2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
23-09-2024 02:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc.apk
Size

3.6MB
MD5

39fa2c58237de702fc3458251f358cab
SHA1

16e4e5003046f5d07a0fb1eff0dad56d9ce53be3
SHA256

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc
SHA512

023b77900582d0b6629d587f7411ce5153124cd3870b9533cf9afc5304b874e4353d8dabb7adf8a199768992123e707bc6a87ee682463c3bdccecc8a060e7126
SSDEEP

98304:kyHTjmHgJcyw+WoeX89z6Odp/9hBbW+te6lXhAyHmz:k+jmKcyPsXMl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4264

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
3b312f695e499f8b3b61a784a32c90ec

SHA1
537abbb8e625075f33e408e16340dc3e208e8663

SHA256
124a82bc059f20321ae0174d63b19df6559c0a3793200ab221f65e377501a7d6

SHA512
6049a64721ad97db02a139856deda86465ccad99b926f63c72ea1809709b695f10893f786c1965c7badb4d7f1236f2040bcd3c7c6d8cea14feda346d4a32ce0c

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
21ec676b41e9b3cc8d7dd90db0a94385

SHA1
59d67c010c49b6f1b344b40af72c11b9a02e21b7

SHA256
37306c92f701a83e8d55371624e7bee23a0cc91855a35b5db0d63254d87f977d

SHA512
df08ca7933ef791612c42d116001428fe9f6664930b4f43039909ea23b4a31c71180b079153c63e92289c6af767c36fc810ce83d0e3597c8a1f40a8b2d3d99d4

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
17efda556a9e1da25f307b091e0b3912

SHA1
f200703957595cada72d8be001d6e227eb165e9b

SHA256
8a722267fc7eeee144131276836dac0f8a4fcf6f57c07c06e59d681535d27a15

SHA512
d3507921989762db565718ffd9e31d3e1509a6c1da40697f0a50377f8f7c1ae08e7f0b8cc286b9d5bda45c78211c09cb3785fe82b96b9d669814f89e41e8caa2

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
85e5bb12b7c18f353fbbb5751d2aae94

SHA1
0aec33ea57b2d99de743ab0d6ff9f684d873d754

SHA256
433f9bbe15799906feed01261c6572b96c551ca76657ec35f7ffeff364c0231b

SHA512
c3a1baa33d0d64489780ef9a8fbde0e381438318c68cc36d515130cf720dd94fd0f53b5985022dc9f41861eeee78d98dbb1c86304c40cf690a6c53f1e1d17d7b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
26469620dfeca7964e91ef21af8cb707

SHA1
1424dd491ac667e3e1d7991a3e21254d4c0d45a8

SHA256
b166c86d61f7bb01d922f9ac59c0c910f79ec5618050310d726fb8409d8d65d0

SHA512
16a2fd1a327e882f825925bfa08736b96f73bf8bdc8aa8635e9385af1cac2073733a82a519093bcd0e8374101b9e0fa4628ea9a9238185a0cfd55e9ab8848b0f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
fd5ccf537a65407b9309f641a51b8e14

SHA1
a7c76c7b646f9a3044de84712e93fc2876fc2a5f

SHA256
e96746f9e17b6df442176955f22313c8518bf5954043a3296d98b781f5eb366f

SHA512
2f17c35433e0f8b6d1cce07d592651079c41642fe0226edb34cea31cc81e5dadc14b2fff4214831307c1f2da67fcac4ea246ed28b5b46dab3d93e7d634c7b0ab

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
a3a1b546dfe5d6cf6d4693d7ba5780fc

SHA1
2c1a157a07c563d05de728502a63106d984f723a

SHA256
abdf8ee0117af736a45669de52155cdfc244e799bef486c5b6be828d74d56ad1

SHA512
f8da0779e00f6475b925257182b5329de7a9fac627e557a3545e58d4952a1cd7f34407c2ff20d30a4586039fda99885633fd60aa7f5337768449a063204f1472

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
a005b4d2e9a26706c4d72f2526f29dbc

SHA1
8caea2dd3b52fcb4bbe5b6b8d5d4f70c0f8e6573

SHA256
7781f77fb18227976bde472d73ebc1967e4eccd98359e7d378b8884acd2de435

SHA512
1ad3362b2a899f17617fa011c778c043cd4cc8d48845b37f33699d92eaa460426ca1ad15aa9a5b5d11bf893b22f96c2114fc2419e64d0b8e8d3bd9e6751e3afe

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
abc666bc81b82e4bafa7d0a8e5572fea

SHA1
9cb5bdba6ae1dc6595cc29fdbc9d13541d6c502c

SHA256
81dda2560b751a6b7a19de69176d7fa4199d8d070c40b2c860d6e47681037dd4

SHA512
02ea3d43ec7560121b18ead39818ee44ac4c3ec7dfc7426dc2fbb3fdea511bd7edec1c4c0c84bfa5b484de02571092cb9aec5c3eb19a140b6fa1ee8b366863d2

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
130b18799a69b8510753479216d2976e

SHA1
76e7a7587adf32eb09f3253be29f1cd747ee6e34

SHA256
de1dc81c179407cc7ba83f07e5ff2ad35a0ab32d30aa056ac21dc27159be2bea

SHA512
bcf9cfbd79ab232fa5328e64c614bdf6595768c25b3ee64c8a373cdfd1ba1004f0d7600214d5bdbf2c27213e9bcb79c7c5884c71b3ab0e9389e548d3f8af38cc

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
59dc1609a0c84b326d1c7db67763e9ac

SHA1
9c6e8aac5211e6876fcc01c77b50af94d7686c7d

SHA256
ccf6c1edbeca053388a379f78212b6e09185e9187b6fc9a3aa6b49f11b9f3a17

SHA512
f8d3175e272a08ff862951c86b3d7e6f8f6025bbe6e30090ddde1c08bb8b2265efbc712324542b26815ffbb1f26351f87cea02327b9681f1d4133fa5a0305126

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
f150ea32bb3cdab7b092e039269044ae

SHA1
a2e504e126c22ba1a8b4b39c6015043e19b89718

SHA256
5eb165cf412a195eb4ae750306f95f6e33b18127bcdd7e05416fe0ff5298f948

SHA512
5d41d45c7f5a4f39ca90c8146f7758da2f902614afda3c7e52796e1cccc0882b68402c00eae114671779270965379c3d6fb43214f13f07f698fec31b71c77745

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
15be68468215cf138988f52002277037

SHA1
4fbcd8931d064a12b376dc1288a35024ccc64d6a

SHA256
73772fb5446a53c592f49e152fa2fad112200209f8062bf6e52709f67dc3629a

SHA512
4daae873695feb189347320bc5241ea153d31048cfb7f999057cfb9eea5054e711cade0cc409fe1536da3271e71d16d159d4b1095342112fc8711a3060c81a23

Download Submit
/data/data/com.systemservice/files/PersistedInstallation5145356954700837110tmp

Filesize
90B

MD5
070c1cea35b26c664fcd3789b772a671

SHA1
70a16d526129656632209daedda17fa0284701ad

SHA256
c70ec725a784c1422f60c927bde7786dae9796f19d02ca969080bc44e847a6f7

SHA512
cdbd5f31a3835df250c12f6aeb8ba78685ea7187837d7590c2214e5bd33a7106604ba1fa6e21e3ae9b2347f748cbd00d62ff7702a77a5fbf2f038d4c7f10606f

Download Submit
/data/data/com.systemservice/files/PersistedInstallation8103871613393629331tmp

Filesize
556B

MD5
d9a1a936e5088ac13ffa037898010b3b

SHA1
b04c4561a87cf80dda38a734591a31f9e19923fa

SHA256
fda31ae7e8810b4736bbd1342cce4766cd10bf81c8105b8a0e39318cb2778904

SHA512
e63df57da3cb78ee985d5bc9da61c5728d4ec48e7f227099a561dd42ec873f3ae39a2937968647c58d4659da3f3c92ac80d87122a1be94b16335bbbadfe53571

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
89d127c612c27840cc58ed6b9becdb89

SHA1
f3c1e60e9bf7f81ea86edfde1d5b71d2d15cb8fc

SHA256
a334d827add414d227d7514d9c600fa5c5372e99dd4b1b91f430dfabcb9c3ac5

SHA512
d9b145aa2ad7a56885377ea683c84220328ea2c317ec59cb504491e16be142c8aba7a3653b411051110ef64e78a41fd37f5847a553b8d6596cd6bccfa6c3c5cb

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads