4e6dcfd43f37fde88b39f1f97c5079fcdce94cc75a5612f389454fb5fdd9868a

Analysis

max time kernel
20s
max time network
133s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
12-09-2024 07:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

base.apk
Size

2.8MB
MD5

312f62cb1d160b5fa58c811a0cc1d99b
SHA1

5aa873bad2b9be6b350db47e67ef5dbf3379dd49
SHA256

4e6dcfd43f37fde88b39f1f97c5079fcdce94cc75a5612f389454fb5fdd9868a
SHA512

f4f4c3f1c6c509f734e5588c519cd9ce680acadc62d90038431a06106158759ca9d1be1a7606654ac54e6c11f2643ede468a223b83bf7ebfe9fe80d7336003f8
SSDEEP

49152:vKu2GSlhq+gpveu9LJOwtQMCY9Guk/Bkoa3lNf0viCsjRCOQEbTbbDj:SGSl0veuDCMk/GoajySjRCyLj

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	x.akuma.x

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	x.akuma.x

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	x.akuma.x

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	x.akuma.x

x.akuma.x
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Checks memory information
PID:4440

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/x.akuma.x/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5799b1174eee6d8e5b60aeac8613eae6

SHA1
4369b55692e6ba39558e46c0c44052b4ea47d2f7

SHA256
391561464abc813d394be1b43edd217b46c78280366e78df725a9074a86f53f4

SHA512
120b0fc7538543ede032cb61d7d8f6931dee611e41826f0c6ecd2170c8f123dc0a80bdddca3bd918cbb38fd908c0047e7fb07c59a3763bfb7bdcf9689cb37ccb

Download Submit
/data/data/x.akuma.x/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e9c80e29683bd202f229d709531ed115

SHA1
085f142fe558e1b94365b6e8e14e88946afddea1

SHA256
8c203fbcf55e3fbcdf0b8a2556de1c3c0cd5ff8fad0ff1443900dc984aaea05b

SHA512
0fdf4369948d663f91a29d5418007a6ee2d2255b4dcd02d950532f60f28ca5a669462f2fe82660d7e65c7eae6377a667a8c5d4e9c1e8ce49f9ef4288e813985a

Download Submit
/data/data/x.akuma.x/databases/google_app_measurement_local.db

Filesize
16KB

MD5
84642714c9ff6ce4befce0368186a55f

SHA1
a2e9e81887fbe17ebc231e4ccfb9e6700d095fdc

SHA256
ca5663f50b2c4d86e6bd0904b9667144f1d4b1eefa4374571e7a9bf4f00cb6db

SHA512
30d61c5223a7397414e164ec4468f9ba0a93960fa79455f6de22a286382c59b83029e4d5a12f11fdf3f4d4a520c568bb20285b8dcd1aeb6899e652d402649d57

Download Submit
/data/data/x.akuma.x/databases/google_app_measurement_local.db

Filesize
16KB

MD5
add434cf117268fd9f20db9923075633

SHA1
0d8bf355353dfd659838d3210f2a2e5ea862a451

SHA256
c59304faf087ab488ac5a4f7f31d21d6e8fe70df749d6d82f4cf5657c566b41a

SHA512
38d81d712f90d8b0e205508bb74ea65a930bbe61a8959815ec329855e737178d360e34daefc0fe085f244173c2a9d9a96a7beea59c9ee05d837da9d951604bc7

Download Submit
/data/data/x.akuma.x/databases/google_app_measurement_local.db

Filesize
16KB

MD5
de82e2c94d2718988804b035a46d17b1

SHA1
705f5ff19093ad209f2a666085d6ccaed3bf58a4

SHA256
29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39

SHA512
68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e

Download Submit
/data/data/x.akuma.x/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d9cf75fdd1c2292d986f6c3d5d60f2c8

SHA1
07ecb1d3a26d952ae5fecf54f36699ab498510b1

SHA256
2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

SHA512
442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

Download Submit
/data/data/x.akuma.x/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
b7efe30cd56fd87bb32c3c1634ecacaa

SHA1
46587cf4690e467b5dfb51f5a3ba9ab0dd00c8a5

SHA256
0d460db247cf816093cb9fee92f9e823682c9840aafc3d65ac1e59b14bad51e7

SHA512
e07c278941c2c4440be9246f6e30b62d63ec7543136efb6124cfd6b798b91d2e107998d08e262e960074f6af8b32008b5cdbd97ab59a1a56bd6b45501e37c55e

Download Submit
/data/data/x.akuma.x/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
93c24f0db35168f6404ebe331900d5c5

SHA1
bc5725fe463937dc4d5b988d16424643d5dee648

SHA256
eeee56904ee9ab6dff771841d0835c7bd1975789c0a7cc8c797bbb5cf9e2c416

SHA512
1a0dc787d8328b99cc7e3099b735d24a1506ae5689301610f776afd38900e4c9d06f10fc741b051a610aa376a672166009f6c452ad3c7f51d6ef1469050ece6b

Download Submit
/data/data/x.akuma.x/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
6ba2d5c9d7a7fbb38ae4b838a5fc5065

SHA1
a97e6f7ab7a4e23a89e7c2af8c122be06ffe8bc0

SHA256
c4041c61eb7089d4178847f057028d83a194b5ce76a75e002dfcec50d83f203a

SHA512
03873a5170b07e55235c63d0438ad0b7648c6fa72fe3a5e80ca261eae1060d1e88a2336443694d273be3ef2ec41676a356965e0bac61866b299623aa3bf6741f

Download Submit
/data/data/x.akuma.x/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
92be4ed90c2cad3c662c0c54bcde7e05

SHA1
38a5477e8e192e27b91b08aade2cdc87fb93bd59

SHA256
03329d4f4cc075df6264ad4ad1afa99145a1b6a36843648376bcfed12af31777

SHA512
7e243c74b5d87767e2aa439353764a0df4e801851592c12047b18ca3e15e7ffcff1307f4e23012cbca61120a4234e7e2e515cbc6ad4dff94db2bedf8f8445e11

Download Submit
/data/data/x.akuma.x/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
f6e797f59f68a2743c5f50690657fa6e

SHA1
a89a93f7c7db4fddf0a8d83bd703814164f93004

SHA256
9d1ea8d1ed56aabeb2fc1344479b737d78587b4cd55a0f204bbf0ee99a838f25

SHA512
8c3df6d1c36d0cb95c469043f03a08a2fac6e8168abc9510e89efe9cbd5a363751ce8a063a392a520f10f90022619b0f68cf6fc9b3f5a97d195f7fe4c64196f9

Download Submit
/data/data/x.akuma.x/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
3186f7120d9fcc8bcde8281a219c4634

SHA1
788dfb27894a197e29a0c3429b08e9ab5f1ff9f0

SHA256
fe25a5a7d718b3c1b969699bb13e4f86e73564c0856959c05625a0fccb9e4ac3

SHA512
5972fb0e52ca200eb99f01981271df880b0a950afb99f2fa732fc056dd0ff09c88b23e42580b00d748dcb46f72f34889d2455174432a61921c0a9fdf75407eba

Download Submit
/data/data/x.akuma.x/files/PersistedInstallation812366953984098253tmp

Filesize
569B

MD5
d51881be7ee26d72d0b14113511c42a2

SHA1
ed6a6eca662bf57917e59d3c6d38347ef4afcbf7

SHA256
1aec6be7ef31bdb62a794a6ece526e85df5684d877b5b3972d6eaffa4dd93f2e

SHA512
bc30fd089c537012e7eff4bfabc3133d7486a184f5dd6e74062a9237c189009de63441efe2b5e12295e2771f6f3f0c437631bf31ecff2dadd82b760c7d0b65e4

Download Submit
/data/data/x.akuma.x/files/PersistedInstallation8157687563882216681tmp

Filesize
90B

MD5
6cf68bd88892bc0200e5a9ed1ac95a75

SHA1
6dccc4e0f2fabf62c447e67f226818528030b27e

SHA256
78f568fff0b42f17790c2683c774784fb38162409095d8f982ddb1b1df555414

SHA512
1e6965373ec32f21dcec9123c01de094afaf5d762d2bdfac7055476fb13dd56f0cfe3441c1b4797a74404272d72246d4862fd6cf9706b6cc5c21c330eaaeb6e2

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads