5604a97bb438d66e71e2dc85766a6afef45ff29e4305dd38ec9a6c3dde356e54

Analysis

max time kernel
123s
max time network
162s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
10-08-2024 09:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

base.apk
Size

3.1MB
MD5

a83594f9fe6de44660884e1b126d26f8
SHA1

3397315e766395b5e35771309b833d37e34f6d5d
SHA256

5604a97bb438d66e71e2dc85766a6afef45ff29e4305dd38ec9a6c3dde356e54
SHA512

c42fcf479211266ffa186aabb9832f38fd48cf69e34cbd89b69ab3f79f7a26788c4c63dbd68bd47bbb51804624b428b5a5aaa01bf215f018455c398ccabcaa06
SSDEEP

49152:A/coYJslBHFyaFOD8TsWYGpS8oWvxK6Nj7LjfXsgRkXT3yA/PIWW:OUIdFdHTsWYlW5Kwns6kj3yGIT

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.Mad.api

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.Mad.api

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.Mad.api

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.Mad.api

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.Mad.api

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.Mad.api

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.Mad.api

com.Mad.api
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4936

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.Mad.api/cache/2

Filesize
23B

MD5
96193e959baea1e2f27d995ea1a78f4f

SHA1
35ca86f177dc40ee897051d7a25465229eff16f9

SHA256
5b8965479df32457034e64cef1a1c6c5f1012c3af1c92123f11f8321b28c5a03

SHA512
cf6acd549795ee14ef3debe06f22f021c13ef3108228ed5b8a8cbd837f7836680646aeb4a5119ecb9da8ffd8917dd8f105be2ae442c7401a1ebfa5ca3120413a

Download Submit
/data/data/com.Mad.api/cache/~test.test

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/data/data/com.Mad.api/databases/google_app_measurement_local.db

Filesize
16KB

MD5
35e61925c878720c19d32f6b18cfc3d0

SHA1
3b4de8d61c553d27167feea199acabcd673e9191

SHA256
0fab538610d8680a6b3d56a10722797362d41f64c8733059813d48443ba7ff48

SHA512
9f1fb3d00a2551eea11395f9908da2fad670fa39be954758d8572bf7403c09a211054a327d9199e4a92f95a13dfd88b0e17f1056b613b9f1fa80257169070097

Download Submit
/data/data/com.Mad.api/databases/google_app_measurement_local.db

Filesize
16KB

MD5
1ae46254446c2ba7fd169a3c98792a6e

SHA1
c7b835da80e63d4cc7440e8e092ff8e8b596e935

SHA256
7db67cb2237647e9284c1f758ac1caf3936372c8ebdb460396166e7c7ed07802

SHA512
a9af3d85e29cc0511357ee2f65469d4933c55b14b44851affb6a423ed04b5f9726bbe5416f33cebf0c97ab4795fdb7625d9d7bcc1e3a515b49731ddb54ec56be

Download Submit
/data/data/com.Mad.api/databases/google_app_measurement_local.db

Filesize
16KB

MD5
ea08abd5cc3ca90949e5a1876e9c4996

SHA1
35fe3d56dce97510d6d445c50def8c83f7eb1acc

SHA256
b2deec317241b03ffc065309b4578b9d58c5b5b06f8955132b50568e73fca3bc

SHA512
14c3f2937db3d5151df367c6e5553e60e62250b1e04a5e1dfb1ef4380169955c0b80e69b7a37472575472733a4f243f104f592b543973f05e670d96b06443335

Download Submit
/data/data/com.Mad.api/databases/google_app_measurement_local.db

Filesize
16KB

MD5
6d5566799684a809914eaa277caf97ce

SHA1
58f13387a17783deba1fe991ca709719f6c3b3ca

SHA256
b1db519b572a72d0e633902bf795e121562ee171c4d335e71d13be2aedc5bb76

SHA512
be8c6afb0a02b990821305a12177fc6781797b1d65e5acf30026dcdbdd85113b618d5ab12dfeeaa3757f3deddfdbb222e7b877da33fbb2f51eb662a2284c482c

Download Submit
/data/data/com.Mad.api/databases/google_app_measurement_local.db

Filesize
16KB

MD5
adf6082723784327d7d1b34adf974e7d

SHA1
b1502f70eb881a1dfe41139cb719fefb877ee37c

SHA256
252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

SHA512
762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

Download Submit
/data/data/com.Mad.api/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/com.Mad.api/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
c1702d46a4721f8a5924f161c3623b33

SHA1
306210f1fc0fbb1b951fd10f43e9c0d6a5664344

SHA256
cc5507b83164dc8206871b28b3902379cf9cb5052609fbeadd49a3c243a2118d

SHA512
57bb6ea476fcb80a11f21c3b9065e391fc4d916b313c50aa3195d0618e1b98a7d47f40d49c6d45b8a6a76cee40b1219776e2fe3e65ae61c3f952b6ced23884d1

Download Submit
/data/data/com.Mad.api/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
86a5878a3f1b44525e1339fb17de8d71

SHA1
91462030c36ce3f51d8c085dcbf3822d0c9f029e

SHA256
4f83204a0194f7d150fccd8b10cf83e833b8d326f432211b7c7f4a5081655592

SHA512
1f90f272b5b26af55af537fe7188765969e6af6b572757cbbc4bf031f4d95816dafac761bd55fd4a019a8d317af9e67f6fed9a865d4163c745c27b44083626e4

Download Submit
/data/data/com.Mad.api/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
fa4a7efd18d4d2a7cee152061c701498

SHA1
ef1afde885246e6c88e3bb81b0458c5dcbb06020

SHA256
137dcaa0c4bbb04cf7a5becdbca8a30acbf0f2ba9af0cfefedcaa857206d6ef2

SHA512
0a72110a44ba2edbbd9b2999e763bc1edbc8ee1eb78b7d285f7796d44c4a586bd94d4400d56ddf6c62ef79fb7397ee97ee62c320f9df07ccecc8e130007d7c69

Download Submit
/data/data/com.Mad.api/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
98d36f988eb0703a55943426ab0aef9e

SHA1
01002fa8594e449147852616ad0cdc263480ba8f

SHA256
b879694637353538a95f3c9fecce99d7784b85fdeb580eaf7eadea26aeefff3c

SHA512
63303425b772a1cd0ed53bdebcb3bb494fb5c2f016608823faecffeb1152b407fdc8c31f0caa0ec04c9b79b2347fcc309c253b982d80ebc2d5b129f58b4befd9

Download Submit
/data/data/com.Mad.api/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
ee112433351c0d9adf45dda5c74a628e

SHA1
4d7b085cc50351773b43bdbccb03ed7893316bee

SHA256
9149579f1cac3bd972bccfc052f53e1082f173cdf90030f8f9bf8e108c270681

SHA512
a0d7233a6958d5616d8ba5ec45a48db315be67308a8ce9b5302d9a13f33d589d4d44b01bd540a8f22743d9d7b06e498fe7d3191ed4be63dd1bb74fe45a55a9ba

Download Submit
/data/data/com.Mad.api/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
1eaa1e693187eb28909cc274803a532f

SHA1
67b5aad32f5b5edfd7e8658cab88dd0bf6c9ac92

SHA256
10da28a8966b5155e57f42ea7a2de85235eef58e1e662e447a9f77033fa81f8e

SHA512
a7d928747a97f1fca1a94c34dad4bd92aed8dee7e967b3a4e7e3705effb94ea62415964c27beee224d68fd6fbed211d26271f085df57746d1fe74dbfb5c5c726

Download Submit
/data/data/com.Mad.api/files/PersistedInstallation2138258760768752656tmp

Filesize
90B

MD5
81bb3a370e93171a15d17600dbe6eef6

SHA1
1193691c23eaca068e4a8f9b86f1fea55ae8abf8

SHA256
b4ca3217c2440b53349088295b597b4713eee85ae5b47ae41a3450a122523df9

SHA512
39b8a3c4c520321677539d480e3a7f21333e7b3dd789ab1843340408d162ec21244bd67a0001309702823b12af0405ad6605945a52c145e5d4d553afb9e12c35

Download Submit
/data/data/com.Mad.api/files/PersistedInstallation2924089867942749460tmp

Filesize
570B

MD5
abb77964f009f3259eba505fe49c383e

SHA1
a2150a195dbb4ef8ee1da606c17e786f498f04e5

SHA256
d8a373ab1ce7a6d8b0df0cff1eaabebef220c7f1c9ecbcd641687b1456bd3941

SHA512
c78c8e828ce9132f6a9e83845deefb66031a5e029ff6b341d0f56fbb46ec5ec412cbfd0bf6de1e8d453f14b7fa3aa926edd4e6defc9a5b8314c2778465bce594

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads