92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
16s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
31-10-2024 02:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.systemservice

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.systemservice

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.systemservice

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4250

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
2370441b236247f1668d58f9456f5e9b

SHA1
14802425abf904e23365c7001c57201f3760b174

SHA256
77af48bdc722966b3d66aea03d7c8e07d6c33d548a181aff5b7030ee2444a392

SHA512
d76d35ba6ccd2e9aeb3f364f918669228b87c09f6fd471db19432c665ec1489db330a778a098d0b651a789831069172df53a53a7564878e503bb66a2bb59bedd

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
4b7d300caf0335f27cb0c4eb27cdef0a

SHA1
c6e0feca4106388498a93b6ad34ad7b14a6a8442

SHA256
db919dd4137ed43abfd334dddf9e0df6becf59d59d4424efb48d7275665f7505

SHA512
7a49d5803e0872cdb2531fd5d909debed2015a8202ec6425cd9da7e13ef51ecb58375fbf8b750c635a260dac15a79e832486107b6648e576081d092d8a657fd3

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
af9156d5e76060c8ba8d2d8ce38bd797

SHA1
1936ec4a8e58b2f76abd0e01b7a2ecdc00f6b5b5

SHA256
d80208f45c38d1f3e5aba3d91b17a078151e11be6b836f7d929ad733143d0dcf

SHA512
80f2ab1f756f497b752783e27a67bd8d97fce56bc1416ac4480fc867eb8143ce40eb39658e1d96886040a21a1d15f1a04ffe6b404aebbf8741cc4cfb1c5bf7e8

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
339d8a11a1055d99dec096cd9e2e6057

SHA1
d489539c3ad9ed1b2bd1f75498beb59eb8f66dd6

SHA256
2e5a8ecc1c4756c4a1775fb87270559fcac8dab666f7ad40052f69883c6e2495

SHA512
a7e105a2082720e0e24bd107941ca04516a3a1b2e0efd9bd1eae07f4ca26730ea20f06daf01efbe20897e1076327c57c0ce9a34f8fb04163cdec9eaf221def5e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
372558299911032b5b5444d29567f499

SHA1
4bbeb4e7f3154567f0dcff52e57cd2f00d5486d3

SHA256
30386649e847b4cb59b1c8cedf88deb5cd045f93b5ec8c72c307ca0579a7cdc1

SHA512
8a7b98a45ffc5280b4e305d0d23e7598ec133790f58004f923e2cc874af0b8666b52fbe613ccd88fa06d9924182ff73dead065c6b9249e7a1b3a269f7277273e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a786158b44e0e43518cdcd4fa25b6d1e

SHA1
3c7ce3cce8725e9ea8d2a737f9ac83cd4daa6009

SHA256
9e95c4046d883f812211c269f6d2fce2751a1a8f4b03c9345100d4ba47fb85e6

SHA512
5835375efd5eebfa4dc708d7543ae819b525dcbbe1cd189530e44c542865cf9e460c153de79fe91cc2091f006baf2cf624792bbc37f043ebd6c11020fab30056

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
fdf8b4f43dccec535b009fc85f23a86f

SHA1
2e8702516a1aa9f6921e58fed35917f1dd051512

SHA256
221a032b8ec3d8583cac842891735ea75ed0d8b9dea76a5225e1fe9dd6115ed2

SHA512
76d2c180e90056b5d4b8f9aea37a6de9d11b64a01285f60e42e3a58f0f65e220c0ac82aa5610115d9d85eb560addba49427087b3d65b513fa9753eabea1332ab

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
78928cf4203a858d12af2b154252c051

SHA1
c9e808306e5d542e65e681ef41a2c22a5f78e402

SHA256
2fbdb4fcee175f98ff9e459d80a3ea705050e89401da848768e004beedeb05ec

SHA512
fd24f56ec130de4fb5dbb68d6ccb1de6b0be3bbf37777243c3fad7560b5d309d558d24f764311f9c1722aac74e8824428eb5a63ee1e0437fa32abeb3403c6bb7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
1e329c8f9a625703b6438b7a03d03079

SHA1
c20981f444a5f46fc0322d454bcec254bb7e9f92

SHA256
90f3da56caed115a56b33e326a25bd3221ff517ccd16e3423aef4a0601f974a1

SHA512
797058be34df687504fd05ca7987a0a11c4bdaecc0767c2829915eb2c707346ce2439fe3eaa2747bc91b382dac729a1f8f571a13707eefc9b560f45862e85c9a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
77a668d240b33fa70a8478e16f30807c

SHA1
703ad647af761e4dd549bb83079d87592957d99f

SHA256
8a76289db92f3dfecbc791e3cc8fa36485b578570d09c1ea042576992b08e8c7

SHA512
501a8594ef0f2b70a9ef6f0791bb161225244d3d3f14ea0c78b35b625b7bf3a4eab9cdcb7f09f662362b2e265281fded6842c319201558b7a340cd7060b35561

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
010adc9b1e5e5828028b5bca2ff7f875

SHA1
f70bda89d57d54a4a827f2728d58fbeeaf113761

SHA256
07f109cb9449c19c05574f1cfee98e86e2527c289437b6082274847779d2ea1b

SHA512
74fab29e081e807f906d7e455afb49d12bebee0dfee53d0ac3006702186b15fbeade8dcdef8985860306204d30a7ca9ec207d27984c7879aa8788e5e5e0416c4

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
1cce5bc922eed1f5f7681b4fe83684b3

SHA1
35cffb85b2994bf90a54b597d24ebf0d4e7cf90b

SHA256
e35ec0a7f591d3d14293ab2a87490ec8e3b8279cbf24f60eab564f55a43eb98d

SHA512
5dc90b3aafb4693a84af349d22b66b0876a34bef5bdfdec71890a774bc93bfd906fc764bd194bb8e5a8d09bb36463b78d786a826317c5780236c4cd50ec4c84e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
fde559c3afa940b72fef9aa5e0be1342

SHA1
d04e929b38e91cdfbab752675a18ed1965c44fce

SHA256
a144d8669a4de20fc2ff22b9c8e66c5008cc17b3c8b0e5a6c991bde25ce1f19d

SHA512
6d3896768ae5375a581eee4b671e16e6224beca5ec0f84f868ee0328d31f8462ae2c2b13a6e2b58dc7d26eff5f97dea915c700ee9c72f57948d1b2697c2582a4

Download Submit
/data/data/com.systemservice/files/PersistedInstallation4068233350695488346tmp

Filesize
90B

MD5
99328156c7e40f8382fad50e3e437057

SHA1
8df719be5e021f0ded98025e511e36f7bcaa59dd

SHA256
1ad4735da781bd67c3767235ec32895eabda305da0ab026daa58efda17905a16

SHA512
21ec78d17876de52b97a098a3de03e93d9f94e28d5245306e98d10cf3cb4fa8b35f7272a067d36b984b1b7097cf6b99e9da0ee5e72eb025d4827df28745743fa

Download Submit
/data/data/com.systemservice/files/PersistedInstallation8602629856331733785tmp

Filesize
556B

MD5
b943ea47a6225e1aa366b0a0cd3bc425

SHA1
c231afe528bb5a2834877df8ce79109d9599ad51

SHA256
20091a5c19570b3efea8b931b800def11c304818a7e1b15224b2f51b04094645

SHA512
f9f2828468f92c00417e484cd3a20842ae1339bc7a1df1dc0836ae49c642c0d22cedf026c5ca9345a8b99b396ddeaadb54314b6468b8741326b2bcf933ebb684

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
8fbd2c72d1082dd954405d9c261b1d30

SHA1
362199943b31a0b2e3fcd14db2bd08e8b1e5aede

SHA256
a4bc9bbf1b3e04561bbe7f4ceb9555800d6dcf332e5c99dc68eef72846f0de70

SHA512
6453ca18e1c72d734fc65fcf3cab754bd532465924a59bb8e44302075242461c563baa4895e3de28001720a4896b4debe6577018e5e0db9c6d9967ed7631d87a

Download Submit