Analysis

  • max time kernel
    22s
  • max time network
    35s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    12/10/2024, 14:20

General

  • Target
    2936207e-6d88-4986-881a-549cfb937563_oogleWebBrowserAndroid.apk
  • Size 12.1MB
  • Sample241012-rnfgwsvcrf
  • SHA256 e6746d0069dea77ecd1d7a611c45e5af220643c23f7b473e1bc2ed8aa2923475
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 8 IoCs
  • Checks Android system properties for emulator presence. 1 TTPs 2 IoCs
  • Checks known Qemu pipes. 1 TTPs 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Requests cell location 1 TTPs 1 IoCs

    Uses Android APIs to to get current cell information.

  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • oogle.chrome.web
    1⤵
    • Checks if the Android device is rooted.
    • Checks Android system properties for emulator presence.
    • Checks known Qemu pipes.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Requests cell location
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    • Checks memory information
    PID:4852

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        StartApp-d6864f2502af7851

        • Path /data/data/oogle.chrome.web/databases/StartApp-d6864f2502af7851
        • Size 16KB
        • SHA256 9ada893acc122895cbb535cdf71634e935523e00ee0dc42fe629ba3f8c637838
        • MD5 SHA1 SHA512 SSDEEP

        StartApp-d6864f2502af7851-journal

        • Path /data/data/oogle.chrome.web/databases/StartApp-d6864f2502af7851-journal
        • Size 512B
        • SHA256 5693c837e562f5677707a23a2b7e842379a9055f6700b27c483a4ce2dbb70fe3
        • MD5 SHA1 SHA512

        StartApp-d6864f2502af7851-journal

        • Path /data/data/oogle.chrome.web/databases/StartApp-d6864f2502af7851-journal
        • Size 8KB
        • SHA256 1e0ad6d7ad9a09685896cb0d7a1ae4c8f41e8d047b5597605101d97a962d3583
        • MD5 SHA1 SHA512 SSDEEP

        StartApp-d6864f2502af7851-journal

        • Path /data/data/oogle.chrome.web/databases/StartApp-d6864f2502af7851-journal
        • Size 8KB
        • SHA256 0743d8c484629a72aecf32a27e1d21ae959dc62117bbf8aa038603a3cf3f0dcf
        • MD5 SHA1 SHA512 SSDEEP

        StartApp-d6864f2502af7851-journal

        • Path /data/data/oogle.chrome.web/databases/StartApp-d6864f2502af7851-journal
        • Size 8KB
        • SHA256 b18088ca27ed269ccda506d1c6a7815abc5b8a7dfdffe974e9b8bc8e3dfeb59f
        • MD5 SHA1 SHA512 SSDEEP

        StartApp-d6864f2502af7851-journal

        • Path /data/data/oogle.chrome.web/databases/StartApp-d6864f2502af7851-journal
        • Size 8KB
        • SHA256 335cc08717f577a47b92fd8d5706e79577907dfe0231acdd7342058650db267e
        • MD5 SHA1 SHA512 SSDEEP

        StartApp-d6864f2502af7851-journal

        • Path /data/data/oogle.chrome.web/databases/StartApp-d6864f2502af7851-journal
        • Size 8KB
        • SHA256 48184046fd4594cc74917582207d40cf5a3b5a18b470e063e99f7bf7470614b3
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/oogle.chrome.web/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ed3420372ecf7ae52236d827997f5614aae367f27c3d8331a0a7eedd532e8ddf
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/oogle.chrome.web/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 eba67ec390bbce0e0372b83c33cab94528f8dc4e98c7ebafdc85c1861764616b
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/oogle.chrome.web/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 812d144658541473c642d5be6f59fce5fc8755f7afdce8ff039ca227c73b704a
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/oogle.chrome.web/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 66292e46ed04cae33bd61ee0a77ef7fe480d7a057cfa24d5ac17b54d9ab38718
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/oogle.chrome.web/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 25a8e9b69255126aa7e8cd57698578dc114559962c57d4a7da858455927674db
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/oogle.chrome.web/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 59deb6a8d60f09ca3990f6ce7e6349252e5ef55da6ebc3c68fa49fca65a0a6d1
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/oogle.chrome.web/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 e387f17574be9704096acecf52756b3d6e3f5c1702e753ea974108fae7acd06e
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/oogle.chrome.web/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 046a53dfd09b9d2a74557bc1bce94fc8bbd13ce213f7a91711084b26c1a28615
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/oogle.chrome.web/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 1cc5192bae95e36ddf99c5be488a508b30a236bb0e98852ec4318dc53eb79cce
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/oogle.chrome.web/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 783328fa106424aaf5a6dbf9b3304fde6ae33075eb0b0b8473932384716fa9c4
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/oogle.chrome.web/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 7286b34238c08d6f68cdde3c8d4f6b3cbfda5b859d7c5caad57de5d249450ccf
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/oogle.chrome.web/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 dacb4830e48c521c0ef20563dc2f277b881de2f6dfb0d7e00f4ec041814a2980
        • MD5 SHA1 SHA512 SSDEEP

        StartappAdInfoMetadata

        • Path /data/data/oogle.chrome.web/files/StartappAdInfoMetadata
        • Size 1KB
        • SHA256 661af6f88a63c184976aa63ba5dd83107e1e074b11253835064f9cea74b32068
        • MD5 SHA1 SHA512

        StartappAdsMetadata

        • Path /data/data/oogle.chrome.web/files/StartappAdsMetadata
        • Size 2KB
        • SHA256 75e40d68562700c230e7c6ad2bd89d8304d6baaf1a37eb82bcfa8f05439c4a91
        • MD5 SHA1 SHA512

        StartappBannerMetadata

        • Path /data/data/oogle.chrome.web/files/StartappBannerMetadata
        • Size 719B
        • SHA256 248c48a58bcd53389c33ef11839900915e7a50deb9747c1ed258b2a8e2a415fc
        • MD5 SHA1 SHA512

        StartappCacheMetadata

        • Path /data/data/oogle.chrome.web/files/StartappCacheMetadata
        • Size 785B
        • SHA256 e6e9d42a25a60b9a933ac266abcad0f2575f3b7e7ff39f880b0845b7e4e4b0df
        • MD5 SHA1 SHA512

        StartappMetadata

        • Path /data/data/oogle.chrome.web/files/StartappMetadata
        • Size 8KB
        • SHA256 3af88d263df16ecad89d8178f7baa546e46f5b3e3e40c05c31885a19cf45383d
        • MD5 SHA1 SHA512 SSDEEP

        StartappSplashMetadata

        • Path /data/data/oogle.chrome.web/files/StartappSplashMetadata
        • Size 1KB
        • SHA256 19bc60ff318b14608531a652b324455be016e710f24ceb4c3ece24f5d2f6e0cd
        • MD5 SHA1 SHA512

        back_.png

        • Path /data/data/oogle.chrome.web/files/back_.png
        • Size 1KB
        • SHA256 ada010f03b82133ccddb4ac69a7c81a1d507121ef1d276c7c191bb55401c2230
        • MD5 SHA1 SHA512

        back_dark.png

        • Path /data/data/oogle.chrome.web/files/back_dark.png
        • Size 1KB
        • SHA256 b50339f939827a8e5a918ee4ed1d8213e27f6d546a98313f90449b27a1ebc00d
        • MD5 SHA1 SHA512

        browser_icon_dark.png

        • Path /data/data/oogle.chrome.web/files/browser_icon_dark.png
        • Size 1KB
        • SHA256 9347cbd8e6e2af4d09759e55b7595474648619da07992d6485b9756ab4d8170d
        • MD5 SHA1 SHA512

        close_button.png

        • Path /data/data/oogle.chrome.web/files/close_button.png
        • Size 2KB
        • SHA256 73d875bdb982c50c666e30ba2b8ae2dceecc63cd0d5f8a35158edfe5f3303835
        • MD5 SHA1 SHA512

        empty_star.png

        • Path /data/data/oogle.chrome.web/files/empty_star.png
        • Size 895B
        • SHA256 f0a8e8d6b8bcb84e466f921dfb20a91fdd4e4b1777d9b0be6ad4d03d4a253af8
        • MD5 SHA1 SHA512

        filled_star.png

        • Path /data/data/oogle.chrome.web/files/filled_star.png
        • Size 753B
        • SHA256 f37f9a17c20ca3068f4f9db08c262c62b7b86544532f612a78421bdee92f4196
        • MD5 SHA1 SHA512

        forward_.png

        • Path /data/data/oogle.chrome.web/files/forward_.png
        • Size 1KB
        • SHA256 9f63f6c9ed9d33f235c30508df34c3358b55cac8bfb4967fc3e15afc61a6fd12
        • MD5 SHA1 SHA512

        forward_dark.png

        • Path /data/data/oogle.chrome.web/files/forward_dark.png
        • Size 1KB
        • SHA256 621fbcd864a7dceacffddb00a682148042732aeb675e22cd42b1a0937c6717a5
        • MD5 SHA1 SHA512

        half_star.png

        • Path /data/data/oogle.chrome.web/files/half_star.png
        • Size 895B
        • SHA256 ee0933e12dd4e302b1e18572d22f48861e8125e5d0201603e024d18ef5e38556
        • MD5 SHA1 SHA512

        logo.png

        • Path /data/data/oogle.chrome.web/files/logo.png
        • Size 2KB
        • SHA256 bc9c4aa36a0dd7efe16a8b3bca9172d970fd13d70d3e718aad17a78269079912
        • MD5 SHA1 SHA512

        shared_prefs_sdk_ad_prefs

        • Path /data/data/oogle.chrome.web/files/shared_prefs_sdk_ad_prefs
        • Size 153B
        • SHA256 15070f52136d5a8332f8d70f790bd7bb04cd6a99b386d40e0abedc40c42caa3c
        • MD5 SHA1 SHA512

        vinebre_ac.txt

        • Path /data/data/oogle.chrome.web/files/vinebre_ac.txt
        • Size 19B
        • SHA256 acef5ade0cbc6450604e277377260f5c1259ad46e890f1cdb3106cec6d599273
        • MD5 SHA1 SHA512

        x_dark.png

        • Path /data/data/oogle.chrome.web/files/x_dark.png
        • Size 676B
        • SHA256 59d83bb6ebc5394c048273ea9e1516a2bc7a6f80212d53f81ee44cb1f9b65443
        • MD5 SHA1 SHA512

        com.google.InstanceId.properties

        • Path /data/data/oogle.chrome.web/no_backup/com.google.InstanceId.properties
        • Size 2KB
        • SHA256 340181b01ec540f6f6dab8d842a0daf74a95e967fb638df96b4eb57169d94dfd
        • MD5 SHA1 SHA512
        • Path /data/data/oogle.chrome.web/oat/x86_64/[email protected]
        • Size 514B
        • SHA256 43279ad9e065cd8c121ae49d18bac026d061901f3e9b28922a0fd6c6a62d191f
        • MD5 SHA1 SHA512
        • Path /data/user/0/oogle.chrome.web/[email protected]
        • Size 3.2MB
        • SHA256 26fb1a790377e11135bf8bfa7552cc2797d351df60154ea032ceeb4463776fdf
        • MD5 SHA1 SHA512 SSDEEP