05b57755266dc6a72d75a9fef8cc284d5a9d050d27787ae27be6469de53cfa67

Analysis

max time kernel
177s
max time network
166s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
26/05/2024, 11:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
oxygenapp-v1.0.33-api0.apk
Size 3.1MB
Sample240526-nvpscshb41
SHA256 05b57755266dc6a72d75a9fef8cc284d5a9d050d27787ae27be6469de53cfa67
MD5 474d56db3b32989b76a7a5f777856309
SHA1 2d43a32e66ad885cba41fc9b3c09c1b823dcd2eb
SHA512 c03cfa5346ecb12839efb4070de81333d4fc9dd9ba9fade57e2d33574f0bce339e0cef1841d256e17b6c47403dc30aedb4d3335e7e907008017986392b50665a
SSDEEP 98304:Du9gPOz5RvLhM97+IIIIIfW1EotwKimGsH:DuoYtO7+IIIIIYEjKx
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.doohmedia.oxygenapp.player

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.doohmedia.oxygenapp.player

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.doohmedia.oxygenapp.player

com.doohmedia.oxygenapp.player
1⤵
- Checks CPU information
- Checks memory information
- Obtains sensitive information copied to the device clipboard
PID:4578

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

androidx.work.workdb

Path /data/user/0/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/user/0/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-journal
Size 512B
SHA256 56f09b857d5d3f8101753de9c755d83ed4d05d4d8d22cdc81f4605bf453e12ed
MD5 49fcd94365dea73722ca29761c519c6e
SHA1 428c44768ead81ef8002777d912b1a79ed0eb033
SHA512 904ffca5d849f0d438ad34352ebdac82a60d61035acf76c9ccd832c9ed72e9683106f0a735cb1b666b57baecc33f09af90ea5311746e9be71daf847feee3e846
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/user/0/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/user/0/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-wal
Size 16KB
SHA256 3c928eb93f11694a970a85d74c730a86a7eb6ff613bcac0a77d1a1b17dc1da15
MD5 20bd91ed8dc7abc12a21368998fc094e
SHA1 c18e52bd3b5fc37a4db86a45bdd71fe25ca43eab
SHA512 5709446b415e34d8e0e72a3110154dac368a75bf5af13677df229fd3a5b60add99bc225aa2e5c95cca5a70153f9f1aafe0cf9fec16ebae51683b24787895dcb3
SSDEEP 6:KKiuFGiXg9FZde/kPlOERX4PBX4ogLugMBX4suuK+/4i6U/kHK3/Yn3WOw2:KtuFhazdeWRmBEyPbP/n6U/OKPKGOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/user/0/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-wal
Size 88KB
SHA256 de440b4343c405fa18dfd65a0a9e697004a8544c371760f562eee18a4227ce09
MD5 f176bfcfa29c712698cec01a7f585069
SHA1 39b22ae8429b8374800ab6159499668dba21be80
SHA512 19ce6f7877348ef3ba13bc8304c917b34cc7700d9fff301cf5675250ce1486dfe543a68c499f081a9d2e73b4140e4b07bba4943faebcd15c269e4f021ce7bae3
SSDEEP 48:ux6/ymmumWAhrBlOymdlWJWKuWwN6xl73JcXSMmchI9a7WKZ+Pjw2cwgO69g82lz:JRMpf83wS0+aD8Nn6266mP0A54U
MD5 SHA1 SHA512 SSDEEP

Submit Download

QVMHF.temp (deleted)

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/QVMHF.temp (deleted)
Size 63KB
SHA256 b587bde1a72676ce6b453bcc9a0c2f155931dace9e2a797e711a8d2d9d61d34e
MD5 82ba2d0cc58bc68e14abbe4f02d79df1
SHA1 ad5e7c98ebc94a9d762fc0e30a794523875cf68d
SHA512 1a7cabd6647ac3f6f750527bcf0a18141dcdf696fab93611856cadec05402fd593e584e923858ca1b29dd9d8e77dc8d68dc9f31fe108e7f1f4943de6431b6166
SSDEEP 768:KtCg8EAhD9esW8JY61h/+n9oRst5BLZxJ22pbxXkKslY5xr292926fSxXxaxp:KN8E2D9jWQY6m9vx2ckE5xr292926aO
MD5 SHA1 SHA512 SSDEEP

Submit Download

app.oxygen-cdn.net.temp (deleted)

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/app.oxygen-cdn.net.temp (deleted)
Size 427B
SHA256 2296b61e66c7acf14613050d49fdcf7448304b5e31c53f2c6c01e510f7179e52
MD5 40a3f1eea4dcf89d38108c718dfdfb87
SHA1 c43d674d3689f07c81b1a8b5869cd8a0947e4a2a
SHA512 4362f8fdd8f3e5248fb6ab36de3017faae68d9718e009b446f2f6bf9882f985d576825233453e42545cf38a0054719a1e289afc9d7209d7aeac2f07d8b9c66c1
MD5 SHA1 SHA512

Submit Download

app.oxygen-cdn.net.temp (deleted)

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/app.oxygen-cdn.net.temp (deleted)
Size 427B
SHA256 332442d19e421876f25c20847c837503bbbb1b585df95f9db3f589be55def100
MD5 7c49922f78875c06e909553573617629
SHA1 092a46cf7c8f744d6180409e4c340bb65cbdb62d
SHA512 29ac96a0007a3f57f144230ed69dccaeeba54058371087f515856c9aa2c7bac5febb809d6aa8a81bc876f1499c40966527ef40df76920c3bfea132ad737e852c
MD5 SHA1 SHA512

Submit Download

app.oxygen-cdn.net.temp (deleted)

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/app.oxygen-cdn.net.temp (deleted)
Size 427B
SHA256 7e9dea3854e75591a9a81c4df2a87f2d95a06738ca90b11ef1f942ad1bbc10fc
MD5 615652af55708439c14248ddf0177306
SHA1 f8556ab5547be3512242820829420d6a5addd5ae
SHA512 ed2b8817c41c9945c5ba4dff7ac989ff55d09b68e1ad3935eb089d73c5d9834fe51ff8c82781d2a59d2520a0a8726efa8d68a921252f8d8cc1d67721835f0428
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 133B
SHA256 7c2f3b4855ebb3ae6e8c9f03054ebc22822d5f136f16d648f96d1c89ba3c1fa6
MD5 7308c47f4a200a9700c9da1bd412c469
SHA1 29644eda0f5d6842a260f18d12f6e0afa2dbf7cb
SHA512 7f4430747396de28c907947788286d378e95207cb101e025a429b41620e808c2c28e3b00f0fec5d2c13085b3348c289de905c38128aedbc7e80cea858d7ed1be
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 265B
SHA256 d32a2a5be808f5c26dffebb06962e2f7b199dc8f3b3292bf1ca622ff8f5cd854
MD5 a1e91cb8f0a2abce47f34117655463b9
SHA1 85d5f40f592d25b5832dad5e87dfd4961feea033
SHA512 82625e9c3ad2ac27a3fb4e4941a3a2b9e5076c637e33b7395b1d5f827ab26f70bf31f6900da983de06134b041306c90a128e548c334f23cf34a446ca116f3b20
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 265B
SHA256 90356e9324d2540076fcc3ab0c4b03652757bc43c052e261643b39a06ee61ba3
MD5 6c4e1369a884bb0cb679ae9e3f0a12c9
SHA1 31007698cf54308cfad8378e3c58675c743dd6bc
SHA512 696c9dc327700140c72aa3403776c7acca21d0c7fc09d8036471df0cd30648d5a279a3d9e9ddb2df79e77bf738f222d42409dc01f8097cdaaf1a126ca3fa45a1
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 265B
SHA256 8661ed605869defedd7aff2b9f27f5f7447a951bb4460fb0abbdf34f1d2b55b2
MD5 86854b138fd78a8833afbec4e5e6c91b
SHA1 faef778e17693b65a3db785081d3d586d44497db
SHA512 96d96d4ea3d86ac1d1694f4f08e3fec4bccd3b7fd882587623617a8b71e03ac2b4c4183840edc2855f28406ddd1fa203ba909e83fd52c0fb0a3c745e10ba91b0
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 265B
SHA256 746029618616aa8018a0f11d6a8e2860e605e812f9de4ce3b90214534be375f0
MD5 e20d7f8a13a17e56da59faf7a002c0ff
SHA1 2fc135ebadb7975d280f2d3b55a0eeb1b50c2699
SHA512 76f9110fb420f8abf089e2b49a69c8d7dedcf8a68f9637804347f8a56ff43e38f3c62471792120eb78832687ebba08d1702dacf62bda5724f8fefc1ca8c1d05f
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 133B
SHA256 2201d19b0e350945813b7253679e1d57edd7a51c05515106c74b3f538462f1ad
MD5 71097dcaea0256907a9f5e78a29186fa
SHA1 4065a399f77e341f40e02da53607d67b1ff9b8bc
SHA512 ef353fdb230f712ae33a3c35ecb12b5376d0dc766adab51921a43c224c1973c568681f66ec68cf966cc59106e53768bcd9592c5b4942e338f7f1f23aac2d3ebf
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads