974974cb3771f3511b28056d6170d30536eefe022304eeaac4e47d4b598f76b0

General

Target
974974cb3771f3511b28056d6170d30536eefe022304eeaac4e47d4b598f76b0.apk
Size 19.8MB
Sample260723-dze4lszgpf
SHA256 974974cb3771f3511b28056d6170d30536eefe022304eeaac4e47d4b598f76b0
MD5 9694294addbe58be93ddbb6cabc499ce
SHA1 775bf9e9fcacc39125e5584312e1728b6d80d468
SHA512 3eb29a720b98c516e4ea8c5f0cdbbe1fa6930825d79a2040c257fcc2738a6703edfe924afb2877cc2bf9af7c3111e60aebac21fb4710b9c9e2d4a3e0fcb7600e
SSDEEP 393216:a/WEjaEYEdI3GjGOB1/zoFW1775wKoisdp/9bp3Gdw:a9aWjGO7/MFiuT39
TLSH
T16827220AEFC4BA3AC9F75232197B59194C474C414787D983DD59382C2CBB6E1AB1EBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion evasion impact

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.model	com.kit.kitty

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.kit.kitty/app_item/ZfChs.ttf	4720	com.kit.kitty
/data/user/0/com.kit.kitty/app_item/ZfChs.ttf!classes2.dex	4720	com.kit.kitty

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.kit.kitty

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.kit.kitty

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.kit.kitty

com.kit.kitty
1⤵
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4720

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

1

T1407

Virtualization/Sandbox Evasion

3

T1633

System Checks

3

T1633.001

Credential Access

Clipboard Data

1

T1414

Discovery

System Information Discovery

2

T1426

Lateral Movement

Collection

Clipboard Data

1

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

1

T1641

Transmitted Data Manipulation

1

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

ZfChs.ttf

Path /data/data/com.kit.kitty/app_item/ZfChs.ttf
Size 3.7MB
SHA256 e27657d3c9590a452274516195ecd9576ecdf95ac514711bce13e120ca8664ce
MD5 2fab740b8e7137a153bfe51cc2d9b7fd
SHA1 34c35caab08639e691d7fe2cdcf7befd69da56ed
SHA512 80b78f563df959209636fd7ac488c72d11e9595ea17a3d24adc3589f9ea48da7b3ecfa4947ed57a04b8a4cb7691eb1d84da7de452079390697a8288021e8e7ea
SSDEEP 98304:1dQo4JgWg6gsu6DrKNG9aODNZQBnHA7d1gQZAlr1YhQ:1+JTgZsueWw9aOBZQBnHA7du3lr+Q
TLSH
T1710633E089816156A36CD5780EEB142DCE88C99698C346AD3609FC7D3FF68D731B687C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ZfChs.ttf

Path /data/data/com.kit.kitty/app_item/ZfChs.ttf
Size 3.7MB
SHA256 8b1ed98642dbf296fecbc405c62018c3f959ad51f5bc6fc24504f830d8474a55
MD5 e84ed521edacf6c17550ef371d064e9a
SHA1 cb6bb9e90068ecfaea529c7eb689ced6c5ca6223
SHA512 96322000aefa1d84d92aa99c987c67103f63c3076262d2eb8c20798795292955eddd6910401e97519aae039ffb9fb453c82280faa4a18694a7c45e1e5b3a4d12
SSDEEP 98304:xFrMTn0ov3yhrxjDLoXhydcNjI6r8sqHsrTZb11xCKHQF8:koov3WwXhqAjIoFZb11xJQF8
TLSH
T15F0633ACE50B95DD141CE83B69FACB06DE6A92F22D134FE0019F21400F99D356E9B7B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base.4720.tmp

Path /data/data/com.kit.kitty/cache/oat_primary/x86_64/base.4720.tmp
Size 12KB
SHA256 2fc8aa53809963fe17272b89394231aaac78df001c1e9b0751d01eca35b03355
MD5 b3f53e12e58fad52be1b98f1de89ef2f
SHA1 a651a3c0136455f1329b57f5055f47f421ecc340
SHA512 d2f8f614e819e1917e096ac93bdad741a6b6923a95df9a67a5e3bd217e7e41e5c96e9b2b53cd9e193d22d6ab7266dcdd8410c94c31f0f4babde7ae5f2160f319
SSDEEP 96:npp5WEBvc4n24GPyh10wR9YbX1TaqxTHmviurE8whDbGDJ2BmdXbdZ:1lyx4GP4o15VHmHSiDJ2BmB
TLSH
T1F742E762D66751F1C17A79F145C8435CDAB704E0251B3E04D0F1C73EA929B926FF2B91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profileInstalled

Path /data/data/com.kit.kitty/files/profileInstalled
Size 24B
SHA256 c66da698579c8e216c5207e5967e199e471f2addf019ff828693e9b48941dfb0
MD5 90afb9c64c1adcaffc24806924f6962c
SHA1 3f57036f0d22f853659ea573df80bb56e87a16fb
SHA512 25b78a8f04e7abf2f13892abb4f0ccc37fb6737e3ce3f664e412a5c6f3a8a3724f45682b47805e32d5af689302c5d85a1f0739a43a0bbfb036048afdd9bafc30
MD5 SHA1 SHA512

Submit Download

ZfChs.ttf

Path /data/user/0/com.kit.kitty/app_item/ZfChs.ttf
Size 9.0MB
SHA256 3d550dcac6e754e3a731fc88bf833948af857ad10f8fd90dab9d8ffe394ecae7
MD5 3f6f7a4d60675084e1d4df582196067a
SHA1 df668b17b650842cd16a93cb2a758c21a44d0844
SHA512 627d24d72ec232b77b805f34103c0298bc71904ee8d51963b942deb597065fca2bf66bf9ebe045074dc6b6f69a1fd30e7c2f1d51e18225383c9ed0930d9755c5
SSDEEP 98304:2bV2DCC6DmMqIii1WJT3fYJTeR7maSou3W:2Z2DlKqR7h/0W
TLSH
T13796AE67A716AD32D0BE97397EFB4301BB32226BB743174A1045E4AC7CD72C25BB9244
MD5 SHA1 SHA512 SSDEEP TLSH

Download

ZfChs.ttf!classes2.dex

Path /data/user/0/com.kit.kitty/app_item/ZfChs.ttf!classes2.dex
Size 849KB
SHA256 bddddc355e6af0e007894940dc137c80bed6a4bbb91da0b3b6f7e3177120f1d7
MD5 3a55b0f15295422bc6c23f8a85134115
SHA1 24b8bf9122393b5bfbbd90d963f5492a0815a748
SHA512 5f68cfe7125bea978435c6d9722698d5c695e7a0cc81944cb86bb39972aee5d4dc3f1777384bf26355797823be81945d4614266cc318708b64e377c00452eb06
SSDEEP 12288:HL/1Z180acFtoY8CTznB2coSgQLUXkacj:z1Z1ocFuKznBXoSgtTY
TLSH
T17A0528A3F62C1E31D19A06B70CE722F1133963D75983AB43AE859569FE87281D71D32C
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads