b89ecafde09182f1b0eaef752d5a146c465e49d51840a9b571a63d359fd5efdd

Analysis

max time kernel
19s
max time network
177s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
09-07-2024 02:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b89ecafde09182f1b0eaef752d5a146c465e49d51840a9b571a63d359fd5efdd.apk
Size

2.8MB
MD5

ff04ad3b47d9b71753545bc02dc8c33e
SHA1

184b7979dc29ce42fcbbb033671fb928e695331d
SHA256

b89ecafde09182f1b0eaef752d5a146c465e49d51840a9b571a63d359fd5efdd
SHA512

6937975030162551b38e8d91a35b175009be470d66eb30992a460c3c9275f16e8d58295a7a20cc5e544cfb3455ea247d3c22dc6212d791de06c4ea6758dd9d6f
SSDEEP

49152:mPSe9096pV6rX+Q1VpBaHoIkoo59X9SABZ+nm98mFBXAwtWk0ESkbUxpP:mqe9b2rX+QFMIIkh9tSABAngW6qP

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	X.God.X

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	X.God.X

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	X.God.X

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	X.God.X

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	X.God.X

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	X.God.X

X.God.X
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
PID:4968

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5efb44b0ac507998c31924ae72af1d8c

SHA1
42a35482e6479cc67059d2e2d57cfe0d260e93fe

SHA256
490d90c3af0406879321bb77ea1dece08ab5f01e162c1ac4e8db7f8918449b5e

SHA512
72774b78110bbfb07c993a448365b74efc5ecc1940d63f491067c16755e5d3eabf0d915729a15f3b72fc41dfce1f351c25f0a3cdef9400d80862bc195b93d099

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
b62a48cb85889c6746c59b000ccc2e83

SHA1
49a04aafa5ccf1d7d0fe995cf83186a3c18780c5

SHA256
a580d59bd290194f7a1050d62c3215c50ac69371f7ba17ecfcb73f03d720e34d

SHA512
dff9d51516279789662ef59cf8fe33f749e57f35c379f81267585e4274ed819ab719ba635105bf3c88904d82976ef04fc5d68117f1d105478e95c99c0d2e4205

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
9b3cfec48876ef58a5158e826b270ead

SHA1
710012923f6162d81d59027390301fbdd84f943e

SHA256
97021156bfaba59639b63942d15c363b8cd32c46ad5c996d87ae7bc15b0f69ea

SHA512
5d21bf1e44c2ee2eeee2f6f9b7b87f6baa91eb8fc943ec3a83c80f659dc08f762addf78bc25004422e13123da5bca6a0ba44219532c892035ba629bdd9d905a2

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
cc0b1689c3c44b38edf546803719ffc2

SHA1
b6974b7d8173e37402bb6b17130de14a1b6a2e11

SHA256
e64331953be5e05270784be30e95e17f16662e9ed573997f8d47abc466230741

SHA512
bbec894d983019fea195580f6c53d95985ceb30f16781872069ad11d3c19c37e1664d3386dc7005d35b004ac462eefe10cf9ce4b0ba3d9b9088620daf96cbfe2

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
adf6082723784327d7d1b34adf974e7d

SHA1
b1502f70eb881a1dfe41139cb719fefb877ee37c

SHA256
252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

SHA512
762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
cfad646707f9b30a50b29ca397ca5513

SHA1
27ce58e701400d6aa5de20ae117a97eb95e60a75

SHA256
48c3eb53ac5a4fe33d453cf0ecc3c1729fbcc4aa8159486337b4110237d84831

SHA512
a8d4cc96eed3f17d3fcb2f5077e456a3fd15fdbc2dc05f7bd2cad398206e03684eaae1d612cbf2510cc0113b397c80d80a690cc0b2339f13883694b3228c015b

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
6f7984dff8413489489db0019866745e

SHA1
b55a696089e070c184c329dbace22e3ad3ce67bd

SHA256
9ea7ccff7986a7362f99de36ffb3a2a6c647cc8b04a18f9e5e94779ce958fc2d

SHA512
127d8d8f0f4305d4b5b5576544675fa288dedb1b8b496894847023730543aaa76b089445b65788528bc790843edecaaa459aa1e73de8aa64eedfe8eccab87167

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
12d3f7a81368aa122a21701a13ddf183

SHA1
198e09a3a5fbeaf46b0925066764fb13f416a5cc

SHA256
11a70eb5d74129c6bed1c482bcf7ab4220f3a33ba91f52c1829217c7e6f0c7ff

SHA512
e0d92d75430d91d697b16699be96fb31a1fe22684db19a99d2307ef8d49aca449778f1aa5d769abb752a8ab8dce921589607424fdb02d32fbdaddab30644d2cd

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
2ef3c3169836a51591e3dd500e508bab

SHA1
0ad7b53464c889d500e773e64888fb4796581425

SHA256
05eea4a2bd68d5f316265a3ddbea131926f7979a9cffc3b15471217c76c032e0

SHA512
ad0135061de97ff5b77b044a0ae0072495c6640238a687d1c5523881face6f21a2457edf1d999cb1e5529ac9348493c81eeebc787a22be95c3461245cbd6c0db

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
051e7781e2d62bcbdd5300092b06a468

SHA1
c1f27a920bbf7f8d1f7c597df268d48f78c091c8

SHA256
2baf1b920a5610cac241aeedd652f0442967a08d462c0ddc066ca681acb961c0

SHA512
60cc3b530fe7c259d3ea79f7685c230e4b83f07d0bc54b9cfabff61bbe70fb03ea6fdd10e5d307f5a2b21ca7bffdb71e10ad292c48d7a9444aab7d01d3ab6a90

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
4ea0b2f89e26dea1aaa5d4c3b41cfb88

SHA1
7b06c305dcf618c541d745bef0659c41614ecd5b

SHA256
438d6d4094fb748c6e4a15bb2eb90a467162e5eedb890cb58f66173088932a14

SHA512
cffcae9018eadbc9b18bd21797f73db9c7be7580361c9c0b820cf2cc0ae265361d6055c95a807ba957ccfa20338e2ada3bf6813162e226b6e8187b235406154c

Download Submit
/data/data/X.God.X/files/PersistedInstallation3881303871238766925tmp

Filesize
90B

MD5
b9243906e75737b1088db9caef3d797e

SHA1
4ec7aa7d14d7b8264438ab2f06eb34f7a7504ac2

SHA256
29977aa1e84cc7003679d1b401f50ec33807afeafdd05c71f346261d7bfef2ae

SHA512
cbdfb5a6491a4b9a9f8a8d6711b199ff2365ad2e461921fb186e6efc94cd2f67b8bbf9d8c7c35abc0a361702c45a32689e8ebdc0711ef7ba78963768c256359a

Download Submit
/data/data/X.God.X/files/PersistedInstallation4487561045353776271tmp

Filesize
567B

MD5
0f9fac62a6d489ee41349b041bb6f497

SHA1
499422bbbc4411a9b3dfb7bdc7e21071e591736c

SHA256
3c8e46fa032ab6931419122626648131a29aa1bace86318c9d9a002afa537487

SHA512
133805b6cf2e9b169f49c23f188f7229cb781a4b4d0b7fda5d4b1174143295ffec32af8d15a10b5c78509a4a8d3e266e87e904ecef9ebb3dabd056e54c708e3e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads