Analysis
-
max time kernel
149s -
max time network
158s -
platform
android-10_x64 -
resource
android-x64-20240910-en -
resource tags
arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system -
submitted
24/03/2025, 22:16
Behavioral task
behavioral1
Sample
57c9c3f9a8ebd64c4e1932c1149802f48f2734c0d202b3d3431bb5ce2910c1f2.apk
Resource
android-x86-arm-20240910-en
Behavioral task
behavioral2
Sample
57c9c3f9a8ebd64c4e1932c1149802f48f2734c0d202b3d3431bb5ce2910c1f2.apk
Resource
android-x64-20240910-en
Behavioral task
behavioral3
Sample
57c9c3f9a8ebd64c4e1932c1149802f48f2734c0d202b3d3431bb5ce2910c1f2.apk
Resource
android-x64-arm64-20240910-en
General
-
Target
57c9c3f9a8ebd64c4e1932c1149802f48f2734c0d202b3d3431bb5ce2910c1f2.apk
-
Size
2.0MB
-
MD5
866cdf7f625325a5023d969ea5475688
-
SHA1
8525189d36bd4cda0b431c92a8823611bd6ba6b8
-
SHA256
57c9c3f9a8ebd64c4e1932c1149802f48f2734c0d202b3d3431bb5ce2910c1f2
-
SHA512
58697a6b2c736e8fe68e0f4cfd49233cd3c26cf3672389dfa17ee8f6c4fa83d6560391bc0cdcc73de7e075749701b9f5ae6e16b41baeff43eb44f6d220cb97d9
-
SSDEEP
49152:h1sR4zAw32B9qlKpvv9/878wRucW6SMN8o9j2qwpI:ER48/2o9/8IwRPW6SsNcI
Malware Config
Signatures
-
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener hello.uwer.hello.hello.google.is.the.best -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone hello.uwer.hello.hello.google.is.the.best -
Checks the presence of a debugger
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver hello.uwer.hello.hello.google.is.the.best -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo hello.uwer.hello.hello.google.is.the.best -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo hello.uwer.hello.hello.google.is.the.best