da6b636975abd0380a57645c9908eb409f6615363ef7861a31095aa11768250d

Analysis

max time kernel
19s
max time network
174s
platform
android-10_x64
resource
android-x64-20240910-en
resource tags

arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
submitted
03/10/2024, 14:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Device setup.apk
Size

2.6MB
MD5

ef65d820c3c3167e280a685bf0910ede
SHA1

953eb399e8f3d38905e293a8b8e85acb000d7b8f
SHA256

f066c4d4f97cc4e6269e1a159d994d65bced6ac7177017aac5f04a12db42c349
SHA512

8c43d549b88e405d5f7b3508d62f1081fd548acd9320c9200c2ac34e584e804714b548798cae8665286d2b415bb5035d6c12e263f79920747617e124c9d0a82e
SSDEEP

24576:vMMXvP3hki59tMzb983As3qS2SJUhPPAGPuZP4JJs8E6qwVMQkpUkRByBFuFHPRc:lDiS3AfWSnxHE6WQkpUkRByBFe5xC

Score

6^/10

discovery persistence

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.google.android.apps.work.oobconfig

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.google.android.apps.work.oobconfig

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.google.android.apps.work.oobconfig

com.google.android.apps.work.oobconfig
1⤵
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5124

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.google.android.apps.work.oobconfig/databases/google_app_measurement_local.db

Filesize
16KB

MD5
c7c7d109656c30f2bd4e1405b3e35eeb

SHA1
c4ea2557297af357ce46a07a42d32426b68b63c1

SHA256
b902d61f66bb647eb2598bfc210d4671ea7de2e396f05d6b7d8f4c24a7fecd9f

SHA512
8337f069f3772d97fe6cae38bf86603348c3f2d1a36c81d647d1805e2db5b4c0f69855c754337e886b3c8d148a47818d4b09eb220bf01a01c599104475b6ba46

Download Submit
/data/data/com.google.android.apps.work.oobconfig/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/com.google.android.apps.work.oobconfig/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
ad6df3b8ebfb661810028278fe178181

SHA1
d35d195ddfa8b9084efc2c0cf0d726b70e6672bd

SHA256
35b989a97c01bf5f7f53155e1f2a6fc15ba1f00d9af6470805739bcf72bb2bbc

SHA512
0a0b5cb0806286304b7d00a7b67a45b3a89f33c93dd12419aef4a64769625cd6d35af16532135be69807f933c3c47a893187f94133f534c4b30f0fe6dfda28e2

Download Submit
/data/data/com.google.android.apps.work.oobconfig/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
24b3df8ab25f2a1aa0b59073b3c86ffa

SHA1
545f74c8c293c6e4411a1126cd8bfed67c58a9f4

SHA256
7df5cea295a0afa115b9f46ac414107d8a9385180d1f70d1b4dad87ab198ed8c

SHA512
893c1bc79759c8562730a466cf00c1f413ec8ab22dc7a51d1be99ce6967641e5ed367c1bf391165398f8c1f3213950f49ada7fe01029a54c28b8411ef1fc6b99

Download Submit
/data/data/com.google.android.apps.work.oobconfig/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
9f5c59fbc124e1b052df65be1cdf6717

SHA1
6b74fbf958859205f6880332949f8faf34bcc926

SHA256
d4cb9f18e2433802b2b7474c940311cb8e6b1aa695aaf2690d653ea3c8585b16

SHA512
70a7ffd46148cc81f5f0123a3c3b5dfabebffb25a340c7a72d2b30e853ac170b34ebef87c5cf147fd3db6228a508d193d855c42fc777f6e19b5b37edc44fdccf

Download Submit
/data/data/com.google.android.apps.work.oobconfig/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
0e210d8d77b273c154acaf885654c750

SHA1
54032bc9051d165b83f53c310ffd4f93f560beb2

SHA256
2c023874bf1273a0fc8409c9c88a16ed7e875646a0e1e549927541784a3e50f6

SHA512
fbe4202d86d96c04cf7400c50f7cf09add89d147efbec029e1d66415692c01f9a64ce34664a5d3ccee148403713f9c4afbd3495ba350c50b7c29d0ff70026da5

Download Submit
/data/data/com.google.android.apps.work.oobconfig/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
6b4eefa6a403a802f30def46518d0acc

SHA1
a69dc564b44b5f0c8d66683681944c1da6e82983

SHA256
6cd8ec6725b22a28f59b2c1a7f86ec41f94a45ba376f9a97ef0be004b885cd08

SHA512
7cb99497a7bf529d4df9c7ed8c1c0065018524d590842e3ad8b3d915843435ba7f05a5265e5ea8977cbbc7e90b323734190bd906aa601c7ae8f703df60d7c2c6

Download Submit
/data/data/com.google.android.apps.work.oobconfig/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
3e3b017b7c0756c44d844ab7f43720c2

SHA1
08228cd85810a6e88efb42eac6934ba1c5ad649e

SHA256
3fecb47c181423cd34935eff8efdc88fb77238c4157e95f315e34222319cfd3d

SHA512
46540e948cea299a5a628892dd76728e11f0c9386225b3288ca4e5f5c5b3ec13af1754d00c68b498cdb82488452c4a56acf831c864f9db1abde6d3068ca32279

Download Submit
/data/data/com.google.android.apps.work.oobconfig/files/PersistedInstallation3080252270509519730tmp

Filesize
561B

MD5
e61226ea86042f2f464a8cdb9dcfa03a

SHA1
2417634e1b5f2a742509e919a3eb76d5cf74e7b0

SHA256
3bf84d6214e8fa05920ae04d415e30ff0aebc424419ca64a6429881272891431

SHA512
74bd5ac0d86f3098c3e56c5952f9d25c1febc99582f4c17adf20bebcfa267e82fc7fb8401e51d0b551f2abfa9076029c15650598a3590ba729b8ba3931b7384f

Download Submit
/data/data/com.google.android.apps.work.oobconfig/files/PersistedInstallation6145399231454734260tmp

Filesize
90B

MD5
b70a1e816d0262bc4b3c3e1bf4e0bf6e

SHA1
196e2dfd786551741171ae720d3c3763fadc5810

SHA256
e682daf742830ebda09fadbeb9f9efc1f8d5a6dba693541cc19126ae4b82326c

SHA512
3a48c731bc8f3e0efc9264d83e03c10aee43ad28164ab8cc5cb89a55783653649701783c72ecf23a36333b6918c8f12d71654a7d65e506fc5fd179b1f85b38d2

Download Submit
/data/data/com.google.android.apps.work.oobconfig/files/phenotype/shared/com.google.android.gms.clearcut_client#com.google.android.apps.work.oobconfig.pb.mobstore_tmp-5124-338-1727965376211-0

Filesize
199B

MD5
99b99fc1117a94158f5ab8103250b397

SHA1
d21104ededd292cf77c8027ecbc515adc337a82e

SHA256
ffe8cee66ae3ef37de7217d544d6c430b9e0f56391e57793ffd6a9cfca8da6c4

SHA512
3ce646026461a99ab20ab9f73025cbcb3e8080c9eb2b97524ee7a0733f8747d4bf3cf849bb4205cba83c11ff9c471b4f8815d673dff008a85129cf83f08a104e

Download Submit