da6b636975abd0380a57645c9908eb409f6615363ef7861a31095aa11768250d

Analysis

max time kernel
39s
max time network
133s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
03/10/2024, 14:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Device setup.apk
Size

2.6MB
MD5

ef65d820c3c3167e280a685bf0910ede
SHA1

953eb399e8f3d38905e293a8b8e85acb000d7b8f
SHA256

f066c4d4f97cc4e6269e1a159d994d65bced6ac7177017aac5f04a12db42c349
SHA512

8c43d549b88e405d5f7b3508d62f1081fd548acd9320c9200c2ac34e584e804714b548798cae8665286d2b415bb5035d6c12e263f79920747617e124c9d0a82e
SSDEEP

24576:vMMXvP3hki59tMzb983As3qS2SJUhPPAGPuZP4JJs8E6qwVMQkpUkRByBFuFHPRc:lDiS3AfWSnxHE6WQkpUkRByBFe5xC

Score

6^/10

discovery persistence

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.google.android.apps.work.oobconfig

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.google.android.apps.work.oobconfig

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.google.android.apps.work.oobconfig

com.google.android.apps.work.oobconfig
1⤵
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4260

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.google.android.apps.work.oobconfig/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a779cfd82413d1af6e26f62b176af475

SHA1
aec28c7d11fb13de692d617aeadf7cb2f99b4295

SHA256
6926285ef30e6fec0e890f5115c6b0dd9a544f96ba29f30d33fd2705792b7012

SHA512
92e304f6cf8e46aadf6fe6ae0c6ecf1a742622959d6025839c52d4c15c55ecddc773dcf05dbab60f6fd427e9c941c0137211ba02724526059962186bac0c3f60

Download Submit
/data/data/com.google.android.apps.work.oobconfig/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.google.android.apps.work.oobconfig/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
9abfc472e006d9c29629dfae1751f46f

SHA1
7f03088561d1915fd3eb541f8378211346893240

SHA256
3c934234f91a34549cecc5d3a25b61dfe2da44db866733cac135964d5a69e322

SHA512
4e3004e40cdba0a2240d4dba0fa5c0f5fa3c68e90e19f44356151d6ea56761403df6cef411ba19581d5b3c79da39aa84b5406c4a310a9556e740ef01fa2f697c

Download Submit
/data/data/com.google.android.apps.work.oobconfig/databases/google_app_measurement_local.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.google.android.apps.work.oobconfig/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
a598fd269d4efa67f3e45f233f2cf101

SHA1
7a0361d64ca40dd93baac2c82399f27d91e700d7

SHA256
ddc464bcc824a0fc9481342d77603d5b5b42907ccbc78ea088a8a9d62036c6cf

SHA512
dc3990694f2982eb699b580674f84ef968d69a447be865e93bdbbb9f5968b70231e4693f040f1104efca15f0a531e6b847b6d4003f145428277b636e3013774c

Download Submit
/data/data/com.google.android.apps.work.oobconfig/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
dda27f890cf0f6cd1c7ccc1e7d817f8d

SHA1
7cdcbc3de2c0f56bdbefe809ed0545cd829b7741

SHA256
fd0a870db3a787979b72ebf2d03290ffe3f79bfc579f570b5b27be0d2806b034

SHA512
6feac67d1f0d0783bd12563359e0858c7831fae19263f4eee8a66c33e4cc8d1f04a3e3041dc4ca8905d589664cb388a53e2c1c746ed55076a9f336b9c6e30c6f

Download Submit
/data/data/com.google.android.apps.work.oobconfig/files/PersistedInstallation6507902839326550528tmp

Filesize
562B

MD5
ab1e5154b7cdecb5e9fca9d2b94a4f1a

SHA1
402c4af631b34ab4204e8a13ccafc239e3daeb8a

SHA256
cbc3466748b55bdc77e093916e67ce7bb0a6a9df57a70c08387cda45b483ed3c

SHA512
ccb56a12c34fac36f8b6ecafe0a25de165e75e77eea2d384f0b3735f4c0f632aa0e710bc72d2966837b01dd74e606936fd3f0578a28415086ec1ac8c2f588632

Download Submit
/data/data/com.google.android.apps.work.oobconfig/files/PersistedInstallation9184101951535262651tmp

Filesize
90B

MD5
cc1679ecd421daca0f0eda8bca119017

SHA1
d7fda75c3b6d82d38484a095b16bb4d4bfe55581

SHA256
fb677bfd796a2826861b18242fc1fd79c0e2aef26e6feb4706d017decf055f0a

SHA512
4de28f87c8a8d38f9130f220a797e78bd2f241204d0ad7ec0f3683073bdeff0ca336ce9267d3fb0ea2e077ef3a57a05c2050a410d420b578dc064e5a3e3f6f5a

Download Submit
/data/data/com.google.android.apps.work.oobconfig/files/phenotype/shared/com.google.android.gms.clearcut_client#com.google.android.apps.work.oobconfig.pb.mobstore_tmp-4260-274-1727965364592-0

Filesize
199B

MD5
55a63d15e3380994a1026c7bb71778fe

SHA1
4030e8616972b2dade04882da452be609a92065f

SHA256
cfcdaa0a818bb4f48f1f019a08f65e128a9b98168d08ebd82290f81ae8ee8afd

SHA512
4b0280732488733faaf2cb2a1098372ace75828a04d51bea740ca8665e639ee61cbfcce66cb58300720560a33760f00e1594954907b4973ad4cc76c08375daf1

Download Submit