ab7845e4e0081a9609c40d6e48ac0e1ccf171c6987556e37cdbb26e814bbd0d6

Analysis

max time kernel
123s
max time network
157s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
13/01/2025, 06:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Application.apk
Size 2.8MB
Sample250113-hmqf2atmdl
SHA256 ab7845e4e0081a9609c40d6e48ac0e1ccf171c6987556e37cdbb26e814bbd0d6
MD5 c90d0c1ac450350610455c43505b6926
SHA1 fde5b2f4d4d58b66bdb898af584445751082d4da
SHA512 9f13e9e1bd48e8fd4e6e8f746eddaabd6e21fcdf3fe0908cf1e50a121bd5b14129bcfcbf2d05fe5f8f1de64a9588bb65ee969d640af49d3e3e6599ac59d4c8bf
SSDEEP 49152:i/67lUUxto6nfTDB0Ej0TNDShMkXEdmhupqBIbLFku2sOlgD6Qko8umRz9JdxH+w:4oUUxLfTl0EjEOMkXEdmYqIbLFkuSgWD
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.Mad.apq

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.Mad.apq

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.Mad.apq

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.Mad.apq

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.Mad.apq

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.Mad.apq

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.Mad.apq

com.Mad.apq
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5058

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

Path /data/data/com.Mad.apq/cache/1
Size 24B
SHA256 5b943c68ff720a25fab8bbcd2db228aba3b0a6f28a70a93553a8b7b106d4385f
MD5 5b96a1e2f74418ecdf0f77c17abb1a7f
SHA1 f0b37d29453bef76316aea147f8841f5ca847cf3
SHA512 4ff7133aab37cc0c36074815fd784b9e2c7e318d51504ff0e3d661de5ed7a480453a1528902bd79311914560ded240a8d7562a69fa55257c6746691354329d94
MD5 SHA1 SHA512

Submit Download

~test.test

Path /data/data/com.Mad.apq/cache/~test.test
Size 4B
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db

Path /data/data/com.Mad.apq/databases/google_app_measurement_local.db
Size 16KB
SHA256 1b9060dca222f870007e56c581237fe6d09005f0b5a66b972d114bb0f7b88e16
MD5 9220860c66681278d53dfb8748cf4378
SHA1 8915539e05107af4d9814b7db625cc2884e1e9f3
SHA512 8ead53aa527c2d59e3e56c258c1f179f4877bfb579f022ccbbde18d614b56547444bb4fcf1084403a26bfd74c0ba16be197bca19759878894d828cd544e2bfa3
SSDEEP 6:l9bNFlsls1ylO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6+Zf:TLiEy9zmzrfRmBEyPbP/P+/0Fl6+Zai7
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.Mad.apq/databases/google_app_measurement_local.db
Size 16KB
SHA256 80c6b1dfcfbaa45f6d126c390ff66f9f1333cc8d2e75e0ab726a5cb645c70731
MD5 b849430872fba8c979d6273b318e4bba
SHA1 dcb282d499aba17e479742e79a6df24f4ab0c93f
SHA512 9df665411a3b1e118e23e9906766397f9d45fbdbf8d65436a97519bb77542f1b73b312b6431e56bcfebb609b863ca0d9af878b8da3738f62429526fb0c5c4845
SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hr/gW49blqYFljm9F+/0Fl6+Zai7:TLQpmzr0GSP/h1499FpIlFwK
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.Mad.apq/databases/google_app_measurement_local.db
Size 16KB
SHA256 e4d5beeeebd619fef9bc76fdb24ec7b28514ac6f050c74eeff6bb5a02f8a2b83
MD5 0c031a5b006c5f808e663ee586580587
SHA1 5d0aa81966941e8f9129732a6825aa35d174c6dd
SHA512 c4e961d571d55ba8b208f09ecc4dab8c7af3c3fa38bc90af9ee4740e33ef53f72634325133a7624157045ac61ad29c79ff196ddf4e3dbae6d4e60b837276dd8b
SSDEEP 24:TLEvpmzr0GSP/9PKary5tYrA499FpIlFwK:T4vArSP/9SaryzY5ywK
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.Mad.apq/databases/google_app_measurement_local.db
Size 16KB
SHA256 ad62572ded4f71bd6d4cd6423bca01951a935fd2b18a5f88982351f2f7557c76
MD5 e36aadef65ea42d51de6915e4c64aecf
SHA1 cf9d003bf1c06797568d6426dd4b69426e1c7b44
SHA512 942e2eb00b77f82b783d68b0e324f9eb9942a53b3ed9659bc3148eb2b5f204f352e38a539b1599392d4ee2ea2da2374aeebcec22d98505bcbed8e2a0b605a6e5
SSDEEP 24:TL6Xpmzr0GSP/sPKary5tYrA499FpIlFw+:T2XArSP/sSaryzY5yw+
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.Mad.apq/databases/google_app_measurement_local.db
Size 16KB
SHA256 252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9
MD5 adf6082723784327d7d1b34adf974e7d
SHA1 b1502f70eb881a1dfe41139cb719fefb877ee37c
SHA512 762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b
SSDEEP 6:l9bNFlgls1qlvlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/W:TLuEev9zmzrfRmBEyPbP/W
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.Mad.apq/databases/google_app_measurement_local.db
Size 16KB
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download