f81b1cbac0fc3981660cf69031b4020a67ffaf0874391385c67e439c89b23a6d

Analysis

max time kernel
122s
max time network
155s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
09-12-2024 03:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

app.apk
Size

3.9MB
MD5

37847a27b715877659f6157063a1f079
SHA1

657bbcac517147fe166139aa803578baa49b92f3
SHA256

f81b1cbac0fc3981660cf69031b4020a67ffaf0874391385c67e439c89b23a6d
SHA512

83f450794aa437dd61e3f92f9f0236f773b110cb8e99650f2aeb5f86ccf2b7496ee5f035c3c93d758b1f55b1e224a077e7e816147ebbb38a11051cbfe80f3ef6
SSDEEP

98304:7m9niXwVISnclTNS4zD1I4IQ8genjhaAMVf3LWO/:7Oni8ISn0TNv1I7ZapaO/

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.googleFe.app

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.googleFe.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.googleFe.app

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.googleFe.app

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.googleFe.app

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.googleFe.app

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.googleFe.app

com.googleFe.app
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4968

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.googleFe.app/cache/1

Filesize
49B

MD5
bb506a04d2ac06f4be8d76fba38ebbd5

SHA1
31b3ac8bc9c5a70d9ad5fc6a8bd5c656fcea741c

SHA256
b709c0ef2d4fd3e826070b3635bde681c8b8a7f2e15009443b91281c5f6e3118

SHA512
e9f41cb5bf535e277307ab6eb0227fcf44b391f67f748a6b0f5ef2a12f68c4f95fe0915b166fe8f78a7f858f04f5704701872970d8c7cb9cd21c9befac11dce7

Download Submit
/data/data/com.googleFe.app/cache/2

Filesize
34B

MD5
c76013d165ef454e96824b1f62118c7f

SHA1
f9e0cf89bcf722d7204165ae26c131cf01cbff28

SHA256
9890e8131aca75cf93d9b0d92da3c653ca25768f93c29dcf486793de952fa142

SHA512
9b5d264af7541b623e5ab1f1fc96d572d5cd91df876351b5941646045bc3c268c10a822c6134aa8d25d81daf59e957a6c54d66757f3c7d2bdf60755d28d78b47

Download Submit
/data/data/com.googleFe.app/cache/~test.test

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
11cd26c8880f4ec8545d25bbe8971cc7

SHA1
0b8aa63a190e81f78755bcaa84d707bbf994934d

SHA256
3df4cef15825f638cbfbd0bcd4beb4005cfda5e414dd51d4f5270e4c13548f24

SHA512
8d0dc67bd28a8789dcf5644f8fc172ba38bdb6d5eef7beb773e79da5550423d6c5405c818435547519230b533a709815c4daf947e37ce3537219d0f877b30ff7

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
34938502c6ca19b53f455d4998bc5ed9

SHA1
0dc399a2a5ee94b6bea0b5e6e2a4f55c1c280a13

SHA256
d780fd06d1a14a69768d3d441803aead7102e5279c6a7b4cbd9a06e3a0dc9c4a

SHA512
406c6aa5f27983b4df63a080502a6ce1c2d4a2e14a9b20a05b220ee9d5b86837717303f0fd2fffa5c88568fa886c6ac0c64ba302e7a90db66c235abd8b7ebf39

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e2a69262f9de333bfdd37127d267fe35

SHA1
4477cafb3d7946029ac79d23db9b15cc118b3d1e

SHA256
46138f5f1df810327a622ff696affd8a8cb5697d75b7f9804a069f187505bbbc

SHA512
25d0e79ae93c247c063a19bfe112099e753fd8712004c8b2d46210df2802583f9f4701f49fd6249d543d199322347cfafe279119b94f0f3406650abcb9c9dcfd

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
26ec5732af1be7cdb3362692f12e9222

SHA1
01ba5fbb5564b73fb427545761f327416e914da7

SHA256
8426765036ee59d2d2591c7a6c5c0563699e6d9d37221d45b36f7138fbaa30bb

SHA512
ea0873ed9e741842a237dd48e77479bcac0ecd3a62c67e5dcb768fc6d9ad479e2a6e4a2012afa9d3bb5eeaedfca8891f4892cc62bef3ce41ff22075a15bbda4e

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
adf6082723784327d7d1b34adf974e7d

SHA1
b1502f70eb881a1dfe41139cb719fefb877ee37c

SHA256
252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

SHA512
762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
a1670be588d78ed21c63f01f9ffce339

SHA1
53a0163c9b4883b5ee8388ead05aa217da9543ba

SHA256
e17302c0febdb4eae37f342969648ed2453b6988cc3812e523e376078e3143c2

SHA512
20a1ff8234d5f1def2a0273e5a26d07c3985dd566631b35e8a78df7ae80f3122ee457156a39945eac2093443f288d43f9ee2afba96836fbc1b25b233eb281414

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
9064b3f58d135c1dea6a425fddf34706

SHA1
e4a1fccd9b55a3b8e4af4ba2e5d123bd0ddef44d

SHA256
48d1a2a0b4294deef5d11910777dc8ba902b36e17afa23df2b7adcf8d672f86f

SHA512
6feb00f3a218f3c78770cbc5720dac81d78975c6e9187588f1af2c54d07ae6f58a04107106fe5197391b603e663fa01b0ce7d48ebe9ee43b2ee52a3a938c7bfd

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
5385f0000c81d82f4c2074cd465c3a2d

SHA1
27ed4731b77a60f61e0991db5ffb79d69d6e67ec

SHA256
9d108e69365064ce46b21aadba3d84a481fa665846c8f5a1aa6c1470ad1ad533

SHA512
9bca3754d21b7263fbc48e1703a9b069e0053024c10975888aea19b6a27f38a532470f5b6c59e1c7d71f831e038c437910bc90e2ee1e0f0159641db4c3738c4f

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
45e024b39fb1ec8c05efe4553237ad1e

SHA1
c915ce058ca1849b72a82229c8408a904d832acd

SHA256
f99739e7f90607377f74d58419a16fdbec1b772f66fe2847f8a4509afe67b072

SHA512
dbf7329f278ffbe2881eeba12b4853469f748095b086de414b9fac3c3038e74b64ad0be1b5d7c7c69fdae1af28753db8d5e8243993cc4f3f229bee318277eab1

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
f16f40a0d9b3a48ed39aa47ff6bcc1d5

SHA1
f2f0fc9e3f0e87a499fc6fe53229494bce2cfc55

SHA256
47046a8d4104a098cede6a43c2f1b715f198c5b7bcd6fc9a076cc21510c99c8b

SHA512
5fc25dcb501bfdecceb592ef9b5809f584a84602a8e8c91d031457413befa6be353193a54ece40b331ad71b243ba2461116deeb9c00855e12ae13a9da4741b01

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
c6505cc0ecb9c77f80f2bf1ed6d7d4b7

SHA1
de8b02560aa6b96816a8809a1d1cf6cdea287eec

SHA256
aebc0284d91d6050c9710c0d6bd28433813639d8e96b106c48fb9e1763aab7d4

SHA512
90c25911c394f2c5e7b09ac0991ca637010192f47d84aeac9e8eefb8c647d3ecfe5b059d7deb83fb12b5a7a4cfb9a1564d7cae2b23ad0abd32ea17fde7da9ce3

Download Submit
/data/data/com.googleFe.app/files/PersistedInstallation4515844263177858579tmp

Filesize
90B

MD5
430f41934a8de87e84f9865323a48cda

SHA1
0f23662b6ff84a0eeb353de8b241d2cf88b0af60

SHA256
caf018414d7154aab3105a69fd5942ba130455627289ae994c3dbd8c9cd64a42

SHA512
52d136e5c41b3c1fc324cd072efc6128dd11cf9a58c379582242a94cd531dae0304d0cffa1a2f8fa93bd360eb5cd8f7a58deb90728ae07b3d62ca413fe1feff7

Download Submit
/data/data/com.googleFe.app/files/PersistedInstallation4876804100750094600tmp

Filesize
570B

MD5
9ea97d8e3d3a057e8c95e39b6eefa6c1

SHA1
6525df524fe3dba8942ff483fbe1b5081d4c2d69

SHA256
b13abb5eb6100bf5a0bb0e68f4bfd1b6d27aa13e882169549d432cc28ab5b126

SHA512
187045777028ad7b3c648a8c1ba5d04bdeae5c87c0cc38379b78d655d40b839d1e44dac96756f36d1569ed2e5b8d52182020085989cd4375d1d841b46b4389d7

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads