9252e1cb3770d273137e7296385537f39cc12d454855268a4e24c012e6f6f3f7

Analysis

max time kernel
47s
max time network
177s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
26/05/2024, 11:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
oxygenapp-v1.0.35-api1.apk
Size 2.7MB
Sample240526-n26dpaaa7s
SHA256 9252e1cb3770d273137e7296385537f39cc12d454855268a4e24c012e6f6f3f7
MD5 ba5321a8daca25db3dfebe2f4a22bfa4
SHA1 9455d01c733bf519b6e84d0d44d3c2b95f1ec0eb
SHA512 0f2f8a0c68567c03d7a6c71d010038c8293451ad47aafb20484ca5df51145f862dc561e73ca0af4c8f852cce61dfd2d3a1bfdb9de64ba1fd67b5ff9162c7c717
SSDEEP 49152:/E1fnbIRMziyU/Hf35aM5Rbhe8EwRClVFWzZwlg/Fpmh0CB:YIRM7UHcM5jOluwKmh0O
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.doohmedia.oxygenapp.player

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.doohmedia.oxygenapp.player

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.doohmedia.oxygenapp.player

com.doohmedia.oxygenapp.player
1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
PID:4533

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

androidx.work.workdb

Path /data/user/0/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/user/0/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-journal
Size 512B
SHA256 47836c40e71ad22fce99370982700421e7d43ec2cbfcc76392f6e26c36d7b685
MD5 f0f328a6fed59f596276c37475e69590
SHA1 15320cae2cb53c71c86e4cd65860ac4ab93a70f2
SHA512 79862b45969c1fa4561118c128176996db72a9786724156ca3c84e07ea128e3fd3b81797ca84a7a2eb29822b04526c218df29d84101bfc6ee428ae7c80a901da
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/user/0/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/user/0/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-wal
Size 16KB
SHA256 4a1bd377507da382e6336d2c2df6788c99d059ba2e681d858e036838965754d1
MD5 c9e79ecd0fb6b74708c906a2d236b988
SHA1 91748b180ec01971029b1d781d7747ab087f98a7
SHA512 be54457c33bdb91b6c9d9bfc01eb9c0117ea1de7af78be7a74fd5c542c4ac90d9d2c52f7ec79e878d96adb4c6c17fdcd7267e38c80f1fab14ce274033294d1b6
SSDEEP 6:KmNRaeB9FZde/kPlOERX4PBX4ogLugMBX4suuK+/UW3FiOw2:KT+zdeWRmBEyPbP/t3FiOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/user/0/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-wal
Size 88KB
SHA256 09e06fa57bf65cc3e9eebbdf7f17ebb71e4e92c57d5843fd5a8e783c16b5dd26
MD5 2bdcf4826249cba69f10c9eb3f3b4733
SHA1 91d79adc0de129da2baafba37f48928a040ac3ec
SHA512 f831ad4ab485d09822061afcb2948e6b603c81b5cf2f0301f33da1cdf1e3e5e53d6249d4c8fc4ca27a33e9dc82861c1b769eec83df403c200cd3a77a9b480264
SSDEEP 48:686/ymmumWAhrBlOymdlWJWKuWwN6xl73JcXSMmchI9a7WKZ+Pjw2cwgO69g82lV:6dRMpf83wS0+aD8Nn6266mPMaij
MD5 SHA1 SHA512 SSDEEP

Submit Download

QVMHF.temp (deleted)

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/QVMHF.temp (deleted)
Size 59KB
SHA256 37df56f5789392eb75fd2710590e952f857e571b87bb131ed14508accf9be4c0
MD5 b426f81ec87c3679b45580d012190cb5
SHA1 97b1c1a6e3e4ea27d4c41b43d719b33ff361797a
SHA512 061916f6039583b3b8ff6be93e0e4b5c0a3eee7d1f25cd3da221393817ac621a003f337bdc574ab42f36802c6157b70fd20482136e8c1fd1fd24a32df74af0c2
SSDEEP 1536:hh4UCSelZKI4dkxDxoT2Zb3bPSSq5nnnnn3ellZ/:hh4UvtdqtDbg5nnnnnuR
MD5 SHA1 SHA512 SSDEEP

Submit Download

app1.oxygen-cdn.net.temp (deleted)

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/app1.oxygen-cdn.net.temp (deleted)
Size 428B
SHA256 94c95bd45165d1974fa5ee3cdbaf8af01cbfb6a1a17043fef50fa3ffc0b7a6e7
MD5 e618dcb7683d8266cfb4d9622af30b8b
SHA1 66f1adc35684f3d08877364c7a852e24df42ecfc
SHA512 528923a6fd2212d9d4f2410e06afd94f28105b09f1db00950a9e85814bfe114302fcc86853f8030d07b022f96ccdff6d98c5e701e06f1a66b9f8f075e2f5ee92
MD5 SHA1 SHA512

Submit Download

app1.oxygen-cdn.net.temp (deleted)

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/app1.oxygen-cdn.net.temp (deleted)
Size 428B
SHA256 60ce1e0ab03a8b011a4e6471f185bdbae906825833185f9cf37959ca6e6dd37b
MD5 78bb68053bf036283ae21e57145debf5
SHA1 d80643ed4170e3908097a0d1b618e07fbd11eb90
SHA512 4c04109db1dcb77a2bae5451726c84def0e50018923266bd67bad8752700c051b6284ec936c8928ada1143268e18f21f7ce5c1ae1fdfe0536875ae6a9b972139
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 268B
SHA256 20419c8aa700acefc6ca824a4dc66306c1d32e551fa3a8ed7a9a42fbd7979a3b
MD5 9729e193af4917b4d13b63ef3570ade6
SHA1 280091de4842097f53ed593fd41196ac2d00c1b9
SHA512 663609a76fb3c2d9656360811e14989adfa2c92963528d988045340b911318e978d80efbb5d4a569536b020031a547d9a4f8001f1e8fe0bc897b35dd4f55e424
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 268B
SHA256 3c1f0a0a80d7b66c6978abc3ea5366b8b56f4da5a9bc8cc7e6b7b1c43deb0486
MD5 5b26f47bba8f8ac6d5fdf73e406f5635
SHA1 b84f196b4579f749880ceaa9f47e925840e4d466
SHA512 38c427052ef9c78d64c4435fec0e3fb3722e713bb329ed1497d2de25d1f4a9a4bfbba31ff38338339e13b9b8994454a9f473dc17905b3ad4180bf81f2ba393be
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 135B
SHA256 321ce30ce9350fc66347313d81b9a8430b8371c91a76cf90a7727481c5cc1322
MD5 e8a11bc18fc5518cff8fb7427a6dda26
SHA1 2437f75608b28281ad0456631aa80931a8a975dc
SHA512 1408738f3cfac027d63e46469d377c279d11dc04f8594155198dfd7f8648de6ba80e61280bca946b6c26f04a5b22eeec728e1c6d9faf4083e09c489883fc64ae
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads