643c1d5240fe9bc4c4beb2799d6647db58c35f8ac0ef40715c9b4a30f12cb4a3

Analysis

max time kernel
177s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
17/08/2024, 13:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
base.apk
Size 2.7MB
Sample240817-q2vcjaycnc
SHA256 643c1d5240fe9bc4c4beb2799d6647db58c35f8ac0ef40715c9b4a30f12cb4a3
MD5 0ab9ec86b5d33b8c4e10be8cae550810
SHA1 a535aafe5f236cf4ae0248d3eb13271ef1a7749f
SHA512 a2842a54622e122b75b0be9353aa82d1104cca5ed4fc706482205389b0065a4757218950589432d1e7bfe7ab8a796fc24c8e75f5ba2311f30a2849ee9785d94f
SSDEEP 49152:M/rWK7M6cakjvjyQrmVqjnkCmgXVA5ovP9ucIjRwwNPM/3UrqKsUQtnzjJshp:aSn6caUvjVKVZJglHXuuDCitzVsT
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	app.Madsal.org

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	app.Madsal.org

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	app.Madsal.org

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	app.Madsal.org

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	app.Madsal.org

app.Madsal.org
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4485

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

Path /data/data/app.Madsal.org/cache/1
Size 12B
SHA256 f164c2b5fd53b8a772dcab060642b37241218e8a26bb03d9b93040a96978f862
MD5 453a51fc681b0a4c692ee00a84321919
SHA1 dd37acfa6178d03c260e960aaba67d01d19ce08b
SHA512 4243eab3bda6521e575f9441a99c0906ec5637328f51720ae69b8ba85e54c088936424a322b19f7336c58cf3d400207c8cdfcf72c96e0f79bc94b6aa02d36279
MD5 SHA1 SHA512

Submit Download

Path /data/data/app.Madsal.org/cache/2
Size 27B
SHA256 3e95ce3e224f1179f83093432e03747c3f8b15b84e9052096f9e979d71cdbe76
MD5 ea1adc3a57eafdcec03587edcf343e30
SHA1 358286a31e135ca55b747fca085116fce4a1b2a2
SHA512 a25bdcfe3e68d7a97b25d041fb305651c92cba64c70b1dc25206fb089cca47782d77c07a753ca805f20ec3a7766b5d8937c28c3accdefd8f82e4e12ce2a50f88
MD5 SHA1 SHA512

Submit Download

~test.test

Path /data/data/app.Madsal.org/cache/~test.test
Size 4B
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db

Path /data/data/app.Madsal.org/databases/google_app_measurement_local.db
Size 16KB
SHA256 660422bab2fff4c95fa6de6010f470f01eb2e0b3f74657fbe1169bda217a5a51
MD5 fc3fa3f668275e043a55af9a36837b2f
SHA1 f78431c329473722251b19861d9d999d4b213f58
SHA512 05558d8dc184e185721c19a36cdd625d066404d71f81299002955d8a6a00622b0d42cffde554defd1567eb3f795f64797ba3989bcce149d5817a2a1d686daf59
SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6P:TLiEq9zmzrfRmBEyPbP/P+/0Fl6Qmh7
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/app.Madsal.org/databases/google_app_measurement_local.db
Size 16KB
SHA256 f46cc4d32769624ba7ec2636f6a8ef7814741b0e259e85018c33f3e888e3dff5
MD5 b90407a110b84183bfc7f239bdb72949
SHA1 b96f1edd0750718f771ac4b1ba36a5580e520d9e
SHA512 d11136cbc5a8ba4eec588062e663220ba60353a819b96eb2e0ecdd4c6e4b7967fd8f02a7ed598c101b2c8fe3f2d38ee8a1a9fbc49fcc6d12fd071c42aa2f9fc3
SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFlD/88t+/0Fl6Qmh7:TLopmzr0GSP/h1499FNtlFW
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/app.Madsal.org/databases/google_app_measurement_local.db
Size 16KB
SHA256 4b35fed711f696d69165178e70dd4763583395666b345f5f1677737b332312d0
MD5 aa4cf14ee9e65a63a8fa91fc81283a43
SHA1 2e3994bb3d8707de46d6831f2f1745e33fe32b9d
SHA512 0744a87dec68140096f673ff1a05406b0151f825a7694ac425998e73864cfb13df4a4f62a1f6f036a55cf761795837d54f1cf6402ee876700ba6372ca03a937b
SSDEEP 12:TLIEU9zmzrfRmBEyPbP/9FAiOLauK/6AUvkWlnzR49blqYFlD/88t+/0Fl6Qmh7:TLYpmzr0GSP/9PKary5t/499FNtlFW
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/app.Madsal.org/databases/google_app_measurement_local.db
Size 16KB
SHA256 f045b1014bc5d58f8a7eb2fb22980f6e2b91f66c6a949dcd667177d8a97f0c87
MD5 f5f90ae11d064c834f35f013274c0031
SHA1 7988c33c7e7888752f1bbb64375576e56d7a10d2
SHA512 5912fa5164dad2bbb7c5bae596bfd298a87bb16817d8c2da530c1d1428dc4738c8a476ca8028356ff5997dbd48d325f712bf3eadb23c8f3c146a5a36a7f84248
SSDEEP 12:TL6uER9zmzrfRmBEyPbP/sFAiOLauK/6AUvkWlnzR49blqYFlD/88t+/0Fl6Qmhv:TL6vpmzr0GSP/sPKary5t/499FNtlFC
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/app.Madsal.org/databases/google_app_measurement_local.db
Size 16KB
SHA256 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39
MD5 de82e2c94d2718988804b035a46d17b1
SHA1 705f5ff19093ad209f2a666085d6ccaed3bf58a4
SHA512 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e
SSDEEP 6:l9bNFlgls1WnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/W:TLuEe9zmzrfRmBEyPbP/W
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/app.Madsal.org/databases/google_app_measurement_local.db
Size 16KB
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download