5d600acccdcada3cbdac0943e5e8c2b04b9b73d62397c835c19938449c42cbff

Analysis

max time kernel
123s
max time network
157s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
11-12-2024 15:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

app.apk
Size

3.9MB
MD5

92fffe03c97a2492ae8f022eb6e91b36
SHA1

ff638b0c705d4fb5215b9f675475754e9bdc6e98
SHA256

5d600acccdcada3cbdac0943e5e8c2b04b9b73d62397c835c19938449c42cbff
SHA512

ac5eb6cc590a993243a3249704a5671eaddbbdb167e25a76b6998622ae95f6ceaf14f47602f58f79be00a257525100e1b0b0eae49571adaacd51e30cec0e818a
SSDEEP

98304:DcLH4eIOCNY6A2IzrOvm+AREDWQuV5T2cYc8:AjvI1NYZ2GOv+QuUc8

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.googleFe.app

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.googleFe.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.googleFe.app

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.googleFe.app

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.googleFe.app

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.googleFe.app

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.googleFe.app

com.googleFe.app
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4925

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.googleFe.app/cache/1

Filesize
35B

MD5
b1934f4a849dfd4f6decaa58cdc0cb97

SHA1
c983e0b04390beb0b676ce905fba102bb7a7fc7f

SHA256
09b0d89d82845e668862cb06e0b2d54f96b9dfdeed27ef17b15ef3b03f128972

SHA512
ae38d9ec4a5371c705e09a803d780c47503f5d897e62ecaff3d4ccc50e6b873b5303623043255a39a9f380e50d2808cd9145ba383811185b1c8568365c184ce9

Download Submit
/data/data/com.googleFe.app/cache/2

Filesize
34B

MD5
c76013d165ef454e96824b1f62118c7f

SHA1
f9e0cf89bcf722d7204165ae26c131cf01cbff28

SHA256
9890e8131aca75cf93d9b0d92da3c653ca25768f93c29dcf486793de952fa142

SHA512
9b5d264af7541b623e5ab1f1fc96d572d5cd91df876351b5941646045bc3c268c10a822c6134aa8d25d81daf59e957a6c54d66757f3c7d2bdf60755d28d78b47

Download Submit
/data/data/com.googleFe.app/cache/~test.test

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
19cc3764ec9e97b73a844eef50ab5ff4

SHA1
baf97388e7df5b5c58c5d5ae9eb2d10d166f04f0

SHA256
822a5eb79a485ebc0fdff5672f1476eb96e7ffdb29c6e20f8497fcdfb7351fd5

SHA512
3f2500b7f566a38cf2098c923cdc3762c80a6deb1d1ffdf288679f18feafbe0132f4cdd9ba6680811c15debe49d119751a20decd38c9c187ef8dc3e73c150ab1

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
c0112b226b29c8843043d57b92aca639

SHA1
6c2defd92b78b03a3fd9c90a193e618192b29ada

SHA256
7c015d21df9b9a2ad159a304b8b5fc56d5d0099d89069d590766f2e2b853a074

SHA512
3a3e8a51b197e2c5e0ca99b2437fdac41d06c76810bd2fe7bdff04eb83453c3d94936384426169e94a7102b689bbb330c18737d27fa88dc0647e21a6634231a4

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
0a1054ef37e08f38ed07c90d1aaae97c

SHA1
e2807a99b4f31aca3f42a2fd5bdaeae72b487622

SHA256
a131c5caf4fe010e4d1eb260d08e9c8e75ca8070bfce8ec3a8e274280de88a29

SHA512
8ae8df456cc74ad4202452632145a28031c6e76287196c4afa936e25a678322f4b7cbcda45f6bdfd9f52ab38c902c764e148388948aa8710b5e75a1375a53341

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
8b6cb034d9c4d2c1d6569b67d922f0f9

SHA1
553682e339b87000a273f268a5f0d5847203e726

SHA256
b385634a3baa0cf92df50ed3ac8b436529808251fd0260b9dae2a7c75fdb1211

SHA512
599a1f7e87c23254c9a7951a17880224a93559047964c3261ce15246aca3eb84d71352ca1b55dd67c55c356d23c01572edd36a3b33eb53784663b017a81f0e79

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
adf6082723784327d7d1b34adf974e7d

SHA1
b1502f70eb881a1dfe41139cb719fefb877ee37c

SHA256
252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

SHA512
762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
ee0ffc74fee25374d86a3707a49105f6

SHA1
b35e52eabec932e0fc3e483c478b76cc0723b40f

SHA256
9099c16feafc2b1c98ed1feb548cfb394dc854882e9d77fb32da3384ce2d3c38

SHA512
25e6a0f34127abe3745dafd2323ccf252fa1a12ad50e9e871018363cac1ed235b95f7c4c2a2f867ee500cc77ebffd1ebfafee873367277646fe6b247ba36e232

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
adc6dcecf3f66783a23f320d9053eeb0

SHA1
18f94f16da1c68697ae8aa68ecd5c9e7525e19d8

SHA256
8ae40a16abb5bb10ec1fc3f6bf19515562cc0c3d4ca077f4201384102e42d1e3

SHA512
7bbf57662223599e65ef4c95a607c78577b72f160d4c6c76588c79e53e50416fdf4c40a241aa9c1cedfb0457bd98663e7c285b0c1ff4137740ae48eb2107f126

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
74eb3a37732444ba7a0bbeea95b2a43d

SHA1
44df74d053c9655a47b037376cbb55889d399d23

SHA256
816f71708805a3ed9ec0613a1b2692f2c59620e5f102c9906f477b08c67f75fb

SHA512
5d596d7305a08088fb1fba0ee3904df563dba7a16df510bc313a80498f86cfe4039e79f4d06af4e42364016fc9bd2f7a733e2e33422041d67231db22caafe420

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
595503616be72041390cf1ba8f9df50c

SHA1
50be4b9883e9f266e4347a805cb937c2ce9df83d

SHA256
f611fdebad53b573a5567ff504391fadeae8d1440e4ee24ffd93d65b1801f34b

SHA512
bcfbc35132e9437e0945d3516a212b6b24ed7288707fff0d9bd91c80865227ab183044da2fc2d73949366b202c2ba08d4870f4639d0184f649e596d38c5f17fc

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
7cb4b04651405210e469fece3765c42b

SHA1
96ceeaad146c195c47ff955e632b42c33e874869

SHA256
53f5b7261ea1956af838fafd0db2121ff357160dede9ae85413d763523079e10

SHA512
a60d0c713c0ac392a9181859cf1dcb617cec3b05a5b1ea6498269da3c3cbd31a52231296294523841f94241512d7b234a2450f0ea20bbf7e48ffd23bb22522ec

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
a7a2d89fe2dca569f740f1b2e827437d

SHA1
73cc04560a5db96e2b233b0846d732edfe0d5c68

SHA256
8d13ea96c177f91758d5b82df68fdfddf2a76b5e28472a77bf4f132cb9aeadc7

SHA512
03d80f64e369f5f9c4bca1f493eace5a959daccdf956ad7fd417cef4997f34ac0b00d1a7149c80f11d44a25d16802491ec6cefaacc82b40b6e49ad94be4d606e

Download Submit
/data/data/com.googleFe.app/files/PersistedInstallation1411999473963901142tmp

Filesize
90B

MD5
9957ce8eab6c99665d63d65ffca08139

SHA1
31a8b1b4bb13c25236772e323910445fb7a8e94c

SHA256
409a8cf19db8b7ae82647940b9f63cdf2bffcb88257f1cadeba836ec59aaf354

SHA512
63693fd5aa78b82e2a1ee77819d807d62cbf4320a35e8d60e9b54365c30c08d18e59eaa0eb6062748b6219c17b309dd1de5dcfd47aa5874f4cedb04509a020d3

Download Submit
/data/data/com.googleFe.app/files/PersistedInstallation7349257984023868194tmp

Filesize
567B

MD5
57f99b84e08110340879d0c3b47b9d63

SHA1
edb083b93bb14886ec1dc015097a965ee4c50917

SHA256
831fb781c49cb5e4a61b742829931ab0efb100e96aa71908ea2628a5c236f264

SHA512
57cdf973b0628fbd03e2c6b01893687eeba12dbfcc30d17a202afa9f8a49316b8cc7f839abe1d82db9302f4302f22204fca23d83ff1ba529d6b692e53bfa1034

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads