565e1f02ee0024934819a1430db50ba6631470afb30868ddaf3499a6cdaa6a1a

Analysis

max time kernel
89s
max time network
131s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
12/06/2024, 14:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
565e1f02ee0024934819a1430db50ba6631470afb30868ddaf3499a6cdaa6a1a.apk
Size 4.5MB
Sample240612-sb7w2sshqp
SHA256 565e1f02ee0024934819a1430db50ba6631470afb30868ddaf3499a6cdaa6a1a
MD5 330d907f88ebf8399d811b2956db9f7a
SHA1 9581fff7cac1356854e7d0b5eb93ab7801d46992
SHA512 159afdd9ca5e226bfaac2b24c942a5eb9c2791723e9dbcf57520f7736e66e627f5d79435af355540c3fabb47bdd822cbd30401f1190617e9706df423a0cd13cc
SSDEEP 98304:eDKN4HRVm6t4xKTwZa1iGFRxsSOt4Na+mE3Bc9WKPNJf99gPHe/:A4xKT9H7Ot4nmEi9fPNJfEA
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.google.massagg

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.google.massagg

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.google.massagg

com.google.massagg
1⤵
- Obtains sensitive information copied to the device clipboard
- Checks CPU information
- Checks memory information
PID:4447

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

20240612145857792.log

Path /data/data/com.google.massagg/logs/20240612145857792.log
Size 33KB
SHA256 6a1212afbb01ecd7f5d8b17f4e8a514e0ac8c2bf2c4945410860b9ed9ba4fa70
MD5 103c2d69a542af773e43fa12860d0184
SHA1 be4daf44eab2441f7ccd37dc4f432545e0eca4cf
SHA512 6bd348e6a0f969d280cce7c2de0eef79cd10b0009451dec454888617954c52950e101814132e60936dd70f2181c1c5180fb9e6ce2aa57ca883aebe6337677197
SSDEEP 768:kZekn21d3nJUY7Vk53/wCDaKoFNKP9Q5wNTOfZPbRqViLGIEm/g17ZrzeriqIqzt:kZekn21d3nJUY7Vk53/wCDaKoFNKP9QX
MD5 SHA1 SHA512 SSDEEP

Submit Download

20240612145857794.log

Path /data/data/com.google.massagg/logs/20240612145857794.log
Size 20KB
SHA256 eff4ae1810b3611eab3a813f68c9572ae5e7e9fac529142d0ecacf67dc014522
MD5 f1bf63cc76fc928e0ef4cce786fe7ee8
SHA1 f8ba5ba81426913ad0dc0c75a7700b45ce963257
SHA512 428c53916f7706ee96509a996f01be9e1e77b983044821795cbb72716d0d7e9dd4d41d87e7fb2b2c0490385473750fd6f1cc667cc0f17ac6a8ae3c7ddbbc265d
SSDEEP 192:23r4f4/FdtGYzeRQwOmKDhBqu6DylDODU9DdYDcZGyDZey2pO0TmE6Eq9zDp5fW+:23r84Nrsffi7f
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb

Path /data/data/com.google.massagg/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/com.google.massagg/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 26056cdc1219d31f04361908382d55160cf3a7a71fe523fe9c10ddaaf6c8cfc9
MD5 546a5b711c40e75c52eeaed082fc4d82
SHA1 36aa0e7dc71298b0fad5f7bf431faeeec8bb65a8
SHA512 347c7c0a1f8dff7bb58b44f86dfd61cd291cb00c34e142a12e476227bfe77d2f73aaf2fa8aa817be06eda72b42f0c7b28e73ce31f8008fa6c85e578f59d40a9f
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.google.massagg/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.google.massagg/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 5ae0e3d23facc2c110f310c24b12e3fcba8f549d0dda75a5719210297ef25509
MD5 47df348e2512ca3732982b53ddacd4df
SHA1 e291a99b01b915afc05f75e88aa93c5f1830d6a3
SHA512 8512be43c2a6ee726d1211d02c366dbc1e7dce30c1d0d8287ad36858bc9b81ddb887329093f804cd9c4995e3545b72cdf8e528bb41f5c1148d249ec1a714a616
SSDEEP 6:K6yzpLef9FZde/kPlOERX4PBX4ogLugMBX4suuK+/R+bWoL1HVOw2:KXFLWzdeWRmBEyPbP/RkvLvOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.google.massagg/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 b3d4e31abbbe3d7e5ef8789519fa6290c4ed2429e58644edc57e36406ab12ad7
MD5 7a0b40437771539f6d19fdbb22d845c2
SHA1 8db01fa2944eea19629be5e793c9e64f7f1d7fd3
SHA512 0a7bfc5cd23ccbd05c01c1a7ab7f03375b5463791cccafd650837294566402c465a4a1d660527bd0f91c41c9d62e073e7f4760c9d223228f335e6e17d845c981
SSDEEP 48:MFY66M/31pp8aEKeWrFhVtD/ymmumWAhrBlOymdGWOWKuWov6xl73JcXSMmchI9F:i6+hdjnHtDRMpf8UzS6+BD8q0ExPYU6
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads