5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb

Analysis

max time kernel
17s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
12-10-2024 02:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
Size

3.6MB
MD5

d836feab9d4bf3c6cf086bdc14724c8b
SHA1

c837cf7b181679a0081165e5fe4aa0eb94f748f8
SHA256

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
SHA512

8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad
SSDEEP

98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.systemservice

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.systemservice

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.systemservice

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4259

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
11bc9f31b024f5d36e3c290291ea04f4

SHA1
fec1aad1dd8a60810c202b6622eec56255fd568e

SHA256
68baba29010d4a21f0ebb8fc33721d9c1f608afe1638f55212dbc55ae588f5d2

SHA512
c4e562b9360d30f75659c84efeba6a4e26a7948447f46cf3dcd4784890ebf4ee41fd0e63ff40e96c01ca26e0f94040467960ade4637cd94453a2f9baa250346b

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
2b7e7ca06612e912f13b24b832c263ca

SHA1
7563d40a6cc8b371d2b008ead63db25494879b99

SHA256
cd95cbfb4fb37cf75e673ac818151d8f7ade3720af79b839badfdc0c060cf0af

SHA512
ab09e7ebb2bee595cdde4431cbe2475e53a2868d4eb438b76627082eb91a9b331ff80a6bf321da7a3551fa8fda83856d45197e828c375edcb49ad52d13884413

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
dfd8512688d86fb031c7d35e1ef79df6

SHA1
fe21242e42a2570e37ab3c91f0720cbb9bda3861

SHA256
a781d96aaf6e65d2bb317ebd35aa9f247ed4ce892ca646bd43a082db38024c5f

SHA512
20da9b54ad101657ab8901cd9588d8e7ad898aa3db9a039f646a119c0d43c98d7ebbd18e99132cd73c85d3f0ba1cab1e3134dba568c2313e484adaf92bcb7bd7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
1e5ce9523934ee906f13cfbad60d2f78

SHA1
dcbf2c98d59be142c36f4c8d2a3eaf47be55f42b

SHA256
6c57dc5fb542ad7433cfa7964b9940a091244aa03272fb635c0102e9e479d980

SHA512
cce4deb4ddda42f85d963e7ab7b8ffc9c57665ae4f1137ab3ff18ce553d830c5bf5fd8d5a15f77063e7b785ce98fa9f5c92789e6fe0930e8ac5c56ebf0a03973

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
ed601b2d7df61aec440f2805f3a02255

SHA1
62b3967b6a9957d4168cc9b1b5d7f5071e044ecb

SHA256
bf7f351c7cd1d9ac48f222a71c398081c083701d144367d47cffdc93eaa9cf91

SHA512
65e023ad6d548939495a28c5318e8493c2dff80cf66b6eaf35b46382a783c9f8e000b1db2900dfcd98ec35dd296f96aeab2627d3904e5957a4f066c5cde10e2c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2948f989d9bd86e0b7faa6b334d81d4f

SHA1
134022f008473c98fc10e31edd5b93147fa36ec4

SHA256
d706e9e5af826dcd6c9cb6b2d79db5b64c11abe283b0a0ee466023038b6680e8

SHA512
c6a717c66dac14441336fdee78e33aadfeef7cffb25a9fb1b1cab5d2c7c8c3a0d984415db05af5c6599ff7f8ffdbe7fdf2eee4daf54ad4de25cc7b632d703aa5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
84c4d3601e07b283b272b847471da180

SHA1
962c200d00e8a51f762e8a59d2639c2175815b89

SHA256
cb4539f283ed1efa2a3535b845f0acad70d8d380bac088f25edfa1bd5226c23d

SHA512
8e326a01825f994fa44e67e23261b637f1b262d51333aa2aab39a79f9a48bfd70af1adc0ebce5657cdaefba338c43f9e5c792dc4f252282232e1635162529738

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
0e9ddb0dfe1144e5a0a5baeabf865b0d

SHA1
10f30ada326e0613def79b159e3a927a7622d90a

SHA256
210dfc70a77412e9fec4b47b6ffbdb7b9f07bad0cb98034f5d107451fd8efeb5

SHA512
4962a32191922f2cbfcf633e64ebba21d01b15d5ac956de966058475397dd86d05fd47e3c09d5aaad2281f4932b97e90dfd3c67678c6e97838316febfbcbf869

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
5eea030d8d9c97e093c03cc94c043f05

SHA1
870838a1b1173a1b58a6c694c11a6dcf117fc64c

SHA256
6e08f96297e47dcc110c87c884d4b4a627a3d8c1d8422adbee897dbaff4a0d0f

SHA512
306b240c2fec5fc569dbfa8cf23e41200d5690c343ebb1f08e143aef94446f48e61907c54a82acd0dd0cc18e7b5e31d413184a13a5a4779258a268977692120b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
8166eb364349fd714618d742a05a63cd

SHA1
67b6eed2e65319cbbd84b8f2cb406079ee44d2b9

SHA256
b6222db03ef9d16f52aebb77e194c965969d94576151fb1658a1c9db628633a6

SHA512
cf055e39853347ca715d376faa518aafb06b39bfd2f0c9391780e4a2d275f1a7146a7be02ad793536701358ffff17fc72d368cf92fc722b72054dcbd1d46b4eb

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
799870063a0054bac05e1523f88b0b7e

SHA1
1b10d0a0fe732c1c73ac3d32a1b61be191842922

SHA256
bb59f81ca68fe6f25f0ce4cc88b73806936c617380d738df60793f667b5def6b

SHA512
c7e69b252453024dc2cf64986bfe797b85172cbfe1311ef20d3e5a26e064f01e4b01e0c151ea23eef733fb4bcf321fbcb71c4b5f345c20fc974e326fc974921d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
8e3fe6b82a17bf44ab43c158c8aa3dc9

SHA1
ff47a3ee0d85c80d03113fbf823295e4a1f8d831

SHA256
d73f95cd0875c3793d2ff2957a14434de87f73ffe7ec646fe9d22c9814fab00d

SHA512
3c4cc80a723b6d96678a207aec8e25624699be406f4d58fd80e030285011d078236a679ca266253489c31e2ad7e8f9cb132dcdf2b0abb01666086dcd3fdf98f7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
40b99f432a809dd660bcb9f0565d956d

SHA1
94c0096233b00e3b4ac841c131ace890410b7329

SHA256
9c9247ad1f29841a3c8aaf4388c883ca4cb791135ab104afda3e0f56307b48d7

SHA512
10a46fa3d60266598229c7690c19da3d7f4c4d0962ada0aa8bafe9b0bd8752cb4ee5014dfead2a8bf3674ded5c28c7c577109914fb500f4aa0a7c8cdc358d846

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2169263881454335397tmp

Filesize
90B

MD5
43a70297fccad8a3cfa0c597ce957eb1

SHA1
351a5420e7c04b06006df33afb3c6351ed501d2d

SHA256
85ddbe7caa43dcd0bf438e5f0862c6e5d2b050d5e121f5d88ae39f604ef8f6e0

SHA512
769b0fcd0998f49768108e9c18da46c243be1ce81669532fc50c12bed1bf5b18b360aed617aa3e571dda2fcad29b42ac3ebc9c833784544162121d6a37d03245

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2284951346077659163tmp

Filesize
556B

MD5
c29da862062b489e520659e458287466

SHA1
a87355c6d6f5677602fa4468640d166ae0737704

SHA256
e252890c1da2b0032a0b1c2c001f7405267a813ebbf78848513b7d49b7575ca0

SHA512
aa5f20fea284bab07ca81f5b8e040332e3ba4bc94ab2c448ac10e47e94d67c292a0175c8d8e5f93234c56c82488f0dda0a5e1d55dd8facd8738b67b7d475e7a4

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
53e9f95b6d646203a1485c85761680f7

SHA1
d89eb40b8c3b0445b055f3a34dacd17a70e1147e

SHA256
dd42fca2eb8455c8b37d8f6f66b32394c2e9514966683aae1c8031959786ef8c

SHA512
c4beb9cac8d1cdb66d545f3353ed4e1f665cec2adf9bdadcf75744847d7e7efbd21807ea03960298fe60133af5ab412b7b936efd947163d2b793290e0026262b

Download Submit