007c4b553ddfb2be137c81ff947d8a5a9545872b2454a857abd287ef073e5ffa

Analysis

max time kernel
138s
max time network
148s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
19-08-2024 11:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

neighbour-hello-v2-0-1a.apk
Size

97.7MB
MD5

57e3e5b07e9c403ce1522756496a5133
SHA1

0a1669dff5c43700351371e807268cc4b7834e85
SHA256

007c4b553ddfb2be137c81ff947d8a5a9545872b2454a857abd287ef073e5ffa
SHA512

98f9f65a9da8c07651e0dc6252fe96cbdb8ee371c8c8ca7612eb775b9cda22cb8adf8c09df52ed170c89003a0e1a0068eec3fa80994f3513f5dfa9823f6a970d
SSDEEP

3145728:q9+Nz1MSKgxDicE2uXKmdRIFP2dv5pvfDeOES6mGk/at/PTU/K+E6k7Lc:q9+Nz1MSKfc/Du+FivjRQP6kXc

Score

8^/10

collection credential_access discovery evasion impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.GamesRock.helloneighborstr
/sbin/su	com.GamesRock.helloneighborstr

Checks Qemu related system properties. 1 TTPs 1 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.kernel.qemu	com.GamesRock.helloneighborstr

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.GamesRock.helloneighborstr/cache/1582435991586.jar	4950	com.GamesRock.helloneighborstr

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.GamesRock.helloneighborstr

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.GamesRock.helloneighborstr

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.GamesRock.helloneighborstr

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.GamesRock.helloneighborstr

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.GamesRock.helloneighborstr

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.GamesRock.helloneighborstr

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.GamesRock.helloneighborstr

com.GamesRock.helloneighborstr
1⤵
- Checks if the Android device is rooted.
- Checks Qemu related system properties.
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4950

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.GamesRock.helloneighborstr/cache/.chartboost/session/cb_previous_session_info

Filesize
189B

MD5
0598e934a65b7a20bc9db6ca51033a50

SHA1
5de24aab15afa31a7c3a03c84314ad4e39fbc88d

SHA256
8d18054d5e29ce6facc0a4045f2a055e19aa05a683d245f5e6c093ae9440f913

SHA512
a30ea182aeb18c264f6b7bd8bfa5536ce8aaaf10d520129ae370d5ba61359be588e3fc584addd9eb566f8271c62dcf3b555ddfdffddb5266dfd7e6197507f634

Download Submit
/data/data/com.GamesRock.helloneighborstr/cache/1582435991586.jar

Filesize
9KB

MD5
e8e0527a01aefdb89afd2c508f131da1

SHA1
f1103e6b260c657ceb3d95f1b023af3fda8b133a

SHA256
f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

SHA512
fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

Download Submit
/data/user/0/com.GamesRock.helloneighborstr/cache/1582435991586.jar

Filesize
20KB

MD5
fde2ee00cbd121cfab5290b078aa3ceb

SHA1
e2b77d5320e155e413d040a8c20020962065b2f8

SHA256
2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

SHA512
a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

Download Submit
/storage/emulated/0/Android/data/com.GamesRock.helloneighborstr/cache/ga.sqlite3

Filesize
48KB

MD5
40b349de7a0164d5f5861e3b10f62cf2

SHA1
7032686c3187d39723c8a9a65ada5abc385fb3fc

SHA256
0fa61fa7e296d4c4bfa3c3a44543fb04643dbe47c9942eae52425edf1d914367

SHA512
9563ecfc9941058abf332f70a1aa954fed2326141406bf8d73161196893f967f7e4523de5492cbf64ab30c5de636d8391a4f1841efde901c651ef2a5eb8a3e74

Download Submit
/storage/emulated/0/Android/data/com.GamesRock.helloneighborstr/cache/ga.sqlite3-journal

Filesize
8KB

MD5
febd9921ab4836c0575c6fc5cdd123fa

SHA1
85c915bf08c66bf5192627035a606eb848696f0f

SHA256
ec0c26bc11f9553eb11797c2970d9aa2ef1c4d86fc1338dc132ab4b777748b01

SHA512
b32b69f8c7ef96220a200303ec4ee11fcb23f7da8f82ce993a4825e0414bd36136d4b43a7ca9552f3a9b93b160b51d8158a00d0e15624738e897af5f6b083dc0

Download Submit
/storage/emulated/0/Android/data/com.GamesRock.helloneighborstr/cache/ga.sqlite3-journal

Filesize
20KB

MD5
eee810dad832231f544f7a13c4299dc4

SHA1
da6a45a3f1d1ea71fab24051a739175086de2503

SHA256
5dc22ce2cd163e99f0eb85ab7bcd2a97906efcbb61d4f2bf0e971e49d7ad2cb2

SHA512
1a5fd0e3fc0a1cbb7008abaf915f094e032819b6ecfdde1f309c9a551bbfaea59dff6bbf1243ede62f8c740cc798ad636edcbde47bd8e7681e5d9241dc4e6c3f

Download Submit
/storage/emulated/0/Android/data/com.GamesRock.helloneighborstr/cache/ga.sqlite3-journal

Filesize
512B

MD5
67effa1d33ad3c63e3ae5cbf2246e0b6

SHA1
528d5d43fe2ef3161be5e5aa60aae24a66b3d411

SHA256
56344a037ca033fd669863bb5fab59512d5c307ea0cf29294b53c469cff12e6c

SHA512
251890af77b55be33328a93730503c07d15715e4369ae278e8c14a7ed95f4257aa6f213eef7bb71c55fd55fb9bbdeb48e37bb763d839915a421521f285748917

Download Submit
/storage/emulated/0/Android/data/com.GamesRock.helloneighborstr/cache/ga.sqlite3-journal

Filesize
8KB

MD5
59c92ddc8c1e2f1d09404771984c8df0

SHA1
c9a46365db9fa7453fb2efec4f3aa8513b06355c

SHA256
c8de0b5d1214a7ce4ba5f1913560db52f57277f846912cac549bcc7e0e8bf160

SHA512
5b50564312dba9d9969e9a6d2415bc7be40f668bf4d0d6ba00d70043e40b41d9a82229ff7a6c919f1e3e31a747d7c67da66802d8f11c42a0067502bf0452d092

Download Submit
/storage/emulated/0/Android/data/com.GamesRock.helloneighborstr/cache/ga.sqlite3-journal

Filesize
8KB

MD5
7d5c21a43fd1152623cf6461f2c6a19e

SHA1
49ba99e711b72e45eff97ad3840467be631bb0da

SHA256
3718347a131d83c86facc3bb61e2d6a279a99b7d33e76de46a8a1e00a65be1ec

SHA512
96a9a2b422503742c12a2bcb280106a05e1ed46c180a327b9a0b73e3dad5843abe69b4a41d8f4183b4bf1016886fa3e59db07d23a225bac3e4059677a99b560c

Download Submit
/storage/emulated/0/Android/data/com.GamesRock.helloneighborstr/cache/ga.sqlite3-journal

Filesize
8KB

MD5
38b952eafc8010e790c7641168990398

SHA1
8fab5523438e5fd40deaf591a0a5fe9e6f3a6c8f

SHA256
e88da2df12ed1928659a55930fd26cabaa3989462eefe25ffc3465c01f9b783e

SHA512
07a85cff8a3f088f3886747c3ddae412983ab1bded9289095a04a9a67e0b43d303d3a588cde4e7d79f35fe0e5d004a5e55df9ec3c92b145a591b11656d6ad361

Download Submit
/storage/emulated/0/Android/data/com.GamesRock.helloneighborstr/files/Unity/24bc561c-dced-45aa-9ec5-3bf5115d9260/Analytics/ArchivedEvents/172406604900000.0142604f/e

Filesize
63B

MD5
c40ec3d10e6da901cc55f714f63b6c00

SHA1
b130953220ff3a29b688289c69db89ef7a98d3f5

SHA256
c22c43af4699a4c03cc442e1778d9b7dba739105367078fa20106dc3400913bd

SHA512
155c025e7ac710f5ee088fb10afc22f0cccc17bd28d72511470836efeac16cad26314449b671f9c7e2d39a2c4ec8b86b5797b2e55f08d4e4b40287e6e83771f1

Download Submit
/storage/emulated/0/Android/data/com.GamesRock.helloneighborstr/files/Unity/24bc561c-dced-45aa-9ec5-3bf5115d9260/Analytics/ArchivedEvents/172406604900000.0142604f/g

Filesize
1B

MD5
c81e728d9d4c2f636f067f89cc14862c

SHA1
da4b9237bacccdf19c0760cab7aec4a8359010b0

SHA256
d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35

SHA512
40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

Download Submit
/storage/emulated/0/Android/data/com.GamesRock.helloneighborstr/files/Unity/24bc561c-dced-45aa-9ec5-3bf5115d9260/Analytics/ArchivedEvents/172406604900000.0142604f/s

Filesize
337B

MD5
0aeb571418a54777edffa0e159e2ff45

SHA1
18197b4d06a689daac47ba21fd8a52f676c5f65c

SHA256
c9d149dccc67e22380d8730f2200f68c7fcdba75789b31f76e38cce390098f89

SHA512
8ca4ac409726234404b6a4fe44229d301e54296a28535d88e7a1a0b129951e503f54a689355279f4f6efa0b60f4cc126649644fd957c2a27dd30b47ee283c183

Download Submit
/storage/emulated/0/Android/data/com.GamesRock.helloneighborstr/files/Unity/24bc561c-dced-45aa-9ec5-3bf5115d9260/Analytics/ArchivedEvents/172406604900001.0142604f/e

Filesize
109B

MD5
dbf7da203aad9eada0a593bec5980498

SHA1
4101101cf8e70451ddfdb4165e35b328f658b899

SHA256
2e91c39748ee0f99fee0038f7432789f096d5acbed65cb03aef4115fdf6f6a6f

SHA512
93fbc40b920fc159b75786950825fd3dd4649d60534daa4701e49aedc87756a6f1d142962d9f03bb15ab7929c9703944f30398400e73811c1566e186a4082cee

Download Submit
/storage/emulated/0/Android/data/com.GamesRock.helloneighborstr/files/Unity/24bc561c-dced-45aa-9ec5-3bf5115d9260/Analytics/ArchivedEvents/172406604900002.0142604f/e

Filesize
981B

MD5
458aab669457bb1094e9393f057a2af9

SHA1
bcd0e55fda9ceedf4a910c6c7c3cf124b276f23a

SHA256
48b32e994d5b3238ac43d141c18b4bc2440ae1d4c53e854f56de63b8998b1cdd

SHA512
3be7182206b920528864f55487282272809cb7dfa398d8a57e17371874d02a615943810a32f46bf0b9f30d8fb30e6d8917086ca8a9e8d8973a03989380dfe2f3

Download Submit
/storage/emulated/0/Android/data/com.GamesRock.helloneighborstr/files/Unity/24bc561c-dced-45aa-9ec5-3bf5115d9260/Analytics/ArchivedEvents/172406604900002.0142604f/e

Filesize
1KB

MD5
5483e48a29229de8fcea01d9e209816c

SHA1
24291b279437a735c13ab82f2d30f5b18e8f7904

SHA256
cf44833461d173010a797ef5a59cf9fda622ffba0a3e1ea27a1dad61f35db2e4

SHA512
6ed48eef9e76f34bf837232fd6785634d69091debfab2171b6db66db452b8c0d41b5b108cbaef352f6d188408564db78362701bd38631ac898e8f58874408a83

Download Submit
/storage/emulated/0/Android/data/com.GamesRock.helloneighborstr/files/Unity/24bc561c-dced-45aa-9ec5-3bf5115d9260/Analytics/ArchivedEvents/172406605000003.0142604f/e

Filesize
1KB

MD5
7f518b2619d938e31b3d2e8e943c0143

SHA1
a0b498e3fa8b302e0ebf656a795dd2b88322d27e

SHA256
f5c3075918ffa4b993c094d517d27384bde5837f80e7c16078affc314e32ee1d

SHA512
ce07563ae4594490650fb20878b8c2e759d3e7666f000676a80f58b28350133373637dba44ad255516c7da8fc099b14b058232272e0683c0628d3fd3518dafe0

Download Submit
/storage/emulated/0/Android/data/com.GamesRock.helloneighborstr/files/Unity/24bc561c-dced-45aa-9ec5-3bf5115d9260/Analytics/config

Filesize
293B

MD5
8673a8ac0b06a9d056d08d62f857ba4b

SHA1
a351bea1932270bafbe468584058fef20dcfc31e

SHA256
83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96

SHA512
edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f

Download Submit
/storage/emulated/0/Android/data/com.GamesRock.helloneighborstr/files/Unity/24bc561c-dced-45aa-9ec5-3bf5115d9260/Analytics/values

Filesize
156B

MD5
dcb06dfccaf87e473ec1145d444a74bb

SHA1
4d5ff5f9484c1501f402c8eb319dc55c3e139ebd

SHA256
264aa3aec94489af3725044248e9fccc965cc8958ab8078eb6eb97460ff3758b

SHA512
c0a0f64c75da785b0f4f4aa8acca73081556c7a546497819bdafeaa47673b562a63fa8f2c2a694e1a2ea407b26bbc59d07e83c50de209df0259badf9964042b0

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads