3457a979ae9bae6023a5d33c398e53e7f21c5a3b8fd7a6e8d31226eafff62f46

Analysis

max time kernel
6s
max time network
135s
platform
android_x64
resource
android-x64-arm64-20240611.1-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
submitted
23/06/2024, 22:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3457a979ae9bae6023a5d33c398e53e7f21c5a3b8fd7a6e8d31226eafff62f46.apk
Size 2.0MB
Sample240623-2b3f1avera
SHA256 3457a979ae9bae6023a5d33c398e53e7f21c5a3b8fd7a6e8d31226eafff62f46
MD5 0da87220efbe34e3151b20439e444e91
SHA1 721dc8e63fc4936294ada2b2c235f8b127ef3d50
SHA512 f4e91655d7013f2b8419ce884e6fc3d6da12f5f3c77df736824b42c9985438ba3dd8db0d191ab2026cdf6b3f7bdfa086fd927285ea1fa9533f7a4f303ddaed1f
SSDEEP 49152:JtqZOULpfYxr7v6fUxUc1dTFjJtYVzsbHod2ZrXTI:JsZvlYxrOcxnnRXQzszod2ZrXk
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.lgcareshop_efusioni

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lgcareshop_efusioni

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.lgcareshop_efusioni

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.lgcareshop_efusioni

com.lgcareshop_efusioni
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Checks memory information
PID:4474

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.lgcareshop_efusioni/databases/com.google.android.datatransport.events
Size 56KB
SHA256 a03d9cd4144d7465b3e645d35bc42361eec91bf47e47b0a5e6850a9e9debccf4
MD5 3edf6ae3babd283011a2a38af22b36df
SHA1 feb066e6c30666a726fa668d13503a46a603f1d2
SHA512 9ab3c091bb659b6a7fdc05db4df4fb7b8affa3cc45c4ef26ef5bd49833a5579972b2a5a8633a0bc97e9fbe1b137d1bcf1d58c57164a4cf2f89192393427abbad
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSmr:rAMEX0wIyNjaU
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.lgcareshop_efusioni/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 8829d4e13bf05444f81e9fdf4a279fd502709f801862476ffd4518097abc2135
MD5 846d059abb868b764880006c058021c3
SHA1 7eb3cf015abcf57807e242c154a7866461ba636c
SHA512 ff4005934ec884687701a4e8af28183278c6c3dd3eff332e0c401e6568a250c35225d16127a90f7bb8880351b5026ce2068bfd2ef223e32a703f916796a2ea22
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.lgcareshop_efusioni/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 25ab27095f421c8eae5717032f66aab74426131433c370513470a8dd30bdd75b
MD5 fb7efa783f6fc191b0c0616ba12af44f
SHA1 da83cca7b6d48acda70e7bb277fe89eea41ab3ee
SHA512 877ba3f2a5b70a660202e72585323fc10ac328e399967067eff65113cedb579eb2f3e02382d8b1d628095aff9279b2732a0a807ef319d0d75691717c595c50cb
SSDEEP 6:7+/l9+L/Gn12LRg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK6mn:7+tmtqLiuWdYRmBEyPbLm
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.lgcareshop_efusioni/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 093be9de2263627ad68e97baca5e780ba2f12da9dad93ac47e6fa36e95b6397c
MD5 4459d82caaaefd9387422a320516e598
SHA1 ebb6354de6274aa4c02022c25bc0d3b265d70f8b
SHA512 15a1af37aa28b9981c71eaf12053248466427db8d4c19ef2a0ca1b4ae724239d6a4a0fdea09a32fbf4ad14d1471df4b2c06a40106ca30724d4b48956d20cc8e5
SSDEEP 6:7+/l9GZPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKh/ua:7+t0FqLJdeWRmBEyPbOV
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.lgcareshop_efusioni/databases/google_app_measurement_local.db
Size 16KB
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.lgcareshop_efusioni/databases/google_app_measurement_local.db
Size 16KB
SHA256 81926f40ddcd07c7bd58e98680c6bdd1016e4ee4112cd746bc3804df12288e90
MD5 a9dd7e588302a7ed415864e544940f49
SHA1 8b1e0a541be9aa07d42739b0c4047e23bdcf2ab6
SHA512 81014154247a2fade05eed9acd698a5b4f93ec779a1c59e24cd1ad613a57d2d12fdf1b7ae8a5c985cd3f243e0a8b205301aab98b803201979e47502cc64f4c50
SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6y:TLiEq9zmzrfRmBEyPbP/P+/0Fl6fy7
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.lgcareshop_efusioni/databases/google_app_measurement_local.db
Size 16KB
SHA256 a7abff5c7deaef054a87c6079111002ea2449fbcfb2c5567f8f68200f574bd53
MD5 c61e6a378a4dfb8d4968531696d6414b
SHA1 43129f4a7e7e4cb51065f763cbd5517c0b6c6478
SHA512 9a7225028c9c163f90b2de33f7f6aff72a9186f7a81a692754ee5f40198ae351aca017d4e087691cf699ca65d764f66b1845cf62cf8d70d042a8d09daab70908
SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFlBQF+/0Fl6fy7:TLopmzr0GSP/h1499FAFlFqa
MD5 SHA1 SHA512 SSDEEP

Submit Download