92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
15-11-2024 02:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4320

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
50c34de98878e45b658d4697ebcb5f75

SHA1
35c2c09dbbfdcff43a86f4651d8b6bef4c9b60a0

SHA256
4ca98b906f8f127c86cd5ee580a38b27e878960b10cbd7bf933285710d92400d

SHA512
da0ca5a4a7d46bf0eb01b566220ffb48f99be321445dff5d3434bdbe44e857385904b5226114f07bec442ff79a638f41dbeaf9d84fab4519c6c8615faa91eae1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
5c4d57440bb37e35b79fb4fc532109f5

SHA1
3c9913e881b5127056d4a1f01d22fe8a81c9da06

SHA256
d9ccee476abf250774911490c282885e8ab1a8767b46b093f0246c2482d74aca

SHA512
97380f738be881e971484e2e603c5a1250680897e93e094d387875985fe88318057cb3a6b44992f700f8bd025ef64fdf5cdb0f55d5811bc57bdcdd146e6ced1a

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d3203d2aab067fa2715641fe2cfbbc2f

SHA1
24d6f1b71b77807f599aefbc077a8679bcd86882

SHA256
57db0d1d5a47ee076f481f20649ed5938a5e5ac002c2dd76c684d8cfd254f6c6

SHA512
3220f652ceb648b1a8214b706ae648db8686386743fb4884419654c2456d623b537b071e0f237f0f79b79b245de31aa16ff4dd46fc8929390c481d794c68694b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
cb421f2a6539de57b3c5ae99cb404fc8

SHA1
c3f514fbad9eb0270550aa6a91bdb6d23803afe0

SHA256
27b56b8e63ca7063fce85a21272902e2790d51bbb6ce86d33cd12059301fb3c5

SHA512
428a0ec6420c36365c51ace1ca2b907995d04392c054be193b4cbcc3483d5dec9611815395340160ed4660b1890ae1bf0e978d2505ed8e0bd3f8dce5922d7b7f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
cbe8995ba19673ae30980d479a6fc3a2

SHA1
04e0e95ba4c259a0197afa60c6ccdb4c0d133f50

SHA256
b39b203df47e46f60af662f26e80b4ca0bcaeb96bbb78ef6228b55e93d9fb5f0

SHA512
04ab00f856d5b92614f7db2f9ed6dbe74edcabbd64403eb88f759fd3f7cd4d3648e8fd5a4bf37e6c777f6247ad49212485d786ee7677ca7331a8a3c1de685418

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e7d21d0ff1037ec75953b6d44b8379a8

SHA1
dbac59977ba00a610531e1b06f029213a0d92d6c

SHA256
e9178fef7dce69b1a6b34e744bc1e9e856022a0c2b78b76fd56f905a1f03407a

SHA512
e262a33e5ce205a43cacb1aa4420f003894d19a090a57313ed0dede6f2b794f3ea76b3d497210a0b49e2ce1bef4abb08e625c0fd772ee310094b7c1ed191b8dc

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
fc75e1d15b8b8102f4d4b140c312a01a

SHA1
c6f7a8386d010034fd7f87ac6afaba1472a7a7d1

SHA256
7495fdfede34fb14ee14767dd4a95d8684ef433aa332733fe66100598140f2de

SHA512
6a5e9b0227ca5770ab76937a22a3ac7f4a4da797d21c83a27049cd53998a2f051d3f81a5ffd7c254970ee36cf741209cd2a2e402f6c0ddae9ca0eb46c2bd99d5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
e27b98556c7989cc7f0ad1f44fcb6e2f

SHA1
93e417ffd7c50915f0952470c62ea1e4d09d12e2

SHA256
936e22e918797815fe39436b742ac8b0745a87d0111fd25d2abd7224cbdd8542

SHA512
6a94b1692102bf72bc4dbbd6beda992ce5e2752df774b781129ba2cc5ab67bbcd3bd6db62b07936efc16162579834afc8bbc2082443f019abf60773cb02cc943

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
aecfc1f75a4f3bfca4c1b45447d5a263

SHA1
afd4ad74a25523f1e31d627f8a7a35d4c29155a4

SHA256
c7b3a4729b641a496736ad8f327fe379b075b202b32ffb44838c901a3ded8a73

SHA512
204c286e6520c18a36b7d2049c8630ef2522210bda369c2b84cf4f85e4c6f989cfd7902bc13819f25c33e6ea7b9a2210fe6475d8a22427d9655a7f459a9a72eb

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
7dd499a4958455a082b51c32017158a1

SHA1
f29c6372d1bde10210194625348ed71a25d21527

SHA256
031c89f3321bc1945f70b3fd7e5c87b01990727341db5eadd85fcd4f968895ae

SHA512
bbfb789cbda179e765c1c9b7d2bc764541968f9487903e5a45b68cd10475d29713f6a113a9a4a989e9e081a95e8cff1790b794435733f2a0f355ff64435beea3

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e13fa99dd9d2ef16211dacd8e0e9e998

SHA1
bb84a92844f36809665d8679c5ecf07964dab6d3

SHA256
fe9ff948eff11cb30cf7e31b4b5075a4b09725905004f9d74a5a66405f79f9a1

SHA512
1c3f3a8923b1d7ce429cb89185d840216e5e59261d32073f5e836e7fba6701f772409eb4eab06b9b5c8fbef3d82d004ffa562f6baa261503013183d0fa88fe55

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
8cd60d629b50404797bc8e1fbf95a9fc

SHA1
86fb22a883899235ff615a073173b6789e54f939

SHA256
25e1c2b7174fdcfb992157b88e8c239193b71cdb45ca60bc39689067901ba90e

SHA512
6825fda62ae5a2121f15667c5630288b9233e9d08dabec77fe07054bbcd8cae38bb9aae2c8d95b1df85a124b4bd0c0d27adede3142a65e1cd9e25a254d01eca3

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
5182d6fa95422f29f7b9153846e985a1

SHA1
bd69fd25f06781c04e56bfe8408c949657c83907

SHA256
26f5f2205c473c0f406abe5592bf2bf6a7f226a709c5ed2e73d2a9f87f0889db

SHA512
fb8b13341f9c046a27bff8f523493cbec0189528d685f87d13ba95485286b6821ed9ca72b720575dcecd192f870c9e2699ef5088fdbcf01116ecf737e85e631d

Download Submit
/data/data/com.systemservice/files/PersistedInstallation5515202025127519335tmp

Filesize
90B

MD5
6fddbf166ab9c00a08a66ed592391842

SHA1
5909073396ac7a8ad8d511f2cf30c492e84658c1

SHA256
ab5ecd63d956922a136f9728198c3d9873d7eec752c419df72a0120e33961b62

SHA512
e7035fe2b497f16a370834d2234c329133042dadbe7f3b98f69a45fb460319bbd615f9f349b9675e0db53da3f40fbf4ae888ebd8a7cb7dd099b41a7e953b2467

Download Submit
/data/data/com.systemservice/files/PersistedInstallation7027928522341050108tmp

Filesize
556B

MD5
15650d563784b7ada98bc7686bbf04e1

SHA1
08bcb401cbc76bcad41a86e51827db70ce831d29

SHA256
4da1652d97543f49c170e6907449fbe780d5168432ddd83cfe9985d483ce6d6b

SHA512
48ec8dadba564b35774de989c5673a8b28d5f64a652dc05db66b507dd7dc4b6c1e6bd25bb324366ba40a9fae41bda392dfdf16cee335f434aca15ad180a59c43

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
ca9ec15b87b5517c2042c38706af1ab3

SHA1
b4c12725a31e89799937d4ca43c780cf86999ad9

SHA256
6ac800c93e4fedea5767f7aa37f2ea6b7ed61f81737e96fbdd82b86bcac9250b

SHA512
65fdf8ff36e9080cc1aeae55a2109b13179c1d38d36a1c24af479cc41d200c1c94d483ece11e695d2d89bbd5ba801491c971d49356f5e39624eb96d46652fe9d

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads