a3a36a2884e086145608b737c1d9c66798dc14983cad47203fe1fbdffbc33a71

Analysis

max time kernel
24s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
01-07-2024 08:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4f309b057a0465bfa98eeff9c39dcfb2.apk
Size

3.3MB
MD5

4f309b057a0465bfa98eeff9c39dcfb2
SHA1

4d8de118f8db6ba1fcd91aa250c7c6093ffce703
SHA256

a3a36a2884e086145608b737c1d9c66798dc14983cad47203fe1fbdffbc33a71
SHA512

50400988c473b155b6789a394cf9018bed8fcd7a9cfbc879fa65321fab27429bfc7568b2f4fde55ee335f9e844bf9cdba05aaff3542ac59faec08c45c242c152
SSDEEP

98304:JTf6kkRqA2R0aAqzkkIOX5BaB06AcWfGzp0gWC:565RtWd/5M+69us

Score

7^/10

collection credential_access evasion impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

T1414

T1641.001

Processes:

com.devrajonline.android

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.devrajonline.android
Checks the presence of a debugger
evasion
Checks CPU information 2 TTPs 1 IoCs

T1633.001

T1426

Processes:

com.devrajonline.android

description ioc process

File opened for read /proc/cpuinfo com.devrajonline.android
Checks memory information 2 TTPs 1 IoCs

T1633.001

T1426

Processes:

com.devrajonline.android

description ioc process

File opened for read /proc/meminfo com.devrajonline.android

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.devrajonline.android

description	ioc	process
File opened for read	/proc/cpuinfo	com.devrajonline.android

description	ioc	process
File opened for read	/proc/meminfo	com.devrajonline.android

com.devrajonline.android
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4598

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.devrajonline.android/cache/volley/1944199558-1013893717
Filesize
1KB

MD5
bc2a315a9879935ddaf14f3be1ff49d0

SHA1
0580cde541e3aab1f072ba3811fba50602bd180b

SHA256
f9e5dcc1073e75d650a449a7c818232850a9bf98ebb7ef9de1ac28e9575e353d

SHA512
e536a7ee25bb7fee8b4de4edc443ec1aa529cd4190a4babc1261f311d63a6548fb14d6bd33f8765928f2c9b39b82c4ce29cc3458e78eaaf19d0ff5c8222c546d

Download Submit
/data/data/com.devrajonline.android/cache/volley/1944199558-1013893717
Filesize
1KB

MD5
5bfd8cd34d05017b66aae3b67bd09980

SHA1
cac65335250d8a9248e6d11c4962d4abffaa4fff

SHA256
b4be17178a956c2cae060cc06522ed20dda3e1e063093049b03434267c9a4a3d

SHA512
6edda5769e3e52e79fd1518ed8ae447e364d694fc31010e9b75718a5feaa03707d1c703276b9008819033123cc9956ea3109c5cbf14cef73e772b9f69f425904

Download Submit
/data/data/com.devrajonline.android/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Filesize
8B

MD5
5abe9220941768b909911bb5fdfbb39d

SHA1
099673da882654d4a0d9ad739e2bdfe894a821ac

SHA256
910529be2e738dd7de460e644a73d5c809e7e7e8cac9a45bf5582f8d6876ea99

SHA512
73e1248fb18dc1e32e7a89b2124088333a6cc7ef549764a293d1ddbf046e3994523ef0604f1d23c28bf40754f0e5b8b8d5aa89a9a63f76a0e1f1d17f3e044d89

Download Submit
/data/misc/profiles/cur/0/com.devrajonline.android/primary.prof
Filesize
2KB

MD5
92127441b3d65f1792ec928b23744a68

SHA1
d76b8dcd87853f62b6d4486cb03c6a15d99fbd73

SHA256
818942c9f3fb024c0f7deeede0754a336c79ba399bbacee329404248e4795f57

SHA512
5762bc0f2b1dc70442f66d643dd073f68256322754f91a782f2c70c67c55b77992072485c177bad432f937c9aab5026cd8759833d852d3827e785ad6f9508db4

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads