c3d9705928d0fee0ca3e718ff4fa3da062d354ce7e8dc59b3ce2ab224d79ad69

Resubmissions

13-01-2025 11:13

250113-nbp9saslhn 10

13-01-2025 08:09

250113-j2b3mawqem 10

Analysis

max time kernel
9s
max time network
887s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
13-01-2025 11:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Application.apk
Size

2.4MB
MD5

5af781cd5036adb21cfa6d68e845e1f7
SHA1

e24e5d4af0c469b1a52c9c8be735048215b19d92
SHA256

c3d9705928d0fee0ca3e718ff4fa3da062d354ce7e8dc59b3ce2ab224d79ad69
SHA512

841642f2cbf3fa112bf3b5e2d305cd4a4a2daabe286276b040e84d17b68c65854673110601351d014943e1a4837a00ad8663ca96bf1152af957582d8b49e54d4
SSDEEP

49152:X/8YJslyMr8CtryBNrAQ/fHTCllOdW0BgaDunD+ocahnPt:PlIyG4BNEQXzWOdW2g3nKocAnPt

Score

7^/10

collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	mad.net

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	mad.net

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	mad.net

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	mad.net

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	mad.net

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	mad.net

mad.net
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks memory information
PID:4940

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/mad.net/cache/~test.test

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/data/data/mad.net/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a2eb5cfe178e2d14af7ab6db5fadf2aa

SHA1
6d5b81a50592b53feb1c73dbd48e4ed59e96b541

SHA256
2c9fa45a8d906656a41ecdd23059394d3a828c78052769ac429c1c78088617ed

SHA512
44e046c3e8f2b9a50bdaa3d021cd02cd90d763e8d5728e43b089bbfd40c587edcbf92f07d89f44bd6bf6ee814b027ba69cb3dffe0685c4d34cb22955d1e05555

Download Submit
/data/data/mad.net/databases/google_app_measurement_local.db

Filesize
16KB

MD5
cac4dd5e1055a83ed56a0d3f7c8bcd40

SHA1
fda10faf8bc02fd0b9dd9963ecf491b2bea099ea

SHA256
01b4d1ba5bcb744cabdd55f65a99ce5d5cef97902fbf89690a6e9145321507b3

SHA512
b7540969b3a741f041fac6e66a385a057e999b856a8b38c417f92d6e1f99fb3e5c588567390959f893e318286b0810c3e265609fc76fb4c801422e304636472b

Download Submit
/data/data/mad.net/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e0713dd140bc12e9783e99f75eb11014

SHA1
c79dba97e8e4a2d78b4d5f0f19c294b66e9cc49b

SHA256
1c69586a7b0dc4f1c391fc3eaa0b8380a792f1a8d2608e920bf7d6078bf5b6be

SHA512
f65659b1e9ec7412113819e24814645fb5b2f6bfae144a5d1f52579a1784c1c2d6acca54732ae9b37e28922b4bf4b2cc234777f9b6f78561981742091ac24885

Download Submit
/data/data/mad.net/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f1808c6343d8b1a9d7761a1aac561784

SHA1
ebf6a94edabed07e90b2b46b1324c0aca0a34f6a

SHA256
35f41ca8290e8df077939e67bec7ec41b40a17bececaff5788d9c01fef4d2a90

SHA512
63619b541f75e6f6f03f8f17cf9fab1112704f1d95f98dbe5d237937b04697c6cf79e1010291d921de10e6a9a6c2bf057635cd28efadd3801a4a8ee4b2ba7006

Download Submit
/data/data/mad.net/databases/google_app_measurement_local.db

Filesize
16KB

MD5
adf6082723784327d7d1b34adf974e7d

SHA1
b1502f70eb881a1dfe41139cb719fefb877ee37c

SHA256
252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

SHA512
762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

Download Submit
/data/data/mad.net/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/mad.net/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
f191a32d01505ea40db6a17ff771ec4d

SHA1
cd84e1d7f0ac1612435103ae922b6d591998eff6

SHA256
be4a443d3b2096cfa0ccc7f322a6c1bcf9fe0e347fd58a4290379e411182c841

SHA512
182bac704c5982cf4a3d0d8dd17e49e73750d9f220fdd05562c0fe2579d45168805042ca354e4b134328c67fb91fdbbfa3ca5a365b9cebc6a67e66587014f7b6

Download Submit
/data/data/mad.net/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
38cedbb07af160547c91a6a1d90fb078

SHA1
b3bbcd966796022e84af54333c22b6c6cbfc94cd

SHA256
96fa520ce43add33c76373865bbc2622dfb71efa37dfd1b87ec8dd3882f9504c

SHA512
a195f6346829a275a9b6e249f18688b680712477e7e318c231a6bcc788912aaef9bb992847e4f950aa735bb7037c1999f1243f29843b576b9dbb4589cbf7c616

Download Submit
/data/data/mad.net/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
6d6e9bffdab1ca95f6dc7bd83fab8b18

SHA1
4d7b7f1498ee36ef81d79fd3657a97e332bc69d1

SHA256
445763cdfb40d457869c445d4fd409da82f729a535bcb430d29d516bf3ba9ac8

SHA512
6c1eaec6f618078da7556f7dab483a28008d9d90ab12f2dd72a55e62177dd3c216881b6211b3168643bfe4a5a277cd1fea6d3078f75a522a38385b54779fc550

Download Submit
/data/data/mad.net/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
fb0e05ea502cf4aa11f815e2b3225cc7

SHA1
b3c216651110be6c5fbf3a8ac88d40bae0bafef7

SHA256
f36afe7575f784156b3ca8510887f6a8b4237ce68069907499696347f6e19caa

SHA512
7e8ef67b0a8593ade7b890fd71bcfda845b77d7e19f02d5843725cc7f9129375635a6f690ef33df6c089e828402ae0808ca3719072271933abc4bd803e6b95cd

Download Submit
/data/data/mad.net/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
f003d72232943807837c68c2cf3ca6a2

SHA1
bbdcb3231cd0a080cf2792b1a5fde519aa9a0c3e

SHA256
c87a6e63471cb2cbe9bb53b62bf79f0073e5ea8a6562029b221a5cb8327a0eca

SHA512
ffb793cf885fe3c2269d4241ee6335ab6377b6ba36b06cbb1ed082d8200cfc3ddf15c797e1bcd50998e6488b1e66c8ca3f6d2046a10bfb25d6eca4e584aba595

Download Submit
/data/data/mad.net/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
103bdfe669480f8fa552cd14fb3e9192

SHA1
de73cae6a5ea05f8ad4d16e326125ea68f7b640e

SHA256
4a9dac7d3c754ccc9fb5900d2a2dea1e9ab7f568ce751e15937eaa499f01bad4

SHA512
42a643ed048ca448e5749b19bf9ca91a6399d3b772b2b4b52633a509ebc4368e28dd52ec110151c22fcc3f7e193458ce4c70906849c6545faf723c1bc9ce302f

Download Submit
/data/data/mad.net/files/PersistedInstallation7186986702310948624tmp

Filesize
570B

MD5
565e6d7fe98277f14454a8ee8145ba31

SHA1
b7e1a3c37d090bb4fcde624d6df9cc3b822d1aa3

SHA256
39f5608b62704b24ead1b2e85165fdd622825b5db8b05fb18243d8f6f6a8eabe

SHA512
ccecb97fcbfbdbbb1ec155d411076424c40ed72a3e5a624103c57500075515f32c96843865e328b9162e20410243499032076c7696ab1be04a2ac0cc18f7fd3a

Download Submit
/data/data/mad.net/files/PersistedInstallation8760033491286939949tmp

Filesize
90B

MD5
c5506f1d26b5b3a5a2b59ab2ef0f1141

SHA1
09f78f54105048c9b8a5c33d090ff94f4f65d3f8

SHA256
9dac13c8d24f267a4baf3ba3e0cf7272b8f7cd6fa8e791ba0092809f0e313643

SHA512
a1aad25c7a822b1fa05837ebe5ae307032efa2dcabc69420837d91121b3079afb087a2acb24a4b42a16ffd09da1d8075cb92e0354509b165351879ebee8c10c8

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads