9252e1cb3770d273137e7296385537f39cc12d454855268a4e24c012e6f6f3f7

Analysis

max time kernel
47s
max time network
156s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
26/05/2024, 11:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

oxygenapp-v1.0.35-api1.apk
Size

2.7MB
MD5

ba5321a8daca25db3dfebe2f4a22bfa4
SHA1

9455d01c733bf519b6e84d0d44d3c2b95f1ec0eb
SHA256

9252e1cb3770d273137e7296385537f39cc12d454855268a4e24c012e6f6f3f7
SHA512

0f2f8a0c68567c03d7a6c71d010038c8293451ad47aafb20484ca5df51145f862dc561e73ca0af4c8f852cce61dfd2d3a1bfdb9de64ba1fd67b5ff9162c7c717
SSDEEP

49152:/E1fnbIRMziyU/Hf35aM5Rbhe8EwRClVFWzZwlg/Fpmh0CB:YIRM7UHcM5jOluwKmh0O

Score

7^/10

collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.doohmedia.oxygenapp.player

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.doohmedia.oxygenapp.player

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.doohmedia.oxygenapp.player

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.doohmedia.oxygenapp.player

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.doohmedia.oxygenapp.player

com.doohmedia.oxygenapp.player
1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5144

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-journal

Filesize
512B

MD5
a754a8e38dc7d0bb31bc8f4d53382415

SHA1
2b3fd28b8034c64d9dbd5bdfdf33dc6bdb492314

SHA256
82219da31bed83c1f6cf9cc677ecb498c91a9fbb92b762b371e744320e5ffd7e

SHA512
a6bc9e2ba7fca3637770302f9e7b43d4ae7f515ba3b782cff88e5b0715ff140613f0ec3180e714932cdde20c980dc9a8208d1cf4490639505770664deaad1543

Download Submit
/data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-wal

Filesize
16KB

MD5
4a5bc5ae4708f6eb4722dee6adc46696

SHA1
9ce4f8bb74fa1802d0fbe996922469010c158622

SHA256
bf08b3aa05c694a685bed8e185f74e50ec87ff46a77fa222a33e1fcec0a95cc2

SHA512
cda43db670d7f1d883b123145a4230abee9160bf680c99c309273abaaa8872f433fdd1f0284ff28db87432d35a585c5a235ba2e228f9db5a005425e91bc841cd

Download Submit
/data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-wal

Filesize
88KB

MD5
9897a84a21268c1529f6b5ababe8eaba

SHA1
6272a6de619f084fccf98c297a077130620fa4b7

SHA256
27314d23ad02e2712e72919ac383ff2555da98ce98a58255482d3e542835a1a3

SHA512
b69d1dbb4f2f3acf0bf0c91ecaa9cbbcc7eeda7dcaadc00ec782639f718c052d26609ba5d9f517d108e76efe04ffd87b3fe7596232d408d3f052b41491a15ee4

Download Submit
/storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/KZ6HS.temp

Filesize
59KB

MD5
86b36230af4499f3ba524a262f0095a5

SHA1
c87206242ee4cca5cf9ee6a2c70ab15f33c4fac5

SHA256
03fa9ddc3efc6caf3ee8eb98b27a9c765ae69766f661997ed3dad982a3e23ba7

SHA512
d4adbbfbc8f9b814d883e7c938b4fecba57115c2192d7943063369db52b80e891522ec24a7230e195eb2586f9a304cbaf13e7d8b3f0fa094c603c3621e06a7f6

Download Submit
/storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/app1.oxygen-cdn.net.temp

Filesize
428B

MD5
9c528028313dfb10454e333f17a333ec

SHA1
dca4fad19051eb2d4a4532381971fb194cfd0f48

SHA256
070fc3fbe82b6029da23cca7e2f0e32db8d5e0e7e60c0e5139a0b38709e97176

SHA512
abaf11a018f252bf998fb6a4d85e8ad89450f58cba6e9ea3abcb2aee9d9a8a844f13791f6361922f6a67e62726dbff3e06c944c94a7a2a9aaab07a31e4100f2a

Download Submit
/storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/app1.oxygen-cdn.net.temp

Filesize
428B

MD5
5e22631aaddff7f4ba5fefc9a081b7dc

SHA1
58be88f9f0d4507a0957f8b574687dcc31901206

SHA256
2a3064bf387e7e993b1d692bc58a460a11032273e817de9892fa10e1f75ddf13

SHA512
b076be3aa0d122d2329690e76b3007abefbea3f2260a90c4a288f1927dee34e062bea49f1c69a27b6eea88032b97a9a1f070cf6551cb1050d0861efdc5000167

Download Submit
/storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt

Filesize
268B

MD5
11dd5e7ae70368c36a7a166ad82b9099

SHA1
fe72ddb7f151b919901c2cb3e69cc7ab7d563779

SHA256
fd7e5f5023734b6bc117bbc79687890ff1ea91ea2dd6d33cd88a3b4079e81975

SHA512
01f3fd2c4b9e9da2bfafb1b52330b01bcfb4cf011fcd219f34e7948f116da5f2277ba5736271ea65453191901ff0a8ad4a64fcca441cd0d7e5acc9f4aba4004d

Download Submit
/storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt

Filesize
268B

MD5
3d1584f20d185314ea47fe3139d02d07

SHA1
eced276ed94764efd989834f23fb53562c96b6ac

SHA256
8eeb3dd1a0669420a2b9ba9041ea7a59eab7e5699b1b25b67d71f99c68570dff

SHA512
0bbcdcd0e349e80b8b4579c834e402b1f1c29e1fa427126b96227216ae546111fd45abaa5847f8b298fdffc0428e1e42093a3b992e5159a00d9b0b35c802ed33

Download Submit
/storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt

Filesize
135B

MD5
1742ca4288c64a480ea5769802d42715

SHA1
cd593042d26fb05d5ce6e3d882f412922a9862c9

SHA256
c19c2777b1f25a31791388058fbe37c75a0aa49ddafacc3196629acb5fb9eba8

SHA512
1420bea02910b26a9a388de809953d8d48715f6310610c2c2e744733ff8c9a5c9eab26c463677da0f93fc5d9742677d155c3b8fdde2db026c42d2437296226a7

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads