780554819ab5f81c9c522a445d359522a874936359aeac1902662f3da6aee3cd

Analysis

max time kernel
122s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
29-06-2024 22:08

Target

780554819ab5f81c9c522a445d359522a874936359aeac1902662f3da6aee3cd.apk
Size

681KB
MD5

d9ffcd692755d8110b7220cda5862492
SHA1

e664547b4b524e066c8c8ffda7596a9e99ac5354
SHA256

780554819ab5f81c9c522a445d359522a874936359aeac1902662f3da6aee3cd
SHA512

71f9139674c2bf86c97270c9cb034d15687d5f170d7e0dc863e466aea80e227156b62e1cdee20b0b1537ba610cadde9e70bf61fdbccd03fecc812aaf23dbabdd
SSDEEP

12288:nYaZsPpPlrE4qHfHCS7mm37HHZoL2jJ01yHjp2X6eDzz:nYaZsPllrEhH713LZotyHd2Zn

Score

7^/10

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

T1414

T1641.001

Processes:

orhdj.pp

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener orhdj.pp
Reads the content of SMS inbox messages. 1 TTPs 1 IoCs
collection

T1636.004

Processes:

orhdj.pp

description ioc process

URI accessed for read content://sms/inbox orhdj.pp
Checks memory information 2 TTPs 1 IoCs

T1633.001

T1426

Processes:

orhdj.pp

description ioc process

File opened for read /proc/meminfo orhdj.pp

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	orhdj.pp

description	ioc	process
URI accessed for read	content://sms/inbox	orhdj.pp

description	ioc	process
File opened for read	/proc/meminfo	orhdj.pp