9252e1cb3770d273137e7296385537f39cc12d454855268a4e24c012e6f6f3f7

Analysis

max time kernel
47s
max time network
177s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
26/05/2024, 11:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

oxygenapp-v1.0.35-api1.apk
Size

2.7MB
MD5

ba5321a8daca25db3dfebe2f4a22bfa4
SHA1

9455d01c733bf519b6e84d0d44d3c2b95f1ec0eb
SHA256

9252e1cb3770d273137e7296385537f39cc12d454855268a4e24c012e6f6f3f7
SHA512

0f2f8a0c68567c03d7a6c71d010038c8293451ad47aafb20484ca5df51145f862dc561e73ca0af4c8f852cce61dfd2d3a1bfdb9de64ba1fd67b5ff9162c7c717
SSDEEP

49152:/E1fnbIRMziyU/Hf35aM5Rbhe8EwRClVFWzZwlg/Fpmh0CB:YIRM7UHcM5jOluwKmh0O

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.doohmedia.oxygenapp.player

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.doohmedia.oxygenapp.player

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.doohmedia.oxygenapp.player

com.doohmedia.oxygenapp.player
1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
PID:4533

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb

Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/user/0/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-journal

Filesize
512B

MD5
f0f328a6fed59f596276c37475e69590

SHA1
15320cae2cb53c71c86e4cd65860ac4ab93a70f2

SHA256
47836c40e71ad22fce99370982700421e7d43ec2cbfcc76392f6e26c36d7b685

SHA512
79862b45969c1fa4561118c128176996db72a9786724156ca3c84e07ea128e3fd3b81797ca84a7a2eb29822b04526c218df29d84101bfc6ee428ae7c80a901da

Download Submit
/data/user/0/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/user/0/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-wal

Filesize
16KB

MD5
c9e79ecd0fb6b74708c906a2d236b988

SHA1
91748b180ec01971029b1d781d7747ab087f98a7

SHA256
4a1bd377507da382e6336d2c2df6788c99d059ba2e681d858e036838965754d1

SHA512
be54457c33bdb91b6c9d9bfc01eb9c0117ea1de7af78be7a74fd5c542c4ac90d9d2c52f7ec79e878d96adb4c6c17fdcd7267e38c80f1fab14ce274033294d1b6

Download Submit
/data/user/0/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-wal

Filesize
88KB

MD5
2bdcf4826249cba69f10c9eb3f3b4733

SHA1
91d79adc0de129da2baafba37f48928a040ac3ec

SHA256
09e06fa57bf65cc3e9eebbdf7f17ebb71e4e92c57d5843fd5a8e783c16b5dd26

SHA512
f831ad4ab485d09822061afcb2948e6b603c81b5cf2f0301f33da1cdf1e3e5e53d6249d4c8fc4ca27a33e9dc82861c1b769eec83df403c200cd3a77a9b480264

Download Submit
/storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/QVMHF.temp (deleted)

Filesize
59KB

MD5
b426f81ec87c3679b45580d012190cb5

SHA1
97b1c1a6e3e4ea27d4c41b43d719b33ff361797a

SHA256
37df56f5789392eb75fd2710590e952f857e571b87bb131ed14508accf9be4c0

SHA512
061916f6039583b3b8ff6be93e0e4b5c0a3eee7d1f25cd3da221393817ac621a003f337bdc574ab42f36802c6157b70fd20482136e8c1fd1fd24a32df74af0c2

Download Submit
/storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/app1.oxygen-cdn.net.temp (deleted)

Filesize
428B

MD5
e618dcb7683d8266cfb4d9622af30b8b

SHA1
66f1adc35684f3d08877364c7a852e24df42ecfc

SHA256
94c95bd45165d1974fa5ee3cdbaf8af01cbfb6a1a17043fef50fa3ffc0b7a6e7

SHA512
528923a6fd2212d9d4f2410e06afd94f28105b09f1db00950a9e85814bfe114302fcc86853f8030d07b022f96ccdff6d98c5e701e06f1a66b9f8f075e2f5ee92

Download Submit
/storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/app1.oxygen-cdn.net.temp (deleted)

Filesize
428B

MD5
78bb68053bf036283ae21e57145debf5

SHA1
d80643ed4170e3908097a0d1b618e07fbd11eb90

SHA256
60ce1e0ab03a8b011a4e6471f185bdbae906825833185f9cf37959ca6e6dd37b

SHA512
4c04109db1dcb77a2bae5451726c84def0e50018923266bd67bad8752700c051b6284ec936c8928ada1143268e18f21f7ce5c1ae1fdfe0536875ae6a9b972139

Download Submit
/storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt

Filesize
268B

MD5
9729e193af4917b4d13b63ef3570ade6

SHA1
280091de4842097f53ed593fd41196ac2d00c1b9

SHA256
20419c8aa700acefc6ca824a4dc66306c1d32e551fa3a8ed7a9a42fbd7979a3b

SHA512
663609a76fb3c2d9656360811e14989adfa2c92963528d988045340b911318e978d80efbb5d4a569536b020031a547d9a4f8001f1e8fe0bc897b35dd4f55e424

Download Submit
/storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt

Filesize
268B

MD5
5b26f47bba8f8ac6d5fdf73e406f5635

SHA1
b84f196b4579f749880ceaa9f47e925840e4d466

SHA256
3c1f0a0a80d7b66c6978abc3ea5366b8b56f4da5a9bc8cc7e6b7b1c43deb0486

SHA512
38c427052ef9c78d64c4435fec0e3fb3722e713bb329ed1497d2de25d1f4a9a4bfbba31ff38338339e13b9b8994454a9f473dc17905b3ad4180bf81f2ba393be

Download Submit
/storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt

Filesize
135B

MD5
e8a11bc18fc5518cff8fb7427a6dda26

SHA1
2437f75608b28281ad0456631aa80931a8a975dc

SHA256
321ce30ce9350fc66347313d81b9a8430b8371c91a76cf90a7727481c5cc1322

SHA512
1408738f3cfac027d63e46469d377c279d11dc04f8594155198dfd7f8648de6ba80e61280bca946b6c26f04a5b22eeec728e1c6d9faf4083e09c489883fc64ae

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads