3457a979ae9bae6023a5d33c398e53e7f21c5a3b8fd7a6e8d31226eafff62f46

Analysis

max time kernel
8s
max time network
133s
platform
android_x64
resource
android-x64-20240611.1-en
resource tags

androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
submitted
23/06/2024, 22:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3457a979ae9bae6023a5d33c398e53e7f21c5a3b8fd7a6e8d31226eafff62f46.apk
Size 2.0MB
Sample240623-2b3f1avera
SHA256 3457a979ae9bae6023a5d33c398e53e7f21c5a3b8fd7a6e8d31226eafff62f46
MD5 0da87220efbe34e3151b20439e444e91
SHA1 721dc8e63fc4936294ada2b2c235f8b127ef3d50
SHA512 f4e91655d7013f2b8419ce884e6fc3d6da12f5f3c77df736824b42c9985438ba3dd8db0d191ab2026cdf6b3f7bdfa086fd927285ea1fa9533f7a4f303ddaed1f
SSDEEP 49152:JtqZOULpfYxr7v6fUxUc1dTFjJtYVzsbHod2ZrXTI:JsZvlYxrOcxnnRXQzszod2ZrXk
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.lgcareshop_efusioni

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lgcareshop_efusioni

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.lgcareshop_efusioni

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.lgcareshop_efusioni

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.lgcareshop_efusioni

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.lgcareshop_efusioni

com.lgcareshop_efusioni
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
PID:5139

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.lgcareshop_efusioni/databases/com.google.android.datatransport.events
Size 56KB
SHA256 17c5fb2b5a3d34698d59d668298467f69144c89f803b11f32a2a555455027771
MD5 54c936b8f69a0697e0f70a4721cb0b85
SHA1 dc89d45bde5dd701455b79eaf3a34adb9e9e3e2b
SHA512 4eefe85a417ececc0eed9a772ec62c758fbcc69a2bc93bdf772ae407d5352993113fdf179db6343288b705e2dd3612085ad6599d4445e693b54be698b780f9c6
SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSE:8MEX0wIyNjaE
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.lgcareshop_efusioni/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 ae964af5e9589dfe1935e5762f9a17db6003738a09c9fc1af2515cdb516a6063
MD5 954b8dad415fb642bdb8fae5264b97a1
SHA1 672fc8367fbb9ac06a81f8d10aff1117e91432c7
SHA512 1851791a9eb4119f6ce431b2ae9c4f4d996f76a4706d4006a42d25b49b624d8bc30e40586d7ddcab1d798c13f9f235b2258977e1cd1fae7973231c35744861e5
SSDEEP 6:7+/l9V/lgPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKEts//dn:7+tLt4qLJdTRmBEyPbxsXdn
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.lgcareshop_efusioni/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 71bb8a200c39698a39cbaeb1b0d01308ad8d2f90bf2ae7bcb47e4e2ffe85a0a7
MD5 de5ffb6f2e6b0d9e5d5f5c0d2ec5d0f6
SHA1 bf5cf1316d68c638f6c341d2d296b0bf7dbca018
SHA512 dfc73e54b385cf52902f52b0ca5b43895db4285accbd7e6163ed76bb05f9ee42667adbf00017164ef2e79f6cbc985d06ce5ba8f4b5d6030709c3e2607df88234
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.lgcareshop_efusioni/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 555c7e34f20e9ab585b1e74a334327ca48f0b9fb726b83b36156f788a3ee452b
MD5 247fe2bc811f299ed3a5d4578d3125ee
SHA1 eb60c9dc078bd2eaf30261df31ebe11d576bdeea
SHA512 e7111b8184e6ed2d28ae9321eba20bcec5cc2e664ffdffcc83d615a78a6e45cc985fce0660c605361f72d22b96399c18eeeb7f45095d8ba2867367c3599dfa4b
SSDEEP 6:7+/l9YOfn1AVg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKp:7+tRmVqLiuWdwRmBEyPby
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.lgcareshop_efusioni/databases/google_app_measurement_local.db
Size 16KB
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.lgcareshop_efusioni/databases/google_app_measurement_local.db
Size 16KB
SHA256 dd2589df0ebbaa2035c5d8c3318833d000c5e2f5fb028bdfa944c611f9e4aad3
MD5 ed99f1946d633c50f6275a1e1c6c3572
SHA1 30d33bb41b5b48567b64bde4f7498db8ce703d97
SHA512 77dd9e64a3ec7e852f9af59f5a1f9151a2664cd514d68efa53220600608cda3a3ce24f12c74163469b5781a8307c2b69aab0f3ddac94b5f18958d212668f6b8b
SSDEEP 6:l9bNFlsls1ylO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6eXK:TLiEy9zmzrfRmBEyPbP/P+/0Fl697
MD5 SHA1 SHA512 SSDEEP

Submit Download