26c66da28ce0ed61a696886af8fcf510a0cf40d14287716467610e21c3645e1e

Analysis

max time kernel
19s
max time network
155s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
28-06-2024 01:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

26c66da28ce0ed61a696886af8fcf510a0cf40d14287716467610e21c3645e1e.apk
Size

2.8MB
MD5

f808f8871b6360e6a1a28e641adbbc27
SHA1

f8ac7955bfdf8f3303cea5a46fdcb359e7a36047
SHA256

26c66da28ce0ed61a696886af8fcf510a0cf40d14287716467610e21c3645e1e
SHA512

07f99ca702e7c8e4db6aeac14dd440bfa30d32a62a8665a527a8feee71bd3ea4868997e875a13b626985f9e84962898d7f0ada412470df8a13050542604acef7
SSDEEP

49152:sfngviGN7xmC8LQqVDVmRErDKv+NH/W1xvidHS+xLMwOMqFO3ue1B0BQHff5JxvA:sfng6C0C8LQq/rDKvgHMOHZxLC/83TA/

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	X.God.X

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	X.God.X

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	X.God.X

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	X.God.X

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	X.God.X

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	X.God.X

X.God.X
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
PID:4945

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
8eb4f2c6a96477a9e2fa931bb80ce7e3

SHA1
f3808ec69a1e31311db7555b6215b52eb3e4400e

SHA256
0bcd084c3a6caa339792e5cdc5a083c18848ad6c0ef318255fed2dd2ccf701a3

SHA512
c1097a7621b68e944ce84bb0f948b865e15bfe0f64223e7c654cb25abc4318aa169bbfd502381e4f8f7f6181548f4d4d58d476517f2431e24d933809d14b5dfc

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5846870285f36f2f6e7a31bb326e014a

SHA1
ec02052fa59f8df57e931dbcb9fb4d40b61a81b8

SHA256
ec7309977c12df2e205ec992f93118edb5d63805d416955a27ac9198dc1ec657

SHA512
a8a014ca5d4c5f834392fbb55046fffe325451a9ec61f231f2d35993c802b87ccd7a845fbbc99a2c2f4e89c2508cc3662b6fb8e9e6683c773d908db1debb97fa

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f5f30b6d923ba32be595a644ea8e2e01

SHA1
b167e2597e949db1b2d9fb729b354c7fb32ef1ea

SHA256
c2ff5e66a0915ff96517f4954ee3a1dca3f3198127d9d4cf7c4619969a6187e0

SHA512
f36cfb7beb604d3eaf466068c3c21c256cc8c112216548a7e586522bc128df1006ef323cfe5d46ada60429ae75d44094fa3c3cc6a6b4f2f3b31ce521ad79edd1

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
1439f397ed6cf0b55315d087d394fb97

SHA1
8015f6506253cb93cfbf67feb5f8b2ee5d48ff6d

SHA256
5cfb0f5c7490f8562f9ca13d077ea18a17d4dbd769a40a0c6fa2e1cc19f234c6

SHA512
307eb355a4a75a7f488a354deafb3560ce9ecc8c4e0826df999f3b80750630ecc26affe31c7f4ae331cac07b13b2a6923e4e57c3f244c780dc62649b8ac41e91

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
adf6082723784327d7d1b34adf974e7d

SHA1
b1502f70eb881a1dfe41139cb719fefb877ee37c

SHA256
252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

SHA512
762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
4580c6389dba9d4b423d65b0d21f6ac5

SHA1
91929df483c7df4d64a6963a3de6028ea3eedc7a

SHA256
519df0c515efca32601b2f07a93bb19e593b98a0c49d3f1f94388ebd56b36b64

SHA512
5f361fcdfca090f169ac190c9e1885a3fd77d168b54e97948e5ec0518b9de338253de5d1b9700dd9c6b9afb44cbc59c5d0e27530f10ab0211aa2b8ce0618b374

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
10f17da54a26185954a0cd63411137b5

SHA1
beaba9997f1ae1c2e1cd3f78ea94d0ff4d966b31

SHA256
34ecc0aa489fbe9e19dd0e26b4448a886a99bac8838d8973991f8447517f4d9b

SHA512
9757cd91a9c022dd800a842ef929fae25d3df180b105ff35d1061cd226a850737c08211cc2316f79781833f7813769dfef940bf6d27a0c7dfec2c9f1a6c11d0a

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
e08062b42f7b7c7b14d91fac1f48acd5

SHA1
176b8b87e3975de76795c46842f0b16410fb6df9

SHA256
895c470fd80104f71ec406d9139182756fd52fb32b7d3d76a61040a7834d1385

SHA512
a59043b80b2823c4d46b98a55cdfe77305986d07a2b45084d3b1caa695b4f53dcf6679fda82274bd7f2f1e0e17c35bf05cf3e851c7937dd9538fd0b22fdbdca4

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
3d5e830b8a9d4594221d80f6195fb501

SHA1
74ea17534281344af901476d5c7c78a045def1f6

SHA256
7f0160868d7b8c67e7f319d92e682922a7144a136ef1ebfe1ca0a6d7a6d1f42e

SHA512
0d65c15349ecede7bc8627afe90010bba6cd13b1b2a2a3199fdb9f148d9d6682fed41535e7110818a47bdead8a255320c9d2b5a926abb518c0911a144b7ad8b3

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
1197a503eada400fd8da6edcd4936cd0

SHA1
386c9fa658e36b0f5f442cd99cdc2854a1dc452c

SHA256
1a30a4033f75f5fb5ba31639101acfa042214b6549a8f0508a9c60eb9becbf55

SHA512
c3f6eb2fb03dbcef367cbacfcb1bc5304e232050df33ca6890f302fbb0ec8ae3177b06d7a7012d8a81ff5f08c0c71ee86f504349b510757a36f108be2128b7d9

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
099ff88ad11361e305263c8e4f837d42

SHA1
113a5d6f368c13af56596007f06aa27353d82cb8

SHA256
b7e7b1dfe72ebb9a88e1859daac8d7975ac80cc701c71d0c2a8ec422c28e2782

SHA512
5d5944ce819cd6525df94e97f7d644062763c0748a963eac06943420738b010a0373f9c52d3f60ea34b0e2de5e6c726fe7f5f6087e953b867f6530bea51758f7

Download Submit
/data/data/X.God.X/files/PersistedInstallation5343399815680850168tmp

Filesize
569B

MD5
f17d294b195f4d9a0779e7e4e2b11fe7

SHA1
c850152731bba385536ec2b840f839f4441f0c84

SHA256
30bb5bd4610a67ad16e49f107e4307d0775abd85675c267d4b3767cdd426ade9

SHA512
bb788a0d7737d3f2166792e6c13cbdd7a32abbef6c5cd9a6f836f091ffe3ff9cbc9d51905adabfe9ad327b6198b589f4015df3baa05697c8a11846b3f0cad046

Download Submit
/data/data/X.God.X/files/PersistedInstallation7448419241276887401tmp

Filesize
90B

MD5
d2746bef682a4207f7f680cb112dc483

SHA1
c37bf93b766da6c7650cc07169630ddcfef72c39

SHA256
c5186177e75e05ff9750ef43da27c9f9a9f31a6275383e6f93517d266447038a

SHA512
164af29593c3908162ae1df5876e19a422f55e6c567d161a75ee9ee11a57812ce100aa3156d07d4eb7aab9cd3075f83d66bd0ff757368c43269fc503d6c41d3a

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads