dabd27db7125df7add24fa016a826e9683d9680cbe24d63d38f77ad099057387

Analysis

max time kernel
177s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
24-05-2024 12:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

dabd27db7125df7add24fa016a826e9683d9680cbe24d63d38f77ad099057387.apk
Size

1.6MB
MD5

b92d6293a171226e6b932c71a1dddbbf
SHA1

79664108e90d144fa109143f91a5e297ba20da80
SHA256

dabd27db7125df7add24fa016a826e9683d9680cbe24d63d38f77ad099057387
SHA512

3965314e69d4c52758b76fbe605bc1be6cc70b191fdb50be0c6d55f3fe1fbfb6af603cc3fc72fdeb53e8d686e186d0d6574e3b44961b8217f8bb1d8f30b095a4
SSDEEP

24576:32PiBPX83UMau1jKjbjEgyI/zV0C3FyqoEhpMjQ4OFXiWV7ALtmX9bFd:3LX8+uYjbjLyY1miLCLtmBr

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.greencity.highdive

description ioc process

File opened for read /proc/meminfo com.greencity.highdive
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
evasion

Download New Code at Runtime
T1407

Processes:

com.greencity.highdive

ioc pid process

/data/user/0/com.greencity.highdive/files/7a5955f0.dex 4718 com.greencity.highdive
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.greencity.highdive

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.greencity.highdive
Acquires the wake lock 1 IoCs

Processes:

com.greencity.highdive

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.greencity.highdive
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.greencity.highdive

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.greencity.highdive

description	ioc	process
File opened for read	/proc/meminfo	com.greencity.highdive

ioc	pid	process
/data/user/0/com.greencity.highdive/files/7a5955f0.dex	4718	com.greencity.highdive

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.greencity.highdive

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.greencity.highdive

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.greencity.highdive

com.greencity.highdive
1⤵
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Checks if the internet connection is available
PID:4718

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.greencity.highdive/databases/com.google.android.datatransport.events

Filesize
40KB

MD5
1cf3f63c021d755a21623e6d0e86dbc6

SHA1
e40e0f1faa61abcca7ba3394c54c92ff7334b49b

SHA256
100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895

SHA512
38d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466

Download Submit
/data/user/0/com.greencity.highdive/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
bf038a42040b8bb99f15bb6818d40d0e

SHA1
99c4873e462f5e68874d04785134bd008df16717

SHA256
fc1b93d9189dc9bb0c503d767c5b63873b841292873cfcefd22ce60623d20fc9

SHA512
dba69147c0cae67c0902877d2ff83f25f1687791a782a6bfa77fa4ec2daf5da5419e844880c0f260dba12411374becd227355f38f4d496d8135ebe6e8b87c9e3

Download Submit
/data/user/0/com.greencity.highdive/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
cf64ec6577ff9c0942909498507b8966

SHA1
a361b88f9aa987a3cfcd12b9a6e26b2c55b82d3a

SHA256
9784e15bc03420d48d6f4f1b926280aa2ccdf0b4ffd4d3f6f6f4ae327176143b

SHA512
8890acb4c1e379c7e911806adb42f28163840e45f6a58aa2b87c08f07e1bcc8386b8fde33e0d9ec96ec124ca124bbed81c1aaa52b9c30523ac6710dea6c02162

Download Submit
/data/user/0/com.greencity.highdive/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
2d69716f3f6c63af985a6031d3495435

SHA1
cf4540a558ccf97a93b9f4e29d99a11d274a922b

SHA256
52a6d22ab3eb528ccd7265ba8b863cdc411798cb89c48ca816714f0202a42a50

SHA512
388790e17a4c3a40a4b6b164a4376eb0a0856a62c94a98b3428267739fa9cb6d896b5d0078936c637c8afc3098c1bd68c3fbf08fbe68012334785bb77d54b105

Download Submit
/data/user/0/com.greencity.highdive/files/7a5955f0.dex

Filesize
261KB

MD5
6541f54e96e194c048387b57f9422f28

SHA1
d5e6cdfa18ff910ee848e498edcb57190a346770

SHA256
c25c28bd3de1b460f42aa6210f77df7f605f7e1bf4ae78d72531d9dbd453bf31

SHA512
153e393a1631e4bd06a5147ff004a8d854805da71d7325cbe586edc6ddf1499a408b63cd0f1217231fefa532003f347d0fe076d199cad7a52ce3b0325e7cf5a2

Download Submit
/data/user/0/com.greencity.highdive/files/7a5955f0.dex

Filesize
613KB

MD5
fe14e95f31460cd2332e4ffb8e4957f5

SHA1
04caa3638ac98987e15070a97f8789b7a62ed0c6

SHA256
65cb45562d19755d4e7b4828389f4ac6df804d80188d43759255f50ef72a0b5d

SHA512
403b053a3aa7314f928cd6cb89a36346e23edb074f72064607b3d2c6ad419a3679b5110ad63a06a25b5df0ca30b78f025301d218d7eb204e719577318b12f2bb

Download Submit
/data/user/0/com.greencity.highdive/files/BGEaUZrY

Filesize
496B

MD5
35d69b06ec98fd23ffaad185577ed10e

SHA1
60cc3d8f11582b8bb99443e537f655a7543ceb54

SHA256
11137b782ebeddafe7c184cd61209c261714851ddadeab771f69551172c0bd16

SHA512
0a5ff360f7da15083c4e732432d23adeade12aef9561749c8d5752e0134dbc722c0180f02b58e65659b149d2560ab17f94a2a5ca813b4391795a730302a90837

Download Submit
/data/user/0/com.greencity.highdive/files/BGEaUZrY

Filesize
744B

MD5
32c992d704f0939b493f645f8ec4c447

SHA1
0cacd548f98752aab2e863e11a5d101cf1ad0c9e

SHA256
55b58c411777f996bdbfbe9a0c429e7c4eb5f2d0a7e0a45095791a522ecb9a48

SHA512
6a920c0343f84ec11ca685a46ac9c86d04a3e9620c6865fa6045af1a8a54fcd957ff3bb131d4acd0574fa95ab7d692fcf3f39a087ead0c80bb03b3c261bcf3f2

Download Submit
/data/user/0/com.greencity.highdive/files/PersistedInstallation1026469742223475521tmp

Filesize
90B

MD5
443f89f18563816eb83c1ce9dc420f3b

SHA1
53501d557d627c690d9d20459896e0663964b112

SHA256
0076a9c14c11706f242ddeede3d28c4187bce55a3c21775dbf2bda2b061e4bee

SHA512
37f369d32d45ced5eade943e03a95dcce9f21d31d0afb9b981d8a26a62c173508b87d3ba73ea7ce4be3af58e9e27eaa067f41e5e4bcc0c8fdb30de8a459cb053

Download Submit
/data/user/0/com.greencity.highdive/files/PersistedInstallation5561987437327226601tmp

Filesize
567B

MD5
a8191da0178964c4bd4789c04cc05d83

SHA1
a48118680f9b7ea64550d3cd263c12e55b4f9601

SHA256
7b069999e3eb5b1ddf6315318806ed8fbe454e7ff417e7f4267297752e60563b

SHA512
c497e8173470bbfa846838c28b7e8a200f0ad9c882e141ff68873622671f561266d4470ff28230bf8d008dc793bc5d6540a94c3b5a17ad85975c0f9e2183ab5f

Download Submit
/data/user/0/com.greencity.highdive/files/TrPJFdsN

Filesize
336B

MD5
68b29415b989cd80bcecca969a32f79f

SHA1
7eba538f90281fca8f070c1d34a4b7c6e305efd2

SHA256
32a579790af10055ecafb690e3478729b4fe792728d198d448a10e6975622668

SHA512
b8b50113738b99eddce2353d9715d61ca0711095e8da2b68ad79027afe44c0667d25310a63915d4764109c95209b8b765f1fe8b65caebda554ee380682b4ef33

Download Submit
/data/user/0/com.greencity.highdive/files/TrPJFdsN

Filesize
336B

MD5
fb48718b497feb1e26f9a05c2e5c79e8

SHA1
f6291cba8428d8c55647fbe36656c9f818939502

SHA256
5d518770b69349aca68e8ad5dad15859067fcfdf1c3f3258140ca97bbab77769

SHA512
68d03b6fa189872afa38942861daba3b781f61fb83a66de1586d07e7ba3c91d0bd96574c434367ba2d66c5f5a7a308c36d9b95929abb811ac8ca7025a5b4d840

Download Submit
/data/user/0/com.greencity.highdive/files/TrPJFdsN

Filesize
336B

MD5
e008270fbe4145da8a13fdcc1233637b

SHA1
f7f969fbe855f6bacceee618c65727e200f07398

SHA256
a7d72282998216e0f48650c694d6928622dc4275c7cc863e2f34756a1bdd6448

SHA512
847ea24a275643632118ee03877ee1fbe4302761204cb1bb90094742e4ae6aa6d4eca40849166b43663a4b32e4416235673a3b67b961532b30551d284c7157b4

Download Submit