5d600acccdcada3cbdac0943e5e8c2b04b9b73d62397c835c19938449c42cbff

Analysis

max time kernel
123s
max time network
134s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
11/12/2024, 15:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app.apk
Size 3.9MB
Sample241211-sqd8aaxrft
SHA256 5d600acccdcada3cbdac0943e5e8c2b04b9b73d62397c835c19938449c42cbff
MD5 92fffe03c97a2492ae8f022eb6e91b36
SHA1 ff638b0c705d4fb5215b9f675475754e9bdc6e98
SHA512 ac5eb6cc590a993243a3249704a5671eaddbbdb167e25a76b6998622ae95f6ceaf14f47602f58f79be00a257525100e1b0b0eae49571adaacd51e30cec0e818a
SSDEEP 98304:DcLH4eIOCNY6A2IzrOvm+AREDWQuV5T2cYc8:AjvI1NYZ2GOv+QuUc8
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery impact

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.googleFe.app

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.googleFe.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.googleFe.app

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.googleFe.app

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.googleFe.app

com.googleFe.app
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Checks CPU information
- Checks memory information
PID:4479

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

Path /data/data/com.googleFe.app/cache/1
Size 35B
SHA256 09b0d89d82845e668862cb06e0b2d54f96b9dfdeed27ef17b15ef3b03f128972
MD5 b1934f4a849dfd4f6decaa58cdc0cb97
SHA1 c983e0b04390beb0b676ce905fba102bb7a7fc7f
SHA512 ae38d9ec4a5371c705e09a803d780c47503f5d897e62ecaff3d4ccc50e6b873b5303623043255a39a9f380e50d2808cd9145ba383811185b1c8568365c184ce9
MD5 SHA1 SHA512

Submit Download

Path /data/data/com.googleFe.app/cache/2
Size 34B
SHA256 9890e8131aca75cf93d9b0d92da3c653ca25768f93c29dcf486793de952fa142
MD5 c76013d165ef454e96824b1f62118c7f
SHA1 f9e0cf89bcf722d7204165ae26c131cf01cbff28
SHA512 9b5d264af7541b623e5ab1f1fc96d572d5cd91df876351b5941646045bc3c268c10a822c6134aa8d25d81daf59e957a6c54d66757f3c7d2bdf60755d28d78b47
MD5 SHA1 SHA512

Submit Download

~test.test

Path /data/data/com.googleFe.app/cache/~test.test
Size 4B
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db

Path /data/data/com.googleFe.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 67816f1084073fc2b2ab4c5dce83a189bac41792f5a368ad54c3d2b790da45e8
MD5 fc81e683a13a8ddf276e383cfd5bf27f
SHA1 71140b616822d6f67521c322fb6097d19cbcfa63
SHA512 61cd1e8bfef5f13ce0be206ae88643e9d005f9dc8326444f9c7d992bdaf6b3a2d51336e2c91c05e0bef8d0459a9c7dcd1c6eadac11473e720a1d7fbec7fd4343
SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl68:TLiEq9zmzrfRmBEyPbP/P+/0Fl6c4i7
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.googleFe.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 71948f6e36ada0a7daea180298f97513d177cc8ca7882e3de4e204fe0a362b6b
MD5 e725d5c79eed5c570768b4dad6766895
SHA1 e02669d6348fa35c8c45d2d9b505edbf1ff8e203
SHA512 0e441877720e8698602d640a58ffa61dc40ea1cdbdabb423ab23fe3f4b227dd4ec3ed38a1f386aec931c8a95ad8e278339ae851c8ddd3144a25f09aad44d135a
SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFlZo3+/0Fl6c4i7:TLopmzr0GSP/h1499FulFb4K
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.googleFe.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 6042e48abc9c5c3a505e458a7390de5d1dbf53a40f01a0d58b98e41aeffe91b2
MD5 316129e1b2ec7d335fe99f447f5af840
SHA1 ca5b1e70c5e200b8437d98b220f200babd896c57
SHA512 019dadd472513f931223f423341d6001667eaccda2b5ae9226a6cdc885db5478e8e5ce62f06fcf92090fd5854d9fd31a3f49a9cea804f3442c27b7a895337b56
SSDEEP 12:TLIEU9zmzrfRmBEyPbP/9FAiOLauK/6AUvkWlQtiZ49blqYFlZo3+/0Fl6c4i7:TLYpmzr0GSP/9PKary5tf499FulFb4K
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.googleFe.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 33c2e7156b50a44f5ac167f71a65c303896513cd9f53cd664364ba62834102f4
MD5 353b64d093b7b8828f335bcfe981e68f
SHA1 4089883b91ef2c66a748a403918b069c294579cb
SHA512 b48e09955f490d586d745554da60eb569bf3e40867dcf734c640767b59f3c861b09af2967920c2446b0f504d43313fd984b73a48203d43838c3256c15bd63446
SSDEEP 12:TL6uER9zmzrfRmBEyPbP/sFAiOLauK/6AUvkWlQtiZ49blqYFlZo3+/0Fl6c4iv:TL6vpmzr0GSP/sPKary5tf499FulFb4+
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.googleFe.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39
MD5 de82e2c94d2718988804b035a46d17b1
SHA1 705f5ff19093ad209f2a666085d6ccaed3bf58a4
SHA512 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e
SSDEEP 6:l9bNFlgls1WnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/W:TLuEe9zmzrfRmBEyPbP/W
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.googleFe.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download