92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
16s
max time network
132s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
02-11-2024 02:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.systemservice

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.systemservice

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.systemservice

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4255

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
e2949d12cfcbe681832a0f4e7cd0a44a

SHA1
b980c18b21053d39f656d70ae3898ed453e863e2

SHA256
ad64625e5b2c740746508d04e5979fe4768af5a8fb957a3509c69ab22c12b2db

SHA512
596ad7f10b2d6ffc74879f7f48167f55e5522c37d1d3579fb49971081a253cdb999f80559c65fac945308e9fc81a707c40ec1294b598747cabb0badff8986f39

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
39d6ef96692ad35bad5659fb2e978567

SHA1
10bf18a2a7cfb2c1681e210ef3f13284e8ff6b70

SHA256
6434eac5409a6301e3ad1459aeaf71d4a4b12967651f7a0fc15f85807fbde5cd

SHA512
c04e08c04592026ea9315eae6a378e30b87e15f0ca8ee7995f38a6fbb4fa3020c9ae6cae746fb8de8e791ccda987a3cbba032a2595998ae58f6db10ac9079e85

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
bf6daf085c7cead45f5b23a71a3ba1ae

SHA1
f4e9e8e6c11e52c2c723b71c316adb2acde434fa

SHA256
7210022285abaf40d8e912224a2cd46a65ebb2f6ee47fbf94d5cb4a8392f8d28

SHA512
0eeebdd52bc897b64ec5dafd5422496670efd0c436c5e49fe6eb48a7ebaea0cebdcecafa466b58dd651b87dbd7fe2a52c8975059e7637d85f20f9c3f00359447

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
8327f092acc32b6439b04bcc414fef0e

SHA1
bfc356a3f15b072eed9742da907e7cbd227fcceb

SHA256
13fdfa6f03aa4fc5cd73cb9505fdf80434a6aa3975ba370f87c30af17036ee86

SHA512
86283c590c0328a6d4e6277253ce04f8247e6c0977bfe7c2dea96fd1bc5bc4040c2d0587c8e5009010593ae989811cdaa09776c3ad14c020cf81757ba863aed8

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
bc1c1c428f3a5d52eeaca52d57e9cf51

SHA1
50117ef2a66f15bcd71935747d4bf866931e1856

SHA256
e718e88864ba7c39100085f44ebe708a162b7ae6df6206064ebf70c893f31fc9

SHA512
3e473c0ca29a7ca55d9d2af3377beefa0c42a7c19e4b32682cdfae5c678ff678c729df3974be0cce732b02c70517089d3e89318312eb5786547e11764246a33d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
ca88000c2dfd1bdd9148185f85bc96e5

SHA1
c8b36ca3abd9fdac060f137f24d2ea6ddf9c22c0

SHA256
b0bad41c4b952168ce85cd489d23e703545303bb5f226755944201f8a4c84cc0

SHA512
8f2b0dd29f4f146383da6f2b11e0aeeb38ac0ecba3d4d2c272aac988f3563625d824471cb98ffa6b52eb23a0c183d31c946cc0995c38594aece229701378520e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
a94f08f94588c0c4d061a1918fb92c84

SHA1
a5eaec0f6fdfd807bd867d993231e2c88f922b47

SHA256
9a68b4f382e38044b13d5d05671e55dba5620af0fbbc639ce7a37950ff103fea

SHA512
e6cb4f5b2f18b80fd025e37c21f27ea48131fb44d810b3995be04f6df1d223a289a2d51d68788ae30dfa7eeb6d335ef7a3e1110bcc2b6f40d1bc405c02e339c6

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
f320639eb5ba219c1ff34a0f96aad59b

SHA1
b5a515dda2f4745dbcded714a8a3fa38a861ed15

SHA256
07055c26dec1364a5ad894d6da9c0f80a16611657499def7ce3533792441f326

SHA512
7277302b8063931af1e85f079bf9f068fc85f1e5201de69fa50df6f7473922669a8c964479155859462bfa4d8080fec23052e1ac1d32e6a3f12186f6671951c9

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c4c568d01a1b1e8c9d74fd5457421abc

SHA1
e5cab51833953d25d2cdeb4c087447f7d0bf1672

SHA256
7c0e61b17926ed8034a304bdf8db7c47cdce75013756a9fabf24f82444817a60

SHA512
1ba1763c17fcc456875b1740e673a38e0e39e7a321b3aaef94f99f86577f7f5d39dda088093ed8065a7a291a2a372c4722f4245caa5d830c503389730357e3bd

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c0ffb1a3177b627aa26715a7df58a851

SHA1
fd6b01fead514979366ccc148b474bb9cbaef370

SHA256
10650d4daeaa9a9e499e9288296f91d23275bea98fa62e5ad26b5d9e5725547f

SHA512
570eba822b377587c8df1da42c1d14e032a63e1a6e74d347f52d59de628cc8d18b700f65c1061820522671c4785dbc42434db27bfa30dd2561a839f500e0a96b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
bbba9a3bee11d0c184a88ac156326a2d

SHA1
6c42bc064f486d1072adae7d1de6f2ee7da4564c

SHA256
08263e97d81b53d74bb6cc4feb25ec2ea0c356e5a7e8fd06cc36a9290289df39

SHA512
e83a031600b371e27d65e03f593f788bd3548db00588c2006a5cfb316e0ff02ce2b615cc5d9252f887e664d3342674839cb3ad968447b584cf700e4b40e40b73

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
7b648974dd0ec192fd6d86e9fba81d4a

SHA1
0cea3b60ba8eebe7f5ad7dcabb7da5d3f332b68b

SHA256
55249a8a9a4e4997a221478212e73a33e45176a9b1201f2f64ce874be4ab71f2

SHA512
69b610e0bf9d58b0f4b608ae0033d2c08236a807d76c477448ff8f9b7f3218af09a9c84df578b90ffdf7035d9e345ef7c731f78d72062bb5728d91c9a86467f2

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
9c12c2bbc78540f86a3845fbcebc2397

SHA1
2259d9890404b8bac21a596da012f6a9e8c95a8e

SHA256
226096bb89e7ca2478c042f7a9b20998467cf0afcac5b6a062ce12ad1d279073

SHA512
7b353e07f6c350a94e025b9568778bf46388cd97a1beb6da351bb0325fc67649a5dc3965fac1e1fdc13f7c21d17f44c8b6b4abf730958de98442acf0f9f7836b

Download Submit
/data/data/com.systemservice/files/PersistedInstallation3635179120559773756tmp

Filesize
90B

MD5
25ff1eb5885c5faae8a4e63186429ef8

SHA1
3f02d33f99d9fb9efc37becca6580e398b568baa

SHA256
bb4273aff685d483cc958f1888ef5dd236a05bf867922a47cc1ed9e0a14d4aa6

SHA512
f6902886b5604b6b671eb8bc26af2a8e41c8009a716d4c6887bfe30bc80905ec8cde8617b24fb59ee790038856e4f807cb90092ae1476e8a9cefbb217c649500

Download Submit
/data/data/com.systemservice/files/PersistedInstallation8330511727171050428tmp

Filesize
556B

MD5
833b3b3db806e34b7fae15d665bd3c51

SHA1
92718ddfe46d4684355dffacb5dfc0cfa7273550

SHA256
227428f1962c52d2ff2f6bb0c11cad04bcb33cc0b6d74d7590c8cf0d2f6c68b6

SHA512
e0e4842695ab3cc85b915133a7c66cbff4df02592a0f598c45be8746bc3b482343aa502709bea2e7cd592baf05a57184ac897d2ccbfd89fcc9fb5d3b428a6b1b

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
202e75493121e60c36fcaa7a8edbaa2d

SHA1
e095b1fc2f944b1bf44e2f9edd7175b93c8fd4a7

SHA256
9bae6d73c28323ff8cb5b1425a15ebd017f5ffc7588f512d1e33e62e40ab44f2

SHA512
0fd0d44569ed37891b82f675ea41ce67788ef6550f4664eca05113d0c53b1dbc2e7fb69da1ce376348579716a804b1fc29ccfdbdd9767774a215ef0e3721a36f

Download Submit