dabd27db7125df7add24fa016a826e9683d9680cbe24d63d38f77ad099057387

Analysis

max time kernel
177s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
24-05-2024 12:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

dabd27db7125df7add24fa016a826e9683d9680cbe24d63d38f77ad099057387.apk
Size

1.6MB
MD5

b92d6293a171226e6b932c71a1dddbbf
SHA1

79664108e90d144fa109143f91a5e297ba20da80
SHA256

dabd27db7125df7add24fa016a826e9683d9680cbe24d63d38f77ad099057387
SHA512

3965314e69d4c52758b76fbe605bc1be6cc70b191fdb50be0c6d55f3fe1fbfb6af603cc3fc72fdeb53e8d686e186d0d6574e3b44961b8217f8bb1d8f30b095a4
SSDEEP

24576:32PiBPX83UMau1jKjbjEgyI/zV0C3FyqoEhpMjQ4OFXiWV7ALtmX9bFd:3LX8+uYjbjLyY1miLCLtmBr

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
evasion discovery

T1633.001

T1426

Processes:

com.greencity.highdive

description ioc process

File opened for read /proc/meminfo com.greencity.highdive
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
evasion

T1407

Processes:

com.greencity.highdive

ioc pid process

/data/user/0/com.greencity.highdive/files/7a5955f0.dex 4718 com.greencity.highdive
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

T1414

T1641.001

Processes:

com.greencity.highdive

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.greencity.highdive
Acquires the wake lock 1 IoCs

Processes:

com.greencity.highdive

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.greencity.highdive
Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

T1421

Processes:

com.greencity.highdive

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.greencity.highdive

description	ioc	process
File opened for read	/proc/meminfo	com.greencity.highdive

ioc	pid	process
/data/user/0/com.greencity.highdive/files/7a5955f0.dex	4718	com.greencity.highdive

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.greencity.highdive

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.greencity.highdive

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.greencity.highdive

com.greencity.highdive
1⤵
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Checks if the internet connection is available
PID:4718

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.greencity.highdive/databases/com.google.android.datatransport.events
Filesize
40KB

MD5
1cf3f63c021d755a21623e6d0e86dbc6

SHA1
e40e0f1faa61abcca7ba3394c54c92ff7334b49b

SHA256
100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895

SHA512
38d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466

Download Submit
/data/user/0/com.greencity.highdive/databases/com.google.android.datatransport.events-journal
Filesize
8KB

MD5
bf038a42040b8bb99f15bb6818d40d0e

SHA1
99c4873e462f5e68874d04785134bd008df16717

SHA256
fc1b93d9189dc9bb0c503d767c5b63873b841292873cfcefd22ce60623d20fc9

SHA512
dba69147c0cae67c0902877d2ff83f25f1687791a782a6bfa77fa4ec2daf5da5419e844880c0f260dba12411374becd227355f38f4d496d8135ebe6e8b87c9e3

Download Submit
/data/user/0/com.greencity.highdive/databases/com.google.android.datatransport.events-journal
Filesize
512B

MD5
cf64ec6577ff9c0942909498507b8966

SHA1
a361b88f9aa987a3cfcd12b9a6e26b2c55b82d3a

SHA256
9784e15bc03420d48d6f4f1b926280aa2ccdf0b4ffd4d3f6f6f4ae327176143b

SHA512
8890acb4c1e379c7e911806adb42f28163840e45f6a58aa2b87c08f07e1bcc8386b8fde33e0d9ec96ec124ca124bbed81c1aaa52b9c30523ac6710dea6c02162

Download Submit
/data/user/0/com.greencity.highdive/databases/com.google.android.datatransport.events-journal
Filesize
8KB

MD5
2d69716f3f6c63af985a6031d3495435

SHA1
cf4540a558ccf97a93b9f4e29d99a11d274a922b

SHA256
52a6d22ab3eb528ccd7265ba8b863cdc411798cb89c48ca816714f0202a42a50

SHA512
388790e17a4c3a40a4b6b164a4376eb0a0856a62c94a98b3428267739fa9cb6d896b5d0078936c637c8afc3098c1bd68c3fbf08fbe68012334785bb77d54b105

Download Submit
/data/user/0/com.greencity.highdive/files/7a5955f0.dex
Filesize
261KB

MD5
6541f54e96e194c048387b57f9422f28

SHA1
d5e6cdfa18ff910ee848e498edcb57190a346770

SHA256
c25c28bd3de1b460f42aa6210f77df7f605f7e1bf4ae78d72531d9dbd453bf31

SHA512
153e393a1631e4bd06a5147ff004a8d854805da71d7325cbe586edc6ddf1499a408b63cd0f1217231fefa532003f347d0fe076d199cad7a52ce3b0325e7cf5a2

Download Submit
/data/user/0/com.greencity.highdive/files/7a5955f0.dex
Filesize
613KB

MD5
fe14e95f31460cd2332e4ffb8e4957f5

SHA1
04caa3638ac98987e15070a97f8789b7a62ed0c6

SHA256
65cb45562d19755d4e7b4828389f4ac6df804d80188d43759255f50ef72a0b5d

SHA512
403b053a3aa7314f928cd6cb89a36346e23edb074f72064607b3d2c6ad419a3679b5110ad63a06a25b5df0ca30b78f025301d218d7eb204e719577318b12f2bb

Download Submit
/data/user/0/com.greencity.highdive/files/BGEaUZrY
Filesize
496B

MD5
35d69b06ec98fd23ffaad185577ed10e

SHA1
60cc3d8f11582b8bb99443e537f655a7543ceb54

SHA256
11137b782ebeddafe7c184cd61209c261714851ddadeab771f69551172c0bd16

SHA512
0a5ff360f7da15083c4e732432d23adeade12aef9561749c8d5752e0134dbc722c0180f02b58e65659b149d2560ab17f94a2a5ca813b4391795a730302a90837

Download Submit
/data/user/0/com.greencity.highdive/files/BGEaUZrY
Filesize
744B

MD5
32c992d704f0939b493f645f8ec4c447

SHA1
0cacd548f98752aab2e863e11a5d101cf1ad0c9e

SHA256
55b58c411777f996bdbfbe9a0c429e7c4eb5f2d0a7e0a45095791a522ecb9a48

SHA512
6a920c0343f84ec11ca685a46ac9c86d04a3e9620c6865fa6045af1a8a54fcd957ff3bb131d4acd0574fa95ab7d692fcf3f39a087ead0c80bb03b3c261bcf3f2

Download Submit
/data/user/0/com.greencity.highdive/files/PersistedInstallation1026469742223475521tmp
Filesize
90B

MD5
443f89f18563816eb83c1ce9dc420f3b

SHA1
53501d557d627c690d9d20459896e0663964b112

SHA256
0076a9c14c11706f242ddeede3d28c4187bce55a3c21775dbf2bda2b061e4bee

SHA512
37f369d32d45ced5eade943e03a95dcce9f21d31d0afb9b981d8a26a62c173508b87d3ba73ea7ce4be3af58e9e27eaa067f41e5e4bcc0c8fdb30de8a459cb053

Download Submit
/data/user/0/com.greencity.highdive/files/PersistedInstallation5561987437327226601tmp
Filesize
567B

MD5
a8191da0178964c4bd4789c04cc05d83

SHA1
a48118680f9b7ea64550d3cd263c12e55b4f9601

SHA256
7b069999e3eb5b1ddf6315318806ed8fbe454e7ff417e7f4267297752e60563b

SHA512
c497e8173470bbfa846838c28b7e8a200f0ad9c882e141ff68873622671f561266d4470ff28230bf8d008dc793bc5d6540a94c3b5a17ad85975c0f9e2183ab5f

Download Submit
/data/user/0/com.greencity.highdive/files/TrPJFdsN
Filesize
336B

MD5
68b29415b989cd80bcecca969a32f79f

SHA1
7eba538f90281fca8f070c1d34a4b7c6e305efd2

SHA256
32a579790af10055ecafb690e3478729b4fe792728d198d448a10e6975622668

SHA512
b8b50113738b99eddce2353d9715d61ca0711095e8da2b68ad79027afe44c0667d25310a63915d4764109c95209b8b765f1fe8b65caebda554ee380682b4ef33

Download Submit
/data/user/0/com.greencity.highdive/files/TrPJFdsN
Filesize
336B

MD5
fb48718b497feb1e26f9a05c2e5c79e8

SHA1
f6291cba8428d8c55647fbe36656c9f818939502

SHA256
5d518770b69349aca68e8ad5dad15859067fcfdf1c3f3258140ca97bbab77769

SHA512
68d03b6fa189872afa38942861daba3b781f61fb83a66de1586d07e7ba3c91d0bd96574c434367ba2d66c5f5a7a308c36d9b95929abb811ac8ca7025a5b4d840

Download Submit
/data/user/0/com.greencity.highdive/files/TrPJFdsN
Filesize
336B

MD5
e008270fbe4145da8a13fdcc1233637b

SHA1
f7f969fbe855f6bacceee618c65727e200f07398

SHA256
a7d72282998216e0f48650c694d6928622dc4275c7cc863e2f34756a1bdd6448

SHA512
847ea24a275643632118ee03877ee1fbe4302761204cb1bb90094742e4ae6aa6d4eca40849166b43663a4b32e4416235673a3b67b961532b30551d284c7157b4

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads