5e8d369b500543e9bf686bcf41f65f2bc491fa46bc0eaf0da805361eba8e9c03

Analysis

max time kernel
69s
max time network
152s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
26/05/2024, 12:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
oxygenapp-v1.0.41-api1.apk
Size 3.6MB
Sample240526-plhs5acc5x
SHA256 5e8d369b500543e9bf686bcf41f65f2bc491fa46bc0eaf0da805361eba8e9c03
MD5 b58fe4730621d9ff6d4fa100f035486c
SHA1 c9ab72562d0737536a64b02d9619c25ea5c8c164
SHA512 a71b052d35dbf8c0723a97a319ef95680817f2a48e50f9af01a793f5565b72fed14b705fa3746ae613ddf6387ee120f99bad6a3f1a26861082e3852370804ddc
SSDEEP 98304:1PUo+uA41ZTt0hiGcr0wyvEm5rwd2ZrFjX:1PDtA6zJyPphX
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.doohmedia.oxygenapp.player

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.doohmedia.oxygenapp.player

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4599	com.doohmedia.oxygenapp.player
/system_ext/framework/androidx.window.sidecar.jar	4599	com.doohmedia.oxygenapp.player

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.doohmedia.oxygenapp.player

com.doohmedia.oxygenapp.player
1⤵
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
PID:4599

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

androidx.work.workdb

Path /data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-journal
Size 512B
SHA256 e315e58c8023cd3269d53ebfcf9c62f10dd546d344db8cc4c1e7b526eabef78b
MD5 2ce1ff06b06d1f18653c9a2d21794418
SHA1 e6d8a897d65a2445fde66213c3427eb554bd3b2b
SHA512 096d3aaf830a8e89be8183ff1d2bb35cca15473eb61e2015daccb15c8c6f77b1a0a81da15d9e574e132adfe037cc05badaa0bd8dbdfcce460ded02d5fc7e17cb
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-wal
Size 16KB
SHA256 6017841a3ae2f7146174c8ca4dd96e52ad19e4a12cf98793c16bebdba285774a
MD5 e4a7a7aaa29c6f6d4c2c38a950c5976e
SHA1 7bf58c499145736269d6e117f7c452f548d56f99
SHA512 2480b773aa74a8b4d6472bf9c36f385b165bb96472401a6148519031bc24aaf9c7b98537f52f357ccc1702f80dd708376474cd5bf1f9f2a03ff3718e146da907
SSDEEP 6:Kq9PZIzt7Pdcv9FZde/kPlOERX4PBX4ogLugMBX4suuK+/gPgZnIeJROw2:KGPSxzilzdeWRmBEyPbP/gP7eJROw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.doohmedia.oxygenapp.player/databases/androidx.work.workdb-wal
Size 88KB
SHA256 5f583380548f34e04fdc3b1c00773e953248b33d4abbf6c57dfa22116f3bea3b
MD5 8a7e1efc118ace55113235d4b85771dd
SHA1 5f451dd7063d85b6bf64aeb973f11d4a17fccb83
SHA512 c66b904a6bd0e2c3fc32f4770ed2c863139c0f73a5fc877a7b6f6476a5ae287349ab06ed1fe5ae2a36734c3512e11361a51364424099c5c3ed80380bf78e3b23
SSDEEP 48:+6/ymmumWAhrBlOymdlWJWKuWwN6xl73JcXSMmchI9a7WKZ+Pjw2cwgO69g82luR:nRMpf83wS0+aD8Nn6266mPTopBl
MD5 SHA1 SHA512 SSDEEP

Submit Download

QVMHF.temp (deleted)

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/QVMHF.temp (deleted)
Size 59KB
SHA256 37df56f5789392eb75fd2710590e952f857e571b87bb131ed14508accf9be4c0
MD5 b426f81ec87c3679b45580d012190cb5
SHA1 97b1c1a6e3e4ea27d4c41b43d719b33ff361797a
SHA512 061916f6039583b3b8ff6be93e0e4b5c0a3eee7d1f25cd3da221393817ac621a003f337bdc574ab42f36802c6157b70fd20482136e8c1fd1fd24a32df74af0c2
SSDEEP 1536:hh4UCSelZKI4dkxDxoT2Zb3bPSSq5nnnnn3ellZ/:hh4UvtdqtDbg5nnnnnuR
MD5 SHA1 SHA512 SSDEEP

Submit Download

app1.oxygen-cdn.net.temp (deleted)

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/app1.oxygen-cdn.net.temp (deleted)
Size 428B
SHA256 ea89e4fea641a2e9ba6ed99131dc1c636cd1e9ff03172083fdaab28487f039d4
MD5 b0d6ea6d4190e1f6b4c2733b3630d081
SHA1 4dd4f9a9e1ca5c9074cead69e65fae7b571742e2
SHA512 d829fe8e5af51de9d2aedd2edf05dcb2294487c0ac79fd43520befe70612f9faadbb0dc9cb3f66977a5f7dccf067a56142682858d49ccc7154b24ad8af12583e
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 312B
SHA256 b11e2d0b42cea1d04aaadbca6c9ea585c40a154fd341a387ef69ae7d43c46976
MD5 2c2582485d8f688a222aba5aca1bc453
SHA1 88d3670dcad4aa5880808ff59b795edb2c413b11
SHA512 3d26e38e13ab1ccccb6d338a24326824f4bf2052a992083e21cc302d6d8ab24d995bbcc5adba8b27e4131d88e3efbd32173a71818048fef79d8f68bf14c2990e
MD5 SHA1 SHA512

Submit Download

cache.txt

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/cache.txt
Size 135B
SHA256 84c068f3f866bc78e08d2b0ca99b4b8e2b80cbaf8a50d47e1dfac635ea8ab500
MD5 570c3ada8fce73ea3a9735272867aeaa
SHA1 b5788e34f5269920ed3538c145fb007381c54c28
SHA512 4e5c00bba32b8aaa41a8b6ff2a5be262085fbefe7ed025bc38b3afb9d775a0d5b9113a6885c5d1b2773d042ceac1c095a6652d3160a6a410d8c61542dcde46c9
MD5 SHA1 SHA512

Submit Download

timeout_content_clock.wgt (deleted)

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/timeout_content_clock.wgt (deleted)
Size 156KB
SHA256 1ff815397d8b4e2abe32150c0fdb73daeeef3a9145719179e6d07ace2c349dc2
MD5 cf592fd3041cade6241bd369018d422a
SHA1 fb8c04dd400a99ee3ec43f1a2638f6d8a85d8100
SHA512 f63eb8659cf32c64ef72f74042dc4e7bf6703fe8bc296a253d8a52df3feb5971ea7c059d85ce2bab3590ee6ab1463ae511faefcba1e2c2521a4913e517bfc44c
SSDEEP 3072:nSweeRoWp6sSO+Xgxt+AxqhIqW2RXhzET/Up9sP4ucKbUJPCpIjTF1Xk:nSbTWLS7guAxq232RtC/UPsPOKbaPCpr
MD5 SHA1 SHA512 SSDEEP

Submit Download

OpenSans-Regular.ttf (deleted)

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/timeout_content_clock/OpenSans-Regular.ttf (deleted)
Size 94KB
SHA256 037236ed4bf58a85f67074c165d308260fd6be01c86d7df4e79ea16eb273f8c5
MD5 3ed9575dcc488c3e3a5bd66620bdf5a4
SHA1 babe8dce93a3e48b6c3c79720a0c048e88dd1fe7
SHA512 7ba57687079a7e1d2ac2a64d210753b6014877eeadb6cc4dd86b836f46f7a3b8d34e4350d264f4d7361b1bd4488a1169f0f3cb49a7dcfec0ade9701f4e468416
SSDEEP 1536:rCL26+E8THZqxKuTJlD7qGrIJD5BmurUsb58igg90YiQvnAZ1Bab4XX:rqz+EWaTXD/rIJPdQMjiQvAZvpX
MD5 SHA1 SHA512 SSDEEP

Submit Download

index.html (deleted)

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/timeout_content_clock/index.html (deleted)
Size 2KB
SHA256 ae0244d053b8f761906c54950e7a29e1813766a62b9fe9fa55486a006ddf8bfc
MD5 d7f07255f64103530b3ba9b78bea7e18
SHA1 fb328fc8bb596b9cee944b6b25df9c44737c20fb
SHA512 1c70d02b55db506f7655754dec7065043812bc38110432a18ad366ee1b2e153c2be20b256dedff0f0fd106c3138ad938464401adeab779304cb1ba8c21916c0f
MD5 SHA1 SHA512

Submit Download

jquery-3.4.1.min.js (deleted)

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/timeout_content_clock/jquery-3.4.1.min.js (deleted)
Size 86KB
SHA256 0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a
MD5 220afd743d9e9643852e31a135a9f3ae
SHA1 88523924351bac0b5d560fe0c5781e2556e7693d
SHA512 6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d
SSDEEP 1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe
MD5 SHA1 SHA512 SSDEEP

Submit Download

moment-with-locales.min.js (deleted)

Path /storage/emulated/0/Android/data/com.doohmedia.oxygenapp.player/files/timeout_content_clock/moment-with-locales.min.js (deleted)
Size 328KB
SHA256 01d40df7c31566ce3812adb24f0b682ae7e19d4fae67bbf69179c3e6fab3655a
MD5 1b1c80b617bfcaf8c0766d41c4a3c680
SHA1 6319f4a7d5f345583a730ab527704ff2491a9043
SHA512 8652e0221e279dc6f6c9ce183ed5a4e703b291c1711747c1779ac77c9eb1b002c8da4858dc7f0b6e2becc09139169cfb870b3b0890aa3b37728d61e2289625f8
SSDEEP 6144:7W3FUoAhVuhioGf6Qt/b03TSZWkcSO2dpMGFVJ9tFFxWD4lei+FAkWT6DBTmpjFB:GAhVuhioGdt/Y3TSZWkcSO2dpMiVJ9tp
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.window.sidecar.jar

Path /system_ext/framework/androidx.window.sidecar.jar
Size 12KB
SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
MD5 bdf3529e80318eb14e53a5bf3720c10d
SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
MD5 SHA1 SHA512 SSDEEP

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads