0dfb898292c16c395943a38ac8c5eb7b4e9f7d72781cb901df295ccc279717f9

Analysis

max time kernel
11s
max time network
130s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
14-06-2024 16:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eblagh.apk
Size

2.7MB
MD5

d790728ab443c2f8cbcc75436d015667
SHA1

f5e7c9f2f978cfaccdc83af40496644496e7199d
SHA256

0dfb898292c16c395943a38ac8c5eb7b4e9f7d72781cb901df295ccc279717f9
SHA512

43c5eefd1eca0e29e3ab48066f0f3ffff19985e0fd23897205302479f2a2084f5eabbeff07faaf6164bc67ef69c75cf698a5bc0e3b491ecfbf2f75e3a82f9366
SSDEEP

49152:w/mbwyKDDDDIDDDIdRnNOA+Wj765PNGtCkJ97xxZPk66gEYiNXZ5qI8ZM/xXgqEN:ejyO9n+WK5FGI09Tt6fYQ/8wXpEsQ

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.general

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.general

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.general

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.general

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.general

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.general

com.general
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
PID:5132

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.general/cache/~test.test

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/data/data/com.general/databases/google_app_measurement_local.db

Filesize
16KB

MD5
314deede4a8e6e0e1a3252a18350fce4

SHA1
9cfef1eab5e147acf789818a044584a46f35fea0

SHA256
55643b709541c3d5be46e3894a246e1ea8527f737b622a774ae60d890e29733a

SHA512
5d0be738f9deff7b7dd35c2300bec460679dabfcf256dcb1c3acfb4ad305a1f04d97a164264f0c709fee5628aa1ce66abc2c1df5bd7ba73dad0fcf73a288bb62

Download Submit
/data/data/com.general/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2459c1d9c2735dc02aaa0527a899c249

SHA1
4cf2259bf7af77f41f582a8c6a64e0942e26f11c

SHA256
62cebbc10d074372ef90edcb13b8373653527b1cbd1825f3e8452b0cd1c7878a

SHA512
2474287a7d4faaea164aa9c0e321388940a820af4f1aeb622604c616ab250b84805aff6427fcd7af530ebd375f73e412cb27fe3a8ec6aecf48d0160de80dc3c2

Download Submit
/data/data/com.general/databases/google_app_measurement_local.db

Filesize
16KB

MD5
1ddbb30bb4dcf133958cfc705bd7654d

SHA1
5483f1320b06f2f11bc403327190ee060e632039

SHA256
f10ce95d12f79789f0111c1e0c71bad5a3aa994c5c9e98bbb2cc7c9a56217ad1

SHA512
4ec6a4020704ae64edf074545c19b43f0ebf05201a161199e847fd42951815c0f9efd55f94656903eb43b43807eff43500ac8b944f660f171d53764037864a31

Download Submit
/data/data/com.general/databases/google_app_measurement_local.db

Filesize
16KB

MD5
9effda0747511c1a0e291c62dbc3df47

SHA1
f74e2e8eda75210231dc186a6ae06486bbaad732

SHA256
0ad26ad0454d9c4adf0ed72bc82b1d808942c3aff9aea35015c0fa1bbd81274f

SHA512
402a498617b7bf144b2b50120c30184dd71701337bc12085685da49de3fc59e900cbbe06b39fed927996436e7430dd96532ac681dfe8abb9a079a7611c383229

Download Submit
/data/data/com.general/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/com.general/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
f7f82bf9991e68c01962862b551a4d6e

SHA1
93c09ffe7e4210ba848fb4e69a2f905270eac146

SHA256
e7b9af7469c13e425a7074f7108935c0db624f310452da3cadd086c60cf39712

SHA512
37c1037929eb1e2acba07f927332b0878c2cf76f6f6e59e08bc53b30831c0d94ec8905aa14b3509ac1243bcb2e45e3992ac0ef8bb07aa2d08c7928566cd4c30c

Download Submit
/data/data/com.general/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
79ec1c66ef6d7dfde30f73ce038fc94c

SHA1
1662abe173dacfa3e40f2e0f1561e2bc0c731703

SHA256
5b1b0bad46aaa6e214c0dd6af43beebeb876f736fcc69e79379ae017e6648402

SHA512
45dba83befd352be9a59025f61985d73a69ce4721f2e609f8156417ada76028fc75a67c3f3bcc8b215ddba19d990cc29fa62f53e5a3d4e9bb07c4eb714da7840

Download Submit
/data/data/com.general/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
b7e9174467c4a0e577e4f829eb031d30

SHA1
7f9322b69f91bc3844c745dec6373b8e950f2357

SHA256
4c4c5c9964e518ce5cbe57f50fdcb359471085d25a102b0e052cc4f47289506a

SHA512
1cc1f38d6e773f47e0aea67f25d120c2fd08dc06e56cb17c376f21a6894886533a2dae41c6a3f8f82dd0eb32e61c7187a9620e36714347a8673e3f4924c4264f

Download Submit
/data/data/com.general/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
4ec8e48e5c7b8641787040884eb52102

SHA1
5a60fc570d9863ea31cd66274aefde802cd32dcd

SHA256
d20a1b6f1629383e0287ef41734db0a6a320eafee822f4128b831c9ea438349c

SHA512
c5cf6ff51efa182de384760e364677fdf2c79b9ec2f5321ee2cd287df97bb1d994025638022f632236c856a20c4bb190cea8d44109579282ec9024f6b6fa468a

Download Submit
/data/data/com.general/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
8f4dfbd1b679bbcdc82d99ac9ff1d31e

SHA1
5df0a12502b0b093e45feb8f32b05c010b7a14db

SHA256
012a70535940baa04599686efcc737f3e502054f57c033a94796124d512457e2

SHA512
2abfa59a3b3481598eff61a81796dfba9907cb369c6dc3bd81094e8edf943cde02e8632706dc33ee745f4233ba24a43e3f7abd0374f4f8eb5a0beaafe1f4ad6a

Download Submit
/data/data/com.general/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
99e040db414ac8de9c21ed111a9b091f

SHA1
76800107b6aef48ea01d0ec09649fb6dc04d5cc9

SHA256
8460660497447becaba8dc2827a252e2203fba1bba75b96df5b75d4040345105

SHA512
a4ec4ed35091da38b267c2859256b13a6a272b2e525479404eb1019f2c034a723a5bca174d7f6182ac7a6a16a771c2005002dc202ef2fcabeba2cf49c9368107

Download Submit
/data/data/com.general/files/PersistedInstallation3116117365507459340tmp

Filesize
90B

MD5
06883446aaea41838ab7a7224531329d

SHA1
76c2593c9e13191e426289cb232aa719a784c4cc

SHA256
c043d538a1185a9342d90cf55c4485cba392e892e2d62d4e67b4e6d9a11c153e

SHA512
c325c53d20f5ded82e1748114721238ecc3afe50fa82af39607c95d5d9cfd55d1de07c61665a838f14e4a249d3f538896f2da117c38da7a122cd33ccd2519221

Download Submit
/data/data/com.general/files/PersistedInstallation4625367994783963977tmp

Filesize
567B

MD5
0762745ed18a02efaef51d5d19af5eab

SHA1
9dcacdb4537b98e4ccb163c2f36ef168ca96f8de

SHA256
798dc40c9aeca80344eddf213b2a77440244f7129252bec47642930c71538da5

SHA512
95054f5536fd12d8d6f740e46c7211585367f1d5f5bff98bae5f475bf0f023023cfb2f22e0c1c1dd1bc237f667b789c96bea33a0a68b735de03b5f4380146ddf

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads