c753b7b932a3b6097efe2cc55af03d1d63b3c3cf1edee6acf41ff77050d8cc8e

Analysis

max time kernel
311s
max time network
336s
platform
android_x64
resource
android-x64-arm64-20240603-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240603-enlocale:en-usos:android-11-x64system
submitted
04/06/2024, 09:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
small_credit_2024_1017.apk
Size 35.2MB
Sample240604-k6fr2scc72
SHA256 c753b7b932a3b6097efe2cc55af03d1d63b3c3cf1edee6acf41ff77050d8cc8e
MD5 4be09eb69c27ed670aff1f9d96b58f04
SHA1 3c30ad247f1754cb62aecf87098a22de8000dc4a
SHA512 aa041b5e11a3f5e86b2c3c727fd39f6f31acdcb5546d03e168e5364e5254787ffd8bb439aca0acfd648bb7cfd966f8cf4651ebf9d61474d187971293206aa654
SSDEEP 786432:uUTdXb9oqZzVO+8wBwQexjDQ1Vx9+hoUN+6umyoeTFQMgNp:uQdXxokBO+N3exySoUNBrAFQMgNp
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.small.loan.buddy.credit.one.advance

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.small.loan.buddy.credit.one.advance

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4718	com.small.loan.buddy.credit.one.advance
/system_ext/framework/androidx.window.sidecar.jar	4718	com.small.loan.buddy.credit.one.advance

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.small.loan.buddy.credit.one.advance

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.small.loan.buddy.credit.one.advance

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.small.loan.buddy.credit.one.advance

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.small.loan.buddy.credit.one.advance
1⤵
- Checks CPU information
- Checks memory information
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Checks if the internet connection is available
PID:4718

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

0cf2b1272232c650b11228eb076732acf0bbe031.temp

Path /data/user/0/com.small.loan.buddy.credit.one.advance/code_cache/flutter_engine/ec975089acb540fc60752606a3d3ba809dd1528b/skia/7e1844439eaa3eb24d00c6314ddc81ca532fdd1b/0cf2b1272232c650b11228eb076732acf0bbe031.temp
Size 1KB
SHA256 7fda03289a6cae15ec1d6e67472559d3dec09da69226e03bdfcdac50d5f943da
MD5 8c6cda79f5a238f9ef3603776a33fe34
SHA1 733bb9d6f7a3a4313937aa0100e5578920e4337a
SHA512 7b6ce2f9c891de84be3cf38528ce99c86afd83b38c5900fad47b94c883cd59373d708083ff5e33f1a68308f8c1e0a4cbfdc3dd3bf8b1e43f559c61fdfe74dbc3
MD5 SHA1 SHA512

Submit Download

16db3dbc6e0931d5b29149581808cb6401ad41a9.temp

Path /data/user/0/com.small.loan.buddy.credit.one.advance/code_cache/flutter_engine/ec975089acb540fc60752606a3d3ba809dd1528b/skia/7e1844439eaa3eb24d00c6314ddc81ca532fdd1b/16db3dbc6e0931d5b29149581808cb6401ad41a9.temp
Size 1KB
SHA256 c45f6f3207784ced1f3e448b16f8984d9c0f4737b4c0047bedaa0f67221cb93a
MD5 704f742c3e6db5127ec323b68e95ea55
SHA1 1e042de526ee5fa18efb6d79924931da2b76f9a4
SHA512 c5d6655338a1b01db9193f6f285d314759ad88a1e8de21a2d15da11e1bfb06101327bdf730bbc3592b5a3eaf6a5265d230578d25de31f28ee0b38ca778a3b79e
MD5 SHA1 SHA512

Submit Download

51d65d2f874efbbc351aa59f58598910a2d02aa9.temp

Path /data/user/0/com.small.loan.buddy.credit.one.advance/code_cache/flutter_engine/ec975089acb540fc60752606a3d3ba809dd1528b/skia/7e1844439eaa3eb24d00c6314ddc81ca532fdd1b/51d65d2f874efbbc351aa59f58598910a2d02aa9.temp
Size 1KB
SHA256 13e71c7ad9097cb46d2b03e40aebfca83ac7bbee24a7475725953a7de7968472
MD5 fb813ddad3d21e4a863d6b2428ab8bd3
SHA1 03201808eb217894e92f0224996daee0f4031e5f
SHA512 fc4aaa6ee79ce43667a7efb72bc498d33556cb7c94df367838ab84c74b78a99a794515297d246c2b36da7c1f5829cf533d3952b64074b5760be23fe755dbfead
MD5 SHA1 SHA512

Submit Download

705add3ecd0197f2b88943a82db10f640105cfb2.temp

Path /data/user/0/com.small.loan.buddy.credit.one.advance/code_cache/flutter_engine/ec975089acb540fc60752606a3d3ba809dd1528b/skia/7e1844439eaa3eb24d00c6314ddc81ca532fdd1b/705add3ecd0197f2b88943a82db10f640105cfb2.temp
Size 956B
SHA256 e6bcbeb142dce6713a3cfdf1360098589e58d65eab6a17ab7567be7d57d8ff42
MD5 8db2543a353af510cbd8dfbd3275bbd5
SHA1 154a10cc23be473c5e725ae8c22945f9431a9561
SHA512 ab3210b37ab2d365320c62794b796570ea9776e05506d15e99476f51c50ddc517956455ad3fbc6a71dbd0bec6faac12bba090d376dda073736468301814c3740
MD5 SHA1 SHA512

Submit Download

7b39a766bda0d5dc51d4f5bec77beb90a6675b8b.temp

Path /data/user/0/com.small.loan.buddy.credit.one.advance/code_cache/flutter_engine/ec975089acb540fc60752606a3d3ba809dd1528b/skia/7e1844439eaa3eb24d00c6314ddc81ca532fdd1b/7b39a766bda0d5dc51d4f5bec77beb90a6675b8b.temp
Size 796B
SHA256 5802d4219d059041ab4b47665243827acc065e5cc624b3667422807a9d9c16f9
MD5 71082b8d075200706442813f4a5e002e
SHA1 8ae2fb6e3604546a8dd01b3da653971e79ee3f23
SHA512 822295b60ffcc31ed014e15b37e6e8cd6fda04682f3704650ae9310fd40cebd74229f32bfe72d43e8704f74ffb7dbc3e4defea2d7f10db322766c4271e6b57b4
MD5 SHA1 SHA512

Submit Download

87144fe56e578d5f4af2b3007a0319c145f30d7e.temp

Path /data/user/0/com.small.loan.buddy.credit.one.advance/code_cache/flutter_engine/ec975089acb540fc60752606a3d3ba809dd1528b/skia/7e1844439eaa3eb24d00c6314ddc81ca532fdd1b/87144fe56e578d5f4af2b3007a0319c145f30d7e.temp
Size 1KB
SHA256 7252953517f3968ee1673e28531a5ac1cf6ab73751b2f1afa3658f737ebb5fd6
MD5 3f08930a428b4145f6aa02c823ef6148
SHA1 aedc4eec25f1a99409a91e69bc9b2678037db385
SHA512 5c79afc7270589b20abcd7639f8ddaa61e39bb8d0a2051a3074f91610bc78954dd233c953beeab961d714791b5e1de8635000322159dfd27f35b4fb6095de410
MD5 SHA1 SHA512

Submit Download

9914cdac01b83908cf184d3f2637a496bd19fe37.temp

Path /data/user/0/com.small.loan.buddy.credit.one.advance/code_cache/flutter_engine/ec975089acb540fc60752606a3d3ba809dd1528b/skia/7e1844439eaa3eb24d00c6314ddc81ca532fdd1b/9914cdac01b83908cf184d3f2637a496bd19fe37.temp
Size 1KB
SHA256 c83fa53add863a676e29ad96586c4513301aab6fa6c9b3e9404b26d5620a6d9e
MD5 c8c41b21e91f5323176efcc45692e644
SHA1 e1185e9d6e8daa8f8af01399518c9f21726eaf9a
SHA512 3317b74c41d8afa29f5bac61a231fa57428b60e2c045d10c55eb943f384e0b183a7ba6c3fc4220f68bedfdd3f88b7edd89abaebc7ea22c554b425028e79f3da4
MD5 SHA1 SHA512

Submit Download

a34b99d0fea7226c46aef76bd20757e826c064d0.temp

Path /data/user/0/com.small.loan.buddy.credit.one.advance/code_cache/flutter_engine/ec975089acb540fc60752606a3d3ba809dd1528b/skia/7e1844439eaa3eb24d00c6314ddc81ca532fdd1b/a34b99d0fea7226c46aef76bd20757e826c064d0.temp
Size 1KB
SHA256 7fd892167ae5c43595b9274cc31220a5e73656cb2ebf87a841451e82d39b64a0
MD5 4fc9fd81321a9c8a838ee50bde332cd4
SHA1 2197118613ef9286680ef5c40719c215177cf05d
SHA512 9bc29933c04a169e4a3327ee71ec42e7304cc9cdbe24f8acd2e08a54879bbcc191612bfb2c4131b360035a40aa6764eda88e7a502bdf89c871333f51e1cf6b9f
MD5 SHA1 SHA512

Submit Download

b0d68b6bd3210ebeb488bdbc045e9d6381eef345.temp

Path /data/user/0/com.small.loan.buddy.credit.one.advance/code_cache/flutter_engine/ec975089acb540fc60752606a3d3ba809dd1528b/skia/7e1844439eaa3eb24d00c6314ddc81ca532fdd1b/b0d68b6bd3210ebeb488bdbc045e9d6381eef345.temp
Size 1KB
SHA256 5b5adc03efadaafe9a62b0b9d11488de1c203a03a61e5a5c15553f963aa8875b
MD5 70a96b3cb2de3594ee8196a62dd46315
SHA1 28058e08476d784e5c37e400acd5877dd169b015
SHA512 1ae7b65af13ad04b5ccbac84f577cd4e3adc949c17d064ca71232795a14ce441da976e072b22e74e5ddd2bfdc65509539ef66f11bb155a4b19009f15155d95f1
MD5 SHA1 SHA512

Submit Download

ba8569e6020edb9fc8e22a64effcb41839049da6.temp

Path /data/user/0/com.small.loan.buddy.credit.one.advance/code_cache/flutter_engine/ec975089acb540fc60752606a3d3ba809dd1528b/skia/7e1844439eaa3eb24d00c6314ddc81ca532fdd1b/ba8569e6020edb9fc8e22a64effcb41839049da6.temp
Size 4KB
SHA256 be1421a3558e3e21f797f2f2fa9159c8f4982937bd51fd8a2ea69cb81e694001
MD5 cd7e36b1625a16b0ed7e08ffd0ba9ef7
SHA1 e5cc7b6eace20d8e98429ebb39a4e33353cc7d56
SHA512 48511e73de66a03c4d2234dee58c6eb64d8ccf113d4184c279e1d661a98e4e5e3dc1e1d0297beaf35a28dac8c00b14dcb9e83f0561d3b858b4382a9d2e4e56c8
SSDEEP 96:pOUjpXy0QJO1UiJ1TUE9gXNQngiqBr+99eFRgZGmtg7q:pBjpi0QJO1J1TDq+giqBK99WRgxg
MD5 SHA1 SHA512 SSDEEP

Submit Download

c10b1cbfe6a95e031c414d21f75092880bdeccba.temp

Path /data/user/0/com.small.loan.buddy.credit.one.advance/code_cache/flutter_engine/ec975089acb540fc60752606a3d3ba809dd1528b/skia/7e1844439eaa3eb24d00c6314ddc81ca532fdd1b/c10b1cbfe6a95e031c414d21f75092880bdeccba.temp
Size 948B
SHA256 fbc83650079ab57ebb00dea87146104b892ab929986c0950badfc193aedbdad1
MD5 955f539f428ded82f1317ff8f81d5e39
SHA1 60ed47c15047b14ad1de6113ab74ade69eaf7d0d
SHA512 9583b7dc2015f37499cf01c01d4d2b317d48fe03ddaff31ebd523473f3c2e0992c8bf3a02334c085871ec9b63fd181c63b6931a658e164c26cf9f1ee93d65cf1
MD5 SHA1 SHA512

Submit Download

fb2d837dc4ac887207cef73eb229ba3d5f6cb88c.temp

Path /data/user/0/com.small.loan.buddy.credit.one.advance/code_cache/flutter_engine/ec975089acb540fc60752606a3d3ba809dd1528b/skia/7e1844439eaa3eb24d00c6314ddc81ca532fdd1b/fb2d837dc4ac887207cef73eb229ba3d5f6cb88c.temp
Size 1KB
SHA256 756b75996bea0da64da99de82aafc09e56e723240d36b33ad8d4af5bc52f7707
MD5 2867c868335c5a40c04e5216ab766f5b
SHA1 2f4fd373e09bcadb6158ac5d6059ddeac159432c
SHA512 cc81ee8c7a99556a4da91c3586b079e00b33752bc7ee6844caa8dc9caf58fce05b658a042cc0a0a4e726a267698812468c8d10459b7d67cacf153e288aba5f32
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events

Path /data/user/0/com.small.loan.buddy.credit.one.advance/databases/com.google.android.datatransport.events
Size 56KB
SHA256 7a1054c19e236ce73d1d584c0a9ee78d5a3317aa8b2788b2f465737e7ea8380c
MD5 cd789150711bdedcecff11e5b856eea3
SHA1 af6e8cdc747dbffec7ece96ceef4f94b0453bf73
SHA512 43672103f0e67cc4bd3f8e0b91ab2edfd1931289cf42fb322e9f685b7af2110dc51b435207f8bf216d696c2d1eb4356ec2b24aded39ccdeb4d66a92b11bc64fc
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPS8Z:rAMEX0wIyNja0
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/user/0/com.small.loan.buddy.credit.one.advance/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 667fd921c35d00c63338089ae5ff2356d3dbdf2e4236a804078fb4f1f10f67ba
MD5 079c7813b30c426a6e86647e3f061a9d
SHA1 7a91074e92736d8eba8b8c6d08fed743026c9757
SHA512 377ca6a627b3ceadd41a50e98fa4ee956ebefccaa4b1243fd702321d29cf006aaf6a33a7e9fc73193ec1739d532621678b34a1c40f6becde2ba28e256f1bfd06
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/user/0/com.small.loan.buddy.credit.one.advance/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 94832fc6ccbabcb00161970a1d366906cd168ba0525c5cefb73bdde640d31d29
MD5 c1806a0c0f59897edc5e41925aeffc12
SHA1 dfbbe9466b6eb444f3b004579bddf95c20f52c45
SHA512 d207662c6b17c665284ef08500cde6a03dd378f2ec99f7ae2552523c53559a3a90feb87fe6cdd8753792ea7381074ce248f7c5880c5ac473399d115c3ebbdafd
SSDEEP 6:7+/l9qtgn1yl//vg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKf:7+tgXlXvqLiuWdYRmBEyPbI
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/user/0/com.small.loan.buddy.credit.one.advance/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 406ca7dcfd17fdd167f1595a48059704395aa5ec85fe4e01379c936631ed33cf
MD5 b37622d9cb10e3565da8d13a8ea84f78
SHA1 ad421d3e6b527a3b91cef49e2b7cf2d1a4b357f0
SHA512 a8c2777d563ceba523fe134f03cf0c88d701da79083cf6a9bda7f0178d7255a7874ec7ed2baf5d33341c85ac466a7f2e4b170e1dd68a0f7fc799eb9738235486
SSDEEP 6:7+/l9AGPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK4Zb/4:7+tBqLJdeWRmBEyPbbT4
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/user/0/com.small.loan.buddy.credit.one.advance/databases/google_app_measurement_local.db
Size 16KB
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/user/0/com.small.loan.buddy.credit.one.advance/databases/google_app_measurement_local.db
Size 16KB
SHA256 89cfafa412243d00bcfaf70c62553c7d9629c5a93b64a27717478bfeb04975eb
MD5 5d621fa54c65b684214dd302f07ab0e2
SHA1 9d77620bd39b75bb38448bc1a668c17814d42552
SHA512 49675b8b9ddffa4cb373eaf4612fb1cb06592b962f83c07f9182737761199b3b13f8812094964ab5cf9194a68d42207f0ed34835ddbd1e400355f175c97263d1
SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6Q:TLiEq9zmzrfRmBEyPbP/P+/0Fl68n7
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/user/0/com.small.loan.buddy.credit.one.advance/databases/google_app_measurement_local.db
Size 16KB
SHA256 57a3a94cd311108c83d475c9a2796d72ae6eb537108e8ba625d44382db1dc584
MD5 5b093621c0e4e1b3374287975a2b3f27
SHA1 039cdf68081a23b48762b6af944028aa1623b6f4
SHA512 5aee69023f9a1381359c5f92e9efa6cfd85354522784b4157407c6435b153de54d9723cbb514cde7d27c8f4a136425eeeb1b2676a4673d079399ec861ffa1cb0
SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFlg8eV+/0Fl68n7:TLopmzr0GSP/h1499FJQlF17
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/user/0/com.small.loan.buddy.credit.one.advance/databases/google_app_measurement_local.db
Size 16KB
SHA256 734a01fa60e621c9ce33545abf50376eaf1600abb34623730417e10b2dec27ce
MD5 b99384d410000abf0b47aad7db60940b
SHA1 587a669164d531ac3ed8c404f06da3618998b73d
SHA512 1304fa1e88d065b2eca9e719a9337949651fd6ffbe7581c17276ee6313693985fbae19f8f6996a730c8082040f68450d9f1640c34de17368e62a7bbbbaa6ae5f
SSDEEP 24:TLYpmzr0GSP/JKabCCbOUzlO499FJQlF17:TcArSP/kabCCb775J017
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/user/0/com.small.loan.buddy.credit.one.advance/databases/google_app_measurement_local.db
Size 16KB
SHA256 73c5b079539cd1eb9d73a7ecb22159f47dacca3e78c72eb62709e8aa5e2ef837
MD5 55e830437185e2c37491bfc36db2842d
SHA1 5b478b2e3010d353aecc7d08eac2bf08f7ef7a8e
SHA512 eab9aa1a06da7389a9f23e1b00098cc3165019b6e3eef1f8b391a16fdef46e374ad462f4b4a6143d4ab6912e225f46f69d096486ff325fda0128bff8d9de14f6
SSDEEP 24:TL6vpmzr0GSP/uKabCCbOUzlO499FJQlF1v:T2vArSP/7abCCb775J01v
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/user/0/com.small.loan.buddy.credit.one.advance/databases/google_app_measurement_local.db
Size 16KB
SHA256 b4765a86f69c122307448d0c6e81cebd52ffbc59b0d19da42971e2857f773e6d
MD5 818548be1885386cc995f564f36a8e8e
SHA1 008b0c602ed55b1122dadfb3a20db517d55c10b3
SHA512 47840561a1eded73600b656576a7a9195bd1beddb79b08090b9e6bd9ab610de6cfb0a334310bfefe0b33ef157d420aaa17c6315fa2e689398da3328c4460a02f
SSDEEP 6:l9bNFlgls1WnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WK:TLuEe9zmzrfRmBEyPbP/WK
MD5 SHA1 SHA512 SSDEEP

Submit Download