2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc

Analysis

max time kernel
17s
max time network
127s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
08-10-2024 02:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc.apk
Size

3.6MB
MD5

39fa2c58237de702fc3458251f358cab
SHA1

16e4e5003046f5d07a0fb1eff0dad56d9ce53be3
SHA256

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc
SHA512

023b77900582d0b6629d587f7411ce5153124cd3870b9533cf9afc5304b874e4353d8dabb7adf8a199768992123e707bc6a87ee682463c3bdccecc8a060e7126
SSDEEP

98304:kyHTjmHgJcyw+WoeX89z6Odp/9hBbW+te6lXhAyHmz:k+jmKcyPsXMl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4246

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
7c20831aabbd7dc696d7b3e1bd23e884

SHA1
4b6d727a5c8a711d1c117072f9f5d44ce7407f7b

SHA256
d923aa10d906424fd11c7e1cdbbe3613f3c87fb75d9b0a668510dc511dcb39a2

SHA512
d6cd5f3c303cdf4bf8a5c4a8370c65c596d9e89cad66cdadaab1acf82bb24ea4aefc3a3ea06e6efeb2f87e301e352a4531a7f64c04e832c8ec8d509fd637ba59

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
21c2c77d97d5471749f65e47ce129c7a

SHA1
ac1743961f0645e79d6cda825349a4606064c9a5

SHA256
4611fe7509cd66990618cb3642493dec491e30ad65e6dd6fc21d090284c343d2

SHA512
8cc2a62e1309383e223ec6046d2313f51ee318a65d35d92ae9edb9e601a43de7d9232b48c2130c0b5375077fd5b6596fd86820865efe7d10cd89d9d18ccc3bea

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
c5926ddd9da741f6e7da517cc3f6060f

SHA1
654eb7b2392c55ce3f8548ef18f6b13ba1f833ad

SHA256
d7518994d4e6edf48abe45773efffb2dc52ef93007b4da880fd8371a3beaae5e

SHA512
955a68d88f3c1a2a6ba42c311e3a60b76865e707a3bd80a1c212cc7661445eb364c7c5d3d7f5eb762d440f9f89bbcbd0d7f573987f5456c0ad0cc1d7ad72afe0

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d489f2dea95def10310658bdd5025247

SHA1
efa9bf1152ffd866cbd5f03b1937599bacb53cc8

SHA256
5e92ba4d45bf73cfafd3ae47ece1454ad8a15c138d0fb55b09f360510d08c69d

SHA512
831808e32728e928720747003f3f243d625b2c7bc0f579247d5153d73498e88f5fd35a4eece4a43438dda3bda7b6c9b4a18b2846df483ccec5ed0c0bb32e0697

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5e35bae5757cdd6ee6b748a812ee619e

SHA1
caa2f785631abfaac1be8f04a7b9c8ee11d17d3b

SHA256
2388055dea5cdf6af5d9a3965864795c52a0f076a500695160cdfc13a3d406f8

SHA512
6d48ada9bf5425679222360ba8ffb464a1429b11e989213c4aa488a9e02bd915023364d5c00cc86d7a5e53d6e619be0e55a67ac4ad36316f344e8b6d2566be38

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e87e2d1637b35ecbe93bc1685d6f1aec

SHA1
3707cf6a8411006215d087ed06af182c64082275

SHA256
05175c5922c9ac31c98e0e467c53ac0abc24901314b03fa467babcc33d105106

SHA512
5ae9af1336b6f9b530f6cf02180565751a4c9b99be80966d3f3e30728aa6099fdce7a8c7c6c22fcfcefc33209c805de0b1ac3f3a00ea3dd4a846ef8cae50e7ef

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
b2d6ef8db0f6ea9ab9a8ad8519f5da8a

SHA1
4c80ce535daf09a9c1f24fbb41407daebcd08ba3

SHA256
2cb24d350e0324b7185126febf5c172d2291f314c0cf9adb14176dbd19d1cb96

SHA512
3f0b40b6dacebcc3b7181eebbe891ac4549903bf6fc1b77aff5d9bd788d1f43eb8c8c7980b580ad3f7aaf13094e5c6f3b2e1e043c1180467058cec01cbca0955

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
97219eecfff4d7a8980fb1d4cc1dfb6c

SHA1
9f8646c073062417944d72327784e0a814148765

SHA256
ae93a022d41088561058cf25541ea4cdce9b6a9aaa031ad0b392b2fa4d31ff07

SHA512
634ceaa49452c2bd63caa37f07da9249c8b499f7b233f5373894283a80db6da58ebdbdc2483670e777ca23047d8e066c77bfc49c39eb72bc443f6bae2f1e0e0b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
ef30695ecd343b6cb656de877b6ff085

SHA1
b0bc97967887679748eaab0902ae2368bb09cab7

SHA256
eccd03097faa670b8115d96a9365652793f3ed0305a2de9d264f54a92715c37c

SHA512
9448bf5600575128371e1476713a057d2711a1013019565c226b8dd2c4d8df4fd4b0d3f3f144edd4e1675dbee4b7b3ad8279d6d2181b56edfb648e257e9946ac

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
a59e8179b7c599482fd67dcd9926b3c8

SHA1
1c401948777117128904cca1f5361e65903c7d9c

SHA256
8ebe2317ea91914b0c4e5ccff6a8189a048ab2e8d4f08fa85211692838d9f12d

SHA512
8ebec37e81edde93e83574121dd28c3bf24b1a056a8bfa2f762adec7c59c283f4eea79ac3c8b34b24adaf2a7a6051b00183fba367dc6b1b3e952ab1a6dfb93c4

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
4025348e31e525aee03841dec287ca33

SHA1
409eca4e05d5118fda952796f17415f8e4336ee1

SHA256
c35af4e30c55d5060dec0d8c9f09fe2429a2566be341bec32ebf14b7645421df

SHA512
a6572576e9055cb0f3263f05fbd63d90838f262ef0bf1783794c52ed53724a9cf76100c0685fcae3ecdf83b548289bf19f357eba5e6118799e2ce2998eb66a47

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c5e36a001bda92f30f1dec42f21912d8

SHA1
0df400705a0a4e16af622f02660b945468da3be7

SHA256
8c20194f9e37ee2e6ef0410b2b080d4ed26a89f770096be8752427beae6b2ffc

SHA512
5e4fae5a09bddd0bc22620ed16b0246f993093b72f66203a3400cf36f6afa7a1df9b1e01f19c6bf64d2ed6dd71cc2e0dd0450d0643d8a798f6c542103bfd6db1

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
34ef7e23bcc00292e7f79ae1c539148e

SHA1
6b5dfad52f6147577256c7060efdeef7c9097faa

SHA256
89ff33794a803e91e405e9b829130a9a294c1973b026ad783d9930ac6d492c17

SHA512
06a9ad95952ca8f0a2a12315578942a82c651bdb7e0a80e71f82dc5171ee6cba930b39a6355908771cd98f5aa329cc455b1872f32f18b6f41a1466cdf148fc9c

Download Submit
/data/data/com.systemservice/files/PersistedInstallation7459118364835879113tmp

Filesize
554B

MD5
ded1ece4ecc9062f0d5aebd66028956e

SHA1
31894851ed1dbe7a87e99c2ad2ed07ad667a0faa

SHA256
bc6b0bc2b07e1a83c1b0f90b97eec1faa3edae61b11bda9960924dfa91187bf6

SHA512
c63dc64e438b9a936df87ebbb61e8d8264b48f360674e2a706301fc97b819ac12242fefb499e4cc1eb25aad9df40a1396c4427b7e6d50a4c598959c6e6649070

Download Submit
/data/data/com.systemservice/files/PersistedInstallation8765480301606649764tmp

Filesize
90B

MD5
a83373bc524bd3c7dbd995a493852ea3

SHA1
e6da2aa5423a7f2e0c8f4411aaeeea15b9190a9a

SHA256
2650daefc1d7354f3f05e0af02a7079b63e24775de4023bf5097dec38d52f5f0

SHA512
411138da4b547e78e10e82c095aa359cc828b4096a4966d7fabab464e63d83b5261a6182b7257186c23ac06fcfc847c3ae5eb3352fa162790b1ce6d23d02f7cb

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
74006d03a17a48082d9418dee8a29ffa

SHA1
ff719e97820f392353f6681c7c1c8069244e2608

SHA256
d91ed6128eddbfb01a25e880b46587c8e6918ec62ce3440bc876bf2337144674

SHA512
702c0b94e673c6af580127714d69518d079238bb97401decd6dff2448d8820c141ef2d5f2432841e2e29c1df64a520653d2282e6d7da05abbe37872c5ac2ad40

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads