5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb

Analysis

max time kernel
17s
max time network
139s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
16-10-2024 02:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
Size

3.6MB
MD5

d836feab9d4bf3c6cf086bdc14724c8b
SHA1

c837cf7b181679a0081165e5fe4aa0eb94f748f8
SHA256

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
SHA512

8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad
SSDEEP

98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.systemservice

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.systemservice

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.systemservice

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4313

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
b8d62c908c7325a94481feeecaab98c8

SHA1
8cd276686d8739ec1e6e35b2f7476ebaab17e8da

SHA256
b3ab85ab9ff857c0da36dd31647d10d5e79508ec8f7c56d07d01ba87394d4bc7

SHA512
d5eb2c32d20ebdc53920195f7cb8654437e6f495c59c54e1d5bfec2c7b970f57d3e52e9e990abd0321a8bc2358f776c6953ede129d2f60a9df62839287e991af

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
edf47367d2ad196891555ff2daa49c43

SHA1
4014a46659373a125c3b8a9d93c453d3b0169ded

SHA256
219d6d5e0b742e29c70065efd1ddfd4ac354dca6b8f55a8a4e86da7d31476821

SHA512
0e96fa34a311ed38785adc643f27156704a2c35e1db351197c387b86462b889e72cd779c253878427f91ae28334cc2f2ae98baae34aa873890f0ea03d48b088f

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
300ebed59220ca1561897d7b87e05881

SHA1
4a9258e590004a69cb14163574d82fa00c3215fd

SHA256
03328dd26ba407b92bfa5b55fb99845dea88cd69b83f2332c7c0c3cb204e6654

SHA512
7f7c6e3efa57b94afae2eae9c9bf72026948180c4951006524d5b3e9b7900f9be0d1f8ba59d7892e19210bc6433d182736b7c500c4f2351015b71678071df852

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d39c44b455d9c6ac63aa76ae6e87015b

SHA1
b933fee6ddc18b9f5a35b937c35e670a201a23f1

SHA256
383809fb8f284f08882c7f393a8abe252aa0410fe2d45d1a934d862a6c1d168b

SHA512
276e34f3a0a77722db040a94e285776a1f13e3ef54abd68d857c36e9cb10f1413342731f0e07efe73f67600d66019d768bc9e6aa48931a0a8fde4bf01dad2208

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e60dc03bc159a18aa5e707ace83d05b8

SHA1
5c175e93dda6eb0660c912e1ab682097ee4a237a

SHA256
796d1cb15905378db68ab7547c0444e1d9fd6f8cbb3c9770a1281b6b186233cc

SHA512
bac091ed91bb14323d11a6db8d4956d5b66f9a391e4f432dd1b96555e0670c0a8f2e4ecacba0b33ac4a9d3c286b4cc037d09f25f4c783e1da46cc918ae81b5bc

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a05f6a71c71bf355f83c62c7ea6ee481

SHA1
df806d797273bcc433776e23d3a5bf6b24d86187

SHA256
126c356aaee25a4130774ac488c44e2223b1a257200434604b4a286d29511092

SHA512
28d716871c25b1f98006e5c90263220af179b14f93fada61ca7013d9d270203959cc8dc56290b77382d5db416de7ed3d1a657cf9043f2c6e6449bddcb1679992

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
12a80e25b8d7d34c7ba81de6d85ad5e8

SHA1
b6281ba2c1a69994912232235ac4597010413c1b

SHA256
871bf7c3f670e49903875a720069f053c80243746c90c91d42b2125160653588

SHA512
d32f0a4d1d951b5c9533ebaeabe04ab52b2d67ab2c1ced2e17f435f36245f1ba60a398ad80411927993d9e4eeff4b957230d553da4720f919dfa75e988f2432e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
547a1382de527520d3e1ce9c16bcef58

SHA1
00c93235d1424fb3814b3a49a0dadfb6dcbf54dd

SHA256
7084d382e111c222f27ddf24666e3b08d3ce11ba60690defa3e3beb3152842c3

SHA512
f420076226c70e59a47c7b5a9ddb57040ad3c33667e944e5bee3f547aa6038b88ffd6b1a23ecebc31df1874254c194016a9392f0c34e3460130a21cccbb232f8

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
2e36050cb8e3cc0eff1ea795cd88d0e4

SHA1
8117e874bb7b989bf426212f9bd1ac6fdaaafe14

SHA256
fa71bafc210e211a15854b636ae15614a2c2e1a3956102feef07a31ad03b33ac

SHA512
d2e5ee116ece790da4bfddc5bcfd63954fc631ba14cd1ed1929d4edda816381b0bcf80a885961dee060a1d09fbafc1104cd9c3b87c3d1f2b01668bcf9cf4eba3

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
8033f506c675f2ae11b42a3b8d15e77c

SHA1
b1b08931785433855b2172a484144fbb8acc6100

SHA256
d4d0a1babeae1b29a43ab6b2bacce648d49cea6525474d89e990d667cf163595

SHA512
abeb56d1d6f28a6975e2b667bef7687430fe69605a7dcfdb92a8d15dbaa4c58f00fe7ddc0788be11748dc4621ad0a0bba667d67a4aeea6b02d0241575e21b89c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
ab13091f36cdc0d2c1e52380f7e7fff1

SHA1
1ba186af076804cfa1adaba01e5aa7d1a8bab51a

SHA256
0a7eaed322660c2987f5ae4a9a72765c3494218d29ee31690bde2f546820ed78

SHA512
c73bcab8f80c33b8698965347ec9e0ce474f375caa3ba0ebe18bf02d8cd8a55db117c81e6a1ae5c08f43e20cf7dc521cf9c15e7d4cd041da4000f667d4528afe

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e72cb5cb5c5bbe03f227f81ce83b1fa3

SHA1
8aa419f656026309cbf0c068a2b1889466a9546f

SHA256
5f68bdd6cbf2f996ff52e44f6fda7beceb3b59345ba394a531cce1757c707e49

SHA512
a3bc1fc5b53ffdbf57ed11cb88ff852f149891a37be5eb66de2855e2cd016665b792617704b82c279d7ebfcc63b96abf5f48aff328b6747381604643c6fa88a2

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
96204f295d9c8987766b7567f6a1dd27

SHA1
afe6d9bb891eedf89c091d319db0c9196ffab364

SHA256
bb22ad71d7af979afe068f5b545327e4ea028d7663e7ea840d89fc255af96737

SHA512
e272f03a8a105d29f282bf832f80665970f3212a8fa7d0c5352f37f21c57f1d9f4aa8e44e3abd53cde2d4e8e63db734be8d15ae9bc064c6412a3116ec040fb1d

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2874503986728442144tmp

Filesize
554B

MD5
260bc26445a5925b616e498de60cff2f

SHA1
105ba3a316b5dbdef6126659ed0d7ea8b00b6b1d

SHA256
1406164aa946e190d776e46482538da8817770209e7f49248004c4429e0aa6f5

SHA512
7d638fc49172da2f4392d93dd28f1732e9d26a9622c6572c902d5bf38bf23b9a14ff6188063306ecdc139060cc09db16a443a4bb354586dba0737287f2b5cf3f

Download Submit
/data/data/com.systemservice/files/PersistedInstallation4155585441276477415tmp

Filesize
90B

MD5
715939eccb2258d979384dc632a12924

SHA1
8f3ccc7c6a82f89c13beb0a6f382a125baf38838

SHA256
126ce4a00813c7b673587f47c9477ad6c8b096b3c92f0f2b4c446347a76c31c1

SHA512
169993a69765d7c59722d38837d9d356380450b6e750e29de53cf766682d4a520cde8e5ce28d5614303a2144968bf81fe2ad5447ae67173adbbf94f51c79f84d

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
8c7db57becacfb3b88e2cc3c32d1396e

SHA1
5043bf319b90807b1abec2335f89daa8f86eede5

SHA256
236dcbfde0d27bb5587d64016d58f238f650a8706ce559214dc471f3fef7640a

SHA512
8a189b6a2a30914fd9bb296a570a9729a9ff637f8ca4256874080f74d444a6d3d4d1febed64b323a0682ce12dbbf3d560db089c23756c6743a581a5b7407acdf

Download Submit