2146bfbd633871467b0dc3e27ec905e12d31b050b0fde30f004b36a2dfc985bc

Analysis

max time kernel
50s
max time network
133s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
21/05/2024, 05:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

swccapp.apk
Size

7.7MB
MD5

44ad31472b9e90d30bbf32eeda5aadfc
SHA1

618d2a7a6afb4fed48544a242415cd2fe59ecb8f
SHA256

2146bfbd633871467b0dc3e27ec905e12d31b050b0fde30f004b36a2dfc985bc
SHA512

5c84db2015aeaca8c4c37ad7bfe3e7e01fc20f5b7389a259db754bb92bee9b47892ddbad8604c85b889865b2c2150c61be78e59e11dffc95856ab6b21186db63
SSDEEP

196608:GBoUYft5GMqoOcHaYEmyxx7gVZPYD0zGmULMdQ:Godf+KOktyf1JLt

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.shubhamworld.location

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.shubhamworld.location

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.shubhamworld.location

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.shubhamworld.location

Checks the presence of a debugger
evasion

com.shubhamworld.location
1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Checks if the internet connection is available
PID:4520

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.shubhamworld.location/databases/logback.db

Filesize
36KB

MD5
46c068184811aa221a8c8eaeae5a8bf4

SHA1
926e115a8af47ee561d75392163862d8da2f7abd

SHA256
182ab0d7924d15992bfc4866e657576b45223e17e78531fc4caf6cd15efb39e9

SHA512
b99f1be0bbd34f2b2da35e36a67c99496103061c8f54d8cd63dfa587715e0013b5705f009b4b9868b545667530cd8fad921a29b1c9d07899f21692af053d5da4

Download Submit
/data/data/com.shubhamworld.location/databases/logback.db-journal

Filesize
512B

MD5
aa7aaa1dfbd6a0147a1af255740c09b7

SHA1
97590e3e3aac22dd4b7ec673182a4f1b87751896

SHA256
ff80d61359b9e9e944d7ddf77a122654c9946905bf896c47fac367d9d66c851d

SHA512
9e5daaf13a02467f647f697261d3606837022e776e036052e435448eccd09b3f6573aa7f2e006f03cef5a9b4fde399da681da8a033a15bb1c5afa8bce42f81fb

Download Submit
/data/data/com.shubhamworld.location/databases/logback.db-journal

Filesize
8KB

MD5
d3839a2662ba45ae62c6347cab79a60c

SHA1
e5231d0257dad2a79eb3ec39544dcb28da698d3b

SHA256
821975e55f378a374d4aa4fb8dd804f42b78a4b2b55351734efd8a34daf0d414

SHA512
157ee4593ad1ab60a8e100fe92fd02867d562e0bcfaf33b62c2cf5c84256487e0c6a2d3cdda39d4fb239c658a60bff79ac5a66b2348ea55211d8367977e3d84a

Download Submit
/data/data/com.shubhamworld.location/databases/logback.db-journal

Filesize
8KB

MD5
cdfde92f6b1114d77e41db4b65f163db

SHA1
345645b9e815bfe06e5a0a1ca155bf561c5f044e

SHA256
86929b0493b5498380e067b48e2cf3b988e45add81448e1c87d2f0d2540215d8

SHA512
7e71c910447c17e0da0451e590c0fe1b64e60f6b17bacf35f7b0ad661743f95fc2916a9eec9382c8cf00ca18cd0fa083b7938d9131b14de41dc811b05f9001c9

Download Submit
/data/data/com.shubhamworld.location/databases/logback.db-journal

Filesize
8KB

MD5
71b885ff99b0c18ebf8936cd9c843029

SHA1
8034c628dcd2a715f56bfad805582487ddb29324

SHA256
0a0552b68836fbd4bd13ef78dfacea4ce7778fa5cfcb1c5397170e355f9961f7

SHA512
d74b612c78e68371ea8f70aa8d658ad669273f1642d045a661c1df231865344126d81b6afde38bf7598ac5ecde47378ec45c1e1fcb432e9193ff4b4abd4b5562

Download Submit
/data/data/com.shubhamworld.location/databases/logback.db-journal

Filesize
8KB

MD5
724cf58c137e523f4ca9cada4dada322

SHA1
3e844391f56b5a4dc1f41789c0a953b4d904b8cb

SHA256
c7b5a19598d0fafd2f76d7ebe328bddfd6769a798ff924803031011ceba6230a

SHA512
99e1300dde651c6c42befd879e113c7c2392c1b42ad887104929a966e788a9d06ccdf9c917de4579b259d434bd6e8ec1a28e5f1fab79c91557440c7efdc66207

Download Submit
/data/data/com.shubhamworld.location/databases/logback.db-journal

Filesize
20KB

MD5
f6de927cf54a972ea603547eb1a1dd3f

SHA1
df9ef852767d19c75f8c3044b401a0538407f2e5

SHA256
74c5efd9b90485172b23bc03d955f0f81ad5acb07601fdc5a478e8fcfe150f3d

SHA512
97eb83bbc3730df7016e21fb9f13c9e40849ce5743d6e4619d65a045413642ae412300521d69834b990b51c8201ed68d2837417b083f2c801a285cf1a683d824

Download Submit
/data/user/0/com.shubhamworld.location/databases/cordova_bg_geolocation.db

Filesize
28KB

MD5
d615f82b8c0ed3eb841eb694034620e8

SHA1
2bc10272acfc71322f5bc18db2ac7cd8eda97409

SHA256
7a0a8cb8dc81fade5342170914335749fee02038e2bd55d3c0834e4c9c6122c6

SHA512
7cc4bd15a06f9126c84ebb08fb1b21508072f95d8077d99b2811d779a81689b260a5f9436668d297cb37e8d9d8878190dd066706a1e808d67f5afa2edbef58e5

Download Submit
/data/user/0/com.shubhamworld.location/databases/cordova_bg_geolocation.db-journal

Filesize
8KB

MD5
988675ee53b53a3b68ec947175ba3c0c

SHA1
e0087384c85dab3dfe006a49fb4eac8dae4e09a3

SHA256
07a24a4f7d5a7545a8377b87a4800d4685f1e9e0bee1751fba1caaed72976e17

SHA512
5199fa05cc31effde8290a0b33706e05d157b90cf0e7c689525e26bf6bd03153936f110732d7b3aa55776541812c11523ba7852e66966fa91f1742f778f706a8

Download Submit
/data/user/0/com.shubhamworld.location/databases/cordova_bg_geolocation.db-journal

Filesize
8KB

MD5
cd0006a6b1a39cbc1d6eb9cf3245794a

SHA1
2904f2d4bd64875c11fe9d7cf1452e5d1b1a58f9

SHA256
65facf437f34d3a1432da6cc80222f2f83fc3a2061b544fd75f225aeffcfe6a4

SHA512
fed0d4c5c91d99b515a21b679aeeef8cf121cc0aa139588b953f4d46092f5beb62e161fff34f101a7eaf36f3cf7b6b556edbed3f279e8742262d00777fe45dc8

Download Submit
/data/user/0/com.shubhamworld.location/databases/cordova_bg_geolocation.db-journal

Filesize
512B

MD5
ea92287ee528e856d0cecebf7e679e56

SHA1
287f96475ebd9ceb84133e3aae9506cced5cc0e0

SHA256
7f15791589565243400fea3a7e5aaea791ea222e15adfa08c5e08ba84438037f

SHA512
ccd6aeded519ee7e463c5f0dad54a245b9ba0de4584ccf18b2cc44d6754e13c8695ec8a074708bf1f155ee46a4882d2b16d25d4219803a5db8bbb5ad60fc8472

Download Submit
/data/user/0/com.shubhamworld.location/databases/shubhamapp.db

Filesize
8KB

MD5
1d79c1e92f3918cb6c1c8e597575276c

SHA1
a13d17964d6431d145af6a5ce0a8c401b90df25b

SHA256
51448d205033d0b2768c0c652cb7753ef66b45674f9666167a2a6d78680d86b2

SHA512
d7cd79613b1b0b491157ec6ecc771ed10715ec9ac3fd3b6fbf89fa76ed365a7f0e9987222da428a7edf469b56d8594ca055da94656aa73790249b902166ee855

Download Submit
/data/user/0/com.shubhamworld.location/databases/shubhamapp.db-journal

Filesize
512B

MD5
f09194001a61028b695b96d73a4bad6f

SHA1
fa116e7f0c45b48c8f5e4c5080e2f5e5b710f236

SHA256
8be8d48099047854aa19e5aca403d43a0a8d9b6218fca96a2b821ab45bc70bf6

SHA512
39528f1682e64f15f1f51c231ff1642d62908015218ab59aa13f50b08b19d647530d1665d7791087dac3d2f3378ab4940ae987b06ad239749c439c4475744d17

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads