19390c5069814743cf75a979e733e54846b26c38fef6e6063d2127d8fcd6dc25

Analysis

max time kernel
23s
max time network
149s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
26-08-2024 01:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

19390c5069814743cf75a979e733e54846b26c38fef6e6063d2127d8fcd6dc25.apk
Size

2.8MB
MD5

a9c325de4633252138fb2892717feffd
SHA1

c6e2cecf49e761cae125c8a7f1469535cc71d5a6
SHA256

19390c5069814743cf75a979e733e54846b26c38fef6e6063d2127d8fcd6dc25
SHA512

52a665c9016c4351bb59ef3a215895132d2e879b46cf4d3977bc6ae550a450f65d7860f7d99665d174ef54a5846f81d7ed2269a333290b1617d89b87c8d5e995
SSDEEP

49152:DTbdsl35rnglmqdJy2WTx8Xt8VaamfvXV+1tda1Mt54OLkf2fbFfNTeMv0HDHN:DHy0mqTy2UU8ViQv+Mt54CjRFTeMvWHN

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	X.God.X

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	X.God.X

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	X.God.X

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	X.God.X

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	X.God.X

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	X.God.X

X.God.X
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
PID:4995

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f972d40da020f9ab2a96aacf6456913a

SHA1
2a87831ebb91599e4aef0cc72548ea5e67719dec

SHA256
f51aa4d6612d618ae208a32e993decf5e9fe8cea3413a7b7e72f27f354bedfa2

SHA512
1753fb6c808eea90fd6cdbfb034816a98c0f0973fe22927c7497c2ea5b6b2f60ab36cb1dd939a841fcfed3dc463b255165cdca06bb6f4389c8d822a96bb381f3

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
9e79e70ff1ca3201205dd8e5d0bfe613

SHA1
38ade4542cf1b3f8fb5cca7f59dc91becac4c609

SHA256
6e904751bb0b0e3e374f15d9d42f1caf0ba24e5ed9e5122d2d4816e789948f22

SHA512
1a3934845a3a3f0136f8133447fb04010f6c35ab7d079718ba2f106b8d592f0d75c9852c6a1ab06062d9bbeaaea7c7dccede3ec6a9917738703b3069edd70672

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
8e93f6eba2c88894842e539423aaba90

SHA1
95de09c1c8c267b38124c8d13a073372ae290fc2

SHA256
66d8ddfc62e52a8ccd30c3990464eaebeea5fbc336eeac9d0b4fc5b9a71a6ada

SHA512
8f8f88da8f3d7a9283a6dff350b599c85df5162a17011197a6df0d67ef06d6455d9a243e892a1819c7bd67fd686bcfb5caf8fbd0c195f7708c9515ec24f5a6e3

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e9f5061c269a6dda605d8584adcb0404

SHA1
36ca527367bcb5d277779580eb31512166e5695d

SHA256
1463b5b560e82bec98c195f57ee3f5b606af545b6c64224a47dc11ac6e03afb0

SHA512
6da4be156c76e1867922c67a78cae9cbc95025c96ed10f547ae1f65a4e1d5bd9693a75ea22fecb12048c68d48ee7ace3cee357e9d1c7169ab06948a576a44e3a

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
adf6082723784327d7d1b34adf974e7d

SHA1
b1502f70eb881a1dfe41139cb719fefb877ee37c

SHA256
252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

SHA512
762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
05cd133fe7a3fb42363b352c84884e13

SHA1
4a85827bced2f85765edeaf999a4e5ea433e8861

SHA256
2e4252f327e818ab7b8d7bab136cea72928fc4b890f24fb62abfef976b5c25fe

SHA512
4b667d8123e09d228d154d725169131314194bdc2a2099437d9eda1955cc6dc61fcca74525ff4d2dbeb27bd76469e0ae5c4fcd671a30527a5d9f6de09e7fa7b8

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
315a70b6f3697716b92991c3598206e2

SHA1
cb4f68afb83a452998fda6c99d5b62b5a82c3f44

SHA256
07a1f618f7b10eb14fde67025318f67ed317e6b5248817d9f5b21d85c496b420

SHA512
c30cbac0f8576635ea06be0a6f9b3c05cb733ab9c84e9fa239bd2acdad55741f2ddc136e0ba763b910d2d70771f37e18a509df818e6e1c33805826b2e660a240

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
3bf8c8a4cbf3023bc2be023fddef232e

SHA1
9c00ce490ea8fc1f152597facdb079015f2c26bd

SHA256
f18b22adc0e044e30c82c5569a456687c8fb224736c41f214bbf222554ee42e5

SHA512
0c3268b0a57cbf9855cacf6c5c957cd6fa5835b772ee75ffb4eb9c03180b5c3e45902f33eb82bf3376128123e948dfb87dd4080b6d6fab1c4870503105cb0cc1

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
6ce369f3847060576f21c5e245948bd4

SHA1
1a4a695877ec9cf72adfad3f28fd958553a8e435

SHA256
ce3a91025bc242664d023f8a932d68e3102bbe5441f533b3c7d46cbbf845e3d1

SHA512
9dff22031687ecc7f7742964e3d11f2f2f9f0ca7644c041d445fe72f5a2d4b37b68f8b5730d4c31fea8e26f55e2799435793a2cb6c3e19f31ba91c4db14301e5

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
897ed74ea789689a232aff11fe103ca5

SHA1
87dda3cca0b34a4c5fe51713ce407ce87851e323

SHA256
084ce30396fd301e74a0e872c139173b121f3cd9388ced6e40c6b347490c233e

SHA512
ff01eee9c6d46661f6dabaa2fc7758d8a5a2036e230e5fb44f5b323f532477395dc786d63fbd21d6b1457b0c31917c6dc380fe6f578ac62a5e63377f1c3d75e9

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
ebbbc0a3c27b0e7c606ad225d0a40d81

SHA1
64868c1b0e7a65cf822614f5ea04c5c1572c0929

SHA256
8768a4ea7e66fbf87a48d30c98dde65796604e7068c5dbfbecc5c1e3fe7c47f1

SHA512
a2e33fad190916eab906c3b25ac8bade035098bca4b94c06dfb9943293061689cc0fd3cd7a9b7985d6da892bde5f5b04e1b4a058ced0bd3339fa3ae10fcf323e

Download Submit
/data/data/X.God.X/files/PersistedInstallation795776544566069876tmp

Filesize
569B

MD5
b8c4f63945f0d6550dad1c218066d91b

SHA1
60bcade6200ec04ab53241a0a28c83e1bc7a801c

SHA256
45af9a05aab854de72e841f33197359b5c54a5209d799e232878870a10309aed

SHA512
3afa0e4516baf0c632e236baca0f9e3db51797b01b59a325f8db43cbe9fe03b5a75ec83f67281cba5481d5b1af7cf9c249984784cbad393b255d36ba95c82917

Download Submit
/data/data/X.God.X/files/PersistedInstallation976732147972934404tmp

Filesize
90B

MD5
74ffbfdb3c3261f1b9ec8a34f53a3201

SHA1
6d550726f990dd392a20c67295de251fe22dd802

SHA256
1773876fc7c93261cb76b6593bdc1d5c1d8c9bfe02f99b0c724b0d223f52bca6

SHA512
c94adf91aeb00452da00fb94bf93ea6d5c216291c7a56d90bddcca4c845c03576aefdb1ec7a76f356a01c371cbcce2dfc6454173e1eb7791555c93b699c6865d

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads