0b8864054b8bd58b7e42440dd9736392c015959841232ea044998d877b7c743f

Analysis

max time kernel
19s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
17/10/2024, 06:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MyBro.apk
Size 1.5MB
Sample241017-gs73laydln
SHA256 2f8faa2c03cea4ddf9112251a57a29a93aa2619ff7613b2dcf738a78d0c9f054
MD5 1254af5d5e7681b78703c9e89b3d4977
SHA1 012bc4b2b33b5b2b9d15e7b877e1ab7a7531b768
SHA512 cf2e5757b40e64bee900bc4ca97cbdf885357bf23b88a96427a082d52c1c1408db8b037bd8bd83fd59274f5cd0f081e98e29b10db6f17bb873fed716b1b6d594
SSDEEP 24576:o9Q977IPzWch8MbRezSJbZFgBnxfxeDFan0G1EJIpxsaMczSDykE:X9PIPzWch8sRtJbYVx2FpJIXsK2DK
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.llq

Reads the content of the browser bookmarks. 1 TTPs 1 IoCs

collection

Data from Local System

T1533

description	ioc	Process
URI accessed for read	content://browser/bookmarks	com.llq

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.llq

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.llq

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.llq

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.llq

com.llq
1⤵
- Obtains sensitive information copied to the device clipboard
- Reads the content of the browser bookmarks.
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Checks CPU information
- Checks memory information
PID:4748

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Data from Local System

T1533

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

ZIRCO

Path /data/user/0/com.llq/databases/ZIRCO
Size 24KB
SHA256 508320c3ffcb83d4adc9e6d3f28c178a5237dc3ee89655c46c4ff890c04c6961
MD5 e768eebb3418cb032127d69e205da787
SHA1 873f232ce8a704c320cf850f9a34502a66352355
SHA512 78c06dec647f495305655b83a81247fe0b79f89c8475a8d2e9b103a540e6112284ad88b4ec900a1dd30b1c6e255f8f7bc0863e1eacc852edf221d7c12793ffb1
SSDEEP 12:TLjq4Xa1U9Q6LTSFbyYAyO9eFu/9Q6DfRmBEyPbD3Owzkaq:TL0O7qAT91Fz0GSzz7q
MD5 SHA1 SHA512 SSDEEP

Submit Download

ZIRCO-journal

Path /data/user/0/com.llq/databases/ZIRCO-journal
Size 512B
SHA256 db506c25cce8c2cd2c1647a8f3255dfdc99d77efee069b8aed522a1cdc077556
MD5 e34c28c04bb1f1d29ff6f4e69376c389
SHA1 d6ca540f74999a493af674e5432c8e31121cff12
SHA512 f3418068e399fb3325a3359ce26e4240938709460531224443205bc146dcf30b3eaec82d04e10f9438b7f3bbc68407eacfd5ffb22c6bd1f6895cf00222eaf27a
MD5 SHA1 SHA512

Submit Download

ZIRCO-journal

Path /data/user/0/com.llq/databases/ZIRCO-journal
Size 8KB
SHA256 b990db8d7edf50a6475f66ed503cf571fdfd0f6a79c5982740ceee9b192d0946
MD5 ade888ed368a24f8cc13b4590834a21c
SHA1 93b3aeb6244062a07fd5cff50c8b79bb6d34d82f
SHA512 8c5520d872574ff3367f121c7b1c46e2ef8af7914500152513187490ec240da33620eaff018a3adb2830ce5e9074745d73e2b3f6f40ae5876e229f0881ac8444
SSDEEP 6:7+/l9+4n16g9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKT:7+tQPqLiuWdYRmBEyPbY
MD5 SHA1 SHA512 SSDEEP

Submit Download

ZIRCO-journal

Path /data/user/0/com.llq/databases/ZIRCO-journal
Size 8KB
SHA256 db71378c363b8f573167e69ce759f1a0aa59be7abd255e3e73782dd984b4fe61
MD5 358306c1543ea0ae352689990309f308
SHA1 bcbe690bc8e9ef99c719148c6173a46d6fd6bc71
SHA512 09f246500e1bc3821bc93289438dd93bdbdf2dc7c3431686a88816decd9484e4df6e853e1cec07805bbd48478da24a284a640bf0d8422187cdd6e5293df150f8
SSDEEP 6:7+/l9LmFPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK2Ql//d:7+t2qLJdeWRmBEyPb1QlXd
MD5 SHA1 SHA512 SSDEEP

Submit Download

ZIRCO-journal

Path /data/user/0/com.llq/databases/ZIRCO-journal
Size 12KB
SHA256 a939ff5497ae4080e1dfe45f94aec3a5959100c7fa715905478c2afe04e6b572
MD5 4ca09de60175291725aa1bba90fb8ca4
SHA1 c2c363ba145e39b7249e511e07a82ea8e51f2847
SHA512 4cb771c0b3a3c2dcdfc31c80109f0f1be9ec2d781682ae21b10481495e0475afb3bb57a8797a7bb79d080bb3628e3c8cdc51b9341dcb6078b196bb2d9fa3316e
SSDEEP 12:7+t/58fqLTq4Xa1U9Q6LTSFbyYAyO9eFu/9Q6DfRmBEyPb3:7+tOqLEO7qAT91Fz0GS3
MD5 SHA1 SHA512 SSDEEP

Submit Download

bookmarks.db

Path /data/user/0/com.llq/databases/bookmarks.db
Size 20KB
SHA256 0452680326c945dcb1980890744f567937a31a6625baa58ddaab93dc29b90da6
MD5 87f354e76a586ca4e03df5cb27c740b0
SHA1 706ff08d853dcfc1230417e4b2bcb6674c0d0d1b
SHA512 b71addee1c615f03d4950a3a42b7d9c7765680366e2653e21a55b76b9a4cd8ee20216e6a8ff1330a912bb7f2749121f8e346811ecadfafb465f574d25573d7b9
SSDEEP 12:TLma4OyNTSFbyAERo0K+S8oJVl9T5PbkHO+q3dfRmBEyPbAVOwG:TLX4T7EWozOHOvt0GSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

bookmarks.db-journal

Path /data/user/0/com.llq/databases/bookmarks.db-journal
Size 512B
SHA256 3eb60dee52edec98172b02bcd0fa186cec7328269c26dd20d5774ad2cce9eb09
MD5 2b9190ae63795f3e7b632026b4ba1e0a
SHA1 392fbc8f8b80dc5e4218e766de0aba78cbffca7f
SHA512 8f2b3ee28562d4f145dfc3016e1c07770554474265be84212abeea93e2d7c59fa6e58c96f3dd6d6f786f2506870aa9736cb811cfad89bc5adab66df6b78ff386
MD5 SHA1 SHA512

Submit Download

bookmarks.db-journal

Path /data/user/0/com.llq/databases/bookmarks.db-journal
Size 8KB
SHA256 cd6f523f8eb24b8079edf722aa836288c3b9a072f539127b7eb30ab679e5e93d
MD5 965aeab14ab0ecbcd4dd0b4eff8b2cf8
SHA1 15ae7564cc65acb1a7064d70b4effd4aa5e4e756
SHA512 cf6781b478191ae33d0efa3d406a5791e751c3f255ad205bd84c78d8d02987e7cc9c66c4b818997a45f874ebe7388e6c1474cb6f30b059a383383920d29c27e2
SSDEEP 6:7+/l93KxHn1QWg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKsJ:7+tVKYWqLiuWdYRmBEyPbz
MD5 SHA1 SHA512 SSDEEP

Submit Download

bookmarks.db-journal

Path /data/user/0/com.llq/databases/bookmarks.db-journal
Size 8KB
SHA256 86ea5ee3511f7231c1d928392379e03c4857b0ea7090edc5d323f8d288a08e78
MD5 325710027b80f41e534cbb7c7245ba37
SHA1 c087932e64b47fe651f938e349800f3a0271b7b5
SHA512 ec6786bcc91ab688fa660016d1928baade6b4515f2debe4839d01c57c9c9a88bbb06dfb09866cac42bcf3d3361d63d2b1ddec345a4b5db8b69d488f8164a1d55
SSDEEP 6:7+/l9Ni/gPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKyMM/s:7+tK/4qLJdeWRmBEyPbyss
MD5 SHA1 SHA512 SSDEEP

Submit Download

download.db

Path /data/user/0/com.llq/databases/download.db
Size 20KB
SHA256 b3c46ad1ad8657b10f3f81c21a2e9897f517ca35b6d9483902aaadc3be47b410
MD5 249a453946f4116e4dd0604e4b7ef1f4
SHA1 fc12e0027c02448a08cbae09d3de60b5f69f4f0e
SHA512 15e1cff0147ce937a29492bd77e4affae12ef65c8e34c1096a1f9a0c642f240788975f91edbea8f7b57a83a0900f279e6f6d77d33c5a356bf53bb276c64a2f3f
SSDEEP 12:TLyKr3iOa/JrxDhWfyjRSL7/NI39TGRmBEyPbAVOw:TLy03bMaWyFIfGSE
MD5 SHA1 SHA512 SSDEEP

Submit Download

download.db-journal

Path /data/user/0/com.llq/databases/download.db-journal
Size 512B
SHA256 0ccfefad5c0c4b89cf43afd62e56bc53e726f71b24e72b4063645adc663834c5
MD5 a53973595e882bdc562c221dcfee0e08
SHA1 1be1766823b88f0d85aea8c83cc147745e95a563
SHA512 a94a10a2dc43f69e8f1b2f5f41eea04b8786323f625c8a26e7af9539d2c2bf48f6e7ae704f7390d32e8fdd7f554fc5ef4459c8c530ca0949c200a605241a7497
MD5 SHA1 SHA512

Submit Download

download.db-journal

Path /data/user/0/com.llq/databases/download.db-journal
Size 8KB
SHA256 1e7d03e8e1aea4120bbfb4a3ec87f3c5b233e03fce4737272ced11653632525b
MD5 ed4856f702e60e76e6f8f60459237f95
SHA1 733b577ebe863bfc4bcb8df971eaf576e7c14bb8
SHA512 ff73a872fc04f199abdd95aa231b68400e774f4afbe2a4ad742f9347335bada579fcf7055ed92b75314af620abdba07ee00f819c3e0913074e13ae5bb47f91e4
SSDEEP 6:7+/l98Hn12Wg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKwZ1:7+t23qLiuWdYRmBEyPbv1
MD5 SHA1 SHA512 SSDEEP

Submit Download

download.db-journal

Path /data/user/0/com.llq/databases/download.db-journal
Size 8KB
SHA256 c8f1dfd894bc9c01445ed93e91c401a538f985a4f6a1cc62db293d74ba35cceb
MD5 9adb1a1b8e6a5e5917c23f6d2488e9bb
SHA1 b9a81c084b2e16634d4335d2ae503661b153f2b5
SHA512 fe28a73a57e9b8aed3ee32aea2b469da1d8f4377a036a47a2f838d8a428d261e656a7a06f0502602298312c0b07fcf39339178b70ce008f6a33566486c59c47e
SSDEEP 6:7+/l9UW/0FPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK8d/Gt/Fn:7+tj6qLJdeWRmBEyPbS1F
MD5 SHA1 SHA512 SSDEEP

Submit Download

download.db-journal

Path /data/user/0/com.llq/databases/download.db-journal
Size 4KB
SHA256 7478c98ecaa028d7dcafea98ec6fa1aa14e5ce63f979fa425d7414cb9ed5bb07
MD5 d93788eac245af7362f020617c9c894d
SHA1 b42c8154bbe78195d45f2a7ccf7cebb68630b5c2
SHA512 8179584d672f76faa3f1848987aa8efb02713bd4d20ba706390d43b1da9bad185759ba5a9fb7e489889797a1eceb724bbee109dbe94be598ab9686701a683633
SSDEEP 12:7+tA6nqLZQ3iOa/JrxDhWfyjRSL7/NI39TGRmBEyPbK:7+tZqLi3bMaWyFIfGSK
MD5 SHA1 SHA512 SSDEEP

Submit Download

weave.db

Path /data/user/0/com.llq/databases/weave.db
Size 20KB
SHA256 81dcf3fe146c2286cf60aba01d6a524b6fcd562a2f15cfa02a8089529b656494
MD5 752608f9dea9bc0e9004cacdf1f2fe57
SHA1 b9c2b87589f0798060fe83d87d37f28ba4bcccc7
SHA512 5f9476cdbe07d7f7bec21a11cbdcdd1443295364b07c60fac65cf8ef919a6af4fd60adfc81de11a1d4219629f6007a8abc1395fa5a3f18c9a61dcea7bd4269db
SSDEEP 12:TLmaCyNTSFby+0qznu7AurAuC59CB5PbcaGRmBEyPbAVOwG:TLXXs0qK7L30CMadGSEG
MD5 SHA1 SHA512 SSDEEP

Submit Download

weave.db-journal

Path /data/user/0/com.llq/databases/weave.db-journal
Size 512B
SHA256 bbab6abb7031f3a6c4821ec147964bc94f3ad9c2e646884b9eab8105b4559576
MD5 d435644b9f6dbb982057bc1559822350
SHA1 7ccb82bfd574c6fd49957ee47dcc955252c2c218
SHA512 c3ac46324aa5e5447632ee31cbbb11da872f861e08697075043a8f842a0ef9031132ec29b87041fd284e71e9fe971d0ea213b33586e685cf5b5ed4f5d98bcc93
MD5 SHA1 SHA512

Submit Download

weave.db-journal

Path /data/user/0/com.llq/databases/weave.db-journal
Size 8KB
SHA256 1722a1477ca6693f61e72f7cfa2590ccccad4ea83b27d4101d3761d3c3d39e73
MD5 cc88781042ad6085982732865f2e6578
SHA1 76d95769932a1aea2df011744ffbd0cad418784e
SHA512 c8d22e7a90989d48a1916a913a96938646e2d8b5d05488703f5a83f229a908a572b6c75d7cf8ff3cdc2de2eb32d73bfa6f5eac3ba17b1b99f2f7d8692112d941
SSDEEP 6:7+/l99Mn1siXvg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKm5:7+t4fqLiuWdYRmBEyPbX5
MD5 SHA1 SHA512 SSDEEP

Submit Download

weave.db-journal

Path /data/user/0/com.llq/databases/weave.db-journal
Size 8KB
SHA256 3146e782b1e944bea1392aeb205f9928b59be1026018cd0c1566dc3ecb781374
MD5 3ab44de57ebabfb6944971dec954f0d0
SHA1 8b3ed08caf2038a0f1b1e7582ff8830c32c89223
SHA512 81c8d34770de1da672e1c2f5152dae0b2aaab3967370048e12a778429978d1bb34a86bda858aaba96a9f32443b9bddfb2f7125a7fc6e4cf85ff4ba42c106f370
SSDEEP 6:7+/l9IHPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKwlfU/j:7+tivqLJdeWRmBEyPbQj
MD5 SHA1 SHA512 SSDEEP

Submit Download

homepage.html

Path /data/user/0/com.llq/files/homepage.html
Size 2KB
SHA256 193e20d0dcd3b2e3a02bbead8a6581e09e7b3f7c6b7613ad28e3e65909f36c70
MD5 aac7d9154602a9be5122d9ebbe066c9f
SHA1 900b8830bc6da60763327d49ef05792472f60f33
SHA512 ad6275b4a2ebf6cb0c6e3f1e62e489901cfa4c4e5adc1b2ba1beebb57357a81d871f63f7678d93904e1c8b6221da15ae6deb79dd3d48e3d78e62369feb2f951e
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads