03ead8a86c4bfc846c7472972dceb853bd06bbb4c65f967a7b712e022dbad6a6

Analysis

max time kernel
26s
max time network
133s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
08/11/2024, 13:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ac7458e2fa4fde4a6c8c3adc06a5f4b5.apk
Size 2.5MB
Sample241108-qht8esskhv
SHA256 03ead8a86c4bfc846c7472972dceb853bd06bbb4c65f967a7b712e022dbad6a6
MD5 ac7458e2fa4fde4a6c8c3adc06a5f4b5
SHA1 bd30371b52fbc067bc29017c9effe30bfbd5aa89
SHA512 dcfb2141ea62d75b02cd3060ce39c5190d22fda717e7c0740376655b7ad41861e3131167d83d7ad817e9f1419e653cdf140af0cc9d3c55f21c189f818e20cf25
SSDEEP 49152:FxOZOK5Q+q+XQvqqztSxliDImn66oiGDXpNpd2ZrB8HEj2Qo:oP5bbq4mn6hPBd2ZrBcEj1o
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	COM.TUUURAHIDDENS

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Reads the content of SMS inbox messages. 1 TTPs 1 IoCs

collection

SMS Messages

T1636.004

description	ioc	Process
URI accessed for read	content://sms/inbox	COM.TUUURAHIDDENS

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	COM.TUUURAHIDDENS

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	COM.TUUURAHIDDENS

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	COM.TUUURAHIDDENS

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	COM.TUUURAHIDDENS

COM.TUUURAHIDDENS
1⤵
- Obtains sensitive information copied to the device clipboard
- Reads the content of SMS inbox messages.
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4510

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Protected User Data

T1636

SMS Messages

T1636.004

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/COM.TUUURAHIDDENS/databases/com.google.android.datatransport.events
Size 56KB
SHA256 1cc6967c9b78ce5064fb2f299de85c1bfbcde4c375764dd039904fec605fcc11
MD5 316462571bd780e487797b7fec6d847c
SHA1 e39d575ce6e62472d0d4b4f32ac976813b719dd9
SHA512 615cfa2fea8954f3e808ed55cbd8b78b15e20ce8c0f74f750068e9db6cd9b59ba47a9d3a9045d6356c2c9c97cbdb75053ae43a7f77b222e79be3be5338bf7105
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSw:rAMEX0wIyNjaw
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/COM.TUUURAHIDDENS/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 3b0bf21971d68f0154083ae3a2c99aaab5ebd1c5e5c0c467ee6f2be56d02e9b9
MD5 509226aa8ffd15767b13fc7b83f02167
SHA1 e22a507df09b161e5c99ce5d56e6d70d684655e5
SHA512 611b9428f90263bfc6580608a53d47c237b02575bfe0d5408e8d28d9c2eb6762023a8088add9797841e98d3525faf7195a61557baf205b4a47642271d6d711a5
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/COM.TUUURAHIDDENS/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 9229d62c04da259c49effe2ce7f56b3c2ee7c56a76149e145db56990eb1b5645
MD5 53bbdc3d53671d157b257ccd6cc396b4
SHA1 53ee30628e51566ea822a189e1d084abd0d2be8a
SHA512 24c27dc048d2695e14061bb415c8f4148cb6cc37d3323487f40ae0cd57dd5eeee9f615c5670f192cf2cc12166ddbf4c90bbe0e68255b2f72e01478d5804ef19c
SSDEEP 6:7+/l9szn1kAg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKsp7:7+t3AqLiuWdYRmBEyPbr7
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/COM.TUUURAHIDDENS/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 f5be5f2bdc3e485e191b1bf7587b551e29321e0445c83b1cfbd980ad19a08271
MD5 02e2b4c573fb7bd804c18ea899e02bf9
SHA1 65d8028aa1d6a40b840527a3e791c286618a2aea
SHA512 f4ba79b214bfb72ed0a6d481bb15bc49fa668c8a91da83c835e59f0bf37e5aec30ae6c7cb4cc5fd844435449795102f894b3e808b8e4028b12946590a7e600ce
SSDEEP 6:7+/l9rPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKqws//I:7+txqLJdeWRmBEyPbbDXI
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation2225928537199388604tmp

Path /data/data/COM.TUUURAHIDDENS/files/PersistedInstallation2225928537199388604tmp
Size 569B
SHA256 f81ccefde96ae332f8d82d39758bab26cde58b83015a19d61b70a46c227e0383
MD5 087699689975e4908f8558f0ef74d6d5
SHA1 cb542758ac23d87451c28b3726ee687c85cf241c
SHA512 0e13d6aaa09cd16df7403a0e70cc122385d33007306a27806427cf4d722907256023db1ca6ff2ada83d6a5fdbf744a88f5fbb46aa1ec7bb92d420daa431ad373
MD5 SHA1 SHA512

Submit Download

PersistedInstallation6359158455740996453tmp

Path /data/data/COM.TUUURAHIDDENS/files/PersistedInstallation6359158455740996453tmp
Size 90B
SHA256 14d401776752c29fe5e0f8b60051a236ce7a3b78bd3b4587d41ffd6f031c3204
MD5 3268942c13927454df9e736f70fe8b8d
SHA1 773bc577e6613e2e9454f109adb353da28889c16
SHA512 0a61b79b3b9f10de88c63039559dfdf9c4037e00e8ee045d6da174a6aa49b07c9bb4aef2531c8fbd722a2df7144776182d2d74074cd0e5010b30a2b837d9f14d
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/COM.TUUURAHIDDENS/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/COM.TUUURAHIDDENS/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 284083c78a1f1ca88a0e40290bc91003c8571b185d1284976c8be5b058ea2f99
MD5 1c498a80ee30fcfaf6fba4d454501259
SHA1 28885085f0a42991e61a8d595c744ef3150ccda8
SHA512 3f2655a5015d12348630aa9f63743caf152ad663bfb7bb72996f22c541391b89537b0df0a7cba629236a20b0c0832558356a0342638a78455a9a3609ff0a09a3
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/COM.TUUURAHIDDENS/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/COM.TUUURAHIDDENS/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 7dbbdd8904d3ecf85c45c4d28876d0082a1c2c80bb5ae4bdfab4ed185c414b19
MD5 d96359eb3acb321e47d52686c01bbfcd
SHA1 49ddf9637ed3a73ec8d6439ac19f914ab0e418dc
SHA512 19d446ea26cb69c9ee3dc9a87cdd53b3abb87b5a3938936558c339208b198c3bfe0918a9e67fa179923ece3b2acaf1c3e71e1163910bb3e018492c95963b5d5c
SSDEEP 96:66+hdjnHtDRMpf8UzS6+BD8q0ExPDyyJf:idjnHt9Mpf8UzS6+BD8q0E5NJf
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/COM.TUUURAHIDDENS/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 2a9f96c5c912e93a8f1f6a8b2fc5379ab02ff75d73435006fb9ed52ffe382880
MD5 2988c7b3edce01ded16af994e7e8323d
SHA1 c9fc5a3570eee871216eff752c074742ed54969f
SHA512 4ce4b8e5f5adecf12137cef009e4e065d424e5a8a90df95ba4e2faf25c199cdf8c262d296853236e409d1fa8b87d217e4639a2796e2c075b1f44fb269a52f47c
SSDEEP 6:KMYgNDOiuITJ9FZde/kPlOERX4PBX4ogLugMBX4suuK+/p8Yh2F3HmYAVOw2:KMxNkuzdeWRmBEyPbP/j2F3sOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads