4e609c2edadf166dbcb5c492e48d8169d5a36b09a3698a1ef27cd681e9f36f1b

Analysis

max time kernel
123s
max time network
157s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
15-12-2024 17:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

version3.2.apk
Size

3.6MB
MD5

86b9be3dfc022d5b4725756c0cc5a02b
SHA1

e899c25a2674f317b8327682553ecf6a9f436f94
SHA256

4e609c2edadf166dbcb5c492e48d8169d5a36b09a3698a1ef27cd681e9f36f1b
SHA512

ae5798ec1e65fa91adcd73d6f6dde480e1180725e1b6c60aa4c4d1e10e2aefd890988d5f93ea3fb49c689d67d024dbf95df0ca20f8547b70662b7a063b96aab1
SSDEEP

98304:oK4MrIdrbxVoPs14H9xx6eDo6ddgwLOKTQdGd:oK4MrIdrbPoEwv0I7IGd

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.googleFe.app

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.googleFe.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.googleFe.app

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.googleFe.app

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.googleFe.app

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.googleFe.app

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.googleFe.app

com.googleFe.app
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4969

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.googleFe.app/cache/1

Filesize
50B

MD5
ce2caab3e836f88c7e999792501e8013

SHA1
a28a0d6033576cf12aa39c17e36dc94395fd2f56

SHA256
521a6d6c7762a72698cb4e37773309f3b015773a72b40c53b0b015c6097bed9d

SHA512
21919dc956c0b0e7259afd887edaf1f014e85905b11cf579a7f9b2fd59ab66ae10925d2ddc01a3d2aee6fa9f218b1606526ed821791257f9905b47555cbebb84

Download Submit
/data/data/com.googleFe.app/cache/2

Filesize
34B

MD5
c76013d165ef454e96824b1f62118c7f

SHA1
f9e0cf89bcf722d7204165ae26c131cf01cbff28

SHA256
9890e8131aca75cf93d9b0d92da3c653ca25768f93c29dcf486793de952fa142

SHA512
9b5d264af7541b623e5ab1f1fc96d572d5cd91df876351b5941646045bc3c268c10a822c6134aa8d25d81daf59e957a6c54d66757f3c7d2bdf60755d28d78b47

Download Submit
/data/data/com.googleFe.app/cache/~test.test

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e7009bb57bee137876f56f3f6cbbf234

SHA1
6536555034b231a28ed9d8f89227f2b9a61e2bf1

SHA256
a7191ed819e0f6246423c4342de44365dad1047b3769a938b99b202e61eb3eaa

SHA512
a1e11bcfa9e19fa682337244d01b396537df298ec76d9d6e2fd79e3b88f34ff2f0824d63d87b08ff8fe2400b57815cf81078d7493ed66ff8cf0cf65f602353f4

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
00eb87cced865ee210df910f11293a10

SHA1
563033df448866965908a965c753bcec1f4528a8

SHA256
eb2d8ca503dad0ea9d5e2b2069b02fd5ce43ed63c685e22ae015819bda600f63

SHA512
2da46d23c7f23f41ed7bc64afa00c32799dd214c18eca43f10ad9f6a9ce19c06f83b2cef49aa164afee0d7f685ce46605a861ca0c126bd0078cc3dd725e18699

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
6d3897b77c69c75c5e04a74db1e9bd9f

SHA1
44540226c7ee689a1a728300734b9aba0a6a67fa

SHA256
6c753b215c779cacc87cd77fe8e84e5d85ab03129f929f6b78428b176d664bd5

SHA512
f208bb29626bfea0502810891274542887ec553c215521e13bad45e8b8844700dd0b3e66da519a074f0922842d70dd976502d06586009a65ba29f4674772dd6c

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
361d390c9af6288564b56096662d7808

SHA1
dbb544ccf1a67a0d865669e5a9d8857bb7696aa3

SHA256
4d2acafabd081d48f43c411c8ee8253c58d6014cd1adf3288c484c4150489160

SHA512
87c4dce4052541a1beccff5d1b5ed36f8e5959eadd05a40f502580e7b53b8d6f051d75f24fe80bd8b2a9c746ee5f8fdccdfd5c53a4e9785f347d1beb31ee2375

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
adf6082723784327d7d1b34adf974e7d

SHA1
b1502f70eb881a1dfe41139cb719fefb877ee37c

SHA256
252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

SHA512
762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
88b23ed3155770f58d52db1eeb82f302

SHA1
43a6f4daebcbc6fe970a7e080933eadff64a1a35

SHA256
bb3c2e2091815b3f5ebecfeb2229a33241c2ec348074dc034afdd337d1956e18

SHA512
1492d8004e657b273d263d21702d37e88bcb275a03b33b80a8e86397f85af2b40c5b10605332921a878af2ac35ce1386eae692a142dfd89028020d1b9585cfdc

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
017e3702ab81279ea8dcc8910be38197

SHA1
08508038df0433a9431468884f57381e5c11d29d

SHA256
61f74b3210b418a190ff4f1aca694387c39e1e878f551c22f0e437223364883e

SHA512
bb42f9f958d5fca9327cb8fbef921c4908d3c97eeb7964a0c7bfc04044f93a8b26f9574f950d781b19fcbd94be0d93a3d8f3b3ac5fb5c3fe057b04077dfc5d88

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
354a3e9371a120af934bafc352d0fbb2

SHA1
3afc15e4650539867790036b8b312867fe2837a9

SHA256
3d70146b165306c0a9b0a4169fffee77724e0e52eebfb7b473df6cf916d939cf

SHA512
1b6b3e86a011cf36d5917af0be0f498725d6dd9c50ca5dbe395400fbf46b9e2bb9287e22e4ecdcc3ae1b0efe8321ff70486b442e1bc928a29846c4621b64cfd9

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
8a5d331edcde39a0e661c04a900b3d7c

SHA1
ad505b32ca168c0b2dd8ecb339f904ff14fb71ff

SHA256
5f4329f4c5cb020d683fa5acfcd29e2fbd7411f7439c706acda1eaa91b12e6fb

SHA512
3197afe4ac0a2d962c81a417a7365a8445919624a5fb796c29323cc6c481336b52300b188a6ca4dbd109eb75552188d5400fda5bf6286d1a2e03bd530f520db9

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
2d4ed0baa9cf0c3791cab4e3539733f0

SHA1
8380b35eab88ee6d0a1205f510a448d803ed1e58

SHA256
455aa4ca6727e4c28fd17a47484a6dbfdd78e1c25503b2cf0497e234d562f48e

SHA512
5407a132cd38c8d867f8c881d125a6263720bdf525205a37d2da437700630c98ff7e936a6e3a430d7564743338cd91cb0499af1a3f2449246cc818ef96240b79

Download Submit
/data/data/com.googleFe.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
942a81def0a42434583a153b60e7c06a

SHA1
684cd58000aacf1a99b72a8c957cda818b204813

SHA256
acb43153f3db36ec1278dad64d098af78b19058ed5cbb7aa0cdd3302f0bda2d4

SHA512
26fde50682ea387546976f25bf32b500205c826ca7ef974262305bf3b0cca5339b5f69533a05a424336af4ae468be031a783dd79dcf0ac505c1f65db605c1451

Download Submit
/data/data/com.googleFe.app/files/PersistedInstallation3577487627560520054tmp

Filesize
570B

MD5
605e465f1def0d8e9d9416a3eb40cb48

SHA1
07740f00189d2575de2ad7648bbbb15f7a555035

SHA256
70cdd299ef630d81513b5cad57f2181651d2d1a32aaf65491bcabad1636e8565

SHA512
ab143103457c0684f911578c724f0d01ae411f99bde53b515f6ac04feec5625b7cd1af812dfaeddab8e79013c3e076d834c5dc489654a82f47fa3298efd76849

Download Submit
/data/data/com.googleFe.app/files/PersistedInstallation3634731097678799837tmp

Filesize
90B

MD5
e327c2b17157a4d9caba98ccfb6bd978

SHA1
a57eea72a13a5e1a467e978e77ce0251511faf34

SHA256
0d9c92fbc080ba0da89f8ce737b58fe23bf7d3f77c4bbbfeee707f1c7368ac96

SHA512
341d23debdd92429598760e2f3f493b10ef5ff6fb39293f5d590d42fdeeadb2dc7bb601d6e8bb4e5e15f643f2ffb9149a658da168578bc05b199ebb8ed6e4193

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads