5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
01-10-2024 02:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
Size

3.6MB
MD5

d836feab9d4bf3c6cf086bdc14724c8b
SHA1

c837cf7b181679a0081165e5fe4aa0eb94f748f8
SHA256

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
SHA512

8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad
SSDEEP

98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4317

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
51941698a26f36778aa0cc77347205a6

SHA1
dc21528d1db6302b189b9f2f88a4761954f4b952

SHA256
61cb0176120da406dd57888a6da25f879bc6d30bce20b747470dfd86f6f172f3

SHA512
09acbb89c4288a93da9ebdef63714eeb47b534b4149bab2297e770edbbe5aef726ff7566d99d2da429609a8651c99bf383df602f62747cc25d27cce74fbb2f94

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
7f7ba70b73fcd7193b3418484f693165

SHA1
9e0d4b46216609495dee2dfd64784ecfca82264c

SHA256
d5f23e18477bd665184ee187026364d59466091429e3adc8014887dcf5472763

SHA512
eb5fd74511bec1c80a32ee580b345e96d650fb85d4354d62cc0d1b400de2195e97461b8e49c2cf759ceab9fe18bb07dd5dba4331b7c316ec32ba9e84b46ee55a

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a469a8d38b3347b5c4d5b25af6c60839

SHA1
aa29588e5ae6f5bd8c39b70855691a9cdf72bd99

SHA256
bda69c06249eaab8c724e9d60f04758339012fb2f399af4ac47b73e49d052661

SHA512
adc3242d5d195383db6e4692a4bc715eeae6452a7b8b30a46ced43c29a5c8633cc7a8cf401925a9c0e2aab3f19f15ace0dbec59a502388b3873988bc0d10576d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f231230da6ec762ac919e33d37cffed7

SHA1
df3c62e6144670ee45b86e44536c46e59bd98264

SHA256
e1c2a1fda3635bab9c416e66f9cacce7c93e45affeb5b2d4f1d94a6b310bece7

SHA512
21a3a8041e04e4f258e55a6caf247f38722542890629476a8279729dfe21c8164ded23c79d71c8a4270f250ccd3f6f5933b8d0a7482a82c2444c1019d5f15665

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
ac7bb396a71760247caa7b5de99fc26c

SHA1
88b4e6d916cfa06ff309e4b6a794d2909b70e062

SHA256
0f164182e2cadb26980e2c27a234796479cc93713e0f9bad70f72840cd597db6

SHA512
e142b7f079714981a5eee0a897b64d23f897f4edb4e83b954dbd8543c6c0cf6db8410a95bc2be248611ccd2bc2cabc079cf542c7931dee475df0f9ddf0c0849c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
abc5c237a15504075cf6a91eb490b571

SHA1
a845974add9701ee4bd9b64736391118c212318e

SHA256
0f409a71fbcd250a67a7ae732008363c77e3ab5e840562f66fe505d3f5733d36

SHA512
65d630d7af741384d0fbd7d37ddf87a4377cdaadc2248268636153e784b39bb4fdb95e1cfaabb9628801668aab1f457a8b14548d5dbbf54e95cc97b3007ee2a4

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
43a5ffc5921c975744897cc1fe4616ec

SHA1
05c9f2f791147e376bc573e0ac4b072cbff84c0b

SHA256
1c1faaf60495711a642b8aeea014c49a8590d2ddbef047c87971fe94aad86692

SHA512
e4f8543acde6df900cd8d679220f7ca0950fc90d38b45efa3874ccef99fe2373e236fa16afbcaffa79b01f7d612df512f077dc2f28168b3e139ff0334f217287

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
fe3b59a6bd4afc96e44692a25da9e48f

SHA1
8233eb7e71d9f3085c8496681af3563c7aa46d7f

SHA256
272472ea047d2d8497d2c23c9c606bc914adb7ec268355427598a629e0b96cbe

SHA512
32316e6757d538551f28120fad0fd2fb03593dc937e50411557de3656396175cec426197ed54c38744640a3f0fd595407b6826780fb685f3e9230eed63ddad87

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
2fb9d71eaeade0a4bb44ef761dfbb133

SHA1
5c95717cc4e235d33fb6b4119d1b4d6d2ef51f0f

SHA256
05de054652acae26eaf08f300d4a4df03e59e39456c0119093446c08ebc8432b

SHA512
84a6c6fc336a58803f9d82b5a051361a43f356ae8014c590ca25e0fbfcf6d0b39cc36315d710eb730b14b4e5d9e0acd700d05d3774647926f466dad86eac0e2b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
3fe0c530e31af438b91e0315c1ec475d

SHA1
276dd59a406d9060683ed47c44b3ba8c1fd6a71e

SHA256
2879ff4c09192859f424dbaf16af909dc15334d060bf000e4919e2dae6a5e04c

SHA512
3d4aea6d622785fe001abb30255ae444dc83adda253172caa9b19c1508a73cfe9da97775524b1ec185f9dc200aa102a60f893624c3a8da111124074bd7b2df8a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
b327ddd880bd804ad7173fe08ced2b55

SHA1
d32de53a62cb934141403073c2337df9c1738064

SHA256
71f9d3340a28274be6aacf9b1bb9ca4f8fbba0537f13410b8b8a2e50e9a43709

SHA512
bda87fb3eae601404723ecadf0e3c2678ace4c30c18e8462c78be524bd8866cf36a9e1e4563d7d139835b44240c8c20e1af2ad27f81a8ebfc12febbf3a00090b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
8873cfe0058b2a34ec3469c5ced63f04

SHA1
b17b88a423acbceb7285d17f8907f2328f2a26fb

SHA256
d3655fa7ef5ed24d5f29c62d6f25f11326694f2f12b664dc702a830ed90a25e6

SHA512
d0070686cb0cbd9c6918c25d63716f8109713cf2c79dfbd1d5b2416e037fc8ee025e2f156555a8d6143778b8df72ce750f94809bfb211e7cdf1c89cfc116d80f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
f7fb73c80ebd297eee75cbf80221787d

SHA1
e8adb5bde871fc02f90c39a617dedefb19b14cec

SHA256
84def4e5addaf7c5e1814dd8836c242af24dfe247a1cc186149511e92991bf82

SHA512
a94a493ed845c06590684f8763a8a97a18a987b98a10d859d2462e0c9795cf54997e5e439f298ed9f97a45dd257c47002bec87d43735fccc2d8c2da01d5559c1

Download Submit
/data/data/com.systemservice/files/PersistedInstallation5303567313076170805tmp

Filesize
554B

MD5
aff11224406df5e031f700046f9e4783

SHA1
d92468af59f9449a36ea6fe978d644a3bcd02dfd

SHA256
e1d70f921d09d31ce1bb6713e568af17b3b1220203c4e31c5e2ec3a233ce6861

SHA512
7262615b41b666bfb17eb753939ca7e9d77ebc66c5effb0a66cccdd98759f591c17768235e03466d47a31a88fc3204499ab32737df61edcb8e7aaa399256ce99

Download Submit
/data/data/com.systemservice/files/PersistedInstallation6001882605697232755tmp

Filesize
90B

MD5
6a57267a37df05cfa762f75f838dfd69

SHA1
4d51670c42f37a7acb7bbafb1ab3a5180ca5649c

SHA256
cf64e5014b4b717e8b2aa3fbb2a9f90caf0491c3f01b6546f02576165c693a4a

SHA512
75db871642f23ec7bf499ac43ade1845f8fdf789094f438f26c3c41308aaa8f122792fac28f8a597fdb0326e07396e66de08a220824ccd16deef7baf5d796693

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
38e0c851daa463affedcb4a5fbce386c

SHA1
5d4cb204f0a9d221e3629981f4b246d58f4702e6

SHA256
737498aa88c7b8721428971b9fe0b2b0f876428b79518dfd59cfe82c69e7dddc

SHA512
93d4d4efac25b55d35dbce59040c92a55e0aa28c1dc06e1989b486742c4c7943e245dff5a91cafd4c51654142f5deaf7104657e8101f567a9c12ec28d316ae5c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads