565e1f02ee0024934819a1430db50ba6631470afb30868ddaf3499a6cdaa6a1a

General

Target
565e1f02ee0024934819a1430db50ba6631470afb30868ddaf3499a6cdaa6a1a.apk
Size 4.5MB
Sample240612-sb7w2sshqp
SHA256 565e1f02ee0024934819a1430db50ba6631470afb30868ddaf3499a6cdaa6a1a
MD5 330d907f88ebf8399d811b2956db9f7a
SHA1 9581fff7cac1356854e7d0b5eb93ab7801d46992
SHA512 159afdd9ca5e226bfaac2b24c942a5eb9c2791723e9dbcf57520f7736e66e627f5d79435af355540c3fabb47bdd822cbd30401f1190617e9706df423a0cd13cc
SSDEEP 98304:eDKN4HRVm6t4xKTwZa1iGFRxsSOt4Na+mE3Bc9WKPNJf99gPHe/:A4xKT9H7Ot4nmEi9fPNJfEA
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.google.massagg

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.google.massagg

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.google.massagg

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.google.massagg

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.google.massagg

com.google.massagg
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5148

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

1

T1624

Broadcast Receivers

1

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

2

T1633

System Checks

2

T1633.001

Credential Access

Clipboard Data

1

T1414

Discovery

System Information Discovery

2

T1426

System Network Configuration Discovery

1

T1422

Lateral Movement

Collection

Clipboard Data

1

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

1

T1641

Transmitted Data Manipulation

1

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

20240612145850003.log

Path /data/data/com.google.massagg/logs/20240612145850003.log
Size 20KB
SHA256 8ec0f79f2fd32ac97ce1306809c0284a410024f5a895743df44e05986d499269
MD5 7b9d00f086238610ffd4f0b0d14f1208
SHA1 05d7a75d2c32afc6371f8ed2b532ec970fcc17b8
SHA512 5c4628b07657cf448537d469d4612667ae5bd62e3b55009192f77ac7586c3da585a907d28b3b7711b99ae6b24dfd6c0a853be607b8e39af6a28349462e141db2
SSDEEP 192:mm33qny0lFIviN1ewpN41YDI+u0Oe2oQhDwMDGqwxB0BD801hpwcxxEh6cayDZ1k:mm3yBjWwA
MD5 SHA1 SHA512 SSDEEP

Submit Download

20240612145850015.log

Path /data/data/com.google.massagg/logs/20240612145850015.log
Size 33KB
SHA256 cd1cdfd8140711f12dad71e621bc3883ab3783edbd7a2559d15f808b4006f246
MD5 ad8c1b68baf3cd0bba166e361fceadaa
SHA1 6c9573da30285345608ad018302c00aaf92e82fd
SHA512 6ab681cf59f4c6d97024d266185facb8269b31cbb6e83f34030797841cfe44b1f8c6746425be9ad647705ba8d4a91324ef64d47809d770d8215d6a1258b3ebee
SSDEEP 768:f6gzpedAofXCUExjJ3JwNsZnaHpIQoXq4qcTZx+fqHI0VH3bTvqMeDZW5LVmC0xQ:f6gzpedAofXCUExjJ3JwNsZnaHpIQoXz
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb

Path /data/data/com.google.massagg/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/com.google.massagg/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 4bc52d79d0c34791d68bc8ee403e297e021d9ff3d33de7b85eb981af8abf6b17
MD5 f574e0fb696d9b360d8443f7e5a693af
SHA1 e83087eb24a761df3b54db80e8645571e958b9a8
SHA512 a0c1caf21eda6d85fad7b2a704d0cd1afcd72396c305ea4ef5be8cb3bb82177acf9b0ca55ccf15a615d37b5a14b664b699c9a82a2208addefd42d1ba2ebb1026
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.google.massagg/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.google.massagg/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 08692c334af1fdc52ac42d08093c55e0f02b872b37985d27d3c53ea993e4dc75
MD5 2b56e7fbb60fd27a6193d5dfc4bd18ca
SHA1 ae8970c2aa9d778d595673742a7fe5eb5ad22dc9
SHA512 377fb8945cfb81ba93c8e9d9526eeaa1c2a1d6a67ab148df26e3199d14b493964101450ade6502455ca4ffad0b8df2fa1d565fdda6a9a1380c51a08bb6508f74
SSDEEP 6:KutvcLe6Ug9FZdrlOERX4PBX4ogLugMBX4suuK+/QoAV6U1YuUOYVOw2:KAv+zdTRmBEyPbP/8jAFVOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.google.massagg/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 7b9d3439425fd8235eae7e07530e10cb9b4efb4420e7ddf6e1e2185253bd2f61
MD5 cb8063f4fa5390bbba8cc561d0b30f8f
SHA1 f8874cc0fbae42e9318503332f6996508ffb6002
SHA512 a9f0d13be69fe4520c1625da7076a37d374f7481868a2890af77b71061303cab9171de36576fa19f225b17092b6bdb18d0fce03fc46a4f7719c22cc91374e938
SSDEEP 48:z9Y66M/31pp8aEKeWrFhVtD/ymmumWAhrBlOymdGWOWKuWov6xl73JcXSMmchI9k:x6+hdjnHtDRMpf8UzS6+BD8q0ExPp
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads