92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
133s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
14-11-2024 02:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.systemservice

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.systemservice

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.systemservice

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4258

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
ba05d8af118708ec1e2fdf8a685322f2

SHA1
305433a32f190138943ed685a71e75c07aa1a17b

SHA256
8b5b7355e5e41c0d5bc4682d440ba314caf178d7d3868d2b55c27e0b369a9363

SHA512
d04c815b83000dc953436144262b2c5cf7afede89497e5ba8f00e6099eb7ac512a3a74d25323d36f08ab3f0965251fc3dc2f588055a80d43efc41a817ba196af

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
cacc62d603bef1bd9878e4150f090457

SHA1
ca44f124fac6adf0590d1973c49249be2e1f797f

SHA256
0d89ca056d79bc2f28b2636709e268109a2f829b020768d5f03a798537b9baf0

SHA512
768fa5ad97caada3c3641e2b67b617af8ea90d7b1077df395e8d01c102b9dc2c87c18c6a42fcd12f5c56e14b3839a37874029f3fdef75d064f14fe90fbb4b2d8

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
80814bb831c69770ad2dae37f73cdef9

SHA1
67b8f5c6e7736dae541d1aa5fc1b6af4ea9c4b69

SHA256
653896fd77fd9ac038afaf29631a2cc4cd3e737b5d006393fea157e76ba52f5d

SHA512
1e9f483e94d1e2c6ca0c70ece98bed436921ba0ffcc6da05ab46c1bc3188fea9cd7e04a64dcd4dee724d3e61fe366c7f599940daea1102d39f2b769f50ed8ba7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
4642b3024b82829644be3a9b3155801e

SHA1
ced65fc150629362ca6ff28cec966232cd41b50f

SHA256
1d8cdd7f17c48f77c5fbaee75f9eb3a60b85e41ed0ee64c65a4b496acb6f8b67

SHA512
04161ecaa9fc03ff2f6b5c313d765c813c046732689ff4d78e26aa8bf37cf7964fc7eb9c60fc0ea95f7dd6c26b6ae10c410cad84ee83e9b1598e720377caed5f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
531c7c1b44792fd6880939acf05d5e57

SHA1
81aefb692dae3d33ee3eedeaf51426e3854f4318

SHA256
b85ae2699ee008bde9b6da75ab38542d493fa7e1a83ab26203d0ebab290f5713

SHA512
885cb28cc2bfecdf7b2b9cb4bac00bf16cd89654a9cb28243be0c2aa54b25e9d1c87d63d77096b8b1644841a68fd494b9be8e06097596caf08b9d0bb1e164fb2

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
71a3d982644c3e2df22d287eda8eb5d3

SHA1
77670ba905a227149a3487c94216ec5a38ab1e86

SHA256
81f4dca06ab80eb7d4732d073e0d9a52c9039db2494441f4599fdc4095193968

SHA512
98f9f5df5e5bd2bac2ece2d7b7d6250fd54449018a2a3ebf366e2bd1df913a4bb6c7b87702f35c2df03abd5b89e106910f66c01f7635c9834f8b9479415d5148

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
cd0d386e426fff5962c7a03b623cfe9e

SHA1
58fbce8cc7063d654da2ce0fc5ca848b78fd7d38

SHA256
b2af4af33182fbcc7ba337e9992d0871f86dda407520153a336ee67ea906fbb2

SHA512
aa715165f947259b015247dbef7520e6e15aa96c2727218e3b3cdb67f098b316e3579fb509d3f2789d4d6e90c5c9ff4d7837956b01241bdc9e78bb04128f5a70

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
cd589e482d22acfca371c4c9883bdb2b

SHA1
aba5b9e01143e36fce8a8815ab41643f3f0fe3f1

SHA256
6d93981a9fbe7950f5e0c26c72d7907809536656c9985af2e3144ee7414ea650

SHA512
f8e71c6240dd71bc9b97cb9a84c41e8843802a879f8f29328d3f771d6f5603e421f72a10b28f67e7176efc4e402bf731fd01a490d5a564821871660c9c766656

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
78e7e7b7d155023c966d67004aa4a163

SHA1
017800054ed78e50128d1e5c1bba8ea7d341b454

SHA256
125518e213e0ebf1fc916f373ddd3486b3cb3fcea5ba6110f29c876c45119e90

SHA512
e26a3d49f86027b5f67b292235cde18b6dd9f94b505b6fbbffd045bc8af3202a1f1f4908c559068fdbba85956a083ccb654e85cf4c90255e942984a31fa2a4be

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
258746634bae187ae24754fd798d1d46

SHA1
a5262e17e6bc4818373e4c2bc9b6deaab49d93aa

SHA256
eeab645062cf69a70e2f9ca9806af90d85f37b7759068816f13ee8e70edb945f

SHA512
775814a74d397b109608d58bf6e98179be81c17ce76724be036276e4e8e142ea3b7ccf009e754ef41d3ffda2851b896958ab48668034bd38e0b60829f7e0bc55

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
ccfcd818b99f56ef8a5e55f02ab12b53

SHA1
0484df16eb122e3f4c9eef513d419eb1ef75089b

SHA256
4e9cb183f3f9e4731741f2355620fcb3a1b3bd1bd8e2b86282af40c096f490ef

SHA512
51548600bd6a70c63f502f82b6ccc8ca3994c13cb8d9cf7d3b1b541371ea3561cc0358e83687ecb072839e33515984d2acafae7f533f12564ccf74f0ddb21ed2

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
256fc38dd92eebfa13a4a98cd3f92dd1

SHA1
2f9825da8dca01c8a44b5b8a0a1e4d8334e8a5e7

SHA256
43ca3abd69b36179d9a6a67842dc181fb81d5c56b5b3178904d222893c835963

SHA512
399468e904df3f2f7c906d06070a0b068ad5b3cedf9abc2d6c65d91ad950e82c751460395e72653e7d517385520a2dc533e5b3c5b094816c7154fe6e3c893aae

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
927e45905557f8c4ef874f61fe397285

SHA1
b69db10076d1867843af6cca3bce1327c08aa8e7

SHA256
a439d57e3e418ca0ad2b85b5230c799d23fa574a09b79d1111389f612cd78e4e

SHA512
8bd563f44ac531d969974a68bf499f75d21db35e62563c26598d703286a96622685b0b362559daa907eac6273eb55a66ff4f4b48e1288f5965df33132705add4

Download Submit
/data/data/com.systemservice/files/PersistedInstallation8396962207951888500tmp

Filesize
554B

MD5
9f144afbf18d7699bcdccda738efba3f

SHA1
d3c272f6ea898ca834af1aeb12eb3bc025bb79ab

SHA256
023e1dff0280c7621d50070651ba31e96958b1c1c1f3b90eb6103267bd5cdd7e

SHA512
6edaf6a4d5121b05c322ffedba3bd5e1f000ae4750e8f5de38d1abdf4c5df4b7fa8617afcf51dde60959f89a0210446a222a99b7ae188a37cc1b2abbbf356989

Download Submit
/data/data/com.systemservice/files/PersistedInstallation9122379619848636591tmp

Filesize
90B

MD5
fa9304ef144c708b9d7f541ac5aa8477

SHA1
34bf427d7860c7c2774cceb96441e50849da5f44

SHA256
fa8262bc588a314197ba86871b72245e8f4f5a268658e6e28c561759005c44e9

SHA512
65cc4def25e63142a2147366cbf85697980a6ccf470811edc9a2ee0bdf8d97764c37fe51ec3e131134c7a488535e9888c1d19f86184b3766a56fb5bb0f431b1a

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
fdde8343de46f1aee3781226af7dd39a

SHA1
eaa77a65155ebd028e801a20550b0f4d6a253476

SHA256
e96bf5f449a80512fa7a8b85c37b1fb577101fcc2ebfff92b30567918ae8334a

SHA512
48d7606c1c6c969640f55931357ac3de3e2dba3726bdd78eb882ec6c04d11c9e0e03d2e9bafa23ad4fb308af048af917f963a5f7c79a308e97f7d69e1fa4b58b

Download Submit