2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
21-09-2024 02:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc.apk
Size

3.6MB
MD5

39fa2c58237de702fc3458251f358cab
SHA1

16e4e5003046f5d07a0fb1eff0dad56d9ce53be3
SHA256

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc
SHA512

023b77900582d0b6629d587f7411ce5153124cd3870b9533cf9afc5304b874e4353d8dabb7adf8a199768992123e707bc6a87ee682463c3bdccecc8a060e7126
SSDEEP

98304:kyHTjmHgJcyw+WoeX89z6Odp/9hBbW+te6lXhAyHmz:k+jmKcyPsXMl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.systemservice

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.systemservice

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.systemservice

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4319

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
dc934ded8de0b15018eaa56284356049

SHA1
3e71c3c9a54c13e85aafb98a72cd29a8b4b669b0

SHA256
5a55bb3c01742e7daa2471c3c357b0be91ae06a0ce651bc8b753bc28206dee68

SHA512
fb5657640c96e510ab4a2c4541fab00d4afd2e029218588a8165cdaf40c69f9e337238be7c83e82c5528eb41e2d912b2da639c5b703cda0067a997c8a293310e

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
62574316a8b506db1ba9e1ff3dc4356d

SHA1
ebea45775ae07a5536a7feea9f2e1008270c56e3

SHA256
5c286679be0a320d78f84a2ca4e1b16053fd4e4bb2aad279522e5ebcaf34aafc

SHA512
2c11f7c4b030c1d044cbf90a8a0e5c2109a90d27f426f2ead526d12c804d4e50d8656b0974e9c249cbba4d22603e2b8d059ac07d89d762fb93135d19ab8d4e7b

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
433ffceffd0c81e210e7a8340601d990

SHA1
f7d89d3cd4d607a539084628fc76f8b1db185a66

SHA256
77869b77adffece327ef74a1a7705a3e9606bd3402a7c03bc8ed14e62e0f2074

SHA512
f6d7920b66ded121e7b4d4fc11624883d81fdd1a85fca057bcd1fec24f4d343beb73f8b39c04374089202ceb62941272a014654cdec24b1f7eba945d8de26516

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
6f09c13fceae47b0310d50a2d3b5d86c

SHA1
054090fc7037d1fe3531f39265d7978476e34cb9

SHA256
202099231aae951fe20489edb4cc43046646a2800dc6cea93ed919ac7332a3bb

SHA512
93b6ce3eb8821bb4ed22c7039205e5b30140ed672f0d0288f6e165288317009182a5a2d6fd2d16dce695a3338ccfb443164fe6f7290fd60894e4174283c048e9

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
fdece6a1fac86a3a08fcc9462c290303

SHA1
0247fd214c178df1d5e63653786c9750f6009645

SHA256
20a462fbd0121e39910f9de48e9d067ace6c1dcfcca30684f60de68c43525377

SHA512
7ce4e5a35ef54702613a7a64b64a31b2993cae56737af1813ec0d583e25efd09cd03a4e3e59f8d04d5dd5a0ec14db57fdb7f686dd0c1f721db0a55eb6f6c6228

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
6313e04e24f012849d05a8870607a64d

SHA1
f74ee8c3f992f5c35148648897f2acb6e326b80a

SHA256
f1fcab68083160b7e36064fd35efea9cb040be74bedcbf1036edfa87ee7ce8a5

SHA512
a357327653d5e4495e05e22c995dd809950ec3e053c63a6f6a15efbd141e917947552bc8486f0de6b70e04ed4e069b3237d6a30e989f5f420f82a64d50d9e3a5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
70a2acc570fd7de0b1a12f5f39c39db5

SHA1
290369c7df948093aba91e02023524ac709946ee

SHA256
9372636cfceaeb086ad7f0e1df13b70b66dbc78364c4fbc0c66f309e649dd72b

SHA512
a78c02f8d73fc173d7649f602f20d5926317301499bba57873de78beac370450e3ffdc8430ad5c5ee4bede68891ec01521fbe04a51703d29cb341685ea1df7ce

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
821b85352eed327c7fe6d297f3a672a0

SHA1
d101529c77958ada2ebb63f8d038b2d094c62fa7

SHA256
9b19ca689b39082ac0c798e2d5c4165497e7fecd1e94aa9bb3b7d192c113d07f

SHA512
b37f144dd60cde9ed03ec687d881c0592a679b1aaf39c2ac92cf03de88c1a420ae3b6fad88a88d6e25ebe54d2183aefd196375cb90ec04f5f60e91cc3904064a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
114f54fcfeee56a83a151276d76733f8

SHA1
519f35c2b0b3e0f14f64898e37ebf3d459075747

SHA256
00dfefd8b3d58d8f0f553e85b99937e09510580c56bca59d5343f1c51238a931

SHA512
0ef0436cadd8c970c7c7ba50e2d7481f3c66c08d40b316824475f4545223bd8fcc976c8d5a897c9d05ac55e1d05218424618141677a93d1093172caeab2d5b59

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c9641c8779d1f54e37ae50e656fb3d30

SHA1
bdc6e8873f5f1b9c35d5ae8ef5db8ac6672f0476

SHA256
c5dde3540bdee4d6dd983c6435abb3778c73937fc5acf6e2a5df38eee239a1eb

SHA512
c42d9919060b3cc3a37f0a219e4389a15403e44a54bb48a50e4189ece9d6d49d25fed0327e7e9490660e047b0731aa0df5a9ff04250fdf4b001af802dc12a9c8

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
472b34243870ff18e84bb66ee447bc4a

SHA1
e5d2157820bea648728edef24a784cb70dfd4384

SHA256
10265576d7d4b5bee02bcf74982647996cf14868b1d4ce88751597a0ec8df4a5

SHA512
7bc25843c592f19593c442c0412c6a9c11060e01c11d3508de9b99280d4136783a71ff094dfb4ea769e6b32007092548a3d9a688c35fa80781bc8f6ad499183a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
10bd040932aa6700ea57f66b672b0ee3

SHA1
51a5ad2b1276999b3be01b1bd5e5d34b92d18682

SHA256
8666008402491530d79d6b60a59f6243c2efede535cc2ec2a308ec8e1b4458d9

SHA512
7fc46a081a4f68ca47e779acfadfe4e1f38d1cfd04bbd9dc337bd573c6866697fcb832789d4daa29cdd13da1af6a644be6a31be29a42e88ac23765fdfb4458ab

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c49c1ac24ca8323a14f1c752c92373a3

SHA1
b2f3cdc5d729fd2150a92b8d4c84cac426668a4b

SHA256
5c9f7072b98e25bdc0af3a37c38601a7311e4d640c95137ab39c3b22370a1dbe

SHA512
9824d81771ed5257d06787f52b0e25088ad816571904ac707974231fc3d31156ca4dcb3b6149b41ec6b5ab46c7728d0cf3d7f6dc78bf88b32d650b534f6cd028

Download Submit
/data/data/com.systemservice/files/PersistedInstallation1852007244213909231tmp

Filesize
557B

MD5
83e6968b79541f02593fc285052ba56b

SHA1
1a91ada90fe11dbc864495676923df086b33f2ca

SHA256
4e772064e1fe395c11889b72831174ae31767f55c5666fc3d94b32bb69c35ccc

SHA512
97f93a082dce8441da4e4e1b9c47c1533fa083704ece88c6fc5d1b4bd8e28b0de66d48631e273d8e0c5ce0c692b4a36f939f167f3edd22325b7e4625adebc170

Download Submit
/data/data/com.systemservice/files/PersistedInstallation8432868483879189375tmp

Filesize
90B

MD5
5a11eef6a4f480b011d428e570216248

SHA1
6e1dd36731123b570294dbd0c2f3ebca037359f4

SHA256
0cf01b615150ff0815a38d880e419c47a68df79498fdb18dfe4a46906641fb6b

SHA512
c8ae0f59ff443a3b8a485ebbe9f153fcbf4e7a0fd74d7e133d630cc5d6aa9a674cfece8304ca2c18267972089d748d766317b60f32715bf00a90485407d938bd

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
28e5cf55b4cdd995de38d3f86dac120c

SHA1
caff0f569f7b959974a26173942d04968ae463b6

SHA256
ea82aa078ddd079c335f31eac79b10e02876eeb2c8563ceaa99814e0e75887ef

SHA512
a5452653c4fb8de84edeee0118f9585d780e20ff5c5d041931e75417840dbe72e8e8a796f825372bdb4278b1d865678307df080fb65b384b1113ace7f657ae8b

Download Submit