eec0d50edd567380624afd661d28b7cd7851b78d91b1e9bfb76315557f483242 | Triage™

Analysis

max time kernel
17s
max time network
28s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
25/06/2024, 10:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app3172065-bjzfco (1).apk
Size 23.4MB
Sample240625-m2wntaydnr
SHA256 eec0d50edd567380624afd661d28b7cd7851b78d91b1e9bfb76315557f483242
MD5 c1aa8227db55f71591c9578a9dcd97c7
SHA1 d1920b2af34b8c014a9575ea7c1bf4ca3bdb84fc
SHA512 d2fbdb00e7c88761a5a24000938a2d1f06c6521ea2f6fe27a0d4924d619ed701b4f8d6158e002347a081f05f9046107816b53e072280b2108c9336a8f2775188
SSDEEP 393216:zzoqBdG/DG5cOznhqVswKkz6YNhRt5imkwlt8EKyHnoGhGMhOM2YYXwBh:zsAdGLGPqVfKkz6YNNY6uGIGhFh/Ygr
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

Download New Code at Runtime

ioc	pid	Process
/data/user/0/test.aplickdp/[email protected]	4337	test.aplickdp

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	test.aplickdp

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	test.aplickdp

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	test.aplickdp

Checks memory information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/meminfo	test.aplickdp

test.aplickdp
1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Checks memory information
PID:4337

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/test.aplickdp/databases/google_app_measurement_local.db
Size 16KB
SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
MD5 62ad4a05cbdca7f47b3206b7dbda487f
SHA1 4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3
SHA512 0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6
SSDEEP 6:l9bNFl4/Sls1BElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEBE9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/test.aplickdp/databases/google_app_measurement_local.db
Size 16KB
SHA256 e3227a16e493bd6cc46cccee7d713a83e3ad27069f0ab61096e5e999450b64c3
MD5 3f1615a061fb262274be6c8e6eb54142
SHA1 5cc357e2418ab13fe888c3feb12aafd30d782e29
SHA512 c079f4a16ad2056c2c092e17b67c256bfef75be55d005b2df5cb7501bb438a678c6137984fb4fe1e4b590ca59ef6424d3746e3b44ccd9666be3eaf650782c5c6
SSDEEP 6:l9bNFlsls1XhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6SE:TLiEx9zmzrfRmBEyPbP/P+/0Fl6Sg7
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/test.aplickdp/databases/google_app_measurement_local.db
Size 16KB
SHA256 a16ff759d5d211a25ef55732d96aac00d075f112fbbcb3d5e4a779f184ca48bf
MD5 6ec246e7e30beb147c49befa77ffcf40
SHA1 5f3647df0f5e12477ce39f5c553e69b85a0489df
SHA512 d9fd3a15840dae71930b251b79235b0853519f30cd2fefe6fceb27fd979d0b3da4978c5382caf5bb85c8c3f23e9402a2d378957014c0945bb5c7470d13500719
SSDEEP 12:TL1Es9zmzrfRmBEyPbP/hr/gW49blqYFlAS9F+/0Fl6Sg7:TLvpmzr0GSP/h1499FvFlFXE
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/test.aplickdp/databases/google_app_measurement_local.db
Size 16KB
SHA256 4fca798c57c924c035f7faf0969885ac1e5386d198056863b319a62b89f37b20
MD5 ad44b4c9f4f5e927ef0cd21c6f3e9d11
SHA1 1e78118004ba015cd57c0c8ac7e87a029f0bcaf2
SHA512 296b4aa799abdef66e23e56cf2da01c1738eee7683ef23d23de06428d0fd4245b67fb9b4c0215e996e80028e69500eb249fb65b81bb7090e75df57886ad5e779
SSDEEP 12:TLIEsE9zmzrfRmBEyPbP/6cOLaJBzOAUv+WlxK+449blqYFlAS9F+/0Fl6Sg7:TL/pmzr0GSP/6cKajzO5s499FvFlFXE
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/test.aplickdp/databases/google_app_measurement_local.db
Size 16KB
SHA256 2ccf57693f35b4477add6b4e5ed88fd29ced2c0fd0f97131074be618352c1506
MD5 005537387257dc440c123a728e4ff411
SHA1 0b6e21684e027559e1283ae30a3928769977385f
SHA512 1832f500c091ef3c6d4a1377eb1bca47b8391ce9b8cdcdfdafe8a963193cce0b3807ea0f94cef7e8d3b23e15cad4cd6c067a3e9e51776fd3f4ca2b62f32ba061
SSDEEP 24:TL6kpmzr0GSP/wYcKajzO5s499FvFlFX8:T2kArSP/wYZa3O5F5xs
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/test.aplickdp/databases/google_app_measurement_local.db
Size 16KB
SHA256 de836975d2182713d143aa7158dcb93a4b1d022c5202a728838dee88e83fcf65
MD5 c5c5c1553577a9ba87c0cd2918ac11d3
SHA1 3e24b0c3799e5ce00325d845f8e6728fd1bcc89f
SHA512 6de6bea1633a49566cc4be439792b143926e15a8fbcf643649c93385dc36a765a16a6a8502bcc2822fe9ac3f2ddf3c4e0b6a942d015432baa5f2f6b84c65da4c
SSDEEP 6:l9bNFlmls1dhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WPSC:TLUEdh9zmzrfRmBEyPbP/WPH
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/test.aplickdp/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 73bb58f68d75b57138a9167ac5352e1dba0b64ee476ec5520b9566221e652324
MD5 61a1935fcc3ac366e99530b63a88a2f4
SHA1 9f5a20d0fa7672f80ed8f82b5911d338cd791d33
SHA512 b3ff0e479ec091572407c33abdec5a4c7c9a0b82cda0f61155cbcd3205c0b360a6519e45f842c53d7ea21036a82f5e574bc2f396961fc2fba0bf39f1dc5b38d7
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-journal

Path /data/data/test.aplickdp/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 dda5e2021788c9fe4c00749499c77a557954c023ce44c6624e3d0fa24eea3b55
MD5 5513cb1b1bfb2293623312687f35176a
SHA1 4bc054a3ada55876528e095cc5f3e3b46958b089
SHA512 978a5f29e67bb2bdd7997c78a732f970b69f24ec25ad8947ed5e1f51b3a1beb9052d377d65ad23d608790800874e67886577ce3be0a07d34f49e4f30ea5394e2
SSDEEP 6:7+/l9pOXOn1Sg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKy4:7+tiXpqLiuWd7RmBEyPbD4
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/test.aplickdp/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 de7f2271f0309aa7dbf530a26678f3b9a44caccb07c940efc936937d4ae01d6b
MD5 f2db773b2729751c034eea2cc0b1ea56
SHA1 45ee078f8246f5fff6761e6dfbf85a8705e45109
SHA512 2f7956f681753a3c1c309ecf239f1ea813d8c95067fe809c8b9df2fd3a688b2dc0996f210250e857566dd3b16a4d579609844c4a8a8e0ed316aa5c05bb1fa3ae
SSDEEP 6:7+/lAUHPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKk:7+tAUvqLJdKBRmBEyPb3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/test.aplickdp/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 b79c1f3b74ac637decab5d691e593424f0a6290fbffde231a87a6d28e1646c04
MD5 f36d5c996ef2a5c6a214a36ff3e842d3
SHA1 18f4036528ad71e8b82cdea2bb04bbd88fbc0503
SHA512 6197a116a30226cf2d905bbe07c219a48d7b80fdfddaea7346e7524a70ecf6b1388ed8ff5b10be433a0c5b5816e2fbcf5f059b0390c32fc4c23d728c8002cc20
SSDEEP 6:7+/l9KuGPg9bNFlqhO1oAlOERX4PBX4ogLugMBX4suuKs3N9M/C+:7+tou6qLmq9RmBEyPbps9
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/test.aplickdp/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 91fc213ce24e66744f055317421ec1bf6db6cb409f0354cadf5af34e72658e32
MD5 c99db320b51c306b02d5d930005e351f
SHA1 8d1b02c95295b1f42cd6e6f67d585fc733de9051
SHA512 c344bb3bb3543e7dd1ad62bc94b14da86ff722705d548b684b9cf6dc7c9271a0d2d93e9dec35c5b766dc7826d3c0fd2e7e3bf577267f407ed971dc546256b47d
SSDEEP 6:7+/l9+fg9bNFluls1OElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKo:7+t8qL8En9zmzrfRmBEyPb/
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/test.aplickdp/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 709901cfeb3bfd7dfdf72bca4926bb2d3ebed77e3435d62ab3c67645cde5cb24
MD5 35f7814f5a151e0dc60f0bf55ed37282
SHA1 6b4ef8a3861a5273be0a70109429c3143f3f974f
SHA512 04b0a751370a2aeffb5256044cf484c64929daa1fde1cbae5cb47ab51524317a228e67b1ed1a01e9020d19a46aaf62c12a9ada1a425054a19442b051c23285c5
SSDEEP 12:7+tk1ttv9hv2wpv+WlxrMGqL0WETE9zmzrfRmBEyPbQ:7+tkDZnOQQGqL0xEpmzr0GSQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation6780852374655096583tmp

Path /data/data/test.aplickdp/files/PersistedInstallation6780852374655096583tmp
Size 561B
SHA256 8323b97c5c7cb6dc5b14038a64e4790378bbb5b707b189682f34c52018e38c09
MD5 5a728a38011a78ace308b32115289f8b
SHA1 40a25415e16f92bd8cf67fa29a5212ff2fd3d245
SHA512 eb9a43311a34da6a71e2cb9bf0d2b00781f704bcbefa4c885c773051833fa9f05b4b81bbe94a28b548bf80a6ad0d3402d52e2d690c99e6e39f8287354dd24a6e
MD5 SHA1 SHA512

Submit Download

PersistedInstallation8223441339976056328tmp

Path /data/data/test.aplickdp/files/PersistedInstallation8223441339976056328tmp
Size 79B
SHA256 fd694bb9f2f42e7b59da0add2785bb5dcd69b6139640e530f6a53a7ef3edb18d
MD5 ba5408effb3672bdcdaefb67b2e64e06
SHA1 df2006224378392d196f0cae95077e5c0d269837
SHA512 2a107babcfcb8bbeb3d675decbcea0cff271d84d90bd4cd95db10b42446bf0eda26742662a82c703a62464e9f026395f1de94f391dc37ed86a8b8930b97cabd7
MD5 SHA1 SHA512

Submit Download

vinebre_ac.txt

Path /data/data/test.aplickdp/files/vinebre_ac.txt
Size 19B
SHA256 1e2ed3697bb4e3f063c880a405e4fafd972d98ea9e40b38e0277b2e1704f4640
MD5 9fe70ce3134126438da3dd4c048f611f
SHA1 7f3da4ff8e96d792308a9a65eaf72a1e1a513b25
SHA512 36c383dfadf456c75e24dd5106fd4352d85c5a4da5892e7d80c608bf28177ef0c177e87c753312f45227d69390ab5d662568bc3d7484e7ed24d6b1eaf8b67b9a
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/test.aplickdp/no_backup/androidx.work.workdb
Size 4KB
SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
MD5 0eb157e1a86d4d00aa601dd2f6ff3ee3
SHA1 fee434f784e73cc7916322e949f727caf8363102
SHA512 b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/test.aplickdp/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 18d0c982ab00b1fa08c94d03353860e65ab922101f663be77e84f38fbcc96ac6
MD5 390ba191caca6417680b9770e29ea1a4
SHA1 0181e6e15826a784152b5d64fc99229e4f501f7a
SHA512 a766934315269ce3d4efc3384cbff530e9edc3d900ad4a386866810f2e43e6a7ea44b347edc0f36619df888507ba030c4739e1194bccf7b6a45bed517326ed37
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/test.aplickdp/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/test.aplickdp/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 a2576e849e32f0adea5f4b8735f09cbdff9a45df2934b2a46d776f07372a64d7
MD5 f3e833e94aecfa0a14962d4e33cc16f5
SHA1 ba5b7fa102a502f9d608edd7b07a95bf790d65c5
SHA512 0c813d407f3bb2551a01f0c6ca24d8822edf3e32ab4c66da7e63eb4fc44b2d7ca40bff4fb2d355febe31a596ae365ffc4edcb735fc9ece2f2c2df7cace87944d
SSDEEP 6:KiR4QJ9FZdKEAlOERX4PBX4ogLugMBX4suuK+/aGO9c9RVovS9pxLiOw2:KJQXzdKBRmBEyPbP/3O9MR+OphiOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/test.aplickdp/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 a6debd92270a0ae593c9499d3beac8116f4ba915f603c5aca3d0ba161c2c61d9
MD5 16eb0dde5d785d1b38fbd5fc1b4d24f4
SHA1 e7c0253102c2827658b50252cd0965736722ec7b
SHA512 5015d5b6e0d89cdba99d03ecb7928514fa91a7ff5508c3ba3076e741983eb0c74f5d37c20829e8593f31e5c66bb5b386bdc31a1a662d6728b322ee06c63a2976
SSDEEP 96:M6+hdjnHtDRMpf8UzS6+BD8q0ExPZFH+8:odjnHt9Mpf8UzS6+BD8q0E5Pe8
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.InstanceId.properties

Path /data/data/test.aplickdp/no_backup/com.google.InstanceId.properties
Size 2KB
SHA256 209d6f9e68e660b7a922a0be9a15adcfd8825706df629ac6ceb09f023990331c
MD5 d0391d8d8b917385619bff282bda8517
SHA1 e93aad8e47d5f62f18364c19c3c1a1417f80c762
SHA512 debbb4c679243896bfb149a0bf002aea6dc51dfaa8b3211dc1e4f1539d30922524ffcf8535142d4437deaee1538fc4ff9037551f5a9f8e7a12435cb3d60ec6b7
MD5 SHA1 SHA512

Submit Download

[email protected]

Path /data/data/test.aplickdp/oat/x86_64/[email protected]
Size 58KB
SHA256 bc4a104c0af852a3656cb15d7ba2f088c9a460c2bc592fee90c8e9c2c67940c9
MD5 b448fb261d50cf12b1b66a122f7f1e8a
SHA1 8e3b4dbe798eebd5db29c797d474e40b6e85c38d
SHA512 57fb1ff77598b1381cfc9fe75f46a4b126210fcef4d0425f3ec68a49f9b6b9fad6b629b6d1d5d14396ebcfa54b526477e91895e6355043f1532ef274c5d5082c
SSDEEP 768:XEYugcQGitDAWEkV2NqqpYsRh1UIVr8wJu0VZvaM3o5lmOzRNjvjzi19:KgeWhpqpp5UI58wU0VZortNjC1
MD5 SHA1 SHA512 SSDEEP

Submit Download

[email protected]

Path /data/user/0/test.aplickdp/[email protected]
Size 3.1MB
SHA256 8e632284c9b0180ef28e309b4b0f282ef608cfb9d9046df899d8bdac227ea9ce
MD5 9b8164be4f0ffaedadc82125e5346c14
SHA1 c4bf7a6383958b493ed5c4dd6a19862d366fca4a
SHA512 352b3e9ef70839d0850ff7ca4a1f19f3df546412ae5cac1243a80588e573fea6371edd4c408a2edf1b48d70a10a5cb579513d3cd38a4b5ccf4b7528dd28704a4
SSDEEP 49152:ux7jXNKo/ZQTdFJ6UhCAiclpDjCxD2lwhn16L5BJq:upYzfl1xFJq
MD5 SHA1 SHA512 SSDEEP

Download