Analysis

  • max time kernel
    51s
  • max time network
    150s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    14-06-2024 01:12

General

  • Target

    bcbd96862c31b894b7daa1c9f6f34600a81fcb6789f5135ba685b795b505a9a1.apk

  • Size

    4.5MB

  • MD5

    7d1779fcb0de31413cd3684fe62b1015

  • SHA1

    7ee751b8d0e06cfb6af6bcdc2453b5cbbf463152

  • SHA256

    bcbd96862c31b894b7daa1c9f6f34600a81fcb6789f5135ba685b795b505a9a1

  • SHA512

    4f7891c8c3c05bf3acdda50d663d7c9247f7f260c9a4be74c82efe0514412d9f3ea0d994c6c7cf1c1c651a2b9279d9125fc29a6673803f05f994455c876bd821

  • SSDEEP

    98304:6DKN4HRVm6t4xKTwZa1iGFRxsSOt4Na+mE3Bc9WKPNJf99gPHeO:k4xKT9H7Ot4nmEi9fPNJfED

Malware Config

Signatures

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.google.massagg
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5001

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.google.massagg/logs/20240614011307699.log
    Filesize

    33KB

    MD5

    75d4fc0fbc87179d9e8cf4c877186bc7

    SHA1

    f13e14650015915250bd153c67897fc272dc0ed5

    SHA256

    8d1a4540105d18af445e7f8a29278f8d627dc9bfc71ba8f77e79b11cba077437

    SHA512

    d9426482c0850f0da0baf0bbb6d25aa797f0e72c7638b039af0dbfef7452d1f8beb02d66493ce4cb1b6e42ad9f641746f7778b54ad57809b3aa928d92e167b03

  • /data/data/com.google.massagg/logs/20240614011307707.log
    Filesize

    20KB

    MD5

    4b82322500b80449a524c12574018b27

    SHA1

    3566473bd04c1296fe72ff8053a01f03fa96e1e1

    SHA256

    9bc4044731d27fb6e6453b5d1677b72eb590af9505af157977b1d392befe0f69

    SHA512

    ad934fc03ac82908c0b131a3cb367c4e83d0a10239a237a3a47ca2ecd15a4da16b5b3a5ca5684557a5057f0b61db86b50cacacfc24c84ffedbac215de4df5856

  • /data/data/com.google.massagg/no_backup/androidx.work.workdb
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.google.massagg/no_backup/androidx.work.workdb-journal
    Filesize

    512B

    MD5

    93aa6ebd3cd3ed861e4506e34d819d57

    SHA1

    cd4f140656619da6b46881e5456f1ccc7bc65b19

    SHA256

    d2f03f781e2227cf3f3f338d7308a735eeb980a02d1fb9d309b8ee1fa7e00664

    SHA512

    6f303ef527098ca6361db55ebd12af3dbe58f22908a4539c12c21038ced2869439d1d9b7af0a5d0afe57e0481d36d05847ae0543e4eec2ada1e904071a3f35b3

  • /data/data/com.google.massagg/no_backup/androidx.work.workdb-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.google.massagg/no_backup/androidx.work.workdb-wal
    Filesize

    16KB

    MD5

    0c613bc9744de59f57bd49991be8ff07

    SHA1

    dcb21abb300679a55a71a1b8dadc1a3a3054a185

    SHA256

    e4ea17ec854baeb8aac0ab29565a386977bced74dcc570ee13fe401194eb8183

    SHA512

    c08497b99fa67242ef9030313274c7f1fa87f7ec97861cec3ebefdbfd950dcc532b90bda7c9b6b6d9f4de9acde008d1e90e3f5b5ef2dd1068dd62de84c63e0d7

  • /data/data/com.google.massagg/no_backup/androidx.work.workdb-wal
    Filesize

    108KB

    MD5

    01247e2454e63e1de03c5f70102c9b2d

    SHA1

    3064160bcc9bc6e79d354adf2b673fc8a66abde8

    SHA256

    dd81ebd87b8a9c2d8c15de70d14a11fd20205b955c06756a6e2eb9f98826f874

    SHA512

    dd15e9f5274d038dbb3d5fc7135201b2cb4b94233a02a6126391cd6c1074a7a6dcab9c7464668d5b8255da5c3ab9826fe49bc55f6f17bfd7e339548d6dfb630a