4e609c2edadf166dbcb5c492e48d8169d5a36b09a3698a1ef27cd681e9f36f1b

Resubmissions

13-12-2024 08:39

241213-kkgr8asrg1 10

11-12-2024 15:26

241211-st87tsspgr 10

Analysis

max time kernel
122s
max time network
157s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
11-12-2024 15:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

version3.2.apk
Size

3.6MB
MD5

86b9be3dfc022d5b4725756c0cc5a02b
SHA1

e899c25a2674f317b8327682553ecf6a9f436f94
SHA256

4e609c2edadf166dbcb5c492e48d8169d5a36b09a3698a1ef27cd681e9f36f1b
SHA512

ae5798ec1e65fa91adcd73d6f6dde480e1180725e1b6c60aa4c4d1e10e2aefd890988d5f93ea3fb49c689d67d024dbf95df0ca20f8547b70662b7a063b96aab1
SSDEEP

98304:oK4MrIdrbxVoPs14H9xx6eDo6ddgwLOKTQdGd:oK4MrIdrbPoEwv0I7IGd

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.googleFe.app

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.googleFe.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.googleFe.app

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.googleFe.app

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.googleFe.app

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.googleFe.app

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.googleFe.app

com.googleFe.app
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4936

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.googleFe.app/cache/1

Filesize
35B

MD5
b1934f4a849dfd4f6decaa58cdc0cb97

SHA1
c983e0b04390beb0b676ce905fba102bb7a7fc7f

SHA256
09b0d89d82845e668862cb06e0b2d54f96b9dfdeed27ef17b15ef3b03f128972

SHA512
ae38d9ec4a5371c705e09a803d780c47503f5d897e62ecaff3d4ccc50e6b873b5303623043255a39a9f380e50d2808cd9145ba383811185b1c8568365c184ce9

Download Submit
/data/data/com.googleFe.app/cache/2

Filesize
34B

MD5
c76013d165ef454e96824b1f62118c7f

SHA1
f9e0cf89bcf722d7204165ae26c131cf01cbff28

SHA256
9890e8131aca75cf93d9b0d92da3c653ca25768f93c29dcf486793de952fa142

SHA512
9b5d264af7541b623e5ab1f1fc96d572d5cd91df876351b5941646045bc3c268c10a822c6134aa8d25d81daf59e957a6c54d66757f3c7d2bdf60755d28d78b47

Download Submit
/data/data/com.googleFe.app/cache/~test.test

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
c13747865403e49ebef2f43685561116

SHA1
6397e4b95fba96bfcc3eec6eb10f541acf02f2b4

SHA256
76583f66507b508aa7962f8598d8eebaed7f2e382e6071180f2fbd4756467986

SHA512
b81d3ec7723951657186c4e80dcd6a83ee2fcd4144118fb9d730d9f866ec32f621a484d4f4886b1a3b1b39c378b20437291e527a715167af9649ef9047f6e09c

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
54dd36f546bc5ee3d8307803cd887132

SHA1
56884e279c0977cdef6105957eede71d48bce1bf

SHA256
783f0b30641376ec2465695e7227b4cf4067cf42baa276f306f878eee12b4544

SHA512
8e99b9083953620e7a52e0204afa69334745918f3695a9e42452316cb09e99966f7e178649c4c101ba8e8b310072d2cded3742b0abde44c29b54522d6512f5f6

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
64c1eb73dd4d1a5ccf3770e2d5a9903e

SHA1
f33a750e3bbc9cd736c3e14527e75bb79a65581e

SHA256
1105d2a225be13d8873345223c20c794253b66f3338f3dd89f20a499606d060e

SHA512
56c4991baee9e6146aab5ea507a2e5d74417dd6c95743a93bc40a0ac835cedafefbc4b34541039f31d927e44506aec84722860e2923117343108f8752d8afae4

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
773e83f294cb54edc750271f50fafa1f

SHA1
faa2ed320001a400652774b3c0987bf8dde34d83

SHA256
4a81269a017243ddafa2d7ee2e9d157b0990b526f698849514b7038e427ae1d3

SHA512
82953d7ff72c65e35ccf3b7aa6b9879086e9e886ef6704448fb9494b86d5b0d3b77fca90f3c69c43cd2f2016f8a35134d2f237e076b7722360522486e9df6219

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
adf6082723784327d7d1b34adf974e7d

SHA1
b1502f70eb881a1dfe41139cb719fefb877ee37c

SHA256
252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

SHA512
762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
b91ec85586a0221b15e74d978be00b19

SHA1
d87637493b8cd7c8f359314dd718f3d9b7efef89

SHA256
77c8d69f094dcea5d3b88951299d2cb1c1c0b7e2e9530aa5ad32d61ff3b25ba5

SHA512
075027daaa2fab75b2bbc819589bc75b0f905b0156dfffbb5ec0e0eebdf2b1ac259424340aeb12ad9155d610523f6d67d06f8e0fc2257be97c5f7c33bd6866db

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
4be257ee97af9c506969f9e6a455ca9b

SHA1
79e269da2c851ffa30e8d47b517db5c511f05b2c

SHA256
7197da6591c90dade0329a936a55bc2eeecf4a33450a3e8d76151802c226e5c9

SHA512
9bb34378fa51344ea06213c12188f95132dd80a4bbc6aff80f8208216012743e47e7238fd53938646c04799aac1918568ddf1a9770864ac4c9c0c08fe45b2c7c

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
95900691a7d303a416ef8f8ecfe4c152

SHA1
6f8cb14403d3c4046e70ffe4c1c9563349e36bd5

SHA256
4f931758981465c375a93a9ed2fae71f13e6a5f7567be25ab39e4734ecbb8c13

SHA512
dc378bdfd8dacddc872f7365993890c5b737465378888629b7a12efe4b463e0c22a7ac2a94bd558989bbff593a6e25a5f2489adae9121c8d31193fd4b3db7267

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
376e2720be586e5e35bf96014181b60c

SHA1
f0036c288a6ca25f40908a27e135f2b15fa0a0f6

SHA256
d2f9eeb0022cd596217fbca21a42bbb18c920c436f3956b65d33229f2b7b1ca8

SHA512
6a855d9dc22538fa50fa45872f0e702c59c478e16387255d37e2eef6d7739010a010315ec4b7c493d37ce49f68c4511e55ec183b225d33f5d7dbe31c6097fbe6

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
5a270b203f5e0b4d44582259e04d2c2c

SHA1
33d707446b515c0dd368fa7cbd706ef09e1e906d

SHA256
cf114352db07869c38e6b290a314e23e4a3c703bf0249c128ef27be586022c2a

SHA512
8562b98d06440b338218c5da51788ef0c7be52eb15f68747b8b6117ec45470fd4759cc9bada318e9b36405d415e0821ef287fbb737bf766b176041ceb51fb26d

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
68dc39ca772ad484a2498fdc44fba0e4

SHA1
7b7a367900512bf2f88f3f3d8f2d6f261b90efe6

SHA256
85d4ccf7522e996ad3dca003fd39b7294a73e23d20004712e503e920915d86b5

SHA512
36ff2247c88192fc1a3e87154b2776e9f5a1b6d4954bdd5eb8cf2485a2616c98086079f757cf94c2b17e7607970b86ff1caf6b37593b41c7112fe5b18168b242

Download Submit
/data/data/com.googleFe.app/files/PersistedInstallation564633151334407447tmp

Filesize
569B

MD5
6e82d7ee67fa28667b6cc70097f537f6

SHA1
16bc9418cc9580d67e80048721654b190d2a0886

SHA256
c0181006ee01ba4e08bfbd580e4bd467fab95e4a3af1206b4525439e328a4546

SHA512
dbf7e58aa034f78c47d18ac68c95554e8a7344a76db9f458c82fa12ced0ce1b8a2463e333ec4533734715c825e8832b2b3ee4069c5134b1496204730af6502b8

Download Submit
/data/data/com.googleFe.app/files/PersistedInstallation8064265096395959124tmp

Filesize
90B

MD5
d3b6000b845c9f8f35eb4477e0e10838

SHA1
e9f6827428c8e224b3e7ca22fe4aff5175a9c1a5

SHA256
08100a2befec0d49c4a2dd3c661362894edaf864efa4e942b1a2094fa1109375

SHA512
69b5a080dc03b05d06896d4541f9878c191eeb977340935ec358346dba09719341f89ad2c6fa6c23cc980b65cb91d090555dbd169bc21ef56bb8d5ba049852ce

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads