5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
25-09-2024 02:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
Size

3.6MB
MD5

d836feab9d4bf3c6cf086bdc14724c8b
SHA1

c837cf7b181679a0081165e5fe4aa0eb94f748f8
SHA256

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
SHA512

8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad
SSDEEP

98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4255

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
8ea165d816cf77af88ac4a7d3ed25b5d

SHA1
d70b0c1c9758301e92ed2b31bc80a42d107a5bcf

SHA256
fad0e27e91878e61e27814521acd190a38cb4eed35db7d516d5f79815c8277dc

SHA512
9003ee548500fb513e8919f0b7bfa4782f5a8fd8d7009cb0a33daf399d9518a1e562a3d877ff280a09b13898b6167d91c445873da2132fcbcca89c710a43ad7c

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
be27b734e5352cc19ca20af912b83e1e

SHA1
92dbb56f4b5e957dc719ee88c8a6f7ad3df4c30a

SHA256
06ab87b7391779427e66321bf93c2daca4c2822263e9dcb5672d3c556374d558

SHA512
1143425fa7233e5b2ec1d08dd420933485960c8bb7bcc20391b613d06224a0cc510f56baf08524742a28581bbf6c3f480108da1253997267d5cd1bdb40cec5d5

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
104c1f93391f5cb70f10899309483fc4

SHA1
f52c62be80187feff40e6213afbe6633dc99f95b

SHA256
13b0c4e6a4cd5db017447bfd3d63180a2deb6bcc368450d610d08034d7a2d9d8

SHA512
38a11dbee39ae8a385118e51468e5c225ea9efad3da20a8a41721939afe31bd37f966e61c94f7a20948b329a68942515d3b8499892d58985ea086de6e509369a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
6acdaec0ca5c9805cb118908648709d4

SHA1
069ed4c5a77ef85caedd381f45d378e487139603

SHA256
8be6abc4e3fffe2b10d0b4ed26af1485b2afa4a086abae5f3a49994d6b3bab51

SHA512
af68d2e5906c8ded46ca414f98855b373d7b3e80b0b25141817855bf0a57a62565217128a322ca216d4c5c866d56865eddf19c85d3b77be43cc7efb7934a5847

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
b4224f0682c91819a1f82f391e01ba25

SHA1
2999d55ae45f556059e9bdcd7c54b2bdfc348bc0

SHA256
48efb47fd636c9025b3e4f92796977cc70b1cbb8a5c27b40eb3463af60faa410

SHA512
70c3e967179a0174264dba21c0b8318facb1e89c5a69c85ebe034a3b19d077462db47d20e4769b3d8f76063212ccb9da83354d5305420dfb9e1f821c6313819c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
485f8c4cb496882749b36493c710a13d

SHA1
ef0bb0aa5c608d5c6a4b6fcea5db0b2840224ae5

SHA256
0610188e95dd5b8b5b1c85113f91deda1c8f4dd7d08bc8e3cf6a369633233f09

SHA512
99c335ffef4c2aff09233f28d826842689190c9438985735e0e65dcddf2a17c49c41f3fae9e100d1dcc1a54c6da35313193ce08a8286209a2cda7c3ae9346cd8

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
9d79908b9a7f69951cb4e519b07fd3f7

SHA1
7a88d94146b549e12ec15450313dafd24be9bdd2

SHA256
1a2baa447e1b335b984ef923e7b4e85c8cf430b1c258eb818f728875e19d4242

SHA512
cff6e095efb8111ff4cb0cf6e9fb4579bc76546b4e9fe74fba5f445a207774bea7e1ed1114d9990c26b828d3e383c83195cda6ed8d2ca53753c93c803a14d2ef

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
3e46868ae9e4f0937e6025b3a3f4c183

SHA1
0f9a87f9a5f5ddd3747380beaaa7bf451d1a1b1d

SHA256
ab6bbbd579c68fb04c44470923a41ab017829247368b12501684b02de999657e

SHA512
04b6587ca82339727a85e4ed4d2818a2bc248d79acec340e17096510ba193ae31c04183273d07b08af0c179922d71cbe50147db3e708c80bb53fa0859977b20c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
fad110897bc99731d5ce99ed168cae6e

SHA1
6d6b47f8b04d432f71d9b71914d3d6ec1d699356

SHA256
cd30364639e72819effca418bf5b52f9e35b3394ab2867920868f94032d19ce8

SHA512
b00e358be48e061d658be9e45b510f353dd6abc57ff9943b2a450990caa3fa8af2187e3c087101d02f8e603c7eaa9c09583d537cb1be3a1b8997584e7b89255d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
3e067e3e066c732946bda3646ee110b7

SHA1
12e9650362b6b7d7acd27830718a49649f78b3f2

SHA256
6ee510edc8e4ccca6dda282db41f2b0248a14c39523223c744463c7691c52dd1

SHA512
fdeac9fee6cba5c9e4391709d5363f76f7f5d7d1028be50b8bd32235fecbb6c45dddca03a47183fb7afbd59ab4ed72ff194cc1988a59df89ce60cc29386bd197

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
6d067db78810ead2ee1fd4ae3dc1936f

SHA1
80ddb85835a94e7dfda5f0d617dfee3f7c2a3d8b

SHA256
e6d7318fc37b38ca0f72b21fe7af492429dcd8ea7560b525164f721801915e21

SHA512
9b567b2f98724e07b7011ddb7cfa2f600cb3b46f73654ca65153dca90beef1001d790a11c427b6e110f20e44c9f0bdd291fc347b60730ec0ed5b65f83e78dc52

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
ed8470ad71afe9fa67a5232eb7c23d82

SHA1
5b8b9ef61af2cbc9015ab07c3bc613aabb653dde

SHA256
d1f43454e1a8c9bb47bdf3a561c3a3ee248324b39df3973675b91609151bd584

SHA512
412c0f790b89ead5495f15ceded1ad99f092f238355239cd91257a0e2244227cc9b55d918b6ae6120197535f4d2304e6cb54adf4368fc90700f123c71c2fb416

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
33a50c63ff89912f16ec2d994aab5482

SHA1
686f3e3dbbf3060366c07942a8cebd67d8d37cbe

SHA256
4b40e2501a169e75bd1a3d856b6215579310cb1b5950806f3bce0b777c6db8d5

SHA512
999857443c6abe046161aea2edaa19fe83d9d6210c5d19dfca7519787c9da8103cf669e0552dad1445c5a9ca16c0ba8a83d2467840e70f7b692451696572541c

Download Submit
/data/data/com.systemservice/files/PersistedInstallation272688403189203464tmp

Filesize
554B

MD5
f628b245734524ea26a1fb81c427e9c3

SHA1
5be5baf69866547c32b3edd713f7b8cd06d1b63b

SHA256
53154c200276d86b76ce23bdbff069e3ab95a9787a1f17128ca18ec212da043a

SHA512
55b05ebd69d78876285ac1b430ee20ab5d4593fc54ef16b5ec1f8c2dc83f87f63630bf5702d591271f4c28b6609c426437d6062eef92ba361bcca3eef0465eee

Download Submit
/data/data/com.systemservice/files/PersistedInstallation9172351528953959751tmp

Filesize
90B

MD5
78a3acccf9d5772969fd7dd209f70fa0

SHA1
4600d56f00d569e6cde44877887697084367dbbf

SHA256
04a3a9e6ddb8b846a49d3aaa1707a26bf91f7988cbb9aea703da6d2c947871db

SHA512
b8158a57287b349c866294a13d90230d54586ea0595309f69ee2fe0a8f3552a043739d92c2497686e2a1947ea98edb22ffeca50cf3e6732e17fd320bb1f6383c

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
a2aada4a854c8c7835f22e5eb0dcd804

SHA1
ffe09e01db7edf7e45c388074a087d99f709814c

SHA256
19da364c7fe10f672c1be421ca04435b4628286aec1836eccd21499ae749e59e

SHA512
f0b73ae6d7bfaef3ea2e64b9eafea3c33a9730ff7f875b1da43bdae414f8ae1079b3e95aec2deb2b52d04a4d0b46efde28967bba7939d5338d459af45c1e747e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads