88dd2b55ad7ac2a7803e0
SHA512148e8a285c8f4f6b86fa76218614e07670ab0751d9676eb320f95dd4ec5dd4aa68f91c30ed06ad67322d4f6ca2927607b86065efad21ada73f3ec64aa4ed7d49
-
Filesize
16KB
MD590ef840f930145299f1aa89c89c0ca18
SHA17f87bc453fcd236b2fcb5fd0bc9b0ae901460d7c
SHA256c1bdfa483f6f75a5289d4a6f0cc928cacc8f1db44bb640b0fb8a604f4e34b1db
SHA512d4ada79b62ce9e219987fff14616cd78bb1654d4aa645f83c65cea866882bd08356b99b5c3e6a2784f78580ea61d4f2cd5d315c7609c368734f0d5e5f076677c
-
Filesize
16KB
MD5e65204d718a1a089b797a44932874df5
SHA1b89dac85db4e31535aca7553267b3b8aa072c81b
SHA256980980a0ee25812eebc88f3f9e7f79a1ba5955bd16506bb637ef3e4d1db38822
SHA5129831a0eb7e47cb33d0024b5fad4422d6187ee92cbb3dd471df5fe5d02677e59ab468330a9307e04ef17f147b3d0aafca778f570c6e844cb028cfd2ee0a1cb504
-
Filesize
16KB
MD5a23fc12889a545e92078a7be724bd7cd
SHA147e89832c860b356dfd9d7f8978bff2b0192a579
SHA256f275bcb3d857fbf307a6ad1322fb3d7a36c94e8b8f6619624843d685a75adf5d
SHA51230903741473052f1fbdcade7b9b447481db3119795d9968901e2b0372f0fe3e7c4e65303b0bf7696fd8a2e2eb05d7a9105f15a3ca5187d1d361509dc80fd006e
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
8KB
MD531626e6ef00552a4ee14af84511e748c
SHA1652d246022edeb16cfed20377ae4c7aeab959e5a
SHA256c07fc6bf8685a0bef3389f20f88250e685c9b24d971c21704d4c707885c3c0c1
SHA512ff01229c057c5c4c69049e8bf844d9d0797276f48f2dcb8354659abf55ac60e193728bc6676de10f9736f9d982699d0f21900b6f4977a368e5443260ed9e67d2
-
Filesize
8KB
MD589352dbbb36937ee746495e4656cf1ad
SHA1fa62d3d29197d1bec22c23eab6e668b93c2af83b
SHA256cf1e2543f7d6b0e0d7410e3b33c76320ea672f5ac732ba2b05cfb11db1dc2957
SHA512230df1a6a559af729fcd96c0001fd2b6e0076029851496d8798099481c7f25c206634f6c2a9eb0d8794810f278e47fff1f4232defd86c7a68d4972fec13a3ead
-
Filesize
512B
MD506357a79d267c7829d21b880e6aaa567
SHA1b66bb0c7d8eb5949461218882ac3faa29b809ff8
SHA25654d08f5d9c6901a6f92a8e95207f048b97bccd8dac15434e14a9cefc1cffe661
SHA51230d18fd6993d74667f39856b16449ce01ef1a57ae8135debea0d54e2aac71f62619a56212d97f5b30d3dadd3cc56c1202998ae2ca1de3143d17fd0b2a5b308fe
-
Filesize
8KB
MD54fda2adf0fa79b415e40b87453e8f994
SHA1d45899a53521d7b496b3455ddc70266c26fc59f3
SHA256c0cc914b796d35a0bd3e83bf830bd9cc87dc192e703ac721bf23f4a5f7dc3a41
SHA512fa49165f44d58c1a6a28fe38ca3970f45aee9d10f16df2d29f4bc44f2b20d1302c714db0572d6ed7d016101cc42f3475292e8c9f8fec1895c40047ef4e1a4cba
-
Filesize
4KB
MD5442c384250d9b7d0af72e6e7ba22dd4e
SHA144ddfdc9cc1f3a2e83958448be4469073942bd0d
SHA256ffe9c9e32bedf74441e856e61b5b50ad37767954fe9ec00b3297db79e4abe615
SHA512f59538e4132fd27384f6f7ca42769eff8c2fc60488bd8537c622eaa1e99e20833b80ca88f4a01ae66b8882bd550db31ff4f9cfa45dcbc0a70091270597a7ba27
-
Filesize
8KB
MD50958899241eb43f4608cec839f8f0092
SHA169633515a6363c77afbb4d6d094cb11bc40463bf
SHA256e10f3f11a5e4515428b6babd38ff9f7c9bdc6bf820637aad0b640c3e64065a83
SHA51280fc9e1413b8c80f8063a9f19c47a8191bc4ecdfb90703887121ae4e26a355e6b269c9ac6be0f89dc064d96c3599b9c89945a73247ff1d77a2bd9c31c3051d04
-
Filesize
21B
MD50c1e3840fbec04cddaaa9ede4033f2f2
SHA182b7f73ef5d71cfefc1645b528ed20a2aed07df2
SHA256481a2a8e5761a29c6939f2bf541ca7f06c1c8d671612b5a7dad02bb889051df3
SHA512bec4bf1b315544e5d9862d476ee3e85a89803fcdb471833cb4bf04f31bbf4276fa02aeb6f9da36ef4c68de824e676a506c46ca45fe72a834a1451382e0ebba5b
-
Filesize
569B
MD5926c57631f23122b0c54ef927d70f27c
SHA14324e772a73b06b55372e514fb6ef2092624685b
SHA256f8b1ca522915da6c63596d8c2083778d7a90a41946170a139a9aab4e1b2a6040
SHA5124161eb33e6f61350ae02e58e1490ddb1fda82bcc12b141095bf7447964d77b77eed7ec939cc40c060d410069c7d9fd468d85bc4383e258e0c765afeb60fa7a5e
-
Filesize
90B
MD5475e928cbac8f7a5b009f0b57ae54027
SHA18b64775d2fe9a017287ba77475a9b166997d879b
SHA2560977dc3b002b72bd71aed88977316b31cd3b61e1bcd9960bd1ffba6d78aacd98
SHA5127e6c903d54f9f00e3e1ddb3cf18ea2dafd9fd5d2098ed0a0302a1b677c8bef829058c1dd426503e261a7a23b2e4d984233640b2205eaa0542b8d149ae908b4fe