Analysis

  • max time kernel
    54s
  • max time network
    150s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    12-06-2024 14:58

General

  • Target

    565e1f02ee0024934819a1430db50ba6631470afb30868ddaf3499a6cdaa6a1a.apk

  • Size

    4.5MB

  • MD5

    330d907f88ebf8399d811b2956db9f7a

  • SHA1

    9581fff7cac1356854e7d0b5eb93ab7801d46992

  • SHA256

    565e1f02ee0024934819a1430db50ba6631470afb30868ddaf3499a6cdaa6a1a

  • SHA512

    159afdd9ca5e226bfaac2b24c942a5eb9c2791723e9dbcf57520f7736e66e627f5d79435af355540c3fabb47bdd822cbd30401f1190617e9706df423a0cd13cc

  • SSDEEP

    98304:eDKN4HRVm6t4xKTwZa1iGFRxsSOt4Na+mE3Bc9WKPNJf99gPHe/:A4xKT9H7Ot4nmEi9fPNJfEA

Malware Config

Signatures

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.google.massagg
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.google.massagg/logs/20240612145850003.log
    Filesize

    20KB

    MD5

    7b9d00f086238610ffd4f0b0d14f1208

    SHA1

    05d7a75d2c32afc6371f8ed2b532ec970fcc17b8

    SHA256

    8ec0f79f2fd32ac97ce1306809c0284a410024f5a895743df44e05986d499269

    SHA512

    5c4628b07657cf448537d469d4612667ae5bd62e3b55009192f77ac7586c3da585a907d28b3b7711b99ae6b24dfd6c0a853be607b8e39af6a28349462e141db2

  • /data/data/com.google.massagg/logs/20240612145850015.log
    Filesize

    33KB

    MD5

    ad8c1b68baf3cd0bba166e361fceadaa

    SHA1

    6c9573da30285345608ad018302c00aaf92e82fd

    SHA256

    cd1cdfd8140711f12dad71e621bc3883ab3783edbd7a2559d15f808b4006f246

    SHA512

    6ab681cf59f4c6d97024d266185facb8269b31cbb6e83f34030797841cfe44b1f8c6746425be9ad647705ba8d4a91324ef64d47809d770d8215d6a1258b3ebee

  • /data/data/com.google.massagg/no_backup/androidx.work.workdb
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.google.massagg/no_backup/androidx.work.workdb-journal
    Filesize

    512B

    MD5

    f574e0fb696d9b360d8443f7e5a693af

    SHA1

    e83087eb24a761df3b54db80e8645571e958b9a8

    SHA256

    4bc52d79d0c34791d68bc8ee403e297e021d9ff3d33de7b85eb981af8abf6b17

    SHA512

    a0c1caf21eda6d85fad7b2a704d0cd1afcd72396c305ea4ef5be8cb3bb82177acf9b0ca55ccf15a615d37b5a14b664b699c9a82a2208addefd42d1ba2ebb1026

  • /data/data/com.google.massagg/no_backup/androidx.work.workdb-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.google.massagg/no_backup/androidx.work.workdb-wal
    Filesize

    16KB

    MD5

    2b56e7fbb60fd27a6193d5dfc4bd18ca

    SHA1

    ae8970c2aa9d778d595673742a7fe5eb5ad22dc9

    SHA256

    08692c334af1fdc52ac42d08093c55e0f02b872b37985d27d3c53ea993e4dc75

    SHA512

    377fb8945cfb81ba93c8e9d9526eeaa1c2a1d6a67ab148df26e3199d14b493964101450ade6502455ca4ffad0b8df2fa1d565fdda6a9a1380c51a08bb6508f74

  • /data/data/com.google.massagg/no_backup/androidx.work.workdb-wal
    Filesize

    108KB

    MD5

    cb8063f4fa5390bbba8cc561d0b30f8f

    SHA1

    f8874cc0fbae42e9318503332f6996508ffb6002

    SHA256

    7b9d3439425fd8235eae7e07530e10cb9b4efb4420e7ddf6e1e2185253bd2f61

    SHA512

    a9f0d13be69fe4520c1625da7076a37d374f7481868a2890af77b71061303cab9171de36576fa19f225b17092b6bdb18d0fce03fc46a4f7719c22cc91374e938