5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb

Analysis

max time kernel
17s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
07-10-2024 02:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
Size

3.6MB
MD5

d836feab9d4bf3c6cf086bdc14724c8b
SHA1

c837cf7b181679a0081165e5fe4aa0eb94f748f8
SHA256

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
SHA512

8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad
SSDEEP

98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.systemservice

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.systemservice

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.systemservice

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4252

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
c1a9871eebb7325e255fc1b46391ba03

SHA1
7b3feca06795825f88bb9f7de1bc8a0882b98ec7

SHA256
3bc89e80f8e061ea939c595e16e1fd0a4ae15303eb14463fcf9ce21e030c388b

SHA512
c75c05cdd70cc999fff2af0b4427ad437a953b6ea885f9fd6c25dbe69c4dbf80737589274dc5ef0759833606bbf227d6b2b96f99e17b4a9fd3acf7aad9d128c2

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
e2a56cf6265023659d641682a76f9131

SHA1
f126c0b2515ce86886cd59e0c60206fff7ef95f6

SHA256
1a76900b04faa3fc1ec51f962de364b5517c91a5e6b70371464e955976586a23

SHA512
6b86ffc06d0b8865b17a9ebe10a5f13f9acaebacf970fc657259b9b92d663cd54041146d61f8a2b583dc1bc80967bf6dc6a4c018527122b4e3f8bbb0382c821f

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
fa90e987375c347b90aa1a6b0756e3bd

SHA1
17f849f91ba38756a8ae4025d3aa45c9e9806724

SHA256
1008ee16fbdb0e0e59d148e6726198f5b941cf113eaef1ef311619489490bd0a

SHA512
36b1b03cad88443df7bd87d2a99756c2e8f8627be6304c8b8e464e63c0e68f9fdea98620d9c7c1b856047a76f8c661931d79ba569b4a26ad7db4e00b026264e2

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
bbf3c054ae3715b385a40286eef8785c

SHA1
808d3f9f422a5f49ad6b73f42f98508d573798e2

SHA256
0cc711a7544eb29f6cb6ff3018a593a181a0abe296f45d68077525b7f32422e9

SHA512
0c8013f7618bea73a420675dfddd277801b57605d25b6f4951a8b051b0630f59a8aa376cd726aa42c01021c75343b65adbe21630ae71047bdd7aac7bcd24e427

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5e23d6abd8991ea1479660baa143a1ac

SHA1
ae905f5a5fd7fc58eaf3b386c2b5bfef0cbf4129

SHA256
9d855272ca1ec8494246fd891bd273978a26d6b53e95084051d7b69212f50162

SHA512
d365e52a606547cdf7793353188470f6299b50cdeb4cf13fbdbb3622db53978775551c2905fcc9786fb682d126d7d8ccce0a9b6067a297c04c1abc7503289f4c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
865f25524bb2a78144a4f6e6a3131846

SHA1
5a65d48359e159478ad86874e97d9e1e1f36cb89

SHA256
a10cedee06517b792b026d9ed44d2adf8280fe21de1cc499b7c1133d7ded9ed9

SHA512
0b8c6e3582a027e57dd19b3188fb78952c3ca311ade9ab991f9bfd0f589cc5257f80d5d054f936ad040ff48de7ddfa15a46934b95f30602a799e539eabaf1289

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
c18794d11e758df5a3c19ab67126540d

SHA1
1ac68ce605ec9f2bb0f70796f8a0ddd721bb6aed

SHA256
d409a1cd2bedba85784f5bcb290ac3764b67378cc9e3a3309c692ab33a2b4877

SHA512
63b9866282ceca7f8772046c45732be0aa60e047aedcfe26ef3908f5298365dc7bf8985980cf08e726caddb3830a7c61b272f802b4ee494bb851cf68d8cd936a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
bc591ec4a41b17d58f3e246e93a00502

SHA1
57ef692d3ab1760fefb50358b6fdecfc27c7fe6f

SHA256
84006f9072b4fbdcca3b4e4b8cb067edb5a2c26c715f46fe619718090288855f

SHA512
37a6893a4f8a46821013ae630f61d0b1670f127cb332383211d7e2767f0c75a9088326ccff13a4d48b08e2ddd529b5154348e6653b4930a7eb0e3d1f9fe33c77

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
17f2051e995872227c955662f677a96e

SHA1
9a140287910cc423d44427dc9356d6bbbccc162c

SHA256
606a8bb92de01c1a7bb9520a4d60280286c34f75a2b2c9d37ad3adba8cebb938

SHA512
78c9bbed1ed1192f7549ab6d324db7591fdf45d02ea1539eacaaf3909f0b844ac0353f48f9d29ef67937e8d8a1792855b71c04edbef969198392a6ba0369c252

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
74d6f53c2fc6fb2a0cf30c2dfac31ef9

SHA1
bc24c814f0071f399bbdbcfd25ee7697489abc05

SHA256
e70602bf7bd1f47a0495bb6fd9b0a5873fc43f2c6727a2f3318919667fa6c405

SHA512
e55466c669d959f26fb52aecf0041ab2c38957d39df89240bdc7164f02e0a079fbc4bed94ba36d82fdea62ecf6cd4ee62aaca2fb123321f93c2a11e31bd4c9dc

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
d156add9629521210040b4f52a006427

SHA1
24e21f5cc776196160691e8336e5fac038af9aee

SHA256
81f684c082039a4d344e8bb63449e69a12a930281863dd17a921c0133662cf4d

SHA512
b3ce01003e4011bfbe018a8ebaa60b1f82b31dadbf5f5b199630c14a1edd71fdead314baaead912938792f69b161dc89d68996cb731fc9145cf358cfcf46e1e7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
2a9b881a7b172d0ee192b0f390732b48

SHA1
e515273ce5f628b79638651b950040840c30ccbd

SHA256
d83bae6070f20f39494d16b1b182e445fd80b3c7dfdcd9321e845bcaf4e3f6d6

SHA512
4683133b770e6940befa75b06c2216f5689e01154652c5910e0fcb97bd8a1a6169b397262f3bfbdc7de336742b102bfc79735349c2d83ccfac6debd8bb8b4788

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
60d16f5beeff3c31809cd9e7606d7280

SHA1
b36d99e28e4adb7f477c3b67362ba3d5500e87ba

SHA256
9a5d7fb978b1bd6f45f7fceb5a33cc85843dad25431155d7d097d6d01652a4d7

SHA512
a52002d13be1400351c6c059c8d97443c36582a29b5006c8f7b5441a308a69ac05b93929cce524a2b43ac9eed8cb3ceeaed35d94e880fb38411774efcde304f0

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2759637566103098584tmp

Filesize
556B

MD5
19e22635a402ca545196f914c37d3acb

SHA1
7aadbd86660b44d2a2f5547d4bfd4356ebb421fc

SHA256
ca54f7b2369b4ddfe7620a88cf6339df021c028e63dc537f360305dd22637fa5

SHA512
8fb461d969ab8666a5fb1523d03ff6db2d3e261fd42a0796489b47b96099f624679ab47b65c5fff442576b2d61705475fb249e491104cc45185d5f4dc96d16d7

Download Submit
/data/data/com.systemservice/files/PersistedInstallation8203421586761393793tmp

Filesize
90B

MD5
871aaa90931eead7778e34d8e08df06f

SHA1
5df1442bcda6c84a0ffa6b05615304569ad950ce

SHA256
0edf2e7806597da65662c286e19217ba70dc47d67d745bbd10b14f2913ede5bd

SHA512
10e6c113a96a8a4513d57d052a58d96d1eb051a710ce4d4d40953c07441e309dfa69fe1ccf638b0daf27b9b4b095d3e6ad6ebc1e5602abe703ebfc1887e6a609

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
bc838e1f3678b5750cff93ce29962836

SHA1
12733470033d0e3c60a5ad2d13f169d9a6ed1e7b

SHA256
e3b11ea1842ca13792433747e6b1b97d97f88dc8ffe594f025a360b9244404ad

SHA512
ac47d5ab8cb2c296b6993861e88cd4ec585b265f4083708e7d76f550933aa3224e114a17646b7ea8227a2af4370c382a2654d7955cf5ad04b1471458fd6d99d5

Download Submit