2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
25-09-2024 02:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc.apk
Size

3.6MB
MD5

39fa2c58237de702fc3458251f358cab
SHA1

16e4e5003046f5d07a0fb1eff0dad56d9ce53be3
SHA256

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc
SHA512

023b77900582d0b6629d587f7411ce5153124cd3870b9533cf9afc5304b874e4353d8dabb7adf8a199768992123e707bc6a87ee682463c3bdccecc8a060e7126
SSDEEP

98304:kyHTjmHgJcyw+WoeX89z6Odp/9hBbW+te6lXhAyHmz:k+jmKcyPsXMl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4242

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
29cd1c07bfae03fe4c625a8be2d93f27

SHA1
e38fd274b30aaddc5957cb8e7f2ee5de1397be17

SHA256
5ce5b01e72b841a9cb006f55c36adc741a182bac457b69b31e3675a54fcc1e80

SHA512
9d1c64e616342e411986cc99419c49a6e324de1f78267bf69b1396ac1f6b16d8eb8e092c6462d16e28a6d7f7e7c3aa6c56d41aeee5ff7fb605dc08d8372956bc

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
89ae83f1f0c675f9013013dff62389b2

SHA1
698bddb6f1839e879b8bfd2cf42d1be08abb3577

SHA256
f1124e25efb60be952b3917eeaf28ef2981331199615a867eab4cc50498f01f9

SHA512
080cad4fe38b2a153f3af719245dfdb66d86cfcf645afc81e2a58fbd88a1b2585fa79f0395e8673e8cc43c02365e720fad6d95b716afc6cf50770f0bb429a050

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a52b277f360d024d092d45df09262ca1

SHA1
5159bbffe164d8d0695b6169aaaa19657ff41741

SHA256
5762d4ef65d0590dcc2ae628f9c28daad865369bf6cc3e1ae45267f9bdc5e86c

SHA512
51682ebfac029c421539eee09a63993c7a5f10cf9eaef9bce249dd2b8242b4b69ddd78f10e652e2f2e59f1f75fe4986b33636ec988d5191e3acd9724d3b40c6a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
6b13bc95a352bd76f8cdfc7fe5cba2d6

SHA1
10f7ca6089e8e69e20cffc94c4885334992b06d1

SHA256
4d2240e27969a4f2986a4f3ac397f2949f38095f80cba06d5e9cf8cfd52de52d

SHA512
60e844455b9d40a61552ec62fd61ef385363a806dba06fe9b5117cdcb4c66e978773c0958b41cc25d85ec5efee8bc142a19f259e67955a83157fa778eea1383f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
988f8f7aa1c366c69ed669ebbdaa3f09

SHA1
6f5c7ddd28981e66960238990dfb3fc3fa4dac37

SHA256
5cbbcb00b8b3edef7ebd5a0dcf06ccd00e5044a4f073f668c95bef0f1f3fae20

SHA512
6c5d9b308de8223c0c1a7d9ddcedd976f1b9707c3aaebbd03322ca4868c50687e1c938207bdb204c54d55fe3821b0053bb934c8bd966efda96bc98f71d364244

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
0ea60cb297125c46336fbc0cfb596b37

SHA1
75684818c724a8811024c1eda3db7855601f984d

SHA256
dfae54b99e290e2e61bf6fba88503840c51c11c04be4f364b843a7db2633f902

SHA512
e109981b7fa857f1148e642e6b28131b8b107b86bfaf0a146beb18aba8c1f215fe44b3845def0d338c514d9c6dae4ec34132baff7f197feb72e40ca73f36a93e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
cfd70fb951c0263e80b37e7a25b06068

SHA1
cb13e76b97221969a927f158d0aa15f9f9534961

SHA256
3288270b83c44b6340b307074e186183f2a992001af12f84a76be44d716e2bb2

SHA512
7d45998a82c9efc0372c2851bc7e7ed8cf65c77dee3706a84d7ade2a06e676979a63a86646c9db9dae8dfe07622b4b96087c42206d9c538080af718b2eba5346

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
8fe4c16e9f1568b34947818c49aebf4b

SHA1
7f752a2ae6db9e3de0f455b441874edd98c137a2

SHA256
d7381f5c6a517cd41507c9b3cfd8d6309034e54f3bf6b1301780f17a2540b162

SHA512
69bd5444c284c224d7e5412a9d619b4021a3a09a565d0c4c022e4343158d9b514399a557b0f4807f1c00c7ae22952e8a725d259dcb236a6ba9449b810dfece5e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
37a6d81490af8cb0a9edff64a8e1e01a

SHA1
e1a38d4b5f84e463d58a3e60e5fb32a9de995ecc

SHA256
653910ebeb7fc8ca0c37102d55ca10bc598a69918e17f085a85feac1cbb14be1

SHA512
9fca6a437a811a3650fb52a0d1983dac96c370250f165b3980f5447315bf883434bb59d2b5237a7551dbb0486fcd89feef1fd2efd067677c67d8bff3326c7cbe

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
fbea601f9c9ce160318c0888405d74f3

SHA1
80dd224d7c941775a3022b8bed3f1c1dad6f9718

SHA256
d5b26e10e38537f1a5df0ab2427a36155effe6306008bf9e47ff03874f1180b9

SHA512
22d614f1db3c12598e7ccf3b112e375740e951fe6b1c698f5bd1e436808de1290e17c92ac0255f81426a6086c23c92a1cac8716e85e7d0552d8add9f3971fafa

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
5d9494c5b4e1dd5e3a950b52d6e521be

SHA1
46f9a3241afaff251a752ada88cda28ac3c71fea

SHA256
3c59b064a6f87b665dfe6c3f2ac5f852aba3c3fdfea704eb4e80bb76e60dbc23

SHA512
4c91d93b2dcc02863bf5270444e23e5c418df3a4196258dda340cbfebf2991e6c6f3e087b8de0d8864b209a0154c7c1c8daa46b121b61e7522d7d00fda91c3f0

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
2aec947f449d9e1b5828084fbd8e83ce

SHA1
b096deed1eb6645d6a080fb16dafeee92da51b80

SHA256
139935bf550b68987637138c35d46cd5cc9aad3d8eeb9dcfdf02a869a320f7dd

SHA512
0746fc0123649bdd6657e0ae39df4533cd8ecf0412a4630f2c6c79488d2d284bb2149b0707685ef1a2c6b64de729fa32cfd8d053b3fd52c6e74a2932aa4ae719

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
781fc6e49f716d986a79f224c215d43f

SHA1
13f7ed30b7bac91e2e57ad432d6894af44f4a053

SHA256
00d7ca36b7ec80898657b6941bc6d9e1c81def90d16fe34435190e63b06fff69

SHA512
fcd396ab6e1cbb00fea7e956befe306d3a79d0d9afb42d053685a8d6d9aac676e21e4a60c0df384704b9e181555927248c7bace569f60e1839ba1e928bdda2cb

Download Submit
/data/data/com.systemservice/files/PersistedInstallation3922278404923328817tmp

Filesize
90B

MD5
4d11692429192be39c3a95dc5b72c495

SHA1
786b3587a96ea8c4bca279070291882d781d1cb6

SHA256
73a0599a0de15e1f76e35741d2bb008295f9763a6fc9dab98b108b3e068de6f7

SHA512
11fa4fc012547edf8e976694ec70ec1a7d3ff763db874438443ce6ef0b3dcbead95ec04326444f9ea7faae11f229e7979a44e2f261ac6f9c1acf0e7d049d0dfc

Download Submit
/data/data/com.systemservice/files/PersistedInstallation7001889969569218555tmp

Filesize
553B

MD5
5a8c9c67fb1fb659fc02a25bcbe3a46e

SHA1
598c46f50f2d0232e2a89eefa4753bdbd8fb0486

SHA256
a75305de20362d53f236c0b222038a07a38748e4cef6184f91bc98c68b4640f5

SHA512
fa22677f0dd2024348c172a1d96b7d5578e498844869f287c169c1dd8864efb68d155a17e5fb6a1601014f475d9ff3824fd860d09a0c527ffa76bdb42a499b49

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
69e73ce8efb0a772bd2f99b9512b0395

SHA1
2ed3efd9ea2fd6b374353c5b133a3e8d0c7c845b

SHA256
288acba37bc7aacf60defbf1784e921b76a8f84bb5faf9379cc2040ddd35d456

SHA512
63828c2e45bba61bb0cf82af9fa3bd6d848feaa3bd4885061551d24fbb06b65002808504e067f42934f73623327dd3b7a83840c5ea7846c36841aebada5c75e8

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads