9233e3b702bdd11c72ac4b8164798f500da2f9bb0a3ee717ee0bfe4a424b2a60

General

Target
9233e3b702bdd11c72ac4b8164798f500da2f9bb0a3ee717ee0bfe4a424b2a60.apk
Size 4.9MB
Sample241016-2a9tpawemc
SHA256 9233e3b702bdd11c72ac4b8164798f500da2f9bb0a3ee717ee0bfe4a424b2a60
MD5 7987d7004862325efa9b66c817e0dbee
SHA1 6e0af5f817d79d3356ff4b1eb755fe43e8006ed5
SHA512 ed8a203938a15e36d46d6eaa5991d1e92deec8e525409d3b8a1747cb1e8fa967330d41b3bb86bcc44a75840a582993ffba3fb43c81d381412e31455a9e4003f9
SSDEEP 98304:tKmrK+hkJUhKuQG8EGmUbG2UepIvQS2TPZi91EkNI/PiP:vKAKMpJ29i9W+IiP
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.google.mailte9

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.google.mailte9

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.google.mailte9

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.google.mailte9

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.google.mailte9

com.google.mailte9
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4990

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

1

T1624

Broadcast Receivers

1

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

2

T1633

System Checks

2

T1633.001

Credential Access

Clipboard Data

1

T1414

Discovery

System Information Discovery

2

T1426

System Network Configuration Discovery

1

T1422

Lateral Movement

Collection

Clipboard Data

1

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

1

T1641

Transmitted Data Manipulation

1

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

20241016222404738.log

Path /data/data/com.google.mailte9/logs/20241016222404738.log
Size 62KB
SHA256 919289ec80f0fedd1c5d319a7d9e7d025e42e1918e1accc93ff1af0f52d08e2f
MD5 e76ad85b7df4d389faa3c1a7dab9409c
SHA1 2c944f393c11739b722ed88e7effa3d02a800088
SHA512 37d86807d786a51d28d4c34ecf73ae6f86aa3a503453fa9803f0617ff0a84a9eac0da8762a4bcf6efcaf1f8ab93e4851fae2c5d2947d761197f084ffd437f089
SSDEEP 192:PUH/35iPNrEyy4FoYzaCZ/s0S4ksmt6C4sh/GCFcwtwQf+EeYB6iZX3p/zRs4ptR:P+/35id/FoYzgwtA+RO3TFJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

20241016222404769.log

Path /data/data/com.google.mailte9/logs/20241016222404769.log
Size 21KB
SHA256 21a4de99e0d4250cf2f0b865677f8bf80e099bd288b828dcfb0a157eb568ab59
MD5 34d7565d842fa25155dd25ee4d14c78b
SHA1 fa96f9b857fb541f0a48d8370b151e9522560dfc
SHA512 5e3c5463d8c33dbdc62f74a46990f1fbbaaa4d3d606564b0967cd7334d4471b5b2f03f734967837311e8b31a78f9f156fb156dd395767becfbaf375f0ca388d0
SSDEEP 192:UX2dPgouwkcj+ashmnYiAfssc5GrziAUiDbhXE3iCxBf1cgoKzrXSCjisD43XI1B:UX2ZgCr
MD5 SHA1 SHA512 SSDEEP

Submit Download

20241016222404777.log

Path /data/data/com.google.mailte9/logs/20241016222404777.log
Size 35KB
SHA256 ec8c47d103a39b9c8c334c78fa8acd6fd1501247c2d5587194408849b1949c22
MD5 a3c625367785f5a63f0aa5b79ec1eb93
SHA1 e2c9fbd0c74105484c8496bf5f1f9426a429a87a
SHA512 37813b8352c0014d443973d64aa0a807e1d4feb04c13d06c41130745a145ae73d04907a20cce4e23963655210bba8247216f2aed3e32a656151c51800a00fd6a
SSDEEP 192:CKo/YFsizaYzVJxBBq6F8SUBB1aaQ8Ckz8GiTB+aP6B8+fC60osBg6xXl1vPtidv:CKo/EsizA3Fi+
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb

Path /data/data/com.google.mailte9/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/com.google.mailte9/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 973ac84b776654b821ac152711e7b648ba389274e72a1b1feba3d0c04c5ca6e0
MD5 e53d09d3085586379263c6060a9ea746
SHA1 9a247d3738fde2e9d3a3606463ef761da6947005
SHA512 3642dbcd84d6f9f1af579e4ec24e10c6c4d4975ed9076b0c609afc831ca7a60ee2813c14daec120208bb12ee063ebc57270e01f8dd7854aaf36812bdd2e0ca2a
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.google.mailte9/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.google.mailte9/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 8c1b63965eaf7c123d4001d45b05d7ffdfd865e6fcb962e9c0ef5fcfc1ddd0c2
MD5 36322dd6318a5c2ba880032917915e37
SHA1 e3256b79463fe365d0619e68a0f3e4b3897b243e
SHA512 4dc758460945e4dde8e5f5cf634b91b35ad286ed226f87aa54baf2e491d49d5acf81625fbce1181219144ecc685b4b0de4cc4ff5503c567f1d78633a2d02ff66
SSDEEP 6:K2ZxkZy9FZdrlOERX4PBX4ogLugMBX4suuK+/+z7XplaDfjiOw2:K8kZ8zdTRmBEyPbP/M7XtOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.google.mailte9/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 54fa713cce0796c274cd40ce52820da0c3b7a5aec0d32dbf93d1e5d199ff5b16
MD5 ca49caf8e588754ccfd1c68e2ed72a4a
SHA1 83e6d6c1279bb534347392a0fd54e82d3b56395f
SHA512 67daa0dc0849aedc888373d04393552447f749f3f2a553e54c0f99d0bd504d5c8dd5b65c45fb2fe3d80837f6b7ac03e10851d456d8e89732cdb4406ad4a6bc6f
SSDEEP 96:h6+hdjnHtDRMpf8UzS6+BD8q0ExPFuFDIRp:ddjnHt9Mpf8UzS6+BD8q0E5v
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads