2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc

Analysis

max time kernel
18s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
26/09/2024, 02:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc.apk
Size

3.6MB
MD5

39fa2c58237de702fc3458251f358cab
SHA1

16e4e5003046f5d07a0fb1eff0dad56d9ce53be3
SHA256

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc
SHA512

023b77900582d0b6629d587f7411ce5153124cd3870b9533cf9afc5304b874e4353d8dabb7adf8a199768992123e707bc6a87ee682463c3bdccecc8a060e7126
SSDEEP

98304:kyHTjmHgJcyw+WoeX89z6Odp/9hBbW+te6lXhAyHmz:k+jmKcyPsXMl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4254

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
4f46bed65bc6697a1d7b7ea4c3ffea37

SHA1
f4946607e5cbd1e6ce76d4e27f16e2ef28263804

SHA256
d34122c765502f5d30d97056c401bd19f6a91030cfbab5a53d526806979f629f

SHA512
338f72f01157c0c771148de92739df73bdbf85a792902d19b51ba79ea6ebcfbf4d1c522d59f73e71bb45ea74d9d650aefab1f877d968ce73c52a77a3f2822bf2

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
7a72dd58d1affee22f735a67dbf94cc3

SHA1
ef3f4744d657c824c6904ff9e7d595ef0bfb7016

SHA256
88320eacbc1fd63ab1884911616a1adf742dad21a544e04a0dfa9b8a7a843e7f

SHA512
097f47af63dfcf9702528270b9332921ac4a69086af17e64ea85101cffd860a0bfb4b2eb67d734144c1bc8d6e16cc77fcbdeb638e62bc19531c62b898e6acd29

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d2b7a9c51acdc1e3af7b3f3d789557e5

SHA1
d56efc064182dc4c65c4a06764eb30ec76c7bebb

SHA256
c64384aee2677091b0e35db55f6a46af37e691dc99b75eae9d7c422ef3df10a5

SHA512
97f8b4962db4adc5e43c58e482e10aed00f1a12d6d590bf17c270e1aa42570c7a537b448bd1f603d964362baf2df614042891107d18975af427f2b7c90aa9cc6

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
fd47a8107c7cbd1c451518e4dad3884d

SHA1
5d61ba4d46aca002bc86d1a3aed921e8d83623e9

SHA256
dad1c1bf8d908e88fc2c07ae280232d4b3e481f0b557c811e23042d76e110127

SHA512
8c856fc8cbe641f1cadf69e59bf0a513061f3a27e45b3a3a660721834e92809ce725115ab6bbcb0c8d600bc65d86a97eaba066f41c992360d120923ca415e7c7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d784466fca134aa489ef9e7338c1adb5

SHA1
e5784e5d9355658f8dc5b05ace074e3798b6c5e9

SHA256
ed42812208f184def14cf58aad2d462f989b1e26914dc643f96af2e05bc55efb

SHA512
47bcfb233ec9a2b51a21f52e9cbe09782daa1ec26f4405bf85b65715ef25694c4923ff21a51b380dffa16ba5208f586dcf90a8183fb788902fec7ba909b09584

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a0443b92c1c4772e4340f567adcac763

SHA1
f4975af9507bd2c0e333cffa086811752eb8b68c

SHA256
ab8cef22b3d2db30c96d0e0d61fbbba4a8d104f7937a2e7b740c78fd5188ffac

SHA512
0a364f008c639d825e50d3222940b351b6272cca42ecd4d64568e45e48034b54f9660cc711cfb428f717bd4c3eb51ec9b9f017ac03ebc6254f9782b1f7525011

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
62ce0d5cbcbfb4e1f8ffc66d971f1a67

SHA1
1196c2e8ca0ed208ec78934a262be9d9e9ec5c1d

SHA256
e00fb58500f09e75dd7504b42bb1f47f75e13d8676a350b0466d7a5ed15da1f2

SHA512
5e2a499e1b599d8cb1d43f16201b77ad3e8dacd54dd98659d0566eedb826c9c814635e53b046bd0b359c02b6bdbf91e91658d3481ea5233b131cac3b12e07b2e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
c9f58317ebe9bbfe9f439dd87d2c8a9f

SHA1
bb63a43729c64ad5a0cea6e3e31f087cdc061211

SHA256
176cfe95c4c83595a1a133366a38abe207282e2051e394ac0c2b5460ddd2e857

SHA512
21356e8b7dae5f5e3600202cc02def2a1a1459eff266511ad64e5c3977cfb2e6cc5cfbd58b7fcd1ba8db89c11f9d1af8863e417b70b3170e2f2ec21d9842aef4

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
1e06ac002b16073c3fd6eb6e184d819c

SHA1
608385d1be32f07056d03ef2e04accf7cba56b78

SHA256
16efc8b18371194e29f8753df96d600b2b4cad3a51374bac58dbac31a59b28f3

SHA512
ef02b976d4af2d152dd731aec9f73cd08cddc711edebc03e52c2f454d358e618a5b298d1c4e76988ea75d1d7db9329b6b1d9425e1bd99f5aaf711f7865571f9d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
29f2c4c6024240c2507290ae52d40738

SHA1
5b50f21e6f343d5d91ac4aac0eab3ec6bd81e38f

SHA256
5f521144b841e46755a0e68208d228bbe1e1911f8f17cbd4ed9975eba3eaba13

SHA512
f711f88b2678cdeb1d6cfcd32cd6f11589c36b06a9e09e59dde0cf86cf223c6c5c28dd7cdabfc5365188356b41d80d171e259854044c7ca484306cd15d28b8d7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
3b86e996fb3ba9ead9ea0253d5ee141d

SHA1
c230d28740e893bc60eefbcdbd041741f469118e

SHA256
0a3c247cd22f18c3b124d1d36f22db573e97aadfa51aa904a7fdf75afc57c27a

SHA512
995e2e7dc27fdf3b0091b4039d093e71b67b178cc079028d446daf343fa43691d55a6511f532be26a4da56231bd4f78b73c1d6726682f6dee5b563462b251863

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
62d0d30e9d2e6a78467e6b649df80f19

SHA1
62e1ca251ea62fcaebf9aa466f009b2ab46f636a

SHA256
826fabc3ad573aad9a40ed19675de5077b79e4258b7c8c2ba3c60566ff0b6fa2

SHA512
970584daab2a280209a6bc9a97a080a1c2e76abd32a8b7273d2fbee1157533eab40ff160a54c6088adca695d90a0c9bf4cd519379bdc2acc63c72e3607e4a03e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
a32c7421536037a67d467f5a2628ec55

SHA1
75f209b12d9afaa51d3f1ff1c7750d8ddc01e015

SHA256
9e1ebd96af34f8c9da1b06ece98b6bfb5e69f2e528c2ec165eb0a765360acb44

SHA512
5babc87540c30d8d04338e453428013206f6aee3dbaa386a03a1b270856ee6c39494a82ad59eda1796b46e66871532333780fc25a4f1eff996ae0671571e8f0a

Download Submit
/data/data/com.systemservice/files/PersistedInstallation4264624544433822789tmp

Filesize
90B

MD5
17a26e10461d00e660f2f6520020435b

SHA1
7e1d1fb163306ab87085f58c7d24aac5688aba3b

SHA256
68fd4e7fb8e8752e16476b35fe089c30510902a9c626ceb50d1c03cd21c95aca

SHA512
ad1f80a1ddb39f6f677bd52afb113ac4db895e24f0efe62a83e809b8bd7c0067d1dcdc3642ee48a3bb4042649671ef7194447112cab23be163cd3bc6874943b1

Download Submit
/data/data/com.systemservice/files/PersistedInstallation6146392780033683695tmp

Filesize
557B

MD5
979aff328eeb03211facbb5f54fb62c3

SHA1
402d974a86f9b74ea0210cf0df7c4a4db8d6b080

SHA256
0618c9241668cd323952692db511a2f6ec7aa4580c569ade30a8dfeb4109ff6e

SHA512
1943c4c298d5beddc694dba2818e134ddebe99173f2b2c50c8aec8d5bc8a227220b890254a2ad5e7e2cacc139f5e273b61cffc5bf9cb8ae4c141d34e2d82ede6

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
21f3839e90b4ee49e78c7682137c63fc

SHA1
67cc28ecb58e379896d873324862a8900f1fc733

SHA256
a24f4a72c97e395832276ff608e089fdb19ccd3b934c9d81d4327b1926433a9d

SHA512
ce623297c275c9d3abb61f4781069c81dd327499383ad6e3de90685cae085ff4b7fa5138cf87093a4ac565984d3e3f21ebb03bdf2bcf4360fdc78d40899a0b5e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads