eeef3f7828a3471f2a0dd38eefea3b70a0bb16f2672bace8372c529ad97e1ad0

Analysis

max time kernel
47s
max time network
152s
platform
android_x64
resource
android-x64-20240603-en
resource tags

androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
submitted
07/06/2024, 08:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Rewards-v1.2.4.apk
Size 3.4MB
Sample240607-jzxasaeb84
SHA256 eeef3f7828a3471f2a0dd38eefea3b70a0bb16f2672bace8372c529ad97e1ad0
MD5 d9de1181b3bfcbb47e779ab71b974b61
SHA1 3da1a11157c7116f6558df4515164787d32d489f
SHA512 e8b286516c1faf4487bbc4389db4355c5183e50a9114ef2d8121f6e1fedc433015889ee0a0f2828ae6dcb84a92125cae4281b517176a1044022ffc4fdbc365d3
SSDEEP 98304:vPG6ZWFpey+Dj+nSIVNL9jBnanR4avniJXiTwrYAXW+r:VGcDYhNPLaWmS
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.legendsayantan.msrewards
/system/xbin/su	com.legendsayantan.msrewards

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.legendsayantan.msrewards

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.legendsayantan.msrewards

Checks the presence of a debugger
evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.legendsayantan.msrewards

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.legendsayantan.msrewards

com.legendsayantan.msrewards
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
PID:5040

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.legendsayantan.msrewards/databases/com.google.android.datatransport.events
Size 56KB
SHA256 066fff73969437867dff1e05ae87b1167bb65d6cafc29a124da5eec70cb8d6e5
MD5 9a46355cc3dc8b0c65cf9e7397070675
SHA1 385d9cb8da5b62e0ae21c405ad14ff8415479f78
SHA512 0abf8c2029eee5969221d07601987d5e6dd66bd53325331d88a5c7b65cb1a51fa05aaac0041fb169c5fb22deaae68a0a840d5f286d28713d1eb49d9857656af4
SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSg:8MEX0wIyNjag
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.legendsayantan.msrewards/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 07a0d266f82b4a4e245ce493b57187a9364446462b10db92a8ebbd1603250bb8
MD5 89d597088f5e993447a909002995cb8b
SHA1 965e3111ca39ce72b1c2252d85451de375c93bb6
SHA512 fa0569f92f50efadc25f28186d48259d8cde93a9a33c1b1501dee320a287b0c0969fc6cd3a2e71737368a572269f665355139bf6585bee8473d7bdc1c9e1c1b4
SSDEEP 6:7+/l9ESFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKnzkt/0:7+t6SBqLJdTRmBEyPbuzs0
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.legendsayantan.msrewards/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 c5c9ac83841896849b9ff9e35f95ceeae88d77db66f6fc6a87ba1d290156ac38
MD5 7000fcbcbb8ebd4f49321a59463a6322
SHA1 c506e1b6a90156044843680659c214554e6342c9
SHA512 9ec53cdde87b992e9888d108e25d28245ff3d5befd3b68990ebacc4522878fb07c6a1a15803851cc22e4a4cadf6a8769e2606f955a2dcab8631e7bf52afda6a5
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.legendsayantan.msrewards/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 3fde4ba4e5c030773fc29fc4843f12198f7486c125690d3e63b6ff9b581e962b
MD5 66416d05523990d855450f51dbe77411
SHA1 2c487ddc8e3b5e30140b51d436f1c1219886ec74
SHA512 15b172b5d14873e37b7707543a759ec11af6702f7940db3c7a3494e047effd5b76d5f5d87e696e9ff36eed98ae0c7d943a3f16853872ba4b1a929f7587bd727b
SSDEEP 6:7+/l9r2Fn1+Mbg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKw:7+tR2rqLiuWdwRmBEyPbf
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.legendsayantan.msrewards/databases/google_app_measurement_local.db
Size 16KB
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.legendsayantan.msrewards/databases/google_app_measurement_local.db
Size 16KB
SHA256 e33a08eceb2399454c0cf242b2a42b71276c6c92fa74e1d4376a2b6a4ea72395
MD5 181c0ce8c9898352bb2162694e4582c9
SHA1 d917b1ae28f47cfb080c62f95602a6daff0b145d
SHA512 f05c4519c564bbbeac3edf8027e25819581fb91f7efe8bba59def07a9758a400b3310f4d37a470ffcc908c5d115db3c28ac2b3b31d5fce98c889caea03885fc2
SSDEEP 6:l9bNFlsls1ylO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6K0D:TLiEy9zmzrfRmBEyPbP/P+/0Fl6K87
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.legendsayantan.msrewards/databases/google_app_measurement_local.db
Size 16KB
SHA256 00655598e04ce27a756470c4c857e2d95bf65f082c547350d321459ddb98dada
MD5 c8a9a93c6566ab18ad323804f15b8e08
SHA1 1c2e15b7553cb2a61f954850d203615e5e9c14ec
SHA512 af3b95b78b4370d0d42c4aaa46c6b5b792744943309e9f9cfd2c30dd3328087e75bbe0bc20d9ae5f41bae24087d4fe3934d59ed7445447b385e7a34e8bbfc232
SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hr/gW49blqYFlXW6V+/0Fl6K87:TLQpmzr0GSP/h1499FVlFrI
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.legendsayantan.msrewards/databases/google_app_measurement_local.db
Size 16KB
SHA256 c18ceeee3024ae0a699aa3a63f16d43bfb1922c52b40edff65dd8e2ce8f7254b
MD5 1ef5525bc576ad9597e66987c99ba9d2
SHA1 cfce627a26aa5bbf5e1c8cb7576b7e35b4f2d188
SHA512 184cc2d24c357437a7f162160c7134dca4b7597e3cc5fe15a22935160c7fc47d9e4efa22481a6184c1790c6d03a77d4acf48900f4517800baf96c70bdae70b8f
SSDEEP 12:TLIEQv9zmzrfRmBEyPbP/X+/uHlqQ49blqYFlXW6V+/0Fl6K87:TLEvpmzr0GSP/X5Hf499FVlFrI
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.legendsayantan.msrewards/databases/google_app_measurement_local.db
Size 16KB
SHA256 0de3a5bfc6d50185d6064a143b0c881df99c05cd8b7b3075d8ea5ee8415827f3
MD5 c1439c7f997dabadcee356bf78e940f9
SHA1 47014051ecdaf1a87f2e64eab01d3091f055c210
SHA512 54894ad17bec01b69d60b6befa4c6d63158fe883f246e102761173d7baec64675af77964130824d72097513548ee8788571bf51208be28634c47bb51d08b3ab3
SSDEEP 24:TL6Xpmzr0GSP/on10Z/TRf5Hf499FVlFrI:T2XArSP/on1K/LHw5JrI
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.legendsayantan.msrewards/databases/google_app_measurement_local.db
Size 16KB
SHA256 a4cd117d64d0385071a46607a46a2b9286588d5a944d720b6bb5057d7779fecf
MD5 481b0ee0c7c79848105807435a7590a6
SHA1 2ae301d316090f6be25e7a40874e92b43e13ca00
SHA512 1674b02bbb6ab18b1f2c99ac044f1e482ebadcf1878cec42d20ba48e5823b80d72ff05f8cbac1bc4d34f0c7c26c76907caceaea82d9ab816b78dc83260eb89cb
SSDEEP 6:l9bNFlS/Sls1UmvlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WFqmA:TL0WEz9zmzrfRmBEyPbP/WFqmA
MD5 SHA1 SHA512 SSDEEP

Submit Download