5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb

Analysis

max time kernel
16s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
13-10-2024 02:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
Size

3.6MB
MD5

d836feab9d4bf3c6cf086bdc14724c8b
SHA1

c837cf7b181679a0081165e5fe4aa0eb94f748f8
SHA256

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
SHA512

8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad
SSDEEP

98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4254

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
5bfc0a9396a4959569060ff7dbef287c

SHA1
73cacb09e8dfd412853a9cb73f0d753ce8670a1f

SHA256
58e2aa8907e53c161c07ad6bb23876629168b8713a967d1b9cd24ef31450fb19

SHA512
a72c5add8dab136dad36e01aeb38e49a1b805804849bf21aa7feab3b4b7285edd8e73bf48b30bf2b072c8818181679f7a84add42be583518cabe6bc27093d0a4

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
b0cdcdcc26c052af7f8732a391c3f4c3

SHA1
adcd38ac4aa248ea244607ca46664658222e0012

SHA256
c95a56d07b4b37abd081dfe9f71bf1bd32557de9c0f8642e16b358fd9b8e7af4

SHA512
a3d30869346bf87c18e46789e28e09cd502b929020eed5e63ea306367229a00b43f9828329c685767f758a795505220eaeccdb704663abaf9a86661660d33b81

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
abaf06f9723e94412c73dd181ea81dde

SHA1
0ba81b01bbea2dc801925c8797392fd39e614baf

SHA256
fc3991e1a13198baa69d2ecc58c7de39b1fac618cc9286af3024a472fd0c1989

SHA512
fbb72708f1fee9d83b9298a670f8320b08be386d5d49b4a4c4e9d0b92de207371abee3d6285f6a17b36c1952d2a9fa262b614d57897a29e06f17c994e8610a4e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
c608f40cb68562e4f8814829d9cc74ba

SHA1
fb79a3c9bbb742f7c96383de34e0e05c33cf5b52

SHA256
1ddc8a690fd100a1afd9caebe4099012b89723265a2eeef1093a24b04073b7a3

SHA512
5bf6b0af6225c1fea9790a45200a65ea3e1cf6790c2ed5aad7709d914e3ccbfff84dab67f815df66c2cad84e0381d3335133a4f32ba73d6455ab847dcf442eeb

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5e0902c6d62c05409a668a25377889dd

SHA1
2ea42fdb64541542097b5815fccc51ae1c280eff

SHA256
5d8ce20e69f8db98bf22607885c00f5032102f364a0ef0d37e1d659073121e4b

SHA512
63ad8424468a6f7d3990eef2fb051297a2f9e43a854517e1b7a59890ea692f6cc8bbd6251a3c4d54e77f6636eb7d9ac7634e80078e394ee0ab0581a590457c7d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
4883393f85c06817ae418df883066dd1

SHA1
4219a8a9cf3be6420d8abab7040b1dc27b80d7a0

SHA256
31733f370732d0594194fd1dbc5c4675634380cc113cb35109b96a62580e4ef6

SHA512
460c16d950d156475e88e8ae61d488e217c45c0ae505734756b6288d6e2ea23f3885093f0a28f5788be05953679ec4a1c1f1488cea914bd24e1ed03a93d8e160

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
90a9224e6801d13a21e0109a560d6012

SHA1
7c82752647cbe00808475414631058b1dbac139d

SHA256
86b3f5b04b40530e4d746d4afb120cf8b9dd92f2122694df9313e304fd258c73

SHA512
dfc13fac90972451f84067ef71329e8c6205fdf17a08cfe69408aff45d581469e8d34d02d154db0373076e97c9ccbe45299130046078d43526693ced74e7bbdf

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
b4534c40e14d5472770400649a62b341

SHA1
45f4e3a74e6a3eb563f50a5ebecd3561d3ecbbca

SHA256
d90f9f2ac22619744c9a91a1e1103f0822209b3a3f709d3b7a9304778caeb74e

SHA512
7e75e56076e1a4b792dee9019c7805ed50fa0fbd2132286e10c42852c3ab5ec359bcb8561705a20446c73eb37bb397e6b4cedaa7b4e07ef7319a99f6325de157

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
07b826f9b56b3c424e4140ad4e3f6e48

SHA1
328a3cdeee215a4e1858a53bf32c2f21913a348d

SHA256
c378129b332f5a8ec09a0d85d0849a0c7bfde9cbbfa25c9fd99e87cb055c9ded

SHA512
521eab2855fd7da905805cf86c94db155a97ecf6c842b884d6fa5f28d75aee3d8f174bfa1331d9e4c92202ac0c1eb5bc29eddb632739aa68013a85e4cdc0c443

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
931dee0006e489644f62ae977772d765

SHA1
45ae2988bb5940fc1f488cd4c3ff0bf3226d980c

SHA256
13cac26ebab477407b43b2f2719ecb1faa570506f121b1f473e43466da079936

SHA512
0a95eb21f47ec56acffc30d9d31141a720f3d59c3a3ed49802b61f6e8a96ac85a608b36a851efb160385267e638ccbd7f6256ee38c963d986739cd78bc6bf478

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
fe1bedf0559c220d95aa77e506e70526

SHA1
4a46f9f78396310bfad84c7f091efadccc64061b

SHA256
2c5b7da1fa837aa0228712de89201f8a321c23e6e0efb1428ba548f6738a6729

SHA512
bde6af5ca5937531463058d7c7e250419294a1e123ce07ba07a6bbd1da65f7d18b00aa82a255d5fc91f0f8d75f4cad0500be1173b5597d1229faade7356bce14

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
40d4f102bd154494dc17d16333315abf

SHA1
bd63bbb72458df6869a7ef8b0655c01b2a07f67e

SHA256
cff9b0519a09038bfafa6c43a2f6ff2b03f1a57e522e44f6e5d3340e8c561d49

SHA512
d2a1a053b5a6a1183312405e749ec502b93b1fd8c0982faba184368b9c4583b5e2ffcc3df997d89efca957144890667154fa4213122addfccbf3bbd1fef9b260

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
135e1dceed86398375bd7c934b5f3053

SHA1
be1a877f4535835e6b28a9e06a841c4a5a973755

SHA256
3ca6d16042efe8e84d9a4b9b6d7ff408b7ad5bc94c1cfd635080b3398a4ee084

SHA512
89f5f0cece8d662e3cb4d2a2351e23698fa3ffdc42bfe8142cf88f960fb47f2293799b67121c225c9d1ae5580c0f6ace7324d3f3ff2501b12c7670b493849774

Download Submit
/data/data/com.systemservice/files/PersistedInstallation120682199981712966tmp

Filesize
556B

MD5
78647d7f728b918d089351ed9eace7b6

SHA1
a7025251c89f428a36d0caead74e1330abd0ac12

SHA256
66493f73f2d2cc5f90880f11b4c8c17d243f5bc43352a386bb3b1c8cd9ba901c

SHA512
e4f003bc4562dbee00deea9c013f93765eb49751da1b9f7fab90224cf61daa5a6b1f3bdaee030b01932a0dcec5b8515afd97d6778080c14b2afdf1139c2eff33

Download Submit
/data/data/com.systemservice/files/PersistedInstallation7752570067620124606tmp

Filesize
90B

MD5
da0406b8f7f2c5b77985476295266a52

SHA1
5e52ee92a0ae9f955aefa52ad01707a33aef5677

SHA256
168c71c6adfc2509c15af921b0727ea6505f58353e71dad9b38e037c4f41f79f

SHA512
879d7644342ecdfb5b2ef733554eb0796981850ccc56866c63f73fdf4255212b088cafa2a848529603c21324c1bcd3069bb164e26e68e30d20bd5dca4cb41956

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
da6f3075d20a578089419bdba3708886

SHA1
c3cb908bab36834084881a6488fe9422084e2f1e

SHA256
a98a3c40008fc29f0b8cb31b09fc7c677b9d096fe9c941a30e49bfeffbbc17e7

SHA512
b88189834f518670b5b8494408e5c61657cc716bdf9078ddd09b99747d03fdb4e7e33cadf4c2b8f63f2d9e3d3546f5f349cd92ad5f7488f62eefc3cff9f52a02

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads