2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc

Analysis

max time kernel
18s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
27-09-2024 02:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc.apk
Size

3.6MB
MD5

39fa2c58237de702fc3458251f358cab
SHA1

16e4e5003046f5d07a0fb1eff0dad56d9ce53be3
SHA256

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc
SHA512

023b77900582d0b6629d587f7411ce5153124cd3870b9533cf9afc5304b874e4353d8dabb7adf8a199768992123e707bc6a87ee682463c3bdccecc8a060e7126
SSDEEP

98304:kyHTjmHgJcyw+WoeX89z6Odp/9hBbW+te6lXhAyHmz:k+jmKcyPsXMl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4316

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
a8d35d7223a1283568ee2c208ac2c34a

SHA1
2a5887bfae216099a9d8e8eeef981d425458c4e7

SHA256
a6effe9b7081d762b3fb7038c5b493456d653119fd9418c4a8065ce1bceb76f0

SHA512
59645ea4e834a08cd85cf9d3378a9ece69bad4f40c5137ae845ed2f85f6ece41278837ef3f2ff3cef6e452c62990c973bd8f0771316dbe611ec94ee5d60c0e78

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
275793eee3857eed50c41e06a9b681f8

SHA1
d075f34324b45fdb7a7a177155117c9521d99e41

SHA256
a6cca82abf5907b076a3ef0d65119998f64e3066c8d44537ed95edeac630b6fd

SHA512
733d7a4a5efba99f3ddfed212d740d9811a9f5791f194846548c096b80a79e0bc98ce60f4d49e0e7812888c555f2f1aa14ef0682d3cc64e205081be428aede54

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
21aece0c05023514960b8c1d3755467e

SHA1
9e7f5a1fff4c0abd44810e063d9c3d1cd59e26cb

SHA256
44df27a6554b4c097bbecc19572b64d01eeaf5264b84db90f2243550a9a41c26

SHA512
07661931b3202a07c2d89a2ed006059356e9986bf5e8834794ff447c35eb0faaae9732256fcade0798e673d80b45303f35869d659a31ced5275c897429419263

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
fdd83e201f17a51383761f1e9622c4a9

SHA1
0242004ad01a65c1cf3eaab9d0961984f82fecbf

SHA256
ec389f40ab569e41f1eb6c49d6f8ccc30e9f2acee0b79191be02c26ce63600e9

SHA512
d547fb6043e76aa2292c7dacf8587b7f09185c94b6069d3d2cb6ca98dac88d8db7666f486fa1e86962329e0332b12528cd08f922e6355c1b6c034cacd233406a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
8a2076c5b271f07d8c0f038a8e04ff1e

SHA1
1d1a9def10fccd807fe56be87b5ea6d52c95d4f1

SHA256
904f26952daad5ba521acf4514d16a1faffb7f934ff1cf1e3f3aca4321cbfd20

SHA512
7c6e99f277de57c824dd4c6c97492d3abd9d0342fecde601056849e35653f500e31f2e9c6949b6e8b0410c3a2767b350c42f37c4bc0f6e07f1fe81a33729fc39

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
24e6a69f4a3941f9fc4e59707fa27f20

SHA1
3c7c4057bd6cf94f83cfded9bfb95d2517760f15

SHA256
4696ca8395ef37c95112bb1b92e4b38d21abe04a85c0e3e133486548b3feea13

SHA512
0c788ad861e1ab0c2f40ef522a7b0682905e9bf8c8b109816c42b5f5aea04caf962598e19ffc08c7f8c288c51345c8f81381141130772afe43af7672ee48b842

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
c49d313fcaddb822078e556bd1ad248d

SHA1
2df675fae9e3cadd6697664e9302a5021b196a67

SHA256
df4d40ebc82c0a1785b4533fd543c43b6fbb2ecbcb2afb591bb48dec2c1b022c

SHA512
82dcc9ce1f0791ff98543bde0c04e2ddf9c536acad6dd94fea2991eaa25c2b12a278437a94ee6f67c25a5b82e4e45da786458480d7852ade7869f62d3af568d7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
6f413e5c4f8abcd875379dfbd342ad76

SHA1
e94c04e5cebbb1bdde10564b446caca95467212e

SHA256
69af27d5c564d5710eca61c27bc8d2c2a22655faf804f1cdc0bbf066cba406da

SHA512
086681c0d1234b1efadf5021db74b3cc8de9fbe1a27d2c3a4a7d6f354973765b6bcecd26268a5e3d03a68cccb26f171ab38efad5ffd878d83cd2ae83f4465ab1

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e129f66ed63d498c7975da243fefc344

SHA1
a52860a0e6a4f9310ac140758549f007013276a3

SHA256
948c3c45f86d05aeb4693f4286330a5f3ab21954eeb098c183975dcfae2d6625

SHA512
a0f2c715fdcac8fd51bf1b0064c8f7d735075be917eaf69b9dbd1b7b370c06cb00cc60d810035cc40d41644961a4ebf70e67ce2d7c8d78dac60f4622da7a1a2c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
fb5b45fdc29b57e66317481eb6699f15

SHA1
a3e1aa330cfc1ec94d770ae31acc1fbf864a3bf0

SHA256
5671570ccb3562f0701882048829fc1ca40022b8ee94e19995dc1fd153a798cd

SHA512
ea7a1b6cd6d38801c7de10d3e581de28e30dc9dfd2d1d5cc660894935213f6e6b2bbf88812b94657e36a441ad0f7b1b25e510a299525e77a3a9152f636639641

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
b4b6aab5d5b78786f1d19e3ad64c7057

SHA1
7f7db6e353ea877733a55db8c70ee1bb5eed9c19

SHA256
1b6d8d019f08f7397e27d0e0a7666d9ee78fc777418a9e86d07b2b99071b5a2a

SHA512
3270702d1dc72fca8e5b9b5d88e8b118e1bb2cfecb4570234de9278e46c4c97a1d495b7e89fd334b03d4060f7e99c02e667c33d66846fb7584999bbb69971231

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
9081e2b658f59867409f64c3a0d1fc03

SHA1
560defe3df21c141363dd4151b4ffb5070c3268d

SHA256
b43bbaa4c895503c2d2e9b0c80efb7ac88a73a1c4cf749b5c6171ad94ea6c16d

SHA512
61dec07f8cd1d065659f8b983845941ac45a848e48df14c69373dcfd1caf28d57deb7c4319f7345f6c3fbf8a8235fc93826b3f14924e6e2da17ac05b9f512671

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
503269cfc95b5b58729eea5a99735a6b

SHA1
bdc7e44868675653f285de0e0fa7426090ecc627

SHA256
a0cca0b6d90a2a9ffe96531c29de737042de0e86792fc84206f06b1a58868daa

SHA512
0374b163fc9fbf205cb7935430659c4c2bfea575db667875c3411135bff0962f05fb7849886af47c9d8134363a6735f3be2cd4bae5b0598bbc0192fd4c5b03fc

Download Submit
/data/data/com.systemservice/files/PersistedInstallation1953719659072681261tmp

Filesize
556B

MD5
c8639f8a68d4b9a62af071c492c5335b

SHA1
12e9a623f5610f91f99884e70b9a97051b75c08f

SHA256
cc73468c39a2c02bfd188528560bba2ca4ca6099a1e3688f457be9894acf5833

SHA512
cd882dc5b500c89ca5b2908fddc27604e129ccd72dc221424ba5aacabb539a4f73d0ea0b992dabd558d13bf97c2aca3c8bcead3a777b0c530ea9a5bc617ec21c

Download Submit
/data/data/com.systemservice/files/PersistedInstallation7203321821232067117tmp

Filesize
90B

MD5
270d861f353fab3bc2e47eb94631ca34

SHA1
ee923b21f6eadca221bb685e267830b3a769134d

SHA256
17608b54fac1db415c141739cb7364c245afca372df6fce547d739f21a210675

SHA512
a7541a4123b751b100c581f370de99f18db55fac0fb15a30283b10c2e2675e10deabf5d2bdd95b4c15394c7fc9f85dd1cbedad51d15c640195aa224c3c14ea8d

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
74b3577334694c1521cc9775b1c0352c

SHA1
b26169b6a0ce92063ffc24ac612b72e798744937

SHA256
4da610a4eb79e0bbc3bddbc10bd8f974b5716e069ee3b483e31a70fbf3b0da26

SHA512
82b85bf92bad0ffa32073d64ebe8832266eae1c9e598c167039aaa66bf7b21680765003c7faff243ef462fcf1e1a242a4eef0cc2a1c9e44da9487d525f4ff8a4

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads