42557a21a58510a23268509e4457921f81b507b9d407e42f3365a6514de1baa6

Analysis

max time kernel
19s
max time network
156s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
09-07-2024 01:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

42557a21a58510a23268509e4457921f81b507b9d407e42f3365a6514de1baa6.apk
Size

2.8MB
MD5

6bac095ca7c3546e1764695f9c09474f
SHA1

5d729d4f4fcbc98681ba7b1478ca89b1131a0d8b
SHA256

42557a21a58510a23268509e4457921f81b507b9d407e42f3365a6514de1baa6
SHA512

0bade827030293dea806ef2a5dbd31e37969759898d6541c82116281f7b8f81f92155618df1fc4743885359b487937381f225274cee60c7ba6e8cca5f2aa2ed6
SSDEEP

49152:Eiu3F1J72GkfbDVJZYhXnT9/gHKPE7Zi/cNzgLNNGjCYrHPgDf79:XYFvaGszZYhCX7McBITk9I39

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	X.God.X

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	X.God.X

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	X.God.X

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	X.God.X

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	X.God.X

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	X.God.X

X.God.X
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
PID:4930

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
77bb7ab4d83a9df0f602fe1c6ceb994f

SHA1
96acb6424e13c71be8395a84c40b64042a5e21cb

SHA256
94b957a76d8ed37f6f0adbc9aab660214e2df7ca8af3df714bab849978cdb872

SHA512
8651c6935c3087c19d7a62f7833b03f7bea46376a79748437630c2254e9d06b5078dbe97e91d4f378dce735147cba7d8481def040063ab522314977e186c3805

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
28702ff527c0fdc2e50367a4b0621645

SHA1
157924245e314072a10116f4bc6a0dd0492e7d9f

SHA256
730bff9e6645142b6063455f5a658c27a8ee34f2143651a3e3aa035824a9d14f

SHA512
142473fdb8432c60545b02f31e5402e2eedf7e35f8257369690f34edccb75cd519f343781b96f382d502a8d5ba1d1bea009be2cf4bee93efbf2f5288be8ba85a

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
17c35a8edbee94539c31094da740fd5c

SHA1
2b24ab0406e8ca6f4c1fb184ad4f074a8ecb5caa

SHA256
df6b9dc7067116e2aaebd392c7b20a9fb01afd077bb1c9bc21dd7d0c3d8b5e2e

SHA512
91ac4545dde0056c5b4807b488af0ee3a696b0e4a075d28f8be4aa1b1e1f8fffd257a3178a9cad8a144b991a4ee49503e2a89c266fcbe0cc72cc6d0372d7be09

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
243f6d5d917aec442d22fda4d5fbc3a5

SHA1
5b07f3e4319b40512483b9da618aca9ae87dfee4

SHA256
fb25b9b35b66ffefb2f000bffa364c21a9e98a3c14b5fb34e9787f7a5bbccd74

SHA512
2d4d3c3e0d16890ce9e433bd95d42e795c174841a27735ee77cd1cab27ae103b5118a059a1ec6687b0917fe7e224a02d098b484a361c573cd1f44f5376cf773a

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
adf6082723784327d7d1b34adf974e7d

SHA1
b1502f70eb881a1dfe41139cb719fefb877ee37c

SHA256
252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

SHA512
762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
15af404c9233d3e0b534b50455bfd150

SHA1
3f55959d0aabaaaa0fd539c4b9c09d1ef4916bed

SHA256
8b371b9ce96cf813f5891d3977b0fca848112775e70b56593a687a241144e630

SHA512
3bfd2cab453c21f69e2827af48c6ad7ceed38cc7b31dad4e850b051447abb0161a55f95a448521d8069fd0a563b84941c4825839e7c7fb69461ab47720c267dd

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
ce81c5464f3909b6798a40472f429e27

SHA1
a8a28788a3f3cf4964b1d25a06076fe88f55f37e

SHA256
adfbcb664255912d189bbb149af050097a0a8eaf22766ffa1fda766e8532255e

SHA512
d21410de367947d4c1c99ceae2c4af6d1324bc8ba22b0a2a99a0659cf892e13ecdc9c8bde7cf62efd90b838a4e14f01762e69597b317de012b76eba09ae7c9a5

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
4bf05cdae9f290fb409239dac634fd18

SHA1
ef1c739d1ca3aaab98cf9c7d987d4c065ee36866

SHA256
038454f55d629721f2a0d4783b1d80acd26cbeadab9a05143e6ace2c9aeb3846

SHA512
6390557a59fe84966dfc12cbc9c238df19cced67e9510dd8d2004011e6bc066e16143f011b10c0bb84ea5ce96c863e7717386dc25c17edafdd6fd97144d0bf04

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
5290e15623ee859866e963c9d4c3d47b

SHA1
8f66d93661db5252e3834ca7d46bc2982cf9bcde

SHA256
c67c17cc00fbed5dd1c93ebff243309e5286877222c0a305b3034f833b50019e

SHA512
2c7abe7c53b0d7743d37af6731143dcb4dfceead0b85917ae3867d8c5788de39cc9ebe4c59c85d3c8ffa85c928b2c029c8ab917faadb61160562f03a90a2fb23

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
7a2734e2161a3a288ea0562f77134996

SHA1
337243cf41de874c192a6bc9c6dcb290abe4c921

SHA256
11b67c7d34c45afc19140f91fc08d7e143b4a8fbee770b373d42f9c3c2461b28

SHA512
2c4d0c6121d896324413d83b35102a3bff9040b84a13306cdade0412ada6061e3260828f765b3dadb38a1c12b1765ae2329792fd15f46c835d05cdb85bd822f2

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
ef557c150519a10ef93a704cc78a377e

SHA1
8ce072b5a603b747d45a37d16369fc98530842b2

SHA256
3d8c35425cb3aec8448bb52180ebb4f34b2658fa209e27897f8c4bcd4776fe13

SHA512
140fedb170ce723d71048e9fa9b7fdd440ca19b13a5416a02f586842ca415272abcf5de93f483afd21f726ee586c3a95a9410218fcea409c27496fce7f732eb9

Download Submit
/data/data/X.God.X/files/PersistedInstallation4339162116339790136tmp

Filesize
569B

MD5
7562135c2b21f6d9fc6ddc730fa2751a

SHA1
6426b0470afb65581bb8c3b1998c806e75db1961

SHA256
60d496d815f033265abfcf825bbc6a17bd01a9454d72efdf85e0e745c9b2ba81

SHA512
6869a466c0e6f9dfadf3b91feb1c4d7ab789be432bd01028d51678ce7a002aebc8c5504f06898147fe955df1c8587242c338b33d6639b91d56542080f03e5c98

Download Submit
/data/data/X.God.X/files/PersistedInstallation7774015650524077746tmp

Filesize
90B

MD5
323f06d76049b5945f7d57e5cd3a61a5

SHA1
f2a1c0234374d73727c858a1a44d7744f11611f0

SHA256
1d38c222e3d8a5beb9e97d37a4c4afef9863104e09a8c8521757f116c9788e0f

SHA512
3e6eb9eea5582babf337525f01f9e4946bd2b8e9e0843c0917b3a783b51ddd82dbe2c46b76988fab5a543fcc869327176a6ac53aa3361fe90d4d970ad4bbaabc

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads