6041e90299b643ba2ea952bb10bf03187184b9e92102ca18bf7d50146a6056ad

General

Target
Kryoto-Mobile_0.2.30_x86.apk
Size 10.3MB
Sample261107-2rbm8ast8l
SHA256 6041e90299b643ba2ea952bb10bf03187184b9e92102ca18bf7d50146a6056ad
MD5 56b7605600ac88a994248b32b32e5560
SHA1 f56ceadd69e9e82e29eaf78234e3b7879464315b
SHA512 fa955bd4019c0d28506878b461f884648dfaec54a1ea8ec18bf3105581746692df5c1c443b690e2c510611543f01b33e8af10a8f769ae00f55ddf237f1e2c845
SSDEEP 98304:brLo80WMUIPowlJe3/1MtEK6L3QBu7jZN2+38GMcEYF8/ojptYDJOXKWqfmjKy/q:HLoVWAwwcfKqhZNdMGvEY1YejKEznm
TLSH
T19CB68D84F76E42E8F13614F8E24EB132FE350C6984BA91D7EB4ABB819477110EF554CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	to.kryo.mobile

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	to.kryo.mobile

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	to.kryo.mobile

to.kryo.mobile
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4762

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

2

T1633

System Checks

2

T1633.001

Credential Access

Clipboard Data

1

T1414

Discovery

System Information Discovery

2

T1426

Lateral Movement

Collection

Clipboard Data

1

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

1

T1641

Transmitted Data Manipulation

1

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/to.kryo.mobile/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 0c8664a575e1f31ff51eca1d9aa84a2ee3be7e59b1373be230825b087b665a0e
MD5 9981295ed5aec30ab261fd9ec8e2feb9
SHA1 5ee51a6f3d7207ed436b58ddb3aa32ba847ad2d2
SHA512 e9c700726c35aa8290885ce25046337579b8d9157a4b398b76387804f5d8641d199fe757ef674d65f5c22c7784416bcee471800fdf69a3b9f5e772d19883557b
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/to.kryo.mobile/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
TLSH
T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/to.kryo.mobile/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 0fd9eb5c69d5d504edf010074a2259bd01329ac81990a0cf1916aa75f143db14
MD5 c2a4463e061cc4e85d6313c5e77d21df
SHA1 fb2f3c40d047cde33f088530e9db0f2fbbc32b1c
SHA512 ff58d671de10e4fe5cff72404a572b7ec2418011f77c6f7a5b5896f715c192f080fd7db3807547914679461996a2ff8f1c72e14dd35b4e74ce7ade809654abb1
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/to.kryo.mobile/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/to.kryo.mobile/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 fe1a908e1d0138f752043f7a34b4475af3d2843b836317a945a91ab17464e09b
MD5 7441c957964b715ef31a9cdbb88570be
SHA1 e1e3d1d73de085b2d6bf9c77a4478be7933c2a6e
SHA512 e8fc709872f4f6f6b65ce34457aee60dd6b9ed8b4c7e50cf6e22b96ba1a0587af896bf9e9ee616ca3f70bf145241db0ee4f33b1414811aef69130fb4d41b96a1
SSDEEP 6:K2BVOTa2719FZde/kPlOERX4PBX4ogLugMBX4suuK+/ctAXH+F4EX7O/+Ow2:K2jqzjzdeWRmBEyPbP/c2Xi4EX7OWOw2
TLSH
T1FA722BBDE3810E13C459137290C9C34C0DD15A2C7B52C71F6AA104516C3B3C86470D0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/to.kryo.mobile/no_backup/androidx.work.workdb-wal
Size 116KB
SHA256 8f3722c325cc78037d249b58a3609ad7ece99c6a468f4b37d0083017082f8100
MD5 3818c7b4d4279c37192c695af568118d
SHA1 dd7a8e601ad1fdf6e1b58a9c92e4738cd9751163
SHA512 fa4239792b34206c4a9c7a4931590498b2653461411caed39ce16401bcb8925c909f7fac8102ff83039862cd66c6421c3816ceac7520a4648a971a208ff0fa23
SSDEEP 96:5FmHU6+etidjnZRWzzb8/KeKcK+zSkatKz+eD86u0ExV:5UFtidjnfWzzb83zSy+eD86u0ED
TLSH
T1E4C3649E1F582A00C0A964F0E5D10FE17DFF452EA793E391259100B5ADEAA21D929CF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/to.kryo.mobile/primary.prof
Size 1KB
SHA256 b58151ba36c5f6e1c4f93565d934aeb3cc4058d57afa3ab77fe92e25b738970a
MD5 17601393794ef0abbbf130c1754eb806
SHA1 5c2d24fc68d990ec2344276201775249a92c6562
SHA512 fd3e99fd41c525907bbcb55f7258f5f1fc2c7ec2421f69340efe15b5322b72705b709e77d35049574c314e75d534fb7beedff1404b82992f684a75c422e5bfd8
TLSH
T1954128408C1D138B8F6AC522515393F72FDAC62E44B74B36981E03AB95680A6968CCFD
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/to.kryo.mobile/primary.prof
Size 5KB
SHA256 c8debcd4b427c766e5bae0b7467880ad4190b75ba5fb7b2182ff90bc43011227
MD5 b1a95555e7c8ea5c0847da6c0052e22d
SHA1 a63a8efa21cd1641ccf313dcd36dc52d652a8d3a
SHA512 ee1d9ee8cd0f1ce3114bb50d9d367d945e5e7f1e7628f346e93f57bd27bd49953c293d2c22d02ee9a1cd1538c791595ebeebbc0a5c4bab4a1af67187bf32663f
SSDEEP 96:QS9VImc5nlbGOKe7/krOoTFO7ZnjAvDXehBDIZUdSC/UAHv6nIkqv8ZN08vLmY6K:r9VImI/6B2SvDJZkUAYIjbO96uszo
TLSH
T15AC18E076A5EBBC756912BECFAF71160FE8C90353C2008F6D9301B73C0B5A9464901CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads