8e00e43db6939f7aa53999cc8d8d687625c42a1c707ca74b9d540514cdc7d65a

Analysis

max time kernel
21s
max time network
131s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
29-08-2024 08:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8e00e43db6939f7aa53999cc8d8d687625c42a1c707ca74b9d540514cdc7d65a.apk
Size

2.8MB
MD5

4c307e6962c91e6ba9a7a85f662f5db5
SHA1

c76926b8d6af7f8718510c200f2083f842ba1ac7
SHA256

8e00e43db6939f7aa53999cc8d8d687625c42a1c707ca74b9d540514cdc7d65a
SHA512

17112c92ba8ad9a36ff8104b6102d33308effc4f520f3f430b2dc00ffd50b1efc4b9ed6b675597b57b9809e805ddaf99553069a7882e62f0c6191c85a4e52cc4
SSDEEP

49152:uPSe9096pV6rX+Q1VpBaHoIkoo59X9SABZ+nm98mFBXAwtWk0ESkbU6Yf:uqe9b2rX+QFMIIkh9tSABAngW6af

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	X.God.X

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	X.God.X

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	X.God.X

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	X.God.X

X.God.X
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Checks memory information
PID:4637

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5a73079a57c8edb6fe7d87bb75b8b096

SHA1
2abbbd78d92a13ade5df76dc7b6f2e61b3069a0f

SHA256
33c442dda2aeb6fa11abaee5ddaf7080c19b7b4f973dafb22d5e778cc73a1926

SHA512
0d0ddf442e19b751b6d826376a40f8d8d72dd73a07adf4ac01acf3c1597850a297295fab16d6a747d678f79770e79143eddb25c222b888719959f612db30a260

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
46bdabca783c98220d41c3e7b0d34c66

SHA1
d99c73f03827687dc546d682ab605c08c4131e36

SHA256
eb47e4ce3d7035937a997807dda010d0fc4cf85178437f878eec9068d61b1055

SHA512
44876263399b86cb6c6f31ca69deb2b80c694811ffb7dff32685dd46144ab1cacc11bd70f00bb3a9a1f39e435163a1962b2729cc6d89d99f993195faf320623f

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
b3d6eca1f0a611e50952b62ae87e0efe

SHA1
f19763bb99731d19a8d82564247bcedec82b24f4

SHA256
50313a8a932cb31b72fa48c8de2544c7838c072e83746e3b7bc995ddb20ffc72

SHA512
ec4bbec8d1c16518c877d89a800d83712c3552193d396121409336eb2d4eae73480ab986e24a9a5eddb585e418b9a9cc1eed9b22ceb2765bdae36739ba4ca43a

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2335076ace372caed15990aa4a87af90

SHA1
4b1cd69bfe5bc5f81048b2e4782e934cd14dd033

SHA256
cba035974dc2234f9882fad7cc1a546de1ba976d45014a6585d220b7e7a69036

SHA512
c43420592314a28dcfe7ee6b454217ed0ae79fd1f2682b7b658940f875af00f62b438cab57e9f7136c1031e05696e1354f45942ca45484047729005cc8078a29

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
de82e2c94d2718988804b035a46d17b1

SHA1
705f5ff19093ad209f2a666085d6ccaed3bf58a4

SHA256
29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39

SHA512
68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d9cf75fdd1c2292d986f6c3d5d60f2c8

SHA1
07ecb1d3a26d952ae5fecf54f36699ab498510b1

SHA256
2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

SHA512
442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
c729f0eafd657769afe20a0fab62deb0

SHA1
56d104a4273207995e748b5816e2e9cc1ce30b5f

SHA256
7a50189db9e71d7ee666f75ad347233b6279f31ab6038b22bbf9528ce963f16d

SHA512
970706f4b3d715ad3a9167853b6e259dbc77302a62dac4508cf24cad3d4c0ae3eadc9db799fb01ce1be0e79073a560c5c8428741c28f9d0a1e26a51b9d6fe5a5

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
9ba5bc5c9791aece609ca5b052718ae3

SHA1
aab4bacc81c3c9b192142748570f24c5759eb393

SHA256
7fefa5b10f1f4fd646b7cedfb52d2b708a005de77e3454da8e79f8f7926e738f

SHA512
2123b4ef9c572912c2d11378ea4828e787b1a29b477518fbb119d02f2354deb10d4b8fb022fdb2efe1f61cbadae363f3aef90e1e408e53b1b4dbe66705a90dc6

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
07d0350620ddfa1ad72acc1876ff00b7

SHA1
5b7459d21db446c74a6c1b9e3ae47d78b44ddf83

SHA256
0be8ddc7d2c6c3cebf25131d9ff4298cafdb385d01b4fbd9645317bea80a9fd9

SHA512
45b2d624e24921146a3f14b1d96908659e611db75e7d2f41680580d58636948fba584d29b4d01cb371df788ac5af94dd1ff42ae95698311dd496592cc2e3a667

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
ce00711c5ca0f7b6e1b6972f9726e186

SHA1
679312a34619089eff158ae8b2621e2a4043282e

SHA256
10766fb1000d23177748b3d3b3305ff2a3ebf8a534b12f48f6bf9c01c2f23f81

SHA512
adb06496223fc010288305e767c395250111f3cf52199ef7cb7fc96bf3bdd3d26abe86da236a96b0ce6929dd55204ff9a6b453ad57741a6c398ac8d386170ae5

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
9fa53cd42a59ac75fbc93a46c94021fe

SHA1
4dc814c7e1c22167de9bdfbdcce380ff0d15ae65

SHA256
db23787f3adce2f7f20b51937d76e102201da2714953f3471410928c1e6eae94

SHA512
bbfaf57ad280b34709d2831ca928f87e0e1fd83b6282f05158fd0ea970f0730625837662ea978379cbb2254f1234d84427496051253b08ec7fc311b7cab179fb

Download Submit
/data/data/X.God.X/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
af179e32a5f57956b888db348670fe3b

SHA1
47ba07b6c049341ecba2e4083a19617b22f4df60

SHA256
04e53d1c9e51e496252a10f6ef04846b59f9e0afdf3dfe0a483b7f810848a384

SHA512
7cfb4baa5daa14fac6f93220165d38a2fd559a8244c3ca90ba402ceb18c5f8bd51f04f95d0ba1db0b0286e94e140ad48836171391b84f582f2a7408f88e7781a

Download Submit
/data/data/X.God.X/files/PersistedInstallation2849442299224015036tmp

Filesize
566B

MD5
a631945dfd45dcf436b564d07952627c

SHA1
b3ec48cc0361136d1f7143b8fc7d6a2c533cbc68

SHA256
62d98f9110895ffe48bdc48153ab12ddac12b6acd2a2e6572ec058093bf63e18

SHA512
37eba90ff4ece533d548a1a39583e38e6ab349ce8cc7ca8f5bd76daab1f46620f1877e2236fc492cd29b5c76a1d734504febb2a47ba783bc9898230df25d8945

Download Submit
/data/data/X.God.X/files/PersistedInstallation3576958008152220198tmp

Filesize
90B

MD5
952d7360070e5485b315a3c62bf6c50e

SHA1
e79d0df2af9089d6954de5720b3394e73b08655c

SHA256
cde8344b8b45da2318f5dbb5cd1991e26c7e70c3e676ec24ff0f334186546f9c

SHA512
dda346f1679fbe8920bbed435c20be21ee40a832896f6eba4cec0c7fcc5de4eba98a0f910741e8e1ff0f8d6043a96fd42dc5146394f6c6fcf3f5e74e7012a25b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads