02603b05d5dc7d00d6538aa2beaee5cad0cd90c7a1e67cb01719cf0c58b70464

Analysis

max time kernel
47s
max time network
180s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
21/06/2024, 10:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Chess.apk
Size 3.0MB
Sample240621-l462wsvhpg
SHA256 02603b05d5dc7d00d6538aa2beaee5cad0cd90c7a1e67cb01719cf0c58b70464
MD5 a6640849bb820a969b38576cef1dd85a
SHA1 42af7d449256ee4c7ea8b530ccb6434527fb4648
SHA512 469562db48a53f7aa541409aeae5496feff5ef869c0b504be795954fe6014ca0c88f2f609597af0e30e5c2c2dea1d2bb44e543fd5753ffc5e777cfbf76b85330
SSDEEP 98304:jOALiySVy4qENAS6QbV4Dm/2wiSuoa+qV5Il83E:aiip0cNCm+WuEqV5w8U
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery execution impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.jetstartgames.chess

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.jetstartgames.chess

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.jetstartgames.chess

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.jetstartgames.chess

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.jetstartgames.chess

com.jetstartgames.chess
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:4481

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.jetstartgames.chess/databases/com.google.android.datatransport.events
Size 56KB
SHA256 24aa5a3abdba91c9b2b87f745102f299c45ede44f31b23e3ec7516cb3d436895
MD5 103c6e057973c1c1d1e4fc03b8916027
SHA1 28436d3512d0f66f2f8f2b819a0f931b96cbf2b9
SHA512 4a61fea24738a3954bcc9efe7d90c5c97c729e019f50da0027075d3b61c795abfd19d8140841b2bb7b88fdb62dc3dc5448bdd100def345e8d9970eb3363de445
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPS5Fv4FX:rAMEX0wIyNja2
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.jetstartgames.chess/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 69f140f3c9848be9760482959b6558cb8aa06799c3a2553c662feeaab21cc525
MD5 55cfcd925b61e167e06190b0ef0974a7
SHA1 eec71a13f8f231dd8c7cec9d20dd8cf43f3a041d
SHA512 2af1d2af354bf39d2f80b9d0ef038a63e4375831809186ef8aae55ffc3f482b986ba1e425db18728eab0d0c0c8ae31aec494ba5ef35bffc9281a77208cad7c87
SSDEEP 6:7+/l9IGPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK0JO9M/w:7+tG6qLJdeWRmBEyPbnfw
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.jetstartgames.chess/databases/com.google.android.datatransport.events-journal
Size 24KB
SHA256 8108ddcf8be1df588d701c2338f0ee334acd630aec914f94a784a8697b82f306
MD5 df01415ed858f78cc52190397726e911
SHA1 80ab1b3fb59f86a6f36fc10e009c33a6b53c7d47
SHA512 ea728165c1c03379008aa46c7e6fa97b11df72365e8997f692b80d2b6052f782d99221ae289a0fb62fd150ce1634a14bf9fd84edaee3e649e4298d9f1aa381e9
SSDEEP 48:7Mby6/dTkpRq/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSS:7UpK0AMEX0wIyNjaS
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.jetstartgames.chess/databases/com.google.android.datatransport.events-journal
Size 16KB
SHA256 8d68285c7899d65bcd7550da079ae1424e13b34990ffdada46c8e2e76765279a
MD5 23cf946e4069a441fdd42700aa2a46f2
SHA1 c129064937b5da7f9728e5f69a9e2a4c4db23ae5
SHA512 18b21f993e321b29fd1b781751b13857e790bd31bf9bcdf399473585af4ffd43f78001f062d2ff1dc4ba06db0d31bdf40d5b7c841d1d73292e0b720adb93c9c5
SSDEEP 48:7M+F+VYpFLw0v+W6QW8kqP3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSx:7rFmSbGpjkAMEX0wIyNjax
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.jetstartgames.chess/databases/com.google.android.datatransport.events-journal
Size 20KB
SHA256 01031874b61971b16fcc512adfc191740014baae4a614b3b1d7ce9cc5eccb477
MD5 629b7d67e52e8b2b35ab92abde32dea8
SHA1 24ea27c0d6568bf05f18d7c7b2c0169b0e92fac6
SHA512 e5e3f359910cb6a4fe7facf0d551e048f236b0df268c26e8818e406922421e120e63af2db1accbc29d78df5073ee6160c0352b11b5e1360b5fc1a44f9e200fe3
SSDEEP 48:7MIxFfqv3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSlVHqtB3g59MENZBdUdnW:7hEAMEX0wIyNjajUAMEX0wIyNjaa
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.jetstartgames.chess/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 6781454b7b9b3e7265acd8b9120be0121938221785eaa9a170e3889d72fda43b
MD5 5210c1a8088ffc18c964f1be154c8ed4
SHA1 e490ec9d8115d6e8724fc02b41d88778b6e7cf1f
SHA512 8bc5d086e9090fc64f223b247f0d7b6102c698c9eca993221911538203584ef493ee7228eaadca84aafbae70fff526de9657b0b650c7ccfb555a6936a9efd309
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.jetstartgames.chess/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 4409bfd4a5ae1e7fa7dab24eb0e8651d7ea8b931f1ce22f8eb45ac70ed9689a0
MD5 09fe59c3c1af826a6e71df5e38f00029
SHA1 4f6696b81df377eb3835aaf6aa61be3606923d4f
SHA512 c20f10ad699326f27e0a5da7d215481de626ce004047de967e52f71065cda3ce1bf27d0fe43a43e064a607c4e14331c0dc13b2ef2cb548aa3e21142a9444dae5
SSDEEP 6:7+/l9geUHn1qTeWWg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKq:7+t+eUhRqLiuWdYRmBEyPbp
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.jetstartgames.chess/databases/google_app_measurement_local.db
Size 16KB
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.jetstartgames.chess/databases/google_app_measurement_local.db
Size 16KB
SHA256 8dc98840fe935b0dbb0fd8f8b4dd3ec4fde04ead617800dd9445e90015459b7f
MD5 741a0a980ebaef3ef9869bde76c3cf05
SHA1 191f7e4fe40546739c20f5ca0708053a85db63ff
SHA512 5590f595212ed796195c50bb27d18ffb7076d842720fceb5c35495e31035c2a2efabd68a5c88429ff539d7a8ba563d607fe970b61706ed1dc86acc3e6dde60f7
SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6K:TLiEq9zmzrfRmBEyPbP/P+/0Fl65fo7
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.jetstartgames.chess/databases/google_app_measurement_local.db
Size 16KB
SHA256 208cb72b567da051c80929e65851bb42b44e8fe17bb7abd1e14db53aab3105d6
MD5 ead8c5e2c94f4c19dbd5be949d0b6b6a
SHA1 3a3c53c4ffc3d84c989ff69494a44e694ea67501
SHA512 eb09d07d608ce64a0c3c1deafe82ea67bedcbf705c54a46e06831e8ccb6d1d2f847bf15725b3978c94890338bc21a676fc68b387bf872b2261392b745b3fec50
SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFl14+/0Fl65fo7:TLopmzr0GSP/h1499FclFn
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.jetstartgames.chess/databases/google_app_measurement_local.db
Size 16KB
SHA256 98e97ec2a3c12c839662782e63dd16ff80d99820f365acaea2177651e711009f
MD5 7307e16e12308366384ce8c250a4449a
SHA1 fdde313f87addf120a4195971a87a63d1ec6aae7
SHA512 2bd2b7db6fc8c7e39a60e952b7ae653d3c0d86defe17df2bdd29a73ee1da8e4bd590d8a9bedf928866f4ffd3f68f7436f971b6b696aa2f90141bdd770bb3a879
SSDEEP 12:TLIEU9zmzrfRmBEyPbP/JOLabCAUAMJUyWl8I1oR49blqYFl14+/0Fl65fo7:TLYpmzr0GSP/JKabCt8mR499FclFn
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.jetstartgames.chess/databases/google_app_measurement_local.db
Size 16KB
SHA256 82cb199bae54e63b0e0dfb67d27dcedbb695d403cdbda3c6d91d55245576562e
MD5 e35c56aec41829e0f93ea83c7c0f9891
SHA1 dd440b6fcdba2b0e55da14ff523ad7c152e0fce3
SHA512 10bc38c3cf67745f3a1961bff24eb52bbc3b46d98a1dd12926c2abe450466354a7fee237402c9f84b2159a28748d6c73c83a9488446d086f610af2f82d6d49f1
SSDEEP 12:TL6uER9zmzrfRmBEyPbP/uOLabCAUAMJUyWl8I1oR49blqYFl14+/0Fl65fov:TL6vpmzr0GSP/uKabCt8mR499FclFT
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.jetstartgames.chess/databases/google_app_measurement_local.db
Size 16KB
SHA256 b4765a86f69c122307448d0c6e81cebd52ffbc59b0d19da42971e2857f773e6d
MD5 818548be1885386cc995f564f36a8e8e
SHA1 008b0c602ed55b1122dadfb3a20db517d55c10b3
SHA512 47840561a1eded73600b656576a7a9195bd1beddb79b08090b9e6bd9ab610de6cfb0a334310bfefe0b33ef157d420aaa17c6315fa2e689398da3328c4460a02f
SSDEEP 6:l9bNFlgls1WnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WK:TLuEe9zmzrfRmBEyPbP/WK
MD5 SHA1 SHA512 SSDEEP

Submit Download