92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Resubmissions

07-11-2024 02:29

241107-cyssmssmbz 10

07-11-2024 02:17

241107-cqzk8avrbl 10

Analysis

max time kernel
16s
max time network
129s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
07-11-2024 02:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4242

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
1d6d3ac2d93460d3bdf519a84c886b74

SHA1
59d2a3a1736c67046f80f93544fce998a53eebc9

SHA256
138f478226519d2606c95cb14cd86f26c817d9d6384b9287b23ae61680db3f50

SHA512
6faf211fed3bc2df4799ae3dc3028271c743c12d49615091fb70a99c0c1094a1d65e1cc399f817dc46e21c515c2183b538b7620b8e2bf5d9d194a417a5893376

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
02e04c00d1051bb72aa23712b2a5a85a

SHA1
aeb9c7d20a6ace0881d2349d6e3305517d895cdf

SHA256
5a2105c8e2b77e9fcd7e117083b93ce84ce75f3934b8a4ce506f6a80dd853b15

SHA512
6fa5a416c28f850164960073d629c8fac82b36dc7ee1dcc1a986009b766a3762154fdaeedc7ebcf64fb5770db284e11713c27ab3df171624b0e4c5d7c4c290f1

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
27292c204da472117383a284c8534a52

SHA1
f8d92ac6b9c2d699377dce5def3b37028b99e796

SHA256
635bed10225e5860ffcb73f80f70e0d59dd86bfa4234a7da081c02acc3cf1dc4

SHA512
c9b9a47bb9e1aec726c2955a6ac1a145fb0ffac5a3ea7a4d0037fa048b05e3c5a0191b6027f4e63a533be30d7ffefbfb375eb65fd5f58721706f2b4fa4ab37d7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a40753adc35226351a8200faeb23dbe0

SHA1
65acf97be129e22e8a743f412310d1fb3aa48cbe

SHA256
207e1da48a7c3f2f966b8eee208704d73c20b6bace309507cd3eeb8b8912507a

SHA512
547646970fa744e95717fd2b6480275d1422b25a0093fab9e6e4a60fe707882e2404e25fe38e9fafda5099dc303a3eee2dc8135799e5096b33fa8e53e7ed6971

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d5e49d012bfa71f591f151feccf80132

SHA1
2b88a9147623eb27a53e188d31e9a52b671d959a

SHA256
cff3e324a2c8f75ca971c6de676ce205e864b2b9038dcea777650e24a9efad22

SHA512
485cad714c29983a8a9b8a05bc65cc7c847f86cd7e33c8132815cd6e2a1c9b0e5c3108c8fe3235d21919b04793781503ebdba3da31592595f26d2e1a8c2c5d38

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
15542bdbf85101696ca42ad75ea85e31

SHA1
c0e80547a7df537212d00a08bd66c8d63e5198c4

SHA256
abf558549b6749b5e337574557f1763d3cc6dde2e16fe70eee1da9eeb9f54096

SHA512
563f593c7eb452fe260ddf609dfa18ce2286e298ecf45f7fde8939fa825e5b659d8760156b7376dd4c071d1db30c3eaa4073ff9e31cef3bc06b5598e95e08264

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
eacafc54d3685b486ab861501fdd4b7d

SHA1
02091406f46e4d7461dbb9f45d95506a608b89a6

SHA256
94f539120b1f4904bafdf241866e81f5f9bb47a481b10aca378509a5833ad689

SHA512
9807cddbd9fa18c5bdda4096fdba0acc119a7e906ed79c1b2cfe999d6ccbe91bfb2cf2a19ba592db09b70e35a558adf4cc08931ec0cc32e6f7035738c0ddc143

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
240df75ac41b7754d42426fc438000fe

SHA1
13bab4c967cb9e7efa6412a89faf3bfd267872c4

SHA256
2a94006bfdd8752dcb8d8b22eff34ca49366552cbda41309db05d494c942da26

SHA512
793fecc639762134bcc341d0156e41c682b79919172a5dad6822b2597ddd298476eb8ad3d91c9f4d6b3d510cb76d16856d493b39d12d960ed4a85cdee1acda44

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
1365908c8f5a2f9441209fc7343dfdfa

SHA1
a5bd961a4c8d71991823da15a56d5a503eeaaa87

SHA256
c264d3479a52716db90694af698f385d5e5fc04c8a2e020487beaad60f0dbdab

SHA512
63b80bb0e7e7cec449f6bbe968e43b923231688f05f2a06adaa9a665a8e06209fdefffb67f7da61dc4f43402c72d5fff3ab5fa904c498c3e7f103b04be2f5529

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
11df86468b2d9d7d05bbba2e38a8ae3b

SHA1
051ef95b8f9e66e9288146f65bc6fd0939aac2a4

SHA256
0b6daa9688b7ad716f2d88d6ba01b5365e9cb874c9ed1434ae86241d9e4b8343

SHA512
190ceb13f4a335cebf5477c2df33510f33b8082b6a15cc3b1b1fc528f92bea8a496f5f88be98b1f1022604be325d8501729697f64206781b338c2acd75ac4367

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
6744b0ae4207592e8ca8714576633b9c

SHA1
76e5192b0d5d52ecf3b0e155298dda0cc2fc2ed3

SHA256
441625f83cd963aec60c6dfcbfe4dc65d1b3701d4bca0ec1dcd01708c083e371

SHA512
addeb69d75f98ae208f99a1e44df7ef0066369af58d58cacdd0bc7b87e805dfa534b8f74f1b616fb93d8c0d483a96229d4cbaf2e7f071952781a652aa57ea207

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
318a96f8b8eb59d5b27bd02180591771

SHA1
36ed29c6dc8ad6507c505e9abd015a14479faf25

SHA256
249c50c29b8f787ae67a209102de3e3baf5fe41b90f94988664c59d0f58a9dfa

SHA512
8290acdffe89385cc7690bcc33cc30102a8a3ba92a431ea761815524b0515b240f80296b92c995d1d1770c243fa322857c89dd3d8a35893826a3ef8806a73c35

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e16a2c35cab64efd698a16909abec68e

SHA1
91d2b9702577c971116c917c71f61c182a0bdb8c

SHA256
835e60c1539acea41de336d548bda80d404dc668eb97fa0d9bf4857b74cfe98c

SHA512
2eb67ec74851ac587bf4abd65b0cae171ad6ad1cc006338809dc56b9cfb2d1754c8e78a1bed6c73fe6452d75389a718b1d59fd0c4a640e3acc4c68e5b4fc657e

Download Submit
/data/data/com.systemservice/files/PersistedInstallation1272794907339360458tmp

Filesize
554B

MD5
cfb58c3ac542726b0ffc5b0be269718d

SHA1
843421504387ef3d2ca7d7882b304ae2b1a158dc

SHA256
f76f9372592e9fa68bad4ca6950706384601dfce07cd871b529c28076b465c63

SHA512
a6610bde8f6de9b429ccaafd2dce60e7e8dbe3469ac3f0610a0572de4c3cdd8f4364387464cc924ac1353ccfac524c57c512d504a57da5b2195e8fdf1fe5f59c

Download Submit
/data/data/com.systemservice/files/PersistedInstallation1591331919992300011tmp

Filesize
90B

MD5
61543f725e3ed1f642ed840a36d63770

SHA1
133e77e02d5dacb64b62e1bf3c2bffe3f791fb8a

SHA256
99dadae0bdb5800ce2de193938e8055a217a65a70bfa839ed7c4643fe0299b22

SHA512
0556eb40e36763c93c04ad498781c5c1f4e3bb5c96bd853445139d71a8c0320d01bd6a20990f76db0f8c49e8c9453b76cf0b8dd41f794cd05110c2c0262da10c

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
4856c7fcb387effbb603567d6d099d49

SHA1
6e237676a985c53e797b6260eb76af92c5b5f268

SHA256
d11905631e601bd8c264f632745ede93b66ae8dde77aedd3366eb5fbafd7fef2

SHA512
1e19ff83c926ddf69ed374a5f40122ee70b1ad708216cd0766ed3f2f92d26906ec62a0d9e831ebd93bc05fa7a05721524263640640fd127b497bbb3ea3f0b985

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads