5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb

Analysis

max time kernel
17s
max time network
104s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
21-09-2024 02:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
Size

3.6MB
MD5

d836feab9d4bf3c6cf086bdc14724c8b
SHA1

c837cf7b181679a0081165e5fe4aa0eb94f748f8
SHA256

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
SHA512

8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad
SSDEEP

98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.systemservice

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.systemservice

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.systemservice

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4245

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
79cc51902bd5880a8df632308d4744a7

SHA1
3f33e181315a8e53a2de463b4f28ff9adc0c2365

SHA256
1cd0b9db112a9c08c8a4a14dff38063de538cc8de674214fac88ff153b0a2398

SHA512
02129bc471935065f4313f9ea8d4aabb53fa475b64e5eeb8cc45101c64f5e67ff63eaba582531d511de15c7316049e7c21f1cb7b1143c212a217da1665198e9f

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
b7847ff6a39105c88bec63076fac534a

SHA1
ece8ca5f876bcc53f45c6fe755c3d3f2c19eb56c

SHA256
0aa6ed863d5693677c9d4004050842396597a9a8182cda692702bac9128bb839

SHA512
e6c4c736b1a087e6c5ae45c11a97c595364f04d021a4a460930bd67f72419fdca20316ea19b32ecf3e26a8c822e96686738540462acd214dc400a82304f4ce00

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
184812760eaec8146e6fefc87b902880

SHA1
039715707291352ae2458003257afa466f1b4a7c

SHA256
c46ecd81493522531d2f8a2172f31bf9150ad294f95a19b62ebc9f16a19d95e3

SHA512
3da0a440bc61ee5e71de47f5dccca4dcfa96cda9de9f0d4f05093ae6c73b52fc0e5e1309ad4c412d85c145b20260908beddf644321ed999bce828c5b31a35a4b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
4d5d4a855b677a07022e2af370808ba2

SHA1
1b083d2ad18d884a8d62af236e6be396a511e454

SHA256
ebccf67b7c30ca74d8e37fde409c1512e248ac4c79e9873be1f1244cbcc1eaae

SHA512
0644e78ae6d16323bf37306f5dec2c56e11254acfff5e20b23d54d84d8915dcb3500e37af4ea0afc2160f5a90c232d8159c7294b80e4cd1e9c0b7563da506861

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d8c45bab7c82fabaf0754fa378a64db6

SHA1
6bdab0b65883081f826b5e1b9c8889693e4159fd

SHA256
4823f1fc61bfab75c8da21a4f37646832e5d78253af4a39d98cd5caea051649d

SHA512
0094fa45d9b14c8815aa20079c34d5f0e5745f2ac6153740967fb60f2a2f2b807b2e5aaaefbb42050d2b97859755ceecb34ccd5fc6391b20db246e9e9a83c75a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
44e0292691e81b468f9cc82281d7e322

SHA1
366f264494314bb459e0ba232f7cfe165c515afe

SHA256
9cd84332b2158178fc8c18a0347baff6269a440d2ad536679f358217052da08e

SHA512
777e3fca68cac2f264e8f85c0fc0a4bb237bf42c5238bca02ef026611137863676067c2e51bf1afc9bedfa2def7c185472f7038a1d89891ad47c0f261591adde

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
b5b5fb649216db1557a1a7eb6dd8efa0

SHA1
4475fef18b7c0ed9a4eed3d0d03fc43cf05cb2ec

SHA256
757d66673e3752f09b99a8f2f4244a2754830327665378cbb819bfd5b0e50fca

SHA512
be16a0f6b7bff38b8858432614de685fc4c2e0b1309aeb96e291e1eaf21449a38fe7380bf811cdad0aa70362a621b6756958c63824c713860fac2a4f61fd176a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
cb2ea26dba8f1b24be7f41db9f54b8a7

SHA1
d6a656c3271dd2bd68804214bbd897b8312070e7

SHA256
d31b740cad1d9fea6711b409b5b60316323360429725ff99356eb4a028519307

SHA512
001fe232cda6d1eed644fd66062da87fb5234b0f94e31b99a2127310c1fc6109ebb5aa301939eb3bcd8073c9cde6efa99c48dc701d58da0e37c5463d998ecb28

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e3e69fdb5b56f2886a6abb410158b080

SHA1
7e85933636302bea0895352e2a212da2201d109c

SHA256
41542b1a334b1959289b3a6e22560957b55e57c668ec1877b41d3b4bb5a7a6ed

SHA512
732e3b3fce2c63c44e6852dbe7f6a3f7d032a274069394e43626186e280ecb9a20e3c527a75af58410465a17bdf16c47ef10191143e9754845315c7787c88cf3

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
df382a3090cf733b570ac29e8013fec1

SHA1
2a219a8a78f6224d7a4e2aa0bd30dd09f43c2caf

SHA256
ec8c6ef3c5a9cb1a26bd87741c9e07fc995e2df73ba62634e3ff03e51a69d9ba

SHA512
63f863c04ba6663b44ed9a547e6887a084b4392b1a60c93f410b8fcd87d0f871cc9c9d5fe5554702bea238643eab3efc7dd7703f28b3bb156b90f93569844f68

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c086a729754b8b02cc2ab833437d69c6

SHA1
d43af38ce1d32da97e4921bde7c9bc88cf7a8de3

SHA256
bb1934fffd86d2d3881adc9a1de672c1c80eb375de1bc0ec01576dda9aeec778

SHA512
17ce247294d82a4e2d5e59d776c044efe08c5e5ec3811a26cf6f8eb58bb4a7f1b8c7a32a1f7d97b09c64d91ce865baac55ced889e25202ca48283750ea90b9a4

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
d381e810c3317813071ad3e3bc96a855

SHA1
3cbcdb8e2ef164a18ea14a53e64dd8f666e05d54

SHA256
75204228640715193507955b0e270ea594cdd5ca2a597f033e23b7204f8d3e6a

SHA512
b05b118c72c744c8eca40a41ebb17dbf6ac1f100e714ca2a3fbb46b7f52b96cdd19e5bb75a03ebbbcc328246914b1521a1ba3fc09ed63b1b9b708779541d37de

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
eb77299b82aa71fd94573ec4eaa6faed

SHA1
d40b5ee3ec55568a66bcafd7ff6434ce194b94f3

SHA256
1ce2a5dcd2d809fe9f9b346418a39c5ac39c2870ed0b200cd198deacfe6bdb35

SHA512
a909a3944f2cc6dac788456ac751da67a5acf148cedea7fbba11e942f85ac0209a03b443913e18d5e6244941777ba4534b427cab6ede502f9acec48e36c34e38

Download Submit
/data/data/com.systemservice/files/PersistedInstallation1143622491890343399tmp

Filesize
556B

MD5
97b64278eabc9a1f81b5126212dd0792

SHA1
4ca915704cfb36c5d7d80c07aad663787c658a30

SHA256
f9d6e6367193e6c97c6040c0c03b0bf1eaafe1c25c04b73cdd8f5d2f13ce40e0

SHA512
4d516e0d6905302eb6eae35d5ad8e33dcd3107d3f170518be4b215a1b92c935c903b07ce72ee10949e76f6d2b63afd85e8ae857e04114173b266c952165f3567

Download Submit
/data/data/com.systemservice/files/PersistedInstallation251486300154820144tmp

Filesize
90B

MD5
85bcdf981cddec8a05340abc0ce9942a

SHA1
21a575097ea0c24543ef7bc334dbb265f0577f5e

SHA256
b043b5e7d73f374056daec26d917cf3bc3660d960e2101a8c23c7ed7033b1c7b

SHA512
f5139922b90547628746905b54cbcb7c769bfba91914c0832dce33ca2029b2e1ff2c3168de9e214f2df0e1f21b717eac97f7c3a32cba1e981f5a06998a44ada9

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
045bb23defbbb8e10f71c80b712408b7

SHA1
80c6251faf11d1abfc486a753396b750d05bc8b3

SHA256
2ce1e6eaab796cf6788c4c493e6dc976791e69c13199a6c05c55bcebed6af24e

SHA512
4a8b428ac57897f3471edab5e0c792b628409dd041ee2dafd68f2c7148b1378aa6e5ab287bc1adf0907a6099a13275227ba9ace71bdde9c7c42ef8186e36f39d

Download Submit