92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
16s
max time network
133s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
06-11-2024 02:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.systemservice

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.systemservice

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.systemservice

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4237

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
38e887af70849694312162050e97f0db

SHA1
adb2da4408132990a436e8b7b8275ae878f8dd38

SHA256
30f362fa2def28587bd7a910362e984f16aa3b25a5c4bb4c5847df5c280ec6fc

SHA512
8c9e32cd850b4160e42ac285b5c80cd915c686461b61dab97ccc7ea6f869f7c5fea19d600e29f61e3bf0434d3a5399571d9b8d86ce8ca1e7e2d7865dd3af85db

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
c8d5501619892309c63be49825ce7ae6

SHA1
23cb8f6e9056e47d6c1d8d164613df9a5bb87473

SHA256
f2d040728825740a0add60ef7cde76329543815d7c7fea8cf7233a9e633d5bd0

SHA512
61bc8a2e3c09c3d52c5dbdff697434df77022b4d6017045b98c4ad47951288afb57d6d0fa29d9dec96d885b9414f377fcf83776caa8a608120738acbeb36945b

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a48552e966f6f42cfdf242a0a01593c4

SHA1
ac10fd0219ab289003a6f5ca3289d64a2b40260a

SHA256
c95b417cd0e623e6036749e92b9471385623536c7a68a6b6fe4937c90cd7d8fa

SHA512
82d24175f72c9516d2756134b6d20059b2babfcaae64d9e2857056bd47d8b5035f1729117da10f9b23d1d7622a2008fe46a1431cee2e38d18722b53b6b6f5e74

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
c216585b4cf2f1dcd9ce13e8deac0342

SHA1
72908f41ecb14030ddfd41553082b7fa1d59604b

SHA256
7d96a98a2bcb566df0eb8add626036444fd5fd306e3a902f335f57131bde83ae

SHA512
ed24b02c9ffb08b6ce1002997ca408905e6aef077c52a8b70483e8b5feeccc30c64e7ec787ee83cbf7e39ec256ac5fb54c49efcfb7262f603710b0e205936e15

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
4c262b598cd63937476270ff0ec66e11

SHA1
e8f28cd7e373175b8e8af672b9a126fe751e91bd

SHA256
01f931c2d88bcf00b1d2294b88418cabaf9bd56eaa5528d9aebe123991a53033

SHA512
e677dc4c4d5eaaf61b01191b48cd87f686fa6eaec5d7b1583d977a72dc09ddabc60382f20e5462553d700d0fedd462b3334f23a13f2eaaf1a55d499f9a027267

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
9d07328147cb4ffa5eb4d262748b0369

SHA1
1f8af8613c592e372847081ffcc42cb0af2fea27

SHA256
e6413421d7cd883cf3438a0a7250df139fbad07a98c49712b317cb3277b62511

SHA512
783e8156957e6b722881ca9c77d86a0a5f2d3cc5530ca79ebcc62722f5e757d1c4a40d70cb4399cbe17bbe3680040f14c992885cab4e5a29731b4bbf1160ed0a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
bd6386544af50c81bf73e9837f38df24

SHA1
8710341ea4eec25240100ef9f4bf9a1c1598f7b7

SHA256
34468b14f14952e929c6ce62d523d571570ac6f415aa5e40cdc6b02489267a0f

SHA512
5f1fdabd862fd25b5c8cc7dda90f2818f693650a292dc4d6ff189df057a638b3ff8bcceb5a3a615732dbf1ea6f2f742102df858863e0df7647c7a3ac2b0eebb1

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
9bd847ab6de355504f8caaa2fa3482b6

SHA1
d10447803407a9f98e751458eaf9c0454ac63e11

SHA256
03409540409de7218f36d18359f2bd83630ce3da408c0a558d74cad40102c586

SHA512
27bb16025407049feeffb12ae2111e7edc149bb818720808ebaf7ecb1f98d4099c35d4679fc2f64f24ddb7fbcdb5c8830324e9a6e999b301f4affdf93b3419a5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
f9f8955b21a1b068e6ccb70437eb7a8f

SHA1
8dd34a7a93cb717796ed780f34bccc1842965efe

SHA256
6d2875715d7b7063c462ce08bc6b351a6204f18cf3542449f4dc27fa2a908c18

SHA512
a52b0084a81d145630571fea01b78d44ce6a97541c0c61a0a88e6a19867200610989a1816770787ff327cd78d03d7f886753426e4289035e8ec1c93a6f34fb03

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c79ac37e5e0abd324cf2f822ae562cc0

SHA1
ecd72824d358d92b1265de708eca87b4406eb31b

SHA256
1f223ced6a3e898044a31bb46f9f6e34e3e2c97ffc70f7a8cc4c707e8de34870

SHA512
a7a3f16cad3e870e6dc25e29a570e75a97ff646056e3e7a2b936b9246f208b8ff985447827a5143f61a5c992653a3af8a702c6b743097812decaeddc05db3093

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e4fe79e51c27eb3c8c1319900965a2e7

SHA1
711a9887cc2d6a2d26d68fbe69833d3ef0695d2b

SHA256
99b71a6fb02ffde2e870b73aba7d832c988cfc7e49673e5e3c928b66cfb69cea

SHA512
19b70fa34a2fc13a486d88a6af51c23d1892c3e9cee23a0923859c1e3bf0e67afffc211c9f5a839e7119fd9fededb153ee0621f2f3101dc78e03a0b092f0d686

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
ba772deb84fb9cb6330366c48f117064

SHA1
83ecff6c40cea8875aa14acd38ac8fe265b0d1a3

SHA256
ecdc2b4712413cb2e88d31ad2f54b35d1ed46c8473cea9d0dd8342b467b10224

SHA512
aefef308588667c548064e667a0d6d9993d084fae922016ae5bc3b3cbe29a3cedfeb214fbdf1a4e854b01d9e1f369e821e27010e046240a66ce976ae6211085e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
313c5017dad970cdf9e2ff0e365c27b3

SHA1
8030b693357f6a9966293942df7e3e13d8d82a16

SHA256
6dd57194c25af31d29118aa818e02d764e00c7a4418ea2ac47f7c5b5021d4b08

SHA512
97608e19dbf4c9bde9bcbbfafb775b6fcb9168a1818e735292b2f52c3fb976a7862119ea4369f7c79ccc38e2d85fe1c9d46ed7ad74400edee7a16f487a8da739

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2518598346821441546tmp

Filesize
556B

MD5
c649c1e20dc676affb96601ad8a28d32

SHA1
497c9bd0f9b903b3303e3bfffb18096c08320010

SHA256
37d0d3c644087dde06f46fd79099527d8de1a020f0f46c4552eed59666300255

SHA512
35e63f77c1a90a90549db62233c68c5ea30a60bcbf767145300ce55a4d5c746282b05cc526af32460017f13172949f4aad1d5c236d7a85b97e3e43aa4592ef7d

Download Submit
/data/data/com.systemservice/files/PersistedInstallation9023906541617004263tmp

Filesize
90B

MD5
46243ead37b80c8d7b98054c65d8e176

SHA1
f625083b707fbb7ebbaa9c9f6e9874384cdf8a0c

SHA256
948b04eda8ea2b15af9922a79241eb603e9ca2b0668e6839c3415d5cbb46865f

SHA512
8df636365f51a4c279bbe400eb8d278748e476afb18cc3570a2bfba9039518ff918cc58a1a82b2167c5de688dfe32bf8b535df02d8b100d26d987896d22c95f2

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
b2be4572700e2414008776c10270d84a

SHA1
8de0cfaab3cc77eb50d5cf3322e0e0f9954f1495

SHA256
3c21194b74aabf719588c66a5ebcabc6396a11f78669c7c35c27151077af9cd3

SHA512
7986c912fd14755d7baa1c6b5c98793d07ed47d5298f7ab1f7fe5844bba34217062813a89470cbbe193fcdfa2c91071f7360f9c705f9147dc0c05f3bf0d578d4

Download Submit