02603b05d5dc7d00d6538aa2beaee5cad0cd90c7a1e67cb01719cf0c58b70464

Analysis

max time kernel
48s
max time network
131s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
21/06/2024, 10:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Chess.apk
Size 3.0MB
Sample240621-l462wsvhpg
SHA256 02603b05d5dc7d00d6538aa2beaee5cad0cd90c7a1e67cb01719cf0c58b70464
MD5 a6640849bb820a969b38576cef1dd85a
SHA1 42af7d449256ee4c7ea8b530ccb6434527fb4648
SHA512 469562db48a53f7aa541409aeae5496feff5ef869c0b504be795954fe6014ca0c88f2f609597af0e30e5c2c2dea1d2bb44e543fd5753ffc5e777cfbf76b85330
SSDEEP 98304:jOALiySVy4qENAS6QbV4Dm/2wiSuoa+qV5Il83E:aiip0cNCm+WuEqV5w8U
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery execution impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.jetstartgames.chess

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.jetstartgames.chess

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.jetstartgames.chess

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.jetstartgames.chess

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.jetstartgames.chess

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.jetstartgames.chess

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.jetstartgames.chess

com.jetstartgames.chess
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:5007

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.jetstartgames.chess/databases/com.google.android.datatransport.events
Size 56KB
SHA256 e0a93adba7632b14b224008f1deab64079e95aedf04e590b8e225db4aa6e3095
MD5 f732499d26d26528207d26d58a95eabb
SHA1 4dc6040a52e039612fd3f2d9df7f3484ec0865b5
SHA512 d422671b2bc6c7244786c1d1bc7514aedb3f42308d3b1c193edea2208b19ab2b7f25e691c43f453b05ceaf0088b4dc7aab42a4beca34a7348cd1c8f079007611
SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSPFv4Fn:8MEX0wIyNjaw
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.jetstartgames.chess/databases/com.google.android.datatransport.events-journal
Size 24KB
SHA256 6d80c4343a40c5d29bd0a0a3c986457c701b1b997dc49b7bd75007397e41a55c
MD5 adcc0816b314f5f6b80888f2e66ae8eb
SHA1 c40e03391425a41597fdd09c2c19f2dbbffc4568
SHA512 7011d76938fa40ce5ee8f3c3c7aacce7fbc867e486c5c7cbc1682aac1c97544175a72e9d73ec850808ad7a43ad4ca50b1dc07a144d049e302ecaa49d1e365cd1
SSDEEP 48:7Mmzq3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSN:77zlMEX0wIyNjaN
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.jetstartgames.chess/databases/com.google.android.datatransport.events-journal
Size 16KB
SHA256 525df43bb8ca7d72596c56577259597f8d6f3e96bc209192b022cf2ae8271134
MD5 69d3d3230008457f100aca99a0805122
SHA1 924fb9f65016e92aea5493862332dc0a093150af
SHA512 18550f9f2de1c3e795221ec691160b16bc75c308afef130a0e7d546873f715e548b335581e83e6de24f3f9c08285f8d68e905986ad9ba0b140aaffd1bba13eef
SSDEEP 48:7MY3+bYpFnhw0vFAW81qA2g59MENZBdUdndVd/729IvdldHlq8/Jq4qPS2:7Z30QbreBLMEX0wIyNja2
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.jetstartgames.chess/databases/com.google.android.datatransport.events-journal
Size 20KB
SHA256 f565512a05e51645931b4b0704a7ffe15ab728448b0a3c0beaef5521506602ac
MD5 bf83290bb86acea418fc97da6064dcf8
SHA1 a34d389cc85a40a1e0e9a389a4414060da475fc2
SHA512 df1a8b1a3f35a64cd459067d14a52d53f727fbf35682e2f0ea87d2c1af47fa58e88ecee54d309aee657d60436d6d81cc7d73555c663d0dbbebc425b8e4b7e178
SSDEEP 48:7MZxFyqng59MENZBdUdndVd/729IvdldHlq8/Jq4qPSdV9qXg59MENZBdUdndVdS:71VMEX0wIyNjapFMEX0wIyNjas
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.jetstartgames.chess/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 26aba9277e85825b95936996fdc9a9e0efecdf531bc2779968d79e7e6cb054fa
MD5 70488f2e33d19557afa7cb1895bc2694
SHA1 4c5dd24470bf39580c30b4bdf5a684f085b02b70
SHA512 ae2abc521ac0ac1c042ee07321710e7c57e1c445dbcb0008b1b3a8c69c3d6dd7d3594a3fe23b59436b0f56af49576edda0c6c2a4e00547657624afe0515c0017
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.jetstartgames.chess/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 02ced092873ee1150837231efce2a4a3b7caa7aa78a3044f4dfedaf7dd53ab53
MD5 2568102df92b7e9a29366f3062be62fb
SHA1 60d04429d1a98d98df62072b03e185eafc24f3e4
SHA512 6ea1500a4aed9031ceeb74f8d65049933b1c3116ff4414992456f72c4c4159650c623da2541afd8ce665105263cf80c6a217bcbd334784d5928fa64b8cc36727
SSDEEP 6:7+/l9cn1Lg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKkRX:7+t4qLiuWdwRmBEyPb7X
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.jetstartgames.chess/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 824b745abd4bd6bd36471a8026a7e03f5d47ebe083002d4a5eb32489c72f5b80
MD5 9a349e3f667b04f9b7059fca2f96fd85
SHA1 9d100b12d54739ffca6981eaebd9b61d510f1111
SHA512 8871370ca386ee3873af3053bde27c471cd1f59332b9a94232b5023b67aa0c05b3e0dc5c80d6fcb9e091f008b3c19e1be2f3312fe5e7d74b1c23beaad3de7c23
SSDEEP 6:7+/l9hOPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKl6K//pn:7+tTiqLJdTRmBEyPbM6qpn
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.jetstartgames.chess/databases/google_app_measurement_local.db
Size 16KB
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.jetstartgames.chess/databases/google_app_measurement_local.db
Size 16KB
SHA256 b14ed60d5c33c444c47a8b50a5e85636bc32ec98d70ca0c4bc8503c526d0418e
MD5 59a6a600ab17308e36e2c0431847775f
SHA1 fe628137c7abd715ee09d3f08dd9aaaaf88b20a6
SHA512 b365470643c875f3022a47c8a7d6600358f0036c10c6f0a53cf68e163e915f235d3ae298232ed9e98124f4a609c9d260c03b60e869ec5359c85fde4b83856926
SSDEEP 6:l9bNFlsls1ylO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6m16:TLiEy9zmzrfRmBEyPbP/P+/0Fl6WNo7
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.jetstartgames.chess/databases/google_app_measurement_local.db
Size 16KB
SHA256 375108ea5473da5035b9f4bb947a7cade41149e34961215e6aa50bd145541f70
MD5 7decb4a8d3fa46e8eeeed3c4e802ed18
SHA1 7fc42e39bb6eab05cf9a701d5f5ce366e39ad28d
SHA512 6fa05b0cfdd94e79424d11ccb20f0dbaeb16efcddf676f5ce511848a6a8f2fdf6d8530832838797dd7be5164dd47619b976e520740dccd56a014f363dc6802f5
SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hr/gW49blqYFl5lN+/0Fl6WNo7:TLQpmzr0GSP/h1499FTlFS
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.jetstartgames.chess/databases/google_app_measurement_local.db
Size 16KB
SHA256 5efc7a85faf9936473b4e63e36667aebc9e2de9b9e2859e6174a06e16f96cdee
MD5 301543ed951b2099893673c4f5421c92
SHA1 67b4bf15e15f890fc9db26af7a3c011397351e04
SHA512 d09970c4819f897e7012b175318a34b85a8b0fda47b60e02694f4a682cc6aa2e58a3ba7e944d25929d26008c4a332ca481fb170d367273229bf4615965a688c6
SSDEEP 12:TLIEQv9zmzrfRmBEyPbP/JOLabCAUAMJUyWl7pKib49blqYFl5lN+/0Fl6WNo7:TLEvpmzr0GSP/JKabCt8dp3499FTlFS
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.jetstartgames.chess/databases/google_app_measurement_local.db
Size 16KB
SHA256 32b2a2354fa4ab59daebe1d8074dd72d404336cf9ebca78225cf1db3891fe04b
MD5 447781b9efbd46609b1c05a82e5ce60f
SHA1 8cc78bca7a6e3ab8c1bb22c831f4b2c14a943f4f
SHA512 9e1d799e99ac56eee3b8c4567ce104d83c7fc867eefb368238ef75a5787facde6520277fb0d705d85d9b0805a6cd1b89081beffa71794baeeaa8db21bd7208a4
SSDEEP 12:TL6uEp9zmzrfRmBEyPbP/uOLabCAUAMJUyWl7pKib49blqYFl5lN+/0Fl6WNov:TL6Xpmzr0GSP/uKabCt8dp3499FTlFW
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.jetstartgames.chess/databases/google_app_measurement_local.db
Size 16KB
SHA256 458aa953a9e0adbf5b8765ebcf6b51bc5b5a48b7664e85d25c7a8ce9781a2d5c
MD5 2f1eeee3602c828b8e9f81f6fbd20d41
SHA1 d240b568bb6929702815b9a5edd05ad635671caa
SHA512 a8642cc12cb9af0cd9d3fdc4bb1fe3b246d02af6b36714d80cdd2809def699b0b93eb585187c17f0a8e19801879e2e9edef7963ee416ae9e8cc35fd9cede2859
SSDEEP 6:l9bNFlgls1qlvlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WK:TLuEev9zmzrfRmBEyPbP/WK
MD5 SHA1 SHA512 SSDEEP

Submit Download