2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
07-10-2024 02:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc.apk
Size

3.6MB
MD5

39fa2c58237de702fc3458251f358cab
SHA1

16e4e5003046f5d07a0fb1eff0dad56d9ce53be3
SHA256

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc
SHA512

023b77900582d0b6629d587f7411ce5153124cd3870b9533cf9afc5304b874e4353d8dabb7adf8a199768992123e707bc6a87ee682463c3bdccecc8a060e7126
SSDEEP

98304:kyHTjmHgJcyw+WoeX89z6Odp/9hBbW+te6lXhAyHmz:k+jmKcyPsXMl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.systemservice

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.systemservice

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.systemservice

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4266

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
a940c19b603b78e6c778bcaae95a3ea2

SHA1
b64b45353d77b6486b4f5130f58208edcc65d9c4

SHA256
654e041740b7586580ddae49c68c2ef749d52ee4b2de4b88584568b35be738f3

SHA512
b51807beb8e3554d19a87d3fd606f3d405f44886f3e9bb703759974f221165ddbe18e4f333913b763875909da0472820c63e3a2524635c763f777810f9440437

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
498643e22ba14b2fe2f35d839767cb4d

SHA1
c3a9c06a2365d915e6df727ac4872879bf96d894

SHA256
1c36343a6bac5ce748692f6380b33bdd9af8c28c8371421f4ac620da71a2462a

SHA512
52982cf2fea356dce2a07b801bfdba1f4e83407a671f61bad167b7b1ec6361539420e4f5cf65717ac9bd18d83d7fd3688e9d34aaf3abdacd35c6f2656b55cc3e

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7f205138387746b6db92456fe1c8d6a8

SHA1
f591ffc2477ba826bab91671153be90a8d63414a

SHA256
ce9adc8d176c2df9bcb42a9f7ba364c5cca3a7a7c8b5efb8c645813ed89b46b9

SHA512
ab6c1f58973ffc00836a29b02534873aff76bbee696d38d4ad2193c422c6d0f850d5dcfd7dd514b5866225f2fd4baf7afc33b2f67190f297fe0d3b1324f929bb

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
ad27da5d4e939e60fce39f0d682dc3ca

SHA1
57ac7cc967c70741cd89cf677f0a74f0eb5b0e16

SHA256
c8203315235ed583b7cd3c0f5eb9013bed81d9d6220649dda884be8e28fa3e12

SHA512
25bba2abe7accda2a7f8c4bc183aef79f5b068258bfdc4a7d7d6e3a586ea021d8aeac5e38ea45f53fa57159388d3c2b320a4eea73ce42af5ba1eb086053ef030

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7d7261d0f581d1fa0f076361412f9e2e

SHA1
42a441871babe9a67b82b2fd77cc0a7cf91689fa

SHA256
281ea3ff40aae19932848248f91fea54692fb63886ab12e00bdd02f596938185

SHA512
6181cdebdb8138776c6ee180bb29e6ccc7c4270c0e000ef5b73d3c82bde6b53e2b1513faa497f2a6d70f5ee4deba2633ac40a1e2d73ae032192f6a80d6951097

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
43ad91ebc2109006b9147847adac1399

SHA1
e0e2c13d85eed98fdd4f08308dec7e8ddd33c3a0

SHA256
afea5740b0c1d75265c2eff1e4781229a235da9de326f3191c67d1068abafe7c

SHA512
7971337429d50cff29b17ba15d06e2d9e96b4b08966d612ecc1077b06ff5439290b5152dd4a8f091f03667c1dfc254d609156749d3d9f0394a56219541838e72

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
bd885a43d3aa187f56a9678c472d9f6d

SHA1
c75d7068f707d7bed5ad8b998189da90a01701c7

SHA256
eb222fb7af81cc17773b9bddbe955274f4cb1429eeac66e3a8bd635db4d6ca4f

SHA512
680f9e11884ae42ea5a9d812e42246c8831e3b763e0b9ed5d8f70437fb771e1432db64d6cd6eb581d109fbdfa5255e4654461aa07859d078b03cba6e70c6aa3b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
446418c8c3e3e741df2298aedf41fc9f

SHA1
2356d5424f12a0b6e2aa487ba715a5af8e2ca2a6

SHA256
51283a146e146c13e4af465c59ec2a76d9f9aa0b24fc4af41f07d57c4188ffa7

SHA512
8be53f7de576cb5c06382f9e647a3ad84f72e705429859a979a13cf4411b029f8cb606598099f1e9c6138b1e937f2b9e1836f5e570dcfbe826aafb8493885a6e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
88306a8d2c1a4d4cc97003af60bbd264

SHA1
dec12a0d9c5b3ff48cdf7c2a47f87c9b6db29280

SHA256
252e9b40aa2afb7876edb9cf3fc6bbcc4e11d0289e87eb50c8dd93e2241bafee

SHA512
8d9dbeea58e13bb671ffce75c510a617cb468efb73595734eb92e30a37cc5d69184d68b1f520ef0955e7b4663c7b27146201c6f07a49fea0650daa79da578e81

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
f142edc647802ce2f3e184c5b6897268

SHA1
c282f0b97ac77d0547cc7e9b26afd6d7b15c76dc

SHA256
b4d2ffc9afcb1a5715e5ea1a8498eba2437e43e60249b8b37ee26b20526ee9ca

SHA512
0062a91076d623c885f1f3d61ff702d7498130fc364661904535a315c5e7df70501c68ad8c63373f7f5349a928f6f1eb0dbcdce0242f22fdce34aff97e6677ba

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c6d810cf3d880e26e8419888fca8fc97

SHA1
1265313c5cb897dae757eca78fb8c5bd3d226cac

SHA256
2f895a5dd9f07941325d8dd9f06c55e680d6baedfc08d270c52f2e4c9d24935e

SHA512
daeb7d440e91901c04c5b2a2742ee3586c718e50ec7b03d5bbfe0cd7f54d31f308e582674a112cc517ab865f4626808a3853dfbe7900f0f268722211707d066d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
747d26d81274e1161a478fc839f456e0

SHA1
20e7fa9aba88efac09f60fca0a09ed46d90c6578

SHA256
0fbc2f4492369456f16c0798669ef9cb7dda57017f08905e48a3fe156df1e0d1

SHA512
d74c9b8f8a3317059a863856800126faf477bdb2f9817cf556c3bf223aec7e964f0cde2033e66732433cd99e91cf431f28c5462857936accd230f64a97478082

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
18b1ed34d5cadd2bf89fc6b68adfdf80

SHA1
c59c24cfaf18ea39a19e36d82e3e926372a32218

SHA256
02a99921aa082d1143511c9c675c77f1059f4c83a451c5ef52a19351c0e8e3c8

SHA512
1f59aab11852d075a0f6b0c0ae698806666dbf3baeab3b6ed3491b4cddc2b6adbb12c8c9f02dc9628bb9a0fed1eef54f7f025a83707dc55c2d35e8cdd362dfc6

Download Submit
/data/data/com.systemservice/files/PersistedInstallation4179461399374271860tmp

Filesize
556B

MD5
bc9ba1c62ccc567eb7b871e7e1c8e45a

SHA1
c2391e36afac6cbe73d9a4092b429c2da3ca75f9

SHA256
e9d4e66dcd4b497db0885d9d74619ee75b707e3c0d813d223e7be3c6a72513f1

SHA512
91fe6ab36ac8ccca4bfff2b2d75525ac9603ac285b2870ee67bd34f137e42ae9f0e7f276f56ee76a874428cfcb37f808fff16ef1f50b3239442fcfa79a65ac6c

Download Submit
/data/data/com.systemservice/files/PersistedInstallation5578360317549464172tmp

Filesize
90B

MD5
23d988cb1aa43c97c18c4ce546515fe9

SHA1
f1db899ac9f44703979d61286be11172de568ca8

SHA256
292f828bd58b8fd0920a80cf964d2f562035d205707215483b23e1999e5ec64d

SHA512
fea7076a5bd7b9a4d568491e8375dfbef1bb9c7c91fc1fa1163557c132c9ff29208aa71f38a5ee3ab5c4bf214d9e415723dfd0c6d49099df81873c8cab7e5cc9

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
4f50c044aac8a38618352c86aadce35b

SHA1
b1499373a2997f3e25954eae0dcf5b1daa179f6c

SHA256
dece068cdfd6db1a2463826a756c61c2f60b1258e875efbf8995ba731aa2cd3f

SHA512
d61501ebffb72c5e3c2690a20e896fd97c786bf4b649238187541b3d0d33ae4c250fb4008a45451a3f1f6950a83404c4a6e9c44dfbb53569077f035193ed5d5d

Download Submit