92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
04-11-2024 02:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.systemservice

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.systemservice

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.systemservice

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4254

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
28f935eaf82882ac66d1c46efe4888a1

SHA1
aaf54a00c259eb5f1c58be219d5ce17b8490079c

SHA256
3564f1c21b561e63080e001b420fb2e00df502e1f10d0c2dd2edb058a7b55a1a

SHA512
589d11320d8d75194c9aac50e548d357f631cab2ca38a3283253d19fad6936f27fcf1a3697883a2dfa75f90bf5740a6d88a4c71f33f487c039b287b4e12907de

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
b44e8d2eb97869e128530339ae2b6438

SHA1
51cbe8bdbf197a39d9e5381807420fda8afe2cc7

SHA256
3894be04e8746d6e3053ecc05e110d1c878c6630c83967f36468d072b301f696

SHA512
bda508930cbcc1b5743e8925c25df31da227769ca80b3ef436545e20b0e8d7779cff26d961642d525c2c3091abbe15e8eb43b93015bfeffb24a3e07d15607b2d

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
258d8d56a1392466e16516a2e2fecdbe

SHA1
9018dcbc7155687d10fded8bf860e327a8097dae

SHA256
8313eb44a7c1a856546652517ee0a8bc604526554739bee25305ef4ba25427ce

SHA512
4bbbd71282ec1541c19dd04d7970ca39b000498c4e36b1010c56c5b38a9b8ac9ea5bb23c72d508e882beadd59a01d62c2d7524a35e4e53fd51d7ed118baa5d4b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
22fe147ac5f421e7d7025ad80fe4fdc2

SHA1
c7c15bfdf6779357176d27e2195ca0b6e4a78cbf

SHA256
60b0c1e4245d1c15ce5738418955a0a0731d39c24712180bbe54d34c6fc9c085

SHA512
c5f9539f73b03fc82b90ce42ab7d4f4d006a2e7fda34ea78969cbe79fef672ae12b67a3408286a8f383935c332809493d2d804210785936435d5aa95455c89fd

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d97ee65f18aa7ed01bc3d6c257b66b55

SHA1
466ffa53384bd5d24f196bcead441ae7d3e412ea

SHA256
0239936937d577e987369bec3a23def2d28325280881366ab8c25d8bc5d3e810

SHA512
bbfef07be70e6b2f238f1e8d97354218bbf1c30db61908717ef15f834540d5571a45fa6819fe39b4580c5a3ee009276fd21cd546fcaca6b8df3e5f317c2c364d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
95239c47acc522b52f7f506b1287e850

SHA1
d148657779c0949d02509c7685b228eb3f004120

SHA256
f509fab668028ffecd1e9bce86e61b0b01e6ae06b98cb5927314aedefdf1a0e8

SHA512
c7878033ee2648efd01ebf2795bcd18970e83651cb790d2b204537b4abea0b68294d5f9dd2770b5af004c3adcfc8a8d69b0cee4decda3459879b317487eae3ac

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
2a8a97b80b3883db77a4f83149f07206

SHA1
c5757eec41f830de38fb3b373525f4b732f46cf4

SHA256
136fad2c13bdaa84673f1bb5d0fa3706fb19a989a6a363ca671ebc6b26c2ea60

SHA512
f966dbe5d5437555644553b1a51a83ca483ef6b340e3dc33da8f9580edd8945a7c53aa2b182d51e9f81d7426eb7974690455e016108dff11fc770ea8e31db9f2

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
2151abfb9163cba73d3159e170257ca7

SHA1
32e250b35a8a9c7e5f1bde74cd5368e666c19ba3

SHA256
47d108f0125ece3a8bd27ce4b9f8fcc43455bc7f6b897aef7eadc7594a32edce

SHA512
fe70add1cc1f3079e4321b9138d86ffaa8d9cb13521c219834125825dbb43e353ec74374998dee68315a2afe7862f28f87d495428679cca6b2a7c23270beb4ca

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
baa841d6432ad33595a9dbbeca83df50

SHA1
376addf2f61d6f00232429dd44ea16e0f35a8934

SHA256
b212ef9f2107aa60901b98a8f2c7b003b4dcac6db6ac8a93e19aac3d7278f4a8

SHA512
7e0370dd36ff73fd605c4bf8350ab84b0f30b32b78598daae581c97b1f2ad18c38faedd9d57f755293960c77d74d60421ab7fa7bac13ba73abde0fa8ef63a90b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
eaedf1fcb4023a6e14bd04d7eb289f46

SHA1
868047242e7e3a46bd5d360455b0879944dab965

SHA256
ed60a4a9faf6a294007f44b475aba5f8380e4a42049724cd56de70259892c064

SHA512
10b33d44acad0d8efccdb67522adc78926c145c3a45ee635b1f16bb99b0380519d6de90cdb72fcbd7542de7b8db212382e49dfe300e3804c32e2facbff7b4cc9

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
f846c87fd4e3f2dc81118e1f57e57913

SHA1
dc21ee7975d0a1c132e1d13702d1912cdcbc1671

SHA256
549c9644d2951de36d7cdb83acd44011ac810301d1ba22086941e8a9be85228b

SHA512
701834add2b6746468e6c34657bcf260aa1667c19e687f3d11e67e7a36721592c03ac08eedaf1ef20480f4da8c40c73e3136becbc341581c89b56bfa691c7523

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e63a5f9e2166ba7cdef86506696c1676

SHA1
d8f9e385663dd9269a326fbb581404dba167cb13

SHA256
594a7156ef25fee0aef14df7096399541d2e838bc515bfdafb6640e15be61ccc

SHA512
a8b483c8454a7e381333c202d347dd910e80b48107b2abc6ec9832d44e63ab0e1bde38de29a73863557f718d436aefc1b9c929bab146a4c2fb6ec114f2cf51ba

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
8a0a8cb998d16b036d4d03ad953d9fd7

SHA1
f8e0d6934f22c7556f32a6f621f25a81f97618ce

SHA256
b69ec67bd7f944c33203e9200e5beb26030a72ffefef80166ea1b9bb8c66633a

SHA512
748e21c3a072153ff5be6dbcd29c31a85c2da2972bd134b0fa020f29560adc802912ee2274534c422c600e15824d5518d6e949d55b01b1e776317590e784fa13

Download Submit
/data/data/com.systemservice/files/PersistedInstallation4166344758575454425tmp

Filesize
90B

MD5
cd529cf7ae5320afc3f6b418aa3708cc

SHA1
ff3ed9821ca99e6411b3154df04bb40913a7c1a9

SHA256
dec5fb2fd614a8d1fff1ef966371a76a9437569e11af3a78d98cf422bbd0ebf0

SHA512
b05219b6b439d367d01cd220890ecfddc07eb2c47f48e6d9a228902600fcb0d4a9343152ca7b502a6878cf5b74ff31bad7f8e3d5f8bc6ec60e6af7b6b77530cc

Download Submit
/data/data/com.systemservice/files/PersistedInstallation6464378348727113267tmp

Filesize
556B

MD5
20df3a130b23628b4413c2697f13f1f7

SHA1
a545457f4e88a1b53917998528e8069ed1252443

SHA256
907978baafd435e6fa51dabed67a3cbd17c93c98ed84bed08f38cc9b362e4e74

SHA512
d82f76c44389ecf5d1cc7918d8c256acc87658f331f4c061022f5238fa437f9a0e98118a8e554848e52eeb3dafa2006b1e5d2601f789403bed705695f367148a

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
9f56a73b9e2cd8abadaac8fa34a0a934

SHA1
2839b422b20f6e1b6a1381bdef60e290fa7899ec

SHA256
f144cda787663587660cc66eb3055880ef52fbb79d32c763db2b6039d1664edd

SHA512
308f3be6a39803a10687f3269da83fc9d85187fadb22c9b6f96d60f200ff5f56b86f964bd44f0bf8ee6e4b15142e2f5de1a5c05defa63d6198b8665a612390d2

Download Submit