92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
16s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
18-10-2024 02:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.systemservice

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.systemservice

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.systemservice

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4261

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
c781c48cc1d45f758c380f8cdcf43d67

SHA1
262a7ef66f0d37b6a60f6115efcf79beb9f334aa

SHA256
7499be3bbc12d7a96b57dfa9c310e82af5d9b2804bb5347b7339813915b7ecf2

SHA512
08cfb825a8da838fa984323db96a617b5dcf9872891ada3b0f6a67a8033256bdd073d72e9998c2ac33af2d395ebc253932ea787932a2cf5f9e5d950dac7e0975

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
f8c9c68f1617ce235ae55a211abcd900

SHA1
c0846a6799c99cb1ab75a4f37695c909a0461f87

SHA256
28d6b33ecee4753a78cde893abedae8dd8a4f763a3555b08a4b138b54fb593e2

SHA512
53d3a6f62b0744317a971ac8be8628246a8fce5397e424628e8ffa00ff0962820d8138c3377abcf686c7a3ef3d925728e68d9ae72745c6720cb3907251c01021

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
99619586491c403c997ce92d032e1de4

SHA1
cf6cbeeb4d849ac8bb129a1ba6b093b40c0dba48

SHA256
bd39b01b93f99c95684ae489f7837d748b067fa56e1db0201d582218a3041857

SHA512
8031ca9c8699600127016fb33c187f91dc76eae9f1229000249cf7289d008602af78b659f914b1fd7a3769f60d15935b5b505058c322b567527dbd96ff1393c5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
aa46b3fd8a209fbb02452ba8ae66f39c

SHA1
e2307d06cae2506ebfac9773869e3fefb0be1b2c

SHA256
10acd9772290713dd8520fa68b8236946364dc1c69c95b61a4ff1b658847dccb

SHA512
4198782cedfb4da5fb4ec406d4cd6201383e42e1917e95cda4631b102290ff4fbc1cb0246da31130e0cb1b3b25af3d36f9c582468191fd0c4ca723d651b757bb

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
1a77c4b6d8b8663aad0e354706f8fdf4

SHA1
e430af588df25b8408b9c3b5fa36bcd81d29e275

SHA256
77a10b4745c1d648af5d8dd6257667a6438806530f3e6a769da44e5855d7ec1d

SHA512
07b68fe9864e4ceba869999ab4ff8667476f80e584b0734295891ea239345b80237b733c7c2b6d7cbe202e7a4076593654d0b321f8f23cc9632302f003292fef

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e959e92e4ed9b77aa636762348e39d51

SHA1
d4d5082068125668434c06201f9484270324cbcc

SHA256
e4f0ecb3920563f42db71bb9d5e8fb84ae1f81893e5afb70952e59f0d1613dc8

SHA512
02f8cff78ea6316365b4c209f51f532c321ddce5339228ccbaf0484159a7f8b55db28ae826a63b4ff3506b6cf7a2f80284aad76e28cb9a75030416a1c3212133

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
69a622933c3893b3d0bfcefb017a5309

SHA1
b354213986fde1e9ae965232b491b150fdc5e78e

SHA256
090ebcf5d30c2590b287a442b7ecf5b27e6807cb7ceb88fd8040e86894c0aadb

SHA512
b2c3ba60bc6908ab2f71942b2feaf8466bba71531434283aa199cfc8e82ca177d27029f3d1e3f8c6100c554734e1eaa739b80120b6397c9270d36ddc3dfefedf

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
271593973f86bc4f2872ff3a604c6831

SHA1
6f0ee59ab9c538bdbc5d88794038fd3405a7c30b

SHA256
33f0c4c2ebf17049019c648f413955cf18404c5c50f7a57f53c2d5117becf54c

SHA512
f378bc5c567e0097853c5f498599a344139995edbdfe7ef23efc782bc93c40cb45760911188469252092c084e43c9070d1ed0dd881cce9d396a7ce75a7e29c79

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
60233326ad5d23f82088bed18fa769b4

SHA1
21232c17ba54bd4056f325d3eb3b4565b2062095

SHA256
abf177366c59fc65eeb3bc290baa959914cc538f0613b2b5b2e86b4349173b73

SHA512
de7976e575ae180307dd678dbde9d31b833d7fc8690be13431db22c32017679b762b784704f8cb9cb3ccb7056e45a4c075db1310da0b3e97c720ae898de162a3

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
f5913d40c0b44aebdc8607a1ab563efc

SHA1
687ce548d6683c7f1148bc6bb8e20edea1eb8424

SHA256
e8e79e635e1545f2c759b87a194e135c475a713984d6e9ee120e39cd71fe1c98

SHA512
e363061f859abded6a0afc1e30ac19f2397b7d5c96d8a2ba51266101faf14530e6e326019caa25423eedb8ce080303664d18a58a6ea39fc32e68a66c1936ba97

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
fe2a0f5359190cd37aeaae9219f5de5b

SHA1
b68b01c47386cf9b8dadfc8e55f4cb9307f7bd9c

SHA256
b68a2e3226bc84f4f4ee8221b9609773a880796ad2601ea0fdbd40d0a9bfb112

SHA512
db89e916118a22c1a90e903b65c262057acc0ddf4bc310a4acae3c67d01a6fd0b2e4830f7918d943579abee05d5924ba3c8d39a6533b95d2bf296c564ac24bb1

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
668dcd4a2b0ec3d8d6d898334cad5105

SHA1
29180fca94f031f36e75628c34c69171e20a1fa4

SHA256
61be54e5be21b8460672a25e4f96e0fcf74fc08087744898d96c79364d198375

SHA512
c7f78e5efc8fd7a318c457508875da531de803e19692b830226735a3040182c17f425cce6400c64e57983170869236060f4b7682412c4baa97ded4a9c73172a5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
bca40b95b0272634b6fdb1d8c75cda27

SHA1
ee1ed22c53f2143a75893d2725d2e48a285a3bfd

SHA256
85de2f3e51babd3459a5ada191f84baee1afcf6bb933d1cdaf95cf3f35bdb671

SHA512
5f79a2a3bd221562a1f06ce07e0539408c730f5ff97252cc026f74cd9233072e252cd8faaa4cc3c493a6662a723797494abc7f0263335381ebf0ef809694cd4b

Download Submit
/data/data/com.systemservice/files/PersistedInstallation1829501609025560233tmp

Filesize
556B

MD5
408d014b2a2d866685fae5eae1fff190

SHA1
01f6bb9373cb37204ecbdf7d18feeb18568b9a1d

SHA256
07d00c15753489ef58f70d30ca99c9aaef40e391e770050776ea70ccda7ea4d8

SHA512
0a48ed5ac1153f22226985c704ebdf754b2cf1461eccea9dd59bcd45c80931394f7515e0be7a604051bc17afdf87c1a39e45236d232414d9a0fd21e8f6f8729f

Download Submit
/data/data/com.systemservice/files/PersistedInstallation5536930490543600249tmp

Filesize
90B

MD5
2f4dfb6a0f0085db058248baa6864ae3

SHA1
894a5d218ecfb9ff22e3744fea57fb1faedd8c67

SHA256
1571c17f287b96933d26c81f2525edd80cfe07d9225940beedcd69439f0c2562

SHA512
9051d2feae952130e782f938457cdfa5823f2789835160dabbe4909087cc3dbd25b0b9bd70f60c9c22f0190e921c405fdcc04a62f7b2fe9b6de181e06ff1eea7

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
1942035210fe6278f05e380cbb9e0afd

SHA1
a107a42977780757dc4385cb0de80f85b57ade9e

SHA256
b242981b3d7b31722e0016c1481794ff2084e7254dcb0427ca923955a366500a

SHA512
d662fb83f3a0c25574b0f2d93e47e42347ef11116eac3cc46bdac04728975c8923e6bb536d26bdc7925c3c55d31da224c16f686ebf4585a06d85b16e511a8e08

Download Submit