5e8d369b500543e9bf686bcf41f65f2bc491fa46bc0eaf0da805361eba8e9c03

Analysis

max time kernel
47s
max time network
150s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
26/05/2024, 12:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
oxygenapp-v1.0.41-api1.apk
Size 3.6MB
Sample240526-plhs5acc5x
SHA256 5e8d369b500543e9bf686bcf41f65f2bc491fa46bc0eaf0da805361eba8e9c03
MD5 b58fe4730621d9ff6d4fa100f035486c
SHA1 c9ab72562d0737536a64b02d9619c25ea5c8c164
SHA512 a71b052d35dbf8c0723a97a319ef95680817f2a48e50f9af01a793f5565b72fed14b705fa3746ae613ddf6387ee120f99bad6a3f1a26861082e3852370804ddc
SSDEEP 98304:1PUo+uA41ZTt0hiGcr0wyvEm5rwd2ZrFjX:1PDtA6zJyPphX
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion persistence

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.doohmedia.oxygenapp.player

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.doohmedia.oxygenapp.player

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.doohmedia.oxygenapp.player

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.doohmedia.oxygenapp.player

com.doohmedia.oxygenapp.player
1⤵
- Checks CPU information
- Checks memory information
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4293
- /system/bin/getprop ro.vendor.product.model
  2⤵
  PID:4377
- /system/bin/getprop ro.ebot.display.model
  2⤵
  PID:4395
- /system/bin/getprop ro.vendor.product.model
  2⤵
  PID:4415
- /system/bin/getprop ro.ebot.display.model
  2⤵
  PID:4433
- /system/bin/getprop ro.vendor.product.model
  2⤵
  PID:4554
- /system/bin/getprop ro.ebot.display.model
  2⤵
  PID:4579
- /system/bin/getprop ro.vendor.product.model
  2⤵
  PID:4599
- /system/bin/getprop ro.ebot.display.model
  2⤵
  PID:4625
- /system/bin/getprop ro.vendor.product.model
  2⤵
  PID:4644
- /system/bin/getprop ro.ebot.display.model
  2⤵
  PID:4665

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

androidx.work.workdb

Path /data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-journal
Size 512B
SHA256 a4eb112cd60ad0c1155688072308f9bac39280e09bca070844f7b394974d6823
MD5 fb53606a781e1131b7334e74b786eccc
SHA1 5f53b2135ca30f21ff8a6e96703617798880d08a
SHA512 e2b09e54f223fe88968269257ad4aa95a7cf01156cf35aeb56d0c7493cd893cccdca4308632dfe51d68403e3292a57edb1f45ab3d6d3e2099ee2f85212573c06
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-wal
Size 16KB
SHA256 179c71608b2839dd98b7f4f13a4f02fa6c587398b557f7a305625a419d4cc4b9
MD5 031b2527f3ad9ce70a064b09d4e3b9f4
SHA1 8fcc91760fd4b2fe937767328aed7cef4326deb9
SHA512 b00cce23c47a1d0fb78b8a20831357ffe11dc9fa05f034ad8452e9905b15e7f710de5b1afce18436085abfdf6b210669190083205c666aabacc13ff631ac5359
SSDEEP 12:KgXjojalzdTRmBEyPbP/MjH93jtvs9MViOw2:Kg9zyGSP/kh5Il2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-wal
Size 88KB
SHA256 641b6033e7b74b76855e22b9c62d9f504f6ac7ab8d7afbf77655d80968058d08
MD5 33048c78ca7b9fbd0689659ba7f291bb
SHA1 12fc869fedc413a3e81f0be93a21720f72552d8e
SHA512 11a2f2caa856188be764e09ea43bc85b904df95406aad395020ecb9b6854a6eaec2f8fa6ce57f6735b0644424edfb7a2047cd85d13d6a35a21bccf9a074e347a
SSDEEP 48:Gy/ymmumWAhrBlOymdlWJWKuWwN6xl73JcXSMmchI9a7WKZ+Pjw2cwgO69g82luD:HRMpf83wS0+aD8Nn6266mPcMlQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

PW3MG.temp

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/PW3MG.temp
Size 60KB
SHA256 430a2746bdbd231c21ad13c83aad859ca314e2498d1bd58e0712e2bb612d61a2
MD5 bfb71eba4e0c610318b2c72acaa66446
SHA1 0466d1b60653221c12d7938f02d4c108a07882ad
SHA512 82e2c4466b1bb406a99b10968178054200f7661b1e5845034bbf91319832c75378a82fe2a1acc713b2e0e6e6505585336638c766d9b9e337fbfe8fd6213717d2
SSDEEP 1536:rWsSTI6ao43DuW5w8tkeYJn7Xfde4e2EIIIIIIIIIIIIIIIIIIIIIIIij5l8RRRs:rWsmaR3DnwiUJn73e2Gl8RRRRRYD
MD5 SHA1 SHA512 SSDEEP

Submit Download

app1.oxygen-cdn.net.temp

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/app1.oxygen-cdn.net.temp
Size 428B
SHA256 d076d6764d4f6eb03810a9aebf3739559dc0ad6fd88394b27165583522cc4a7e
MD5 ed022c27db74c530f39602558c1733bb
SHA1 36e121316a9a8dc12a097e13162ef309e4999305
SHA512 98bf016030f42e5cc8404a95c07c0dbf8ef4b4fee0f78cc84ac4824248b739863129c155f34e45a0a51af1043cfff971bc4ef116cf0b0917750d695f65fc8dbb
MD5 SHA1 SHA512

Submit Download

app1.oxygen-cdn.net.temp

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/app1.oxygen-cdn.net.temp
Size 428B
SHA256 af958a3ad8d5623ae94dff438cb3c54c45ec83f0d74fb385404031d3f516f371
MD5 18b90896e600c135a2db37d49f013407
SHA1 5f521f78515d4e77c231801aaf896e4ccff2ba07
SHA512 523576dccc0dbcc539ddd895895f7d23df0b07a66e956202821a0733279cdb1f7e5a0c7f7112bbba02629e13d4d8989c6da9b451b8f5dede71a7d9b4a42a2a91
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 312B
SHA256 42509967af4242b8da3bfafa670f16354cdc3ad70b86afbfc8a2a07eec5461c1
MD5 0e2ba1fc1f86dbb93e3b2a20b316a11e
SHA1 e1fd891e680e34acbb19a91079a9305f77318a75
SHA512 6c8f9a02c992cf901d9538118a9819148b8b98b1327530c6046e41a9885a6ff0a8038a2a974c35473dd8834babf12c285f08638ba16a039aa0cfbc56e2d5d299
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 445B
SHA256 12b20b2f197e89625e1c8c1c07d9ea82cff2e4ab81d277fc591a3dd1206ec7b2
MD5 f19802c281f1d2041aab11088a676b95
SHA1 acbd8e6ed534670d73e032e682927c554c9aed75
SHA512 7ecf83d2eb8c0d59d709ac8ef2f9d106d6ad091008e51f5839143cb166afefa3d348a2a6cc93764fb1e32eb565d04d225fee7e58afa796623e47a6f9562d5c9d
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 445B
SHA256 81053bdee6a6a9b528d4c97b210339f072f5e0b745ddbcf4ce805763b56fceb0
MD5 a257abc8041f83e72c84d53f70dad89b
SHA1 01f047edd5047d4f3d14443d25e7fb63d4e69f79
SHA512 7edd47d41a2e38a3d305b93d488e46ddb88ae50c06c9401de8392f42f89f5d114d84e6941dbdf610fc3d3b538fa15ec88e5ead99f1cba7bba59748eea08c170b
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 268B
SHA256 8ac9474b2ef04f5ecb681f47f62eaf42dbb4a0f967713999c77ab3664f33d9b7
MD5 9eec85a15e969a638a28ce2c7dbefc4d
SHA1 8b97937f61662ef3a50e39643b729563c63c6247
SHA512 5912817381aac56f523e28c91cd209a8262037df9d549b088d2dd15c63db924fc746a6c470622d83002d8506ef94b653bbfa9b92699d0eea47bed41725302443
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 135B
SHA256 7aa63c4b99eac7e06fbdc4b13f85500c5ceb9c82e503202df0526b3555b70d61
MD5 6ef7d42c31169a713850428312a60e06
SHA1 47469db6cfee92da21d523a5e8e045a329158242
SHA512 d0fadb23ff802bac594f045dc8d4e29f39cc0da22d8a876d393ebb068f0e07309b4b87e5d44d269d5a5e38eaffede936cd7289c0a94a0e8e3da5596f2c0102fe
MD5 SHA1 SHA512

Submit Download

timeout_content_clock.wgt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/timeout_content_clock.wgt
Size 156KB
SHA256 1ff815397d8b4e2abe32150c0fdb73daeeef3a9145719179e6d07ace2c349dc2
MD5 cf592fd3041cade6241bd369018d422a
SHA1 fb8c04dd400a99ee3ec43f1a2638f6d8a85d8100
SHA512 f63eb8659cf32c64ef72f74042dc4e7bf6703fe8bc296a253d8a52df3feb5971ea7c059d85ce2bab3590ee6ab1463ae511faefcba1e2c2521a4913e517bfc44c
SSDEEP 3072:nSweeRoWp6sSO+Xgxt+AxqhIqW2RXhzET/Up9sP4ucKbUJPCpIjTF1Xk:nSbTWLS7guAxq232RtC/UPsPOKbaPCpr
MD5 SHA1 SHA512 SSDEEP

Submit Download

OpenSans-Regular.ttf

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/timeout_content_clock/OpenSans-Regular.ttf
Size 94KB
SHA256 037236ed4bf58a85f67074c165d308260fd6be01c86d7df4e79ea16eb273f8c5
MD5 3ed9575dcc488c3e3a5bd66620bdf5a4
SHA1 babe8dce93a3e48b6c3c79720a0c048e88dd1fe7
SHA512 7ba57687079a7e1d2ac2a64d210753b6014877eeadb6cc4dd86b836f46f7a3b8d34e4350d264f4d7361b1bd4488a1169f0f3cb49a7dcfec0ade9701f4e468416
SSDEEP 1536:rCL26+E8THZqxKuTJlD7qGrIJD5BmurUsb58igg90YiQvnAZ1Bab4XX:rqz+EWaTXD/rIJPdQMjiQvAZvpX
MD5 SHA1 SHA512 SSDEEP

Submit Download

index.html

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/timeout_content_clock/index.html
Size 2KB
SHA256 ae0244d053b8f761906c54950e7a29e1813766a62b9fe9fa55486a006ddf8bfc
MD5 d7f07255f64103530b3ba9b78bea7e18
SHA1 fb328fc8bb596b9cee944b6b25df9c44737c20fb
SHA512 1c70d02b55db506f7655754dec7065043812bc38110432a18ad366ee1b2e153c2be20b256dedff0f0fd106c3138ad938464401adeab779304cb1ba8c21916c0f
MD5 SHA1 SHA512

Submit Download

jquery-3.4.1.min.js

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/timeout_content_clock/jquery-3.4.1.min.js
Size 86KB
SHA256 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
MD5 220afd743d9e9643852e31a135a9f3ae
SHA1 88523924351bac0b5d560fe0c5781e2556e7693d
SHA512 6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d
SSDEEP 1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe
MD5 SHA1 SHA512 SSDEEP

Submit Download

moment-with-locales.min.js

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/timeout_content_clock/moment-with-locales.min.js
Size 328KB
SHA256 01d40df7c31566ce3812adb24f0b682ae7e19d4fae67bbf69179c3e6fab3655a
MD5 1b1c80b617bfcaf8c0766d41c4a3c680
SHA1 6319f4a7d5f345583a730ab527704ff2491a9043
SHA512 8652e0221e279dc6f6c9ce183ed5a4e703b291c1711747c1779ac77c9eb1b002c8da4858dc7f0b6e2becc09139169cfb870b3b0890aa3b37728d61e2289625f8
SSDEEP 6144:7W3FUoAhVuhioGf6Qt/b03TSZWkcSO2dpMGFVJ9tFFxWD4lei+FAkWT6DBTmpjFB:GAhVuhioGdt/Y3TSZWkcSO2dpMiVJ9tp
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads