39ac2086f9a99aa7e61d66eca0d421847de8e701e835d173361d9fd776925716

Analysis

max time kernel
47s
max time network
133s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
25/05/2024, 12:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
adwqdqhhb_51150.apk
Size 2.6MB
Sample240525-payefahd6x
SHA256 39ac2086f9a99aa7e61d66eca0d421847de8e701e835d173361d9fd776925716
MD5 c283a86c04ce3f3e0aa54b6be4229fd0
SHA1 029cf046239fc55dd82f0cb7246b47e65d77646f
SHA512 d9f4229c87fc59225f3ee52e2667fec02ed7cd364f604e01eeb9204c962fcfc3c5e5988a771de1a36c404446be6494c04fc0cab35635bd66144b7c621931c7fa
SSDEEP 49152:rRxRsD1ZOYav2cmnJVq3fNSr38a3d0OSR6Ou2b:rRCUYav2hJVaor8/O72b
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	org.adwfreak.launcher

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	org.adwfreak.launcher

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	org.adwfreak.launcher

org.adwfreak.launcher
1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
PID:4615

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

launcher.db

Path /data/user/0/org.adwfreak.launcher/databases/launcher.db
Size 20KB
SHA256 556464b13d1acf7a607929f017c595af49e583bca251f95d4e22788e956ec9b3
MD5 3126816efd121b2d862f682cbf56b2c4
SHA1 0e6568a51990ecb96e4cf10071f5e139162a6174
SHA512 e3ab1aab21f242125a6b4b7555531a38567dedb9447ec5f5e91c1f2c9669b6468d467db9e584bbe364576c03e47309646ade1a395bca02db74f1caa6c531994d
SSDEEP 48:TCWqVWt9JdqVL9GSBlitsliErkliGNurdbBA:ek9WGtpENIKBA
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.db-journal

Path /data/user/0/org.adwfreak.launcher/databases/launcher.db-journal
Size 512B
SHA256 a0699e4a33226dcb6ef462a8d557445ccdf1ec99a7564dcf61a271ed0e08c93f
MD5 597fb93c2cd34ec1758a80df6f6fc785
SHA1 e03d41d715a09abae9f7607e3fc930cac1dbed1b
SHA512 08f0b44bd2db78fe72963bd8ceef4cce4a108d4100fee039f12269109c3b1711601b8227baf3218941a13086152f6c7663e64d4b55aab5707f03c3694e235b55
MD5 SHA1 SHA512

Submit Download

launcher.db-journal

Path /data/user/0/org.adwfreak.launcher/databases/launcher.db-journal
Size 8KB
SHA256 f65e37bd68b35958475fbc3f92570bff2cc170a3bceba44b01f3195ab353bde9
MD5 085064fc011af2d4ef7d92ba51b090fd
SHA1 660a25d8894a4a4c08b511e25c3e967c6c288374
SHA512 eca175cd081f7105a5c361efd6a7f16ac611ad04aeb63a21ddc6e97d7dc00b7e546339e0b5b65b8fe7ffdc7e30786e03ba2842de8001bfa6738c04f0cdc13d46
SSDEEP 6:7+/l9Nn1ug9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK4M:7+tMqLiuWdYRmBEyPbw
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.db-journal

Path /data/user/0/org.adwfreak.launcher/databases/launcher.db-journal
Size 8KB
SHA256 b5ff376880cd9ce9d22bd39bbfdd12d109877b96d39f82613853c1693a11cdbb
MD5 53720ac02920d2a53018a1508659374b
SHA1 1d0cf7e2b9d5b0bfdc7d4ad89ec24669e756dfa0
SHA512 c5de4b5e59d9f395464fd3b25eb12815c18fe2aa71d49f0f6bb6f2bc86ceeecfb667efe44cc2d11432cd05025ec0e057d4b59667f32f7789f0d7025d1a334c59
SSDEEP 6:7+/l9fxFPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKwt/Y:7+t9xBqLJdeWRmBEyPbzY
MD5 SHA1 SHA512 SSDEEP

Submit Download

launcher.preferences

Path /data/user/0/org.adwfreak.launcher/files/launcher.preferences
Size 15B
SHA256 9bd54ce2fe34faa03d173df22621b5c747e544ed354e521889b692c031ba99b3
MD5 8045cecd3d5a4c893e3a75d47b17121e
SHA1 61f08d6c53ae857cfd4be1bf607a6c80e5e78b23
SHA512 70d34c24ccb3f90cdf930f0e24d67441e2aafc5baa5ae95c5e288b788cf25df394254f9bf55d45a5893b78457873b6169b8868a4fd45364c2b485f90bd4c0099
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads