Analysis
-
max time kernel
177s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
24-05-2024 12:35
Static task
static1
Behavioral task
behavioral1
Sample
dabd27db7125df7add24fa016a826e9683d9680cbe24d63d38f77ad099057387.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
dabd27db7125df7add24fa016a826e9683d9680cbe24d63d38f77ad099057387.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
dabd27db7125df7add24fa016a826e9683d9680cbe24d63d38f77ad099057387.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
dabd27db7125df7add24fa016a826e9683d9680cbe24d63d38f77ad099057387.apk
-
Size
1.6MB
-
MD5
b92d6293a171226e6b932c71a1dddbbf
-
SHA1
79664108e90d144fa109143f91a5e297ba20da80
-
SHA256
dabd27db7125df7add24fa016a826e9683d9680cbe24d63d38f77ad099057387
-
SHA512
3965314e69d4c52758b76fbe605bc1be6cc70b191fdb50be0c6d55f3fe1fbfb6af603cc3fc72fdeb53e8d686e186d0d6574e3b44961b8217f8bb1d8f30b095a4
-
SSDEEP
24576:32PiBPX83UMau1jKjbjEgyI/zV0C3FyqoEhpMjQ4OFXiWV7ALtmX9bFd:3LX8+uYjbjLyY1miLCLtmBr
Malware Config
Signatures
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.greencity.highdiveioc pid process /data/user/0/com.greencity.highdive/files/7a5955f0.dex 4718 com.greencity.highdive -
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock 1 IoCs
Processes:
com.greencity.highdivedescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.greencity.highdive -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
com.greencity.highdivedescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.greencity.highdive
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.greencity.highdive/databases/com.google.android.datatransport.eventsFilesize
40KB
MD51cf3f63c021d755a21623e6d0e86dbc6
SHA1e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA256100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
SHA51238d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
-
/data/user/0/com.greencity.highdive/databases/com.google.android.datatransport.events-journalFilesize
8KB
MD5bf038a42040b8bb99f15bb6818d40d0e
SHA199c4873e462f5e68874d04785134bd008df16717
SHA256fc1b93d9189dc9bb0c503d767c5b63873b841292873cfcefd22ce60623d20fc9
SHA512dba69147c0cae67c0902877d2ff83f25f1687791a782a6bfa77fa4ec2daf5da5419e844880c0f260dba12411374becd227355f38f4d496d8135ebe6e8b87c9e3
-
/data/user/0/com.greencity.highdive/databases/com.google.android.datatransport.events-journalFilesize
512B
MD5cf64ec6577ff9c0942909498507b8966
SHA1a361b88f9aa987a3cfcd12b9a6e26b2c55b82d3a
SHA2569784e15bc03420d48d6f4f1b926280aa2ccdf0b4ffd4d3f6f6f4ae327176143b
SHA5128890acb4c1e379c7e911806adb42f28163840e45f6a58aa2b87c08f07e1bcc8386b8fde33e0d9ec96ec124ca124bbed81c1aaa52b9c30523ac6710dea6c02162
-
/data/user/0/com.greencity.highdive/databases/com.google.android.datatransport.events-journalFilesize
8KB
MD52d69716f3f6c63af985a6031d3495435
SHA1cf4540a558ccf97a93b9f4e29d99a11d274a922b
SHA25652a6d22ab3eb528ccd7265ba8b863cdc411798cb89c48ca816714f0202a42a50
SHA512388790e17a4c3a40a4b6b164a4376eb0a0856a62c94a98b3428267739fa9cb6d896b5d0078936c637c8afc3098c1bd68c3fbf08fbe68012334785bb77d54b105
-
/data/user/0/com.greencity.highdive/files/7a5955f0.dexFilesize
261KB
MD56541f54e96e194c048387b57f9422f28
SHA1d5e6cdfa18ff910ee848e498edcb57190a346770
SHA256c25c28bd3de1b460f42aa6210f77df7f605f7e1bf4ae78d72531d9dbd453bf31
SHA512153e393a1631e4bd06a5147ff004a8d854805da71d7325cbe586edc6ddf1499a408b63cd0f1217231fefa532003f347d0fe076d199cad7a52ce3b0325e7cf5a2
-
/data/user/0/com.greencity.highdive/files/7a5955f0.dexFilesize
613KB
MD5fe14e95f31460cd2332e4ffb8e4957f5
SHA104caa3638ac98987e15070a97f8789b7a62ed0c6
SHA25665cb45562d19755d4e7b4828389f4ac6df804d80188d43759255f50ef72a0b5d
SHA512403b053a3aa7314f928cd6cb89a36346e23edb074f72064607b3d2c6ad419a3679b5110ad63a06a25b5df0ca30b78f025301d218d7eb204e719577318b12f2bb
-
/data/user/0/com.greencity.highdive/files/BGEaUZrYFilesize
496B
MD535d69b06ec98fd23ffaad185577ed10e
SHA160cc3d8f11582b8bb99443e537f655a7543ceb54
SHA25611137b782ebeddafe7c184cd61209c261714851ddadeab771f69551172c0bd16
SHA5120a5ff360f7da15083c4e732432d23adeade12aef9561749c8d5752e0134dbc722c0180f02b58e65659b149d2560ab17f94a2a5ca813b4391795a730302a90837
-
/data/user/0/com.greencity.highdive/files/BGEaUZrYFilesize
744B
MD532c992d704f0939b493f645f8ec4c447
SHA10cacd548f98752aab2e863e11a5d101cf1ad0c9e
SHA25655b58c411777f996bdbfbe9a0c429e7c4eb5f2d0a7e0a45095791a522ecb9a48
SHA5126a920c0343f84ec11ca685a46ac9c86d04a3e9620c6865fa6045af1a8a54fcd957ff3bb131d4acd0574fa95ab7d692fcf3f39a087ead0c80bb03b3c261bcf3f2
-
/data/user/0/com.greencity.highdive/files/PersistedInstallation1026469742223475521tmpFilesize
90B
MD5443f89f18563816eb83c1ce9dc420f3b
SHA153501d557d627c690d9d20459896e0663964b112
SHA2560076a9c14c11706f242ddeede3d28c4187bce55a3c21775dbf2bda2b061e4bee
SHA51237f369d32d45ced5eade943e03a95dcce9f21d31d0afb9b981d8a26a62c173508b87d3ba73ea7ce4be3af58e9e27eaa067f41e5e4bcc0c8fdb30de8a459cb053
-
/data/user/0/com.greencity.highdive/files/PersistedInstallation5561987437327226601tmpFilesize
567B
MD5a8191da0178964c4bd4789c04cc05d83
SHA1a48118680f9b7ea64550d3cd263c12e55b4f9601
SHA2567b069999e3eb5b1ddf6315318806ed8fbe454e7ff417e7f4267297752e60563b
SHA512c497e8173470bbfa846838c28b7e8a200f0ad9c882e141ff68873622671f561266d4470ff28230bf8d008dc793bc5d6540a94c3b5a17ad85975c0f9e2183ab5f
-
/data/user/0/com.greencity.highdive/files/TrPJFdsNFilesize
336B
MD568b29415b989cd80bcecca969a32f79f
SHA17eba538f90281fca8f070c1d34a4b7c6e305efd2
SHA25632a579790af10055ecafb690e3478729b4fe792728d198d448a10e6975622668
SHA512b8b50113738b99eddce2353d9715d61ca0711095e8da2b68ad79027afe44c0667d25310a63915d4764109c95209b8b765f1fe8b65caebda554ee380682b4ef33
-
/data/user/0/com.greencity.highdive/files/TrPJFdsNFilesize
336B
MD5fb48718b497feb1e26f9a05c2e5c79e8
SHA1f6291cba8428d8c55647fbe36656c9f818939502
SHA2565d518770b69349aca68e8ad5dad15859067fcfdf1c3f3258140ca97bbab77769
SHA51268d03b6fa189872afa38942861daba3b781f61fb83a66de1586d07e7ba3c91d0bd96574c434367ba2d66c5f5a7a308c36d9b95929abb811ac8ca7025a5b4d840
-
/data/user/0/com.greencity.highdive/files/TrPJFdsNFilesize
336B
MD5e008270fbe4145da8a13fdcc1233637b
SHA1f7f969fbe855f6bacceee618c65727e200f07398
SHA256a7d72282998216e0f48650c694d6928622dc4275c7cc863e2f34756a1bdd6448
SHA512847ea24a275643632118ee03877ee1fbe4302761204cb1bb90094742e4ae6aa6d4eca40849166b43663a4b32e4416235673a3b67b961532b30551d284c7157b4