5e74bb4d2abf135c04247363d431a291fe16ba99dd183130414a83746e38e610

General

Target
Kryoto-Mobile_0.2.29_x86.apk
Size 10.3MB
Sample261107-2rf8psgt8k
SHA256 5e74bb4d2abf135c04247363d431a291fe16ba99dd183130414a83746e38e610
MD5 1d592b1fb99df082107171cbb6bf3c30
SHA1 c2ad96d7ea8ef46c207a8cccb96df62f5dfe6b2b
SHA512 d43437eeb457407dc0a78476b470cfdc7a568299c9237c8217beccb43049ac2ed6e5c039c78d594516f47701e879693938c9b87f29dc0d6e6639bb4b9da9fe7f
SSDEEP 196608:A8Eo1jcuy54w7BQOJZNTquQaYHYmYqEyDnC:A8Eo1kTZNTDQ/HYmYEC
TLSH
T1EBB68D84F76D42E4F13614F8E20EB132FE350C6A84BA92D7EB4ABB819477150EF554CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	to.kryo.mobile

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	to.kryo.mobile

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	to.kryo.mobile

to.kryo.mobile
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4838

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

2

T1633

System Checks

2

T1633.001

Credential Access

Clipboard Data

1

T1414

Discovery

System Information Discovery

2

T1426

Lateral Movement

Collection

Clipboard Data

1

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

1

T1641

Transmitted Data Manipulation

1

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/to.kryo.mobile/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 bb20ba5453daa832ec845e7b274f6faf9451b1b7bb274fbf59fcab51cf9a427c
MD5 31287782e9f9a681c02bd2d43dff749e
SHA1 5f846bbbc1da4ac41fe1655eed5a44d847347be9
SHA512 bbafa771f1d59970d7193a2ffa41ba98c43a7a9b0d1ecdbde695a58384b4308fd3ff4b0c68812eae3c9f4f2ca96f8fe5b1eb707de1f0f17d75549aa6789dad81
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/to.kryo.mobile/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
TLSH
T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/to.kryo.mobile/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 0e647298699a83690a8694c4fb5b73ca4ff22c2fa27b9eb56d2071cc6da7d5ab
MD5 27e0026aeb9c2651b2ad47b98b71c128
SHA1 30948311fd829a1168f7e94d5c5ca35b3eef26f0
SHA512 57bef4372eb88a724e3213a9bf93b8e7ae81e0d6fa79aa07c192f3007c5c110052e34a6c8dbb10b639ef60b0ebe1c4100a5891dc996c9b2e4cd34a8b66e4b4a3
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/to.kryo.mobile/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/to.kryo.mobile/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 0172698fe2a774edeec26f4ed480f6a9323993dc405048fce74c92ca347812a5
MD5 61b7c25b58641ba60d8b6551c45133f8
SHA1 409bdecb9d477b654c9760a0ab5bcc192901fa76
SHA512 2b44584f393c29a33fca5d6016f5310aeece52100beac9c32d56215b71ec3fbc34824f5f13791cd243dc9e04a1b8a4ebe54956932c620e58fe0b1349d6ae93d9
SSDEEP 6:KytpsXf99FZde/kPlOERX4PBX4ogLugMBX4suuK+/6RxMlvYCmTEiOw2:K+pWzdeWRmBEyPbP/6YvvtiOw2
TLSH
T15172C2F0A3800953C81933B36CF5C7880E60E61D6EFEC70B9E5604266C4AFCA9650D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/to.kryo.mobile/no_backup/androidx.work.workdb-wal
Size 116KB
SHA256 7d13705c13737da588e81d891bb9114fdea8218db76a81ea8407b796c59aabdc
MD5 dc5ac285f61fe9c095a8d9974984f818
SHA1 5579a0a61f5e51f427032c8806893f8f304a6899
SHA512 75907580e7c15b920a5c2797248c817aa8e4085729643072ba1f9085764e3b411bd2ef7a8babcc411fef2a27cea4ebf7b90de8ab322dfc67ba5db26b74ee8523
SSDEEP 96:VB5o0Lsv6+etidjnZRWzzb8/KeKcK+zSfWtKz+eD86u0ExV:VxLsUtidjnfWzzb83zSfz+eD86u0ED
TLSH
T15CC343FD0F182600C4A964F199F00FE1793E811E97DBE3D1699140B5EDD6E22D929CFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/to.kryo.mobile/primary.prof
Size 1KB
SHA256 691dff257b9fb7e2ed9ead3d9eca5a0170dd19d7e8c446096e7cec89300d8a69
MD5 7e1f7bf7a13bd4b5049b585571d8fc14
SHA1 3c6cf462ce6d8ed5362ba10eac2c0b57f40446f3
SHA512 64bf51f4e74afe6252ad3ea072e6ff255abd751f38b12793196e2e5e05f23ff8d02a3728683c5dd7f89138ad8a8a510121f4da0b764d8f59629608f6261449e7
TLSH
T141412C8D974138A14076DB0383672A5E83992C700257C774979E7913CB43CFA01DE693
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/to.kryo.mobile/primary.prof
Size 5KB
SHA256 be1ff4ce91724247f4a8b3b84bac883857351ac700361138954f8c82d8e0adf1
MD5 0a29f054f331f865eeb082a02b58543c
SHA1 91712da802dae677858acc1102ffa97149c5e67b
SHA512 0e71f26f1f701dfb1671190549b2e5b6ca0838702cf3316c32cb01d3cc8774ee6e3de99b9604ea45d44ee6ea38d511f9e19aec63932d757bea92ba60316ecce3
SSDEEP 96:LduaryGCp5OwDnJsGnaaqCC6ivITlDl+RPPsybWAFZDUNZivkNMql94TyGE5wSA:RutrO6npqCYiDUFf0fOql94+1HA
TLSH
T1E2C19EB8BF6C33A41A2C14658FA22B31145138330CD89280BB3DEC518A77DDD0088776
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads