92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
13-11-2024 02:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.systemservice

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.systemservice

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.systemservice

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4256

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
6a61d65124354ba1e6db0fce25782208

SHA1
661f7218659f6dad861e473a3e05632f9a0b0268

SHA256
6a29e7ca06508a4d1b84b108a2e22b16730fbe18b595f9d3b6383ef780a88b72

SHA512
e7ac3814e51279e78012e96af04a44e697858f7e2bde64fc1f6af0919e5b6e53894b760f5654992d27ecc6c3595542d8f1bfcf1980b8711fde8e73d4e3f0288c

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
c2ca1249599110873f904f14e1131d17

SHA1
c93d7b98d9a0fddf48963e4aff8333bf2661fa10

SHA256
563f93e5aaf7aa05d5ac7b6fab0b091f9ea60f444881f3902b7dff86ce0f319f

SHA512
00fa0dc113ed00152ec54bfdd6a5129d9bf594bc37500d6578087b8e3c228d58bfc4893b922a1545aaed093730932add33b47a913aa640428eca8f9f87784973

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e38b1cae0eeaedc3afbdcbb8302c3e30

SHA1
57c3f2f87959fec8666a96bf68a8e8585a95a8e5

SHA256
5cde6ee164d1ac8471b71eca73a02d62d88e3d767b688eb15f21e1197695545c

SHA512
820947d47d0cc75252575812e3d0b47f357571bba562f2f2e6768e0e0bccf354c4b01bbed2deb1782de7be5399e66f041a1685edaa40f9a22ba8a367f8cf8c0d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
4e1d3f7ee4610477613deb4cce18d5c7

SHA1
1d8ee84d37e3d2839ef492b699e5f3bc665cf6bc

SHA256
59a84f09178605f93761afcfbe81254f5510148d547d39e1d82ae23b0f2a2ba4

SHA512
ba910bff4b1c26ea73475ac7055783caa7bbc88a81e93de7d9bffe4bbbc72a6ed97b8e9cd05a073b459268eb67820fd15108570f99ecaf7732340db288a679ea

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
822e48558e879c22fd647c190929a715

SHA1
126239c5980746dcf240f8fe6f57eef46c600510

SHA256
e52decf4f33fc76043fe63eae31641983a4638a545c7eacca009d2b9f4232c05

SHA512
40b133ed7ae0e22618660f71083b166f99b1d94568b90adb268826735bb509e5e8793308f59cbc6d5d1394b03e9ff4e75fd0a9475181889ed1bf5a02c62b544e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a5ce6be2416fd103f7493d05be6000ba

SHA1
77209366fe860b2b21c260a0221ff1e185d51876

SHA256
8d7d85fed854bcedd8605ab4a239ff9e87504b39a2c722bb17eb8df486d23d75

SHA512
af0269e848cfae16f2a22e94406231d67d617dedcde7c952471650d56601066d712aef03f6a23998b8e16c8fe7305401e913a7f6aedbd416e20c1bf8bee10b83

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
a4d3ff47bfe96d258657775712ef3489

SHA1
c63b905ce705fdb70fa661101a5afd7f29eeed97

SHA256
19bf8974d6bc7a8b827723268b1eae2b8c4840086310ab178b63b84e19db78d8

SHA512
c0d70c6c3874a27bd58c03af54a26945701f5bc572201e221efa54ec2976eedea03e71fd76daf80bf3551bd00edca16c95f74f1e26f71660eb1e7a8b61cca923

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
51a710a0256d862c9e7bda78872a2c47

SHA1
14bc0ac30eb919b609d03822f73486f9aaf293b8

SHA256
01d7b0df1b45174c9bbcd358202289b7ad989428b4fd0d5f40507c394830066d

SHA512
e75803ad08c07691d6636e2bfdf763ee1512fc2a2821d5d6c49ce07b6a7acd8812759b81fa2a236a492c6028e8001c83847d81dae6557856e5617f5f25cb3459

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
9268636a5a25b2f3f7465830ab6dabec

SHA1
af17a1f3d28d8b7f0e7b293fe7352363bac595c1

SHA256
849d5d32401b6f0d25d4ee53da2c98b1b147501a07d131e4960ad1d220b9866c

SHA512
6ca3316b478e94fd745fe14f3c230895a4b0874e8af52d40cd07b2a36aa47ecc8d6f53a5148d8d5b8bfe161defc4a5997ee7394af12a5bd0a4e87e4090267aa6

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
dccf06eadf0d246f66c12add1b3be732

SHA1
d239b2802e4e8a97eb6431cc76baf825962b6e75

SHA256
4b5f38693c93d7f522dc7e9e2645d731fe1ca6205c7574a87ca66df6d546c6a3

SHA512
1ef5186c3da3a88f7bcc66974e0239df9738b05e2210f5417a801800902026ea3a4f1e208f0efdf9b10ac506b43b02b9e70d94af1466d4da89eba70ffe955439

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
2bf78c4d10d0180b81834bef625c7007

SHA1
60a87b9ab94a73cbf547fa81e38d7bbde66cc571

SHA256
4fa6d4dc7778ab6b53d2faef7eda1c5c7474d968d575909070ed74f0d771e3ef

SHA512
aa3801edac4137c8e36866222f6f45b6d0f40b4384c35efa8f062c62179464c0658fbf6b880cb2f298925747c150b81f233d0fdfb9365082361e572879f63595

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
62ae4724c0be2441bfe8eda749a06b48

SHA1
a3b8cbd29210d1a4b0b842356d8ce43123c4818f

SHA256
e1ad1925b09fee946ffb491069740e72c10a664d2c32b298ab5b77d5c9007cd7

SHA512
fccc7ab539c8ae5ff76d8b9c873a4129e3d662876b162c609ab111a89e34e6e2bfc0f58a8d3dd71afad03a23973e5bef368c6f01b9534a93b18fac8f9f3db0bb

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
0b209a2314ee87e3f14ec5dae1e278f9

SHA1
b4484ecd5926a3004e18a3db6c7304b03ed25ddd

SHA256
527a6f6241efbaaafe1aa78dcae54398614e613064c2d8acc00d01a7e920e9e2

SHA512
f37f486fc14ccacc0686eb8ff58381d3a526118f187db9f08817f866d92dd81d0d9f4426fe2466b6eb76924772af0a54e809ffd3bdb048606e833b7224864262

Download Submit
/data/data/com.systemservice/files/PersistedInstallation1499329671163189872tmp

Filesize
556B

MD5
fd4689adda3aec739936e782339207d6

SHA1
eb0aeeb90507009e4fe80ef55e18b49209679a73

SHA256
d7c6e2fad7e9f4ac6b35b8116462392da10d091f8b8951b2f7d236f6498e6ee8

SHA512
5ba5631b2d95db3727a65675da340e0f000d61a1911f37458edd11c33a1ad7028b81dc07bcd0e450a5cca7e72ac35c5b5c0bf1745e4a562dc7975e9ffd867c7c

Download Submit
/data/data/com.systemservice/files/PersistedInstallation4712814103872155170tmp

Filesize
90B

MD5
af20f329bcbc022205a32cbec56c3643

SHA1
dad772f4a6be283e5d423495c1745983c14789dd

SHA256
eb03688f2773317522093143abd53350c259e10e32c449f21a61202dcd35119e

SHA512
f5f6687abf70e791d03849a28d7a786e7b5b1cbae02fc73a02b2b0bc4b76b427e331c1add9987b884822fd04772c4ff69c4f9de80ef4f125ad596efc5b11ff3f

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
74a161390f788d710cba87940c42587f

SHA1
d67da9fbfdd7aedfbb0daf12753614eab1a4e378

SHA256
1840404983897a66f479d97cbbb5b14f6e4ce4ceee22f3e72ea1fca11d6b4e7f

SHA512
46a077c9e30fe13afff93d79a4bc236c617fbe86493ad8f761014e36733e398b54e2f7fdbf88c5cba549f91a9cf1f791e122bfc7c5e507b5fcd9544933a02e09

Download Submit