Analysis
-
max time kernel
13s -
max time network
150s -
platform
android-9_x86 -
resource
android-x86-arm-20240910-en -
resource tags
arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system -
submitted
18/02/2025, 02:33
Behavioral task
behavioral1
Sample
92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Resource
android-33-x64-arm64-20240624-en
General
-
Target
92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
-
Size
3.6MB
-
MD5
0366ae0abf0ada8aed90322bfe07dfd5
-
SHA1
2f0779ce64f02944e87674745cb446c5bc620607
-
SHA256
92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
-
SHA512
52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
-
SSDEEP
98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice -
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice -
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.systemservice
Processes
-
com.systemservice1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4264
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD59557ee69940767f86d26c7de46267f59
SHA1b5adc5e9925d00b88f258a01027f9053bef92ec2
SHA256b6c0507679efb8cbba9e96f5d8114c4b2d09545438dfd32514824943d2670381
SHA5128a2928ed460adf0713ab371dfde8a24404f9aee0413f464ece653c9d019e3f264ceed0beebd8181b47e516e452fb801ff0d3b6b74ef548f19d67d58d586dc1ee
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
68KB
MD500957b7974ecbd84e517fc6e463c71fa
SHA1ecc3bf540fd87805e1d62dc6e2eeea5d66d681ce
SHA256b2d065b7f140aadc399e5edad5cc4315a9f9e1a69b1ffb4d446f29ee536f1485
SHA51247f01218273a3b55c8444043726f35e04d751754eaff12d919e01f4015118a3dae0dca15b1d38c737a53701b0224874fe318fecbf1ecfdaa2f0f47b7facec199
-
Filesize
36KB
MD5045489a0639eee27bca52f48828cd93d
SHA1436e7966e7c019273c44faa4d8c5709b816dfda3
SHA2560151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
SHA512c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e
-
Filesize
16KB
MD57237409e0640cfab7bdbd429bf821a3b
SHA14c3da934842f8d4835dfe2a9c275a300e5123309
SHA2565c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
-
Filesize
16KB
MD5d79eba07b603eae5d28333d46f07b59a
SHA10f02029e2e610f3027778054ec397bbd508ba67b
SHA256001f18dde435a33a7648c33fa43488d4501f93f6bf6efeed49882b7f1b5a6e26
SHA51251311a909cde49a219b0bc085bb3d203be8b4c183a620e7c655028c7e00602d4c000160a1035a77982183c43bc5a64d587fbb9cc3e890d027688afa9c3881d54
-
Filesize
16KB
MD51eb6fd67ae55bc6d992bee18b64b40f6
SHA12cb89e6c4c92960d9591aa96780e80065c85003d
SHA2560dfaf5b558d71e5fa7896e8686792afcb1740133daa0a4d651af75995ede2612
SHA51236b5616c3de79b2dc5283faed95c484164d95676009c0d12f20002abbd752584d0c5df34cf62a23bf3cee0b95405318680f7502a3c12bd83d5b0cff36bb0b9a6
-
Filesize
16KB
MD5eedc4f25af0ac78c6a813dd76234f590
SHA12f3d33af9eb78387f5c295ebe832a82d9149b912
SHA256e4e724eb1b27c6752a7c73c20ec6ed253e7b01e85312ec6f37b732becabbc5b0
SHA512d74f12e156ec99c4d38daf412bc47acc08ea3bfd71774a61b3d836d5c5856759e6a1ab48eab553e605f37188a30a888a35eb40213636927274417735ad1e5485
-
Filesize
16KB
MD5276284a8880e33a767990bc322489ad2
SHA19e8456d04ae72b4b202d0e231b8f158a281e3765
SHA256a9ca50a18ff16d40bab36fa0b7fa4b63ba1c1ce251a902e47f96963813077182
SHA512a25c3331d6fc33bf66f899edb7502fc757500ebd46fb4fc992272f1633eb6f8c9897643e7d9556226ae851cb75b87b2bc9736598bbddc70ecabdc7ee99142db3
-
Filesize
16KB
MD5835cfc7decf507cdc5e54f602e3f9699
SHA14a55d424cb32e766554672cb2d0b3804fc47552f
SHA25629257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852
SHA5122ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d
-
Filesize
512B
MD597d96d619b7c07453f28e1c6d442157c
SHA1f44b558673d7aafe96514e52d93b179f09248d12
SHA25697eada019a4a87d2685049f4993d201617ef6ee9d1012f487dac5006bc57bd21
SHA51282e1c88fd8081eb0d7928a38fea3ab0ed8ba05c8d03bb5752f20e588d24ae8b8ac3dfbacb93b9a467b5f85ffdd6c4c386eb0e427c5dc99e0c805e009266a1ea8
-
Filesize
36KB
MD5b0e79e29d181a8a2eeb63ba85b979061
SHA1be6e5cce0f1649fb4220634f5656b153d5cdbda6
SHA256def168440fd578fd418dc00219b11d51b9a5ad18a103ff673355580d0517ae3d
SHA51214237f08d26c63c084266c5654475a5e4eb98e0d328c907a8e205200fab98bc1731e8f55aff0e21198c67564f3e1956f2a299683561c986c14a6009efed5f473
-
Filesize
4KB
MD5ab35b937681806c96834ea84f2a29889
SHA19f87b70c8935fbf09f584f1b8d06d4d62cf4fbfd
SHA2568c8f14b27a411fd74037759e1b961750c58d7a1fbc7bc8c0fbcc6c11a45ec9dc
SHA51276328c87c85eb1e172ddfb9c66926ea3ded17e77852fc90c296a3b0a2df65715f09bb7ac12502b833ec538f7d1499e3b96f0e92eb74c8f7e1b203a880e0195a1
-
Filesize
4KB
MD521c516f7274f5b281d700a85751e463b
SHA1ba4e6b809a66530210d1db90ee9597a8dbefde11
SHA2568a0c4757bf974f0aeae664ba2f3a173f49cc318495fc5c02b9da34413293dd40
SHA512df8250ea71a702365215e3490a16a10990bc0f011fff5080c30bf35bbce8198c36a72697ccf28174e11002c727632a0526791cc02f9f7c27d2cc916a0b85917e
-
Filesize
4KB
MD556162b33a09fbe18cd19bc0907e2d7f0
SHA14feb6f299e7a1f7765834ed382c38ccaa6e46442
SHA256dcf9cfcb8f13cbb0995df27e0092ef4922d69ee65f582bc768c8f231291223db
SHA512ffc41b304bbf3168ae3ced76a56f443ce6c3fbda7832aa3ed312c5100c9fcb83f35363f8a81027076ac4fd8f02ad6454cd1a227d729e3d02d1c25c68ebdf59eb
-
Filesize
4KB
MD50a619e1587db37c86a7415e1560f9115
SHA17fc076f389d6240c5589eff8aa8977b7aa0df9ff
SHA256edb6f4dd281a8a4ff2313aa91e64967fa0391fb819fefff6f10557ee81f6e4ad
SHA5125de6c9b4229fc4f88bc4edd13bab938be98f8fcfb4cafd9f730fb950bcf23b1c0110d80734d47b9079dac03fbf503337d5cb7102eb765b5d67369326cf6ea309
-
Filesize
4KB
MD53530e69b0df50fe708dac3c7598e1eae
SHA1a9ed45a8d23a5a46dfca69eed6369bedd55f1ecf
SHA25637dd52113c06bc45cac32a99b31f87d66d56430a35a043f5a5750e79a9cae0d4
SHA5121d6db5f23cb9d543dde9936c0ea0d1b40f31345fb531cfbcc7c99bfe89bc00f9b7a79fe04bf2df8893d3ef001f24c52d6a005101d685426e2d8fe257af4f3325
-
Filesize
556B
MD538b89ff0ea485b4da8a9c123e1330b63
SHA186926281635557ece8e67e1356efb8241d6f682b
SHA2563a353a9e4f69d588f386d4cbabbb42511c0451398b0a10e26df2ce67afe04052
SHA512cf1026edf5be7376fa76158861224211c84ee99cb9275886ed331ecab321a25c8eca5c99253d24f4afa122153e73b397d46f32a07e671443a9b3eb8a65ae4493
-
Filesize
90B
MD5e7e845bfdb2b1f8b493b3853d9f18e3a
SHA18d239806dd7e2a089a4549048e0a5b7e61aa8313
SHA256ab54680646574d216debef2ffdfc86d254e986223180e34191f6097e27233b86
SHA512ebcc7c4e69bdc372ae1504324020c0fcccf226ceb4fce0b27ddd30c7613b596fa37765f8c1c7665102ed8ead430a4d662b4ebf26b9a7a4af68e78017b1882b15
-
Filesize
6KB
MD5028e15dc5b67e71b138f3c6aae2acbe7
SHA1b64ff73f8941c43d2cd58e174779c1dab64fc6aa
SHA256fc1701457034d130db0664b7f59d051abc86e142648255279c96f6dcba7bac13
SHA5125c60462223293347be16e735895e0c77adc323fbeffe9db84fc21ec6740316b19110a29e67bbbf866a20e9ba16f9593c38f36c07b1761834e6833bdfb37f1b4b