92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
19-10-2024 02:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.systemservice

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.systemservice

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.systemservice

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4262

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
22f0eeae58305bfbaa3a25816ac58bff

SHA1
7e81643d9d811e7b47d2c18e0f1a436e96996628

SHA256
ffe640cf2bbb06959fdf9730b6e4e5129bb237623045fdde9676193312a3d5da

SHA512
77d9ec333c71f90bf7ce81dba62443faa4168238ba098ab139032cb141a18d997cea29200e830b8b1d875904bf4f2e4be1a27ff42120a1e9d7335cd44eff8962

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
ead1b80b296ce9f8c3ee239142a82d1f

SHA1
5ed965ead5788402adfa5124e414e467c59cd331

SHA256
95d31a42c195a4b24f7980ef02fc6ed6d8228438d1a620c937d497b92af2b89f

SHA512
2bf923b26580857cab4df959cb38ab2c002f96bfea2f7b285aa71a8c9b809483a22681f0724de33553b7ef638a7c1add5d4cc453bb715752cca8c43051715be1

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
0d7ea9d008f8c0c1930b821493fa249a

SHA1
bc612740950be5ac18f70c00059a4966502dcc6f

SHA256
4eec7fa04d6ddf127f1d4dc66ebcf03f6358690ca535f5c2709d9a40fbb16d3f

SHA512
db121db4b53ce0d9d6090f6449e758d455be045e9c3379a4a873704c4a1ecb3fe93978e2f2ab925ace252cecd3e8acc9e07f837f6e98ac0b38bc2e6d586fc30c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
67fe57f4c243ddb38a7f0634fbefc015

SHA1
c0d4f738ac89d3333341f5469150366910487b16

SHA256
69bbdab95e541a57444d852c0f6afe0d29197406b958baccc19644218db1312b

SHA512
2f5af11d5bb19ef21e71c04f9c70f4cf9b8f35a49320791a197f779202cb26f2be70b541be58f72892f0b4d2049ae5ccfbd41297e06ec56be5640145244b2688

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
fb3899a2e1eca575f2a96386626698e1

SHA1
580ed1c6e0c37d336c3fc275673a8cd8f8421709

SHA256
c2d2469d9370146c18116c8dfca9daa70fd04d622919bd75e5fd071f7168cbbd

SHA512
5632db120079e8700a1fa7b926c5726aaf5d034c9554a63473293828a9e0d683334e628767e864ac53f124dc3cd52f8fac8ea1ab46e12b864cae57da520f9a1d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
0d251cb1c8e7512cea94b7468c41f371

SHA1
55343db5eeffc8f3404f5c2709ceb4cec079f348

SHA256
2788fd1e00605f129fac12fd85c46e08e458d804559e0badffcb0ec544d0a2e5

SHA512
4dd733f9b0b86ec98297bb37c58e7f3e5d74c5d1a6fab5a5447f9264fe18b9c2cb889c724d0cd80135996e2020719f070266be681327a216da61136593ab1463

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
c6581e32ee97dd0c6db66a6192634062

SHA1
e2f6a04d20ab17d84660c8d545006ad1c9ba5232

SHA256
37933d1f091f0f4451192477ce6aa005321267a8e3ee539340a6241d8bb8d33e

SHA512
be496718d4fdd012d9604d4a8c80c64f285d9d1a93dd3bc03d97a23e866fdcc7f632da27b84321cfa05f9a4d84e9028ef08afbcde79dbbd69a040696f9f7270e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
e11947c8e74c689b4982865ce61a93e1

SHA1
9d99837eff2a672c8d107850e610adeada4e8a7d

SHA256
5ce630954a3922e7bd72f960058349c8e79130306a0f466ec4324dc6d47bcc9f

SHA512
4aa41829b2d07e39d8b9305aa677bec784140013f9d3bedeb19a8237404b23b8a02c6035cafa728ac0791119329c4f780ed3659cbcbeb8ac882438f8e621a428

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
21fa98f682d1ca9346c3fd72a17c15a5

SHA1
8d7567686313bce3fb8aa602eed061760964fb40

SHA256
e1b8b56749ebc70e78f540e11fff618f6101e3be741ba47d86cb8fd7bf731dfa

SHA512
09ab25409fc0bc8ba39f035b102084e67b76d0d53b95f5284f95c5e1fbb10e5548ac247980ab32a0e0377ef6f2d37a5f95125c2bdd2153695f58ecaffaba10f3

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
7edb14cc92a31553b37d9315cd9cf677

SHA1
3a2a3f15dec14cc616d193235a9e0a956d576bcc

SHA256
6308a605b7de7647d21830a1ca330d123c81e85625aec678fec4de99e6e32b04

SHA512
860dd622707fae7dd1536dfeed4b754fe71be1f1edb53b0a168a2262bf820d31e016ad153f05f62313869364b200616a14181e212f3b21fe7ec91134014e2529

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
fc6184ad3f8284bcdefc0255b80c2491

SHA1
1b5d28c87f93e1d57345d680c6c66f7dabf59c85

SHA256
628d0874392d5245967a9be11a649fad65cc835f7e20c42def69e3841cbce78f

SHA512
1ce7c065609cb73acc63d5fb02b34375922723e47e67cff50b4c16df9ffe66b3ee95edfa8b5dd509536ffc17d728144608fb8f08ebe8a56bf1c7e5b655668a5e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
5d53878f9edc2402c114084532d16b6a

SHA1
6223f5019a96842f7359aee4f7f29d7f4f2ea2d9

SHA256
2fc8d05c0ce6e726f7d75771f507a92066fd0b892d1ed063404f60ba846306dc

SHA512
9f073d1ce544cec549d7b8f0583eeff98f1370b8db6fab6803fee13c5cbd9e0c4da2a061e7ab71e881ac2e88a310afab7d49acf22dd6c5b7312543d03f59a292

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
ffbcfd7d14e65706eeaa6b8b45c26b15

SHA1
e7e9b925d31a714ca2716cf265d62737175ee67d

SHA256
d45504bddc27613086733a28aa30eb07ea6f044be294f8d4a43dc11929752f1d

SHA512
4e495467255959c1e86e11a7e8c283d894ecc57ebcbfe143620b9a1e04f1e02756df228bac4eefe1d03a10e82f6b9f9f4a9a46952eac9018ecce00a54014c8aa

Download Submit
/data/data/com.systemservice/files/PersistedInstallation1912952288307633317tmp

Filesize
555B

MD5
2dfe34e5e7298c03ba12e6f7ec1345a8

SHA1
7d2def3b03ba7b9ee14aae2c492ca63645803171

SHA256
80edeb789566b46d9c951264c814a308b71b26a44fcf5ed8d0706bc1118bfda7

SHA512
d2e74a722468582e2ef90be495bc9417c3bd9944e809b207b81dedebd266ce899888ce51e653357387bdad85082aa80f4a0fef3a33c2a3bf032a1393dc95a5a1

Download Submit
/data/data/com.systemservice/files/PersistedInstallation8734162226712407371tmp

Filesize
90B

MD5
771c26e2db76bf90176855016b264f1a

SHA1
95c59b10f7acd18d5667faadac247a4a15e58bd8

SHA256
2452974993e9bb897c65c7a19187724f072565b34d7979cbe660a1e1acac1140

SHA512
39adf7cd6e6f3657670b4102000029dec4685d42d6ab147ca841518f9196dd97c9182eda035897f5a171997eaf702a3b1107d92d4d6e856136f8d3fad7a1ce5f

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
f79c6d7af7e0f23b7f8a5f85068dd15b

SHA1
10b882647eee68c6721e974f2815629c9d3ed822

SHA256
fe52e543deee7266079c5a846a5a2af0290bd7a790dba0d85e2b90ae8400de9f

SHA512
7e4bc56b783942ad7f72488af75a77504c46e71f69b475967cecbe1dba7fec4af2d06a2478a838065875602195ca4e7a1829055aa28fd2254fc0bf48091f0429

Download Submit