23e10fb2be7c1d97fda5d87c407ca7f93d15bc45d6dfe31d7512e643c49c5016

Analysis

max time kernel
47s
max time network
142s
platform
android-10_x64
resource
android-x64-20240910-en
resource tags

arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
submitted
16/10/2024, 22:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
23e10fb2be7c1d97fda5d87c407ca7f93d15bc45d6dfe31d7512e643c49c5016.apk
Size 4.6MB
Sample241016-2ef26swfre
SHA256 23e10fb2be7c1d97fda5d87c407ca7f93d15bc45d6dfe31d7512e643c49c5016
MD5 74994f34e688ef4d3ae8ba5765be42c7
SHA1 556d30c08b91cac02e8410ccbdb408fc14c4d30a
SHA512 a17f5f22f50b726faf6bb8474fccf9fb555e62606e56a1641ea849d6f7f78c1597646d7e6fa95047d7aa9574f8f9af16bde2b381c8be8eef595173d6645bc0b9
SSDEEP 98304:HeoCcAOWh0HKl0sbxtJgiAr7Ig8s7l0n+gDKN4H08:5ZXH4bxDyrUg57l0v
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.google.mailtes

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.google.mailtes

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.google.mailtes

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.google.mailtes

com.google.mailtes
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
PID:5249

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

20241016222936323.log

Path /data/data/com.google.mailtes/logs/20241016222936323.log
Size 20KB
SHA256 d41e4b5c2c1866c9a73393a4d56d84604819577d50967112b8a3b64838a92aff
MD5 9890183f7e340592134f8c1917847459
SHA1 8294acdca06a0b176d9ab9cbbf68ac35f20522a2
SHA512 5554342254b529490071990c4adf60a99dfcac302bb3c7719e2560aa137cfb4da08df6d5afeeacbc0c07cbb7702691db2514c26b5821389ca8df21c549820b2d
SSDEEP 192:t36MoY9FKB0urmMdeWsDDUgiWnRBvD1smDGNDnDjhB5YEhuDkSkoDopOWTyHLBzw:t3SYLGhr5iosWmr4vJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

20241016222936328.log

Path /data/data/com.google.mailtes/logs/20241016222936328.log
Size 60KB
SHA256 74e56fd8175946b1645ead879f8ed379eda4cfd1184771fbaeea9709b969e75d
MD5 3b891361c6ef0054509a3cd3428523ea
SHA1 1b3628ab671358fc4bf98db02d28d8df5ca4ed46
SHA512 5fe7ac81e61570f333dfe3c9d84a9bd42e1facd25eb25f26d2ec83a004ece1c29cc94d7956cec1939e520d6d98172398bf83df183ff440e925bde9574e4ab1d0
SSDEEP 1536:Pzk3GuV5F5UULUaNKNJpipPojoVmNv7vM8/AHhJh22aZfkzQ8:Pzs0kzQ8
MD5 SHA1 SHA512 SSDEEP

Submit Download

20241016222936331.log

Path /data/data/com.google.mailtes/logs/20241016222936331.log
Size 223KB
SHA256 604c6fbeb28c1c2a2a1a4f1ab3a8f9b9e1772ff62b1f51961ca2a6259a102411
MD5 7e9d240d2de2890b7ab478968e06eec3
SHA1 0c61310e21d23aa7bf3c6d8c661c943eeb1beba6
SHA512 624828ab1deda139dadabd682e9ddff38054e73ec35455c700331602007260746775717a46e02c0646133652d4186906168a6357d4063c6653c0a3d17b33d77f
SSDEEP 6144:5A40QdLielhMGMHhMzVGyitRVBqudo9ZEI9/VF1cddVklrQF1ZlwtI7XRBa1kLdv:5A40QdLielseGyitRVBqudo9ZEI9/VFU
MD5 SHA1 SHA512 SSDEEP

Submit Download

20241016222936337.log

Path /data/data/com.google.mailtes/logs/20241016222936337.log
Size 33KB
SHA256 3f3ae8e55975d3aea50a41d5ac74fa687da0daae7ac72c087d1e552003eed4f6
MD5 d1fb93c305a839424b59d22ca2f1b398
SHA1 fb09559948dd4f925132ae1e56cd643fa458822a
SHA512 d15f6b8bfa993586a3d444805972fd03bb7c6ce31a812c160c14f60ce05c69996622c37483670fdcf8c6e2f93311db0d8ebdeea3465ad5fa4f224794b5f73664
SSDEEP 384:JFe3aLHIy/YrL5KiiojVM77/2Jl/frLxt:ze3aLtYrL5KiiojVM77/2Jl/3xt
MD5 SHA1 SHA512 SSDEEP

Submit Download

20241016222936338.log

Path /data/data/com.google.mailtes/logs/20241016222936338.log
Size 115KB
SHA256 04428fd0f07ed1108235be7611de9f2542a40cb95c0289c37af78dfc00f0ef5d
MD5 def329adb9d791a8af541031f72680ee
SHA1 04d1172816ff853e167a78c0130bb051a33414a0
SHA512 872b008d3eda49dcefd91d2b057f3feb78b4ae3fed361a74eb4937f8f510ad9e6af0157ee5bd6b69bb19bdaf462282968b4913586ae9af17f894b4208aadd8e7
SSDEEP 3072:+bcyXr5tIQHhGHDKBsHbUKncYc6chTVaNsNXZ4nDmJv0NceB9pmJ3eL1pENlFUVN:+bcyXr5tIQHhGHDKBsHbUKncYc6chTV4
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb

Path /data/data/com.google.mailtes/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/com.google.mailtes/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 b48279c5bb554ef8baee1111532eadd57702c9b8982356d8527ca5d444446d81
MD5 750b70d803428f85ed248e0a10725352
SHA1 1d143aebb452e548afd8f9ebb40d836d556c3ecd
SHA512 694494d90e8bca7696c3bc816fb11c6a71802428c2ad1317b145d47ae2045bfc2bbf0bac4efff0a9832448ee28749c398bb23b3c47ac476c5b8a8d3644081cb3
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.google.mailtes/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.google.mailtes/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 f8d9cd72c1f0065ccb9c0976d4d84d6868d4b0b97d24ce4fc7ee9f345547db3e
MD5 1b0b4c46eea44d7057a25a1cddcba11c
SHA1 4f6bb29d5307820d8aa4140cc53d956ec5140c9c
SHA512 baf858f1cfa2f835131e2fa92a226614e3734b2d0b18221b47c452a1c4572621175ad6292d8cb237ceae5b59667bd9e390a3156ba322141aeec227e242276da8
SSDEEP 48:Q9Y66M/31pp8aEKeWrFhVtD/ymmumWAhrBlOymdGWOWKuWov6xl73JcXSMmchI9d:+6+hdjnHtDRMpf8UzS6+BD8q0ExPZA3
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.google.mailtes/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 7c4fcd114e24901e52cdb15eea6311e94bcad690b40b31eaf17d78cd5352bcb8
MD5 7601112c4ae4b542e63b6a70202880ab
SHA1 9b25daf10d65cf8c035d2413170d134a41cc92af
SHA512 40b29d721a57af1df30b9b5215d84599731ebefbd37d8822b6ad39029c176754295e60a836aec09248217f088dc39f212aeebe1f86fe4885ee07ca0f37c1ed36
SSDEEP 6:K9PUs/Pa6K9FZdrlOERX4PBX4ogLugMBX4suuK+/bPOk1MF6tiOw2:K9d70zdTRmBEyPbP/b8UiOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads