4c5801733ce29255e48a72cd1764324e6d6e1d3d8100c4fce95849f6fd97e1c3

Analysis

max time kernel
54s
max time network
131s
platform
android_x64
resource
android-33-x64-arm64-20240514-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240514-enlocale:en-usos:android-13-x64system
submitted
23/05/2024, 14:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
TLauncher-PE-0.4.8.apk
Size 14.0MB
Sample240523-ry949aef32
SHA256 4c5801733ce29255e48a72cd1764324e6d6e1d3d8100c4fce95849f6fd97e1c3
MD5 0d458f83492d3f6a77c3551d578e55cc
SHA1 65fa19f25deb1ef8e9922cb6dd3262f7f7a5c711
SHA512 6104eebd3cd1f42274836382453a0a42b3c66c4e2e4c9e70c9e0a7c4015fdd6ce3a4756f66eb85eb9d118e66995a1040aea4aa623dbed83905235851131bd06e
SSDEEP 393216:pOvePB8Ay2vO4qrg9ud/QED2DZ0oZCo+0fX:RPZvqMId4EyDvxX
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	org.tlauncher.tlauncherpe

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	org.tlauncher.tlauncherpe

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.extensions.jar	4328	org.tlauncher.tlauncherpe
/system_ext/framework/androidx.window.extensions.jar	4328	org.tlauncher.tlauncherpe
/system_ext/framework/androidx.window.sidecar.jar	4328	org.tlauncher.tlauncherpe
/system_ext/framework/androidx.window.sidecar.jar	4328	org.tlauncher.tlauncherpe

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	org.tlauncher.tlauncherpe

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	org.tlauncher.tlauncherpe

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	org.tlauncher.tlauncherpe

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.tlauncher.tlauncherpe

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.tlauncher.tlauncherpe

org.tlauncher.tlauncherpe
1⤵
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries the mobile country code (MCC)
- Acquires the wake lock
- Checks if the internet connection is available
PID:4328

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

crash_reports

Path /data/user/0/org.tlauncher.tlauncherpe/databases/crash_reports
Size 24KB
SHA256 3cdc4accf295c7e8bbacdf27844436444bd53ba41a18f54d96f49ad105073c72
MD5 71ea255c7dc9fefd3913a667e209cc50
SHA1 f5506ea36dea5f5ab09df314768d0a6b90408558
SHA512 4d97c03de1573c4b267ffffc233306170c5aecf76fdbf1917a5a7bfdca90c1ffbab8435e9dfbdb1fc6416136a78d88ab1a61a3add083e4614c90991b65fa1de2
SSDEEP 12:TLEVofW9yQ7yGoABl4Dh7ChTmLUNhkEIK2RmBEyPbD3OwRqQC6Hhq:TLEVofWTg44d7ChTRGSzR+6q
MD5 SHA1 SHA512 SSDEEP

Submit Download

crash_reports-journal

Path /data/user/0/org.tlauncher.tlauncherpe/databases/crash_reports-journal
Size 12KB
SHA256 551639d68fac903e7fbb7b8128239b1f675d923cab230df4c415576c98a14ead
MD5 dc7c74b4be55d88e5d71f48182c5a8cb
SHA1 fe57efb6c15a05d3d1647ff0691bb26da62231bc
SHA512 c995d169a445d46f82f014af73bdac8c7cb244eba05360697071a85f1b6f03ffba74bc6edea937c3df87d5de011b9f1d71ad9b923ef15d8bd1695d2671e8c6ed
SSDEEP 12:7+tkoRqLxqofW9yQ7yGoABl4Dh7ChTmLUNhkEIK2RmBEyPb/:7+tkoRqLxqofWTg44d7ChTRGS/
MD5 SHA1 SHA512 SSDEEP

Submit Download

crash_reports-journal

Path /data/user/0/org.tlauncher.tlauncherpe/databases/crash_reports-journal
Size 12KB
SHA256 aba40f124f635101dc0276197fdf7c10200ca6ad670f937463d4ee59606765d8
MD5 3f71a1ecb40f6f478a393298177bd98c
SHA1 f5bf5681b58bad9291a2f7505d3a7257574be287
SHA512 4dc12ff37f9cf21b812ad102d1c08f6c33fd3ec97443558cecb3d5c94293a30c56fec7a89aada2840aa8201acf1342a2d43c536ea0368b443547ab8de04186cd
SSDEEP 12:7+tUVolyqLmXofW9yQ7yGoABl4Dh7ChTmLUNhkEIK2RmBEyPbpn:7+tJlyqLmXofWTg44d7ChTRGSpn
MD5 SHA1 SHA512 SSDEEP

Submit Download

crash_reports-journal

Path /data/user/0/org.tlauncher.tlauncherpe/databases/crash_reports-journal
Size 12KB
SHA256 69fea31d6f3548f59c193a3ca37847a5d49cfa86b0f8960cf85ab7ecce307e00
MD5 2223b2b45d83b33759321fdf4bc37c75
SHA1 1194607052f62f669ad66271448e981527527a36
SHA512 b37f67280f914f9f31e0756f90c8bddff796ed972a2da148b04985dbe9960c8609172781e0a2c4282cfd3683980b4cfc09e86ff3e27f42a42f99c938f920c8ae
SSDEEP 12:7+tX1hbe/mC6HzqLWI3gofW9yQ7yGoABl4Dh7ChTmLUNhkEIK2RmBEyPba:7+tXb+kqLX3gofWTg44d7ChTRGSa
MD5 SHA1 SHA512 SSDEEP

Submit Download

crash_reports-journal

Path /data/user/0/org.tlauncher.tlauncherpe/databases/crash_reports-journal
Size 512B
SHA256 78bdeed844d3acde22a98b42c0f36585ed01dafbdff547f533d56f1eff16e7de
MD5 8750d02a464b6a316acb921e53c0e684
SHA1 9e420f6cb2fe36ea7f02a3ed30a8e6e68758627d
SHA512 aaffe7169bb1153c301134e7cdcfb259c5d69ed83eefab347e7ab1e831ef54d4ad0b5a5f12cbed375177e4d3f793e51fd10ddc5559ec1398fef39772076be31a
MD5 SHA1 SHA512

Submit Download

crash_reports-journal

Path /data/user/0/org.tlauncher.tlauncherpe/databases/crash_reports-journal
Size 8KB
SHA256 3e43af558661dcf27b384af02abc4d321dc6b2671b1c93a9a2da6c24ecdd4e33
MD5 acfd1fdc8f0679d4ae29304a09edf838
SHA1 203ef0c5b97c5016f1ae6cb687081a4ebdd8729a
SHA512 0d8b9d046bd269a83c5ba184331727b810a0aba14a4ecd0c0581a723eb5af1fc32acac8812fc0f548a9db56435bfe41696e1c8990d7be68612a0d06c5af392f1
SSDEEP 6:7+/l9Zllgn1yqng9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKS:7+tXgqLiuWd7RmBEyPbl
MD5 SHA1 SHA512 SSDEEP

Submit Download

crash_reports-journal

Path /data/user/0/org.tlauncher.tlauncherpe/databases/crash_reports-journal
Size 8KB
SHA256 c44a1a535b7102afdf73b402c684817861c976edbcc09aa7877f1c2f6220d23c
MD5 33d9a4e837a8c8e8a07bab65b2827f8c
SHA1 fb3e21d69a8c4b4f248685901abdfbbb83af32d3
SHA512 e42c17e91da2c06279e78582fe0da5dd53ebbcfde6c1a3bf383d40cfb0d8c35d530ecdc0581d368b99de25c497cf857db5fde53bdb865ba04a9ac44b4771d89e
SSDEEP 6:7+/l9EtgPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKrM/cn:7+tq4qLJdKBRmBEyPbysc
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/user/0/org.tlauncher.tlauncherpe/databases/google_app_measurement_local.db
Size 16KB
SHA256 6729567f294eb89b5210c6e91fffc3855fff4acb856b20f0ff69c59d184cf99b
MD5 fae85542d7cffab57178a8fe1ed5a0e4
SHA1 ddfc3ebe55a3cae2732a13f6b7e940ab1c583bf6
SHA512 626534fbee5b63f132c623ec09658a69a25da3d52728e07a92e16317792cfcf84308baa27c677bad9c4baebd8d81916cabdb6ae51613b4e226e86746bd12292d
SSDEEP 12:TLWuEBE9zmzrfRmBEyPbB93O4VOLabCAUEWlCuUyWl8GD:TLQEpmzr0GSf3OuKabCCb9
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/user/0/org.tlauncher.tlauncherpe/databases/google_app_measurement_local.db
Size 16KB
SHA256 4c96e3a3f3106cd86f80e89db4bb19d3e1ddd25e266dd697460a7890ac099ad1
MD5 d90ad16f9199068dc0209a54c52feef7
SHA1 2d54ed58dfb6c7bee9bb70fc806fd2a9e6fb3286
SHA512 4b78e7f011ae6b81a794af20df96dd75e976036d8e1f788f1c0bfa8e3007701689ed1f58e67c737996e66fbbd7bd854a69eaa370f4e542eeaceca5361ac69f0e
SSDEEP 6:l9bNFlsls1XhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/Wb:TLiEx9zmzrfRmBEyPbP/W
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/user/0/org.tlauncher.tlauncherpe/databases/google_app_measurement_local.db
Size 16KB
SHA256 4c7abd8c86d0fbc0ff2f18ee518a34205b686f5eeb64b14a4046fd2f4f1a286e
MD5 32666be229a6c30770d704c10a3de534
SHA1 a0cf465b6bd9cd4362d258be8904be7f6a1e409a
SHA512 1878198d5eb5bb6c1f280a0f3052dd3b7ed50d87db917d487bc9879c2785b1c26551d14080b0abd3cc961075f616392d3761442ae36ffee77c41c24514703901
SSDEEP 12:TL1Es9zmzrfRmBEyPbP/n4V4bCAUEWlCuUyWl8GS/:TLvpmzr0GSP/nu4bCCb0
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/user/0/org.tlauncher.tlauncherpe/databases/google_app_measurement_local.db
Size 16KB
SHA256 bc9e3db9c96494470ca085939c0bcf3b5b22c71742a86adb64a701b398afd9c2
MD5 d7c2c4afc65bcf42464c859f65d7d33c
SHA1 3bc64b089601e9f72fa22c3285c33eb4ae3de107
SHA512 e41599ffaaeef19119cee97b63e38f4688c56ae931d5cbc6723eeaa333e1bd8b476ccc89c27797299f62149ce928dba0ae4e4e29824602962edec2c0fee44a5b
SSDEEP 6:l9bNFlils1sElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/Wb:TLIEsE9zmzrfRmBEyPbP/W
MD5 SHA1 SHA512 SSDEEP

Submit Download