5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
26-09-2024 02:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
Size

3.6MB
MD5

d836feab9d4bf3c6cf086bdc14724c8b
SHA1

c837cf7b181679a0081165e5fe4aa0eb94f748f8
SHA256

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
SHA512

8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad
SSDEEP

98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.systemservice

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.systemservice

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.systemservice

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4256

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
6033ac41010227a9d63bd5d02d6d2fab

SHA1
d6eeeaa907a5c480d1d4f38d3a56db4dd20a97f9

SHA256
8b9779479a9a8bf19b92cd2f9afe9e5b8076137b47e37817fdac013539e80a77

SHA512
f9e2e10e9bf251ad5b56d95c5f96113f6ed619522231146d62f13de9d2fb95df8e1da43e7a5d6a788ab5527f9d028e8dc6e2175b681e10c6f76e20c4ed519000

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
c64f483cf17e5694eb3aa7f48c214cf6

SHA1
a25dd9e0e9f1ffa5f6950f0221f93434caa0d345

SHA256
8af941ca22cd88458fdc8ab2687179f170fe1dc8061655cdedcdfa095fe407f1

SHA512
096dc9ed9eb6723b82112a4dd2e0fa6e47500de9daa4d585faea069dd6afeae4447bc87406bf4fc4248816dcc8710090c96ee20c7b93a739df53da7fe6ab9b37

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
78ddc18efb3cba9a8929ef0ea2057ef9

SHA1
fb519b123857048f6583f4efdda9a5ec96c18177

SHA256
cf70fd137737455f1fbf58b7c181695b7ccb8aefc7584bed4e453010a6544ffc

SHA512
922b2ae1d4cec9d9bcf79da4040e79833bb81901a088161c7e42afaadd9e4923869fd3dc64fc85f7e0e0d008f450bd3e6d9bbeb2e57d263b9a636f640dc4709e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2b9815d9ea599a64af4ef24d9a10be61

SHA1
f9b2f655cf0103f2014c06f114a1eb9102d7e7c4

SHA256
af95c9dcb6b0fbca59c00bff7cc2759bef5803b2d10c383f8eed925fbc11bf0d

SHA512
27b10d985984aba383b4aef06f6058e7e18df04abc7db0f30fc3e9d817bc7cf55aaac50dfd19c1014ae665df9dbb27b496d12ae034ec3563bd30f78105e83baa

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
90f1138fd176f87b7675ece042ecd156

SHA1
4d1e385ef79d8e664c431f4137e2f89c243d56ff

SHA256
b6becb52ed4c58bc87866a6e291a25ae8bc44b741d812b094857ffc5711d3974

SHA512
ed7988b7da60239c49f3a53c7674c618ebd3ac65503a1f6394a2f6d237d7a3ac35f7c649f9342e27166a6ff1b94d94d68387b2d2c75a47fecea9b83f6eb7c7c7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a443e51e41f5cdc58618048ce1755fa6

SHA1
c04d016b0dad0fa22b2b83840ba2af23b01965bc

SHA256
79e7b6b5cba5b5afe4c493aaae194cc286c3aa53a8a3c06a8df61dc3585bba31

SHA512
400b15e89432600841e890b84cdadf571ce5908789b0636f1eb8b7e72745bdb07b2882590ea0f357ddb79644511e5df567ec9c18ee6a09c050a313ef8dca81f2

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
bc78ca86807c04c7dc8dee79969e7aed

SHA1
448b1fc8eb73be60f1b3fda25ccb24ef4ed78e5d

SHA256
fc7616e15414425040d421f26d9a762e39afad94a340aff9d4147afc972b58ad

SHA512
fd11fb6b8a8c3a52041965cef7624adbe14aff744573188b70048c0d19d1ffcd775ae5542ca7b23cdd1f3e411ba2edc5fbdbbda70e404eee9c7be853b101b31e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
410c8f7fc0d88030258169220793c2fb

SHA1
3db5735a8d272fe917f7278ab2250a32b38f8c12

SHA256
aaedda130e95938aa026027ddd2352a0db9708daf58c1f34f979cd10217afe18

SHA512
b6fd276e57f6f1a55c84a8a58f02f70b7cac2e4d129d8137435cd20b9d562cdfad8dfc6fb915ecd33cb91c85c5add2af66abf7a566b9bb3646c18d5e66d1be71

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
d6179dbd1b57bdbe09b5d504742df4d2

SHA1
c177daa2a104804e0f17e4612c3b84ce069a39fc

SHA256
5c8c0b7c3c3419cd2c3deb891c31951801a7641671a4f3f42ac95bdbbeaacdb0

SHA512
780c469922bc8e6e4eb7a073e0606349e3af88d57a1bedb566a4910fcbabe9e6821ccbf8d6b3dd1e51804b16d0ef3b45c167768aecabadbab778c3b63a63cb6c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
86e33c173f6f2dbfa00a3ef2dea09fdf

SHA1
a95ec7a5afa92b1bf88ef6e67e0ad4f8ef50cfd2

SHA256
906ccfd04a8f238664e89edceeda4d06ce121e455d7bb41409f2e81bc8bbd196

SHA512
ccd943617e587cfbb7b1e50e8b4b3b3734ef1e3f7bf3165f06bc31c2ba502eb165df80f08d3d147f7cc62283d3beb94fc56ecd7202249cc63d2a341d8b225ce0

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
d4115cecc2b2ad1652028a1ddea9abad

SHA1
c42c9c52f8c225e807b3a685eed3eebed210dab4

SHA256
1df22ad13029bc53897eebee60393559e20c54ab76609c40bba175b580fbc5ee

SHA512
373203923a267d11c0abe9d0ad1309906856a8513fc0d856a069b0da7539d628a41ac32f4919fd4e57ae995a1f241448a963cae66ee992cd0acf1b27b3e325db

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
ba2113884baef5118036700950aa255a

SHA1
9b367d95891e81ac19c2a553538de544401a495f

SHA256
d86a321e5abdd123de80f69d4cf09a7241c13719c4641c9fc6dc50bbc67f48b5

SHA512
19fbadf95c2920862afefedf130e1c511e357dc1985794631dd13444498af1989bee93fe491d3e8675c769905a7ff103d8801c73bf200a3b398e270f306649c9

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
387db12566ee419fbba3b72d7d4996b2

SHA1
f87a8c639d3d98d2bbf9ee210843e4e40e4f7f3d

SHA256
d1a765317da4668bb0ef96e46790c2e4d2fa9e3071ee5d490d3cd7a7d9a328d6

SHA512
7857c8f946209a42b2935372d8478f75d978c5413856670f771177de23dac3c253d826e1c39b7d1a14e3deca70f663dc2c827c29d78faff42f8bb680278516a3

Download Submit
/data/data/com.systemservice/files/PersistedInstallation7387885015322734956tmp

Filesize
90B

MD5
255bbdbd7b0e735e5b051825a4b4fa04

SHA1
88d0770ffc62a14f4007c4cd85660de6328b2851

SHA256
6e5c98eaec8562b1ad44fd58f2e9884d3dbaae03a9090aaed8cee1bee3b839b6

SHA512
11839099688bcfed32adc914bd338793dced0d6eeec7cd121018a97e7833f255d2d111cdc712557995767cf7d65974fcf7869fa218b6ed9c4b6413c572ee4930

Download Submit
/data/data/com.systemservice/files/PersistedInstallation8884259991997961552tmp

Filesize
557B

MD5
f8d8bf75f261491697d4688e91d782d5

SHA1
3a47206092d425ddb61718d5d3355fe6c3ba4916

SHA256
7283b7b7ac7b6d303021cd39970a41f4bea89653cf480606b32a2704a4fa1f1d

SHA512
ba529db909b7635202f4822982b7c9a488447ed0abffc55aaee13594d8711c152be3e354894adc15c0060d8d9f16e8498c5281d5029b4f2cd65d4dab779fee2a

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
6bc7a5ae3ebf79c14b76aede21224be6

SHA1
a5b707caf1b5c586253580c8f2b8b577756905bd

SHA256
7cc55167e8cd230be0340ade7bc60271173d7155972d1beb3dfd1ce2f0041483

SHA512
2a7252566d2422b98808a0bda68b99d8977b8a84717d4d5acab20abe521c8fa1dd8f1fdc932ed9cddfa075ddd9570c5c436caff69fa42c9b6fc29c0f8e2adc8d

Download Submit