9252e1cb3770d273137e7296385537f39cc12d454855268a4e24c012e6f6f3f7

Analysis

max time kernel
47s
max time network
156s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
26/05/2024, 11:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
oxygenapp-v1.0.35-api1.apk
Size 2.7MB
Sample240526-n26dpaaa7s
SHA256 9252e1cb3770d273137e7296385537f39cc12d454855268a4e24c012e6f6f3f7
MD5 ba5321a8daca25db3dfebe2f4a22bfa4
SHA1 9455d01c733bf519b6e84d0d44d3c2b95f1ec0eb
SHA512 0f2f8a0c68567c03d7a6c71d010038c8293451ad47aafb20484ca5df51145f862dc561e73ca0af4c8f852cce61dfd2d3a1bfdb9de64ba1fd67b5ff9162c7c717
SSDEEP 49152:/E1fnbIRMziyU/Hf35aM5Rbhe8EwRClVFWzZwlg/Fpmh0CB:YIRM7UHcM5jOluwKmh0O
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.doohmedia.oxygenapp.player

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.doohmedia.oxygenapp.player

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.doohmedia.oxygenapp.player

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.doohmedia.oxygenapp.player

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.doohmedia.oxygenapp.player

com.doohmedia.oxygenapp.player
1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5144

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

androidx.work.workdb

Path /data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-journal
Size 512B
SHA256 82219da31bed83c1f6cf9cc677ecb498c91a9fbb92b762b371e744320e5ffd7e
MD5 a754a8e38dc7d0bb31bc8f4d53382415
SHA1 2b3fd28b8034c64d9dbd5bdfdf33dc6bdb492314
SHA512 a6bc9e2ba7fca3637770302f9e7b43d4ae7f515ba3b782cff88e5b0715ff140613f0ec3180e714932cdde20c980dc9a8208d1cf4490639505770664deaad1543
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-wal
Size 16KB
SHA256 bf08b3aa05c694a685bed8e185f74e50ec87ff46a77fa222a33e1fcec0a95cc2
MD5 4a5bc5ae4708f6eb4722dee6adc46696
SHA1 9ce4f8bb74fa1802d0fbe996922469010c158622
SHA512 cda43db670d7f1d883b123145a4230abee9160bf680c99c309273abaaa8872f433fdd1f0284ff28db87432d35a585c5a235ba2e228f9db5a005425e91bc841cd
SSDEEP 6:K03hLou3h1UPy9FZdrlOERX4PBX4ogLugMBX4suuK+/W3h5R9t8CCMgOw2:K8Lb1UP8zdTRmBEyPbP/aP9+CBgOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-wal
Size 88KB
SHA256 27314d23ad02e2712e72919ac383ff2555da98ce98a58255482d3e542835a1a3
MD5 9897a84a21268c1529f6b5ababe8eaba
SHA1 6272a6de619f084fccf98c297a077130620fa4b7
SHA512 b69d1dbb4f2f3acf0bf0c91ecaa9cbbcc7eeda7dcaadc00ec782639f718c052d26609ba5d9f517d108e76efe04ffd87b3fe7596232d408d3f052b41491a15ee4
SSDEEP 48:HFy/ymmumWAhrBlOymdlWJWKuWwN6xl73JcXSMmchI9a7WKZ+Pjw2cwgO69g82lP:HgRMpf83wS0+aD8Nn6266mPOZfC
MD5 SHA1 SHA512 SSDEEP

Submit Download

KZ6HS.temp

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/KZ6HS.temp
Size 59KB
SHA256 03fa9ddc3efc6caf3ee8eb98b27a9c765ae69766f661997ed3dad982a3e23ba7
MD5 86b36230af4499f3ba524a262f0095a5
SHA1 c87206242ee4cca5cf9ee6a2c70ab15f33c4fac5
SHA512 d4adbbfbc8f9b814d883e7c938b4fecba57115c2192d7943063369db52b80e891522ec24a7230e195eb2586f9a304cbaf13e7d8b3f0fa094c603c3621e06a7f6
SSDEEP 1536:vbhdF515oL8nCrXxL+qOizSe+BgsYHtFNNw22xe4RRRRRuQS:vvz1TnCL18iaKs4HNNsTRRRRRdS
MD5 SHA1 SHA512 SSDEEP

Submit Download

app1.oxygen-cdn.net.temp

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/app1.oxygen-cdn.net.temp
Size 428B
SHA256 070fc3fbe82b6029da23cca7e2f0e32db8d5e0e7e60c0e5139a0b38709e97176
MD5 9c528028313dfb10454e333f17a333ec
SHA1 dca4fad19051eb2d4a4532381971fb194cfd0f48
SHA512 abaf11a018f252bf998fb6a4d85e8ad89450f58cba6e9ea3abcb2aee9d9a8a844f13791f6361922f6a67e62726dbff3e06c944c94a7a2a9aaab07a31e4100f2a
MD5 SHA1 SHA512

Submit Download

app1.oxygen-cdn.net.temp

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/app1.oxygen-cdn.net.temp
Size 428B
SHA256 2a3064bf387e7e993b1d692bc58a460a11032273e817de9892fa10e1f75ddf13
MD5 5e22631aaddff7f4ba5fefc9a081b7dc
SHA1 58be88f9f0d4507a0957f8b574687dcc31901206
SHA512 b076be3aa0d122d2329690e76b3007abefbea3f2260a90c4a288f1927dee34e062bea49f1c69a27b6eea88032b97a9a1f070cf6551cb1050d0861efdc5000167
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 268B
SHA256 fd7e5f5023734b6bc117bbc79687890ff1ea91ea2dd6d33cd88a3b4079e81975
MD5 11dd5e7ae70368c36a7a166ad82b9099
SHA1 fe72ddb7f151b919901c2cb3e69cc7ab7d563779
SHA512 01f3fd2c4b9e9da2bfafb1b52330b01bcfb4cf011fcd219f34e7948f116da5f2277ba5736271ea65453191901ff0a8ad4a64fcca441cd0d7e5acc9f4aba4004d
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 268B
SHA256 8eeb3dd1a0669420a2b9ba9041ea7a59eab7e5699b1b25b67d71f99c68570dff
MD5 3d1584f20d185314ea47fe3139d02d07
SHA1 eced276ed94764efd989834f23fb53562c96b6ac
SHA512 0bbcdcd0e349e80b8b4579c834e402b1f1c29e1fa427126b96227216ae546111fd45abaa5847f8b298fdffc0428e1e42093a3b992e5159a00d9b0b35c802ed33
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 135B
SHA256 c19c2777b1f25a31791388058fbe37c75a0aa49ddafacc3196629acb5fb9eba8
MD5 1742ca4288c64a480ea5769802d42715
SHA1 cd593042d26fb05d5ce6e3d882f412922a9862c9
SHA512 1420bea02910b26a9a388de809953d8d48715f6310610c2c2e744733ff8c9a5c9eab26c463677da0f93fc5d9742677d155c3b8fdde2db026c42d2437296226a7
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads