Analysis

  • max time kernel
    142s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    14-06-2024 01:12

General

  • Target

    bcbd96862c31b894b7daa1c9f6f34600a81fcb6789f5135ba685b795b505a9a1.apk

  • Size

    4.5MB

  • MD5

    7d1779fcb0de31413cd3684fe62b1015

  • SHA1

    7ee751b8d0e06cfb6af6bcdc2453b5cbbf463152

  • SHA256

    bcbd96862c31b894b7daa1c9f6f34600a81fcb6789f5135ba685b795b505a9a1

  • SHA512

    4f7891c8c3c05bf3acdda50d663d7c9247f7f260c9a4be74c82efe0514412d9f3ea0d994c6c7cf1c1c651a2b9279d9125fc29a6673803f05f994455c876bd821

  • SSDEEP

    98304:6DKN4HRVm6t4xKTwZa1iGFRxsSOt4Na+mE3Bc9WKPNJf99gPHeO:k4xKT9H7Ot4nmEi9fPNJfED

Malware Config

Signatures

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.google.massagg
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Checks CPU information
    • Checks memory information
    PID:4646

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.google.massagg/logs/20240614011311031.log
    Filesize

    20KB

    MD5

    eb091299b529719573b457f8e583a310

    SHA1

    bf8499baea14a3cc202189673e8fed7257b5e3a9

    SHA256

    a6cc05127334e7ff72167bcca7aaf0696f0e258b8ad0106a3ba03536b0a22bec

    SHA512

    e1c40666973e8cfad02e4b0cc6f9c2dd0e19b8d0b1ed974a074a910c9c9b27a2ebe292c4e33e7401d002687a4861d45f7de777c822006eb57f33b7829a283fe4

  • /data/data/com.google.massagg/logs/20240614011311033.log
    Filesize

    33KB

    MD5

    e7a1e58c69384d9f057d601283f0b89c

    SHA1

    5ddc6f54626eeafffe1a809b5b3ad1e59829b39f

    SHA256

    de84196613d681022fdabf6a58e4d7285c5c3d8650f782c566233a74fb08ff68

    SHA512

    8e2a4b15f1e1c30158a1b1390c612b2b1a19cd0784d6dd2ce23c3ba545826c3982ffd465340d5ac3d249193c0ec16e32be824823f58b19b4d56b1cb0e340f63c

  • /data/data/com.google.massagg/no_backup/androidx.work.workdb
    Filesize

    4KB

    MD5

    7e858c4054eb00fcddc653a04e5cd1c6

    SHA1

    2e056bf31a8d78df136f02a62afeeca77f4faccf

    SHA256

    9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

    SHA512

    d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

  • /data/data/com.google.massagg/no_backup/androidx.work.workdb-journal
    Filesize

    512B

    MD5

    50dfcbd653830d818936998b0ae147cc

    SHA1

    703664e25805e706826a9ba723c3dae84dd91d9e

    SHA256

    6fc871402be95abda9522af6a3cedd2e9ef0a7d6c475c5357943cb359993afc6

    SHA512

    e8377d1bb95b1b5b52ab6a6bb11f9835c3248adbc7bab1ee4f42ed6c588d9ec77f91339ec8e813a8e7c299674cb7439d0b758131624bcf67548f211bec132577

  • /data/data/com.google.massagg/no_backup/androidx.work.workdb-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.google.massagg/no_backup/androidx.work.workdb-wal
    Filesize

    16KB

    MD5

    acffc488c24c910505c76da369027da9

    SHA1

    ef64510f6c3b8d178c9e117a6ed70e03e115c102

    SHA256

    97113a9db12e106055ef0bda116c5771044df117e6207c42ce76d164731f449e

    SHA512

    3b8ad851851d5c12de1c52fbd7d1fa46e690cd1d4092ce7654600811dbd4a3d01acfcb7031ad3d078835e01d617ca993a850ff16a8b3eca4d389fdb518b7d037

  • /data/data/com.google.massagg/no_backup/androidx.work.workdb-wal
    Filesize

    108KB

    MD5

    ff4be0887f278b2ad0e580231cfb3f75

    SHA1

    f62bc6b7b105a628663798b38aace56e3f10583b

    SHA256

    3c2f6594e860f5fdc62e6673f785afe50847917283b5d86c087ab6164064bbb2

    SHA512

    b89886dc8a96eed6d79b88d8125da7ad0824e63143e3e08a9d5386d836c879db68d4d56599e59855b8dc6b2b1acbfcdccf4d2b5f11a0911677e55a3488e41a8c