92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
19-11-2024 02:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4261

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
171a6470dfa8d69860d4f9133eb607e7

SHA1
7ee63c4186bc0600673628d1813562dd9010f46b

SHA256
116f187160d2c93177427ff1756d2a8768369698c8596dd8b12b22f1c7ac2654

SHA512
31d27aa9611d96fa657a06db45c4275571cb1b4a114ec2f364d97d591e383f88d59c021ef6b8fa782490f67744b26ed5998aa1af916fd26c22a507ba8aa7b72b

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
68352104f5bc360d65d24dfbe6870f31

SHA1
c96d09b3b012ed315852269618f6bbce41292607

SHA256
4151584b8acef148c8ae87ff6e905372074b78b2f6fa75ca90fb925f2dd2a5ef

SHA512
5aafbd79e554cc0630f9f005d733f18361582539980a295fce7fa4e002ada73dda32d50107937f3f640c2c4dffd81eedcff2981ba4cc45da44ad8de745a5de10

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
c21af7e2f60295a19f45f4f897fff557

SHA1
1bba92fa0f2d7ee21cd123daa5bfb58663830196

SHA256
c77b16bb5cc9aae8783ab37f76ee1b76d76f74118288d8482db3153d01cf7902

SHA512
0552113d50a4bf8fe5759515e0eb6a0edd0242be2f63667434e7c8475fe7c73acc4a119f0f9c5d9f23eace5ba34c471283464c059b0c61fff74b9ce6035e7099

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5cc4a8232d57cf46234ae8aa6d469589

SHA1
f4d6ebcd616a78bba2eaf99d59ce5eb107829654

SHA256
9b910144e726d79455fdfa3ac7182980c0939d2383a0a22eef5c0c8750aebf01

SHA512
01158eef83ea4d34e59c54ae13a8389c8f370444b877fefe1a9dc1d335199428db2bbaa3852cbcbb458275b890f04ff39bd95990e9bc41e33d9df8afd1802ffe

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
3daefe072b3cbbdb8e322bcde8c551f2

SHA1
c131917378550c90681cdf6a5489d699aaf5682e

SHA256
4aedbb8f8a6cd8743a1d18acf6c382d50d7bcd75006a12700f69d9a5f619ddd3

SHA512
d6b701f2476b6ea085a3fed235fd16a5490c6e65a6c435a48d9432246ce051f5ee043c46fdbb19f3af9e9f062bb745d52a0725ad7082607dfb11bc5f792dc7ed

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
ebac9c52d983fbd11cc92b7495d06639

SHA1
6b24c600ae3d0a5cd4adc6e2d396332c9be916e8

SHA256
b604064a4371cb1428f97ce6f6515278b70e64175c97fbb6f10884d68ac25a8f

SHA512
58e5795336be16ee63309622436dda5feba415af8b8fa7d7188b30edc995046ae99ee8f16306e56015cfdcabee57c203821449566540a6e555cf8d53cb19b38f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
a3293b5d481ba2296af3a210bff34790

SHA1
32546247a44f117fe3e90b6cca24d08feba531dd

SHA256
dc808a4f2feab6ee7314fc11206054625e36f84340a73baacf1f2f368061b7c6

SHA512
baafc7c92a83158648253e857c9e46f64cc8decef910412516b4f35359319bfff571284314fa39bb4acf31c69f6507552e23d9cfd754ced062820bfdecb29853

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
5ff2db07c7478d91cba1d846b16dc1c2

SHA1
0a82b5c9dd90abebf6dd031acde28f702d2080e4

SHA256
627bcd7643f43129504e386361a18aa1753b818a2a633baa073577cb3abf9816

SHA512
644a9d1f1684f80076068f69ac241215bb153738784e2e089f105b94a3a742c767604f16af44a92819d1290647a72f3e886c271d18919efb31c19ab6f83f0c00

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
092569dc9011abf289365b915d64183d

SHA1
e339cbcd3becff30b4e146b661133646a3b6f46b

SHA256
47cbe76bf11a2334f60487f3cfc95c6227c70274b752bb722f4fad4a96d4f523

SHA512
fac922ad87c168d45b355bcb70e92aa0c128efb6b67ac80af28fe8734efcfcd121f0aeebeb6d886618344d320d07d08a5a18711e0ac2acfc3aa30dc443dbfcec

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
2cc6addeadfa00132773ea6905eb4a81

SHA1
14fc0032bf464cf626bf0d8297068aecafaa5701

SHA256
bd583b3f8f2f1a269a2e7088dd59d3cad0c9aa42ab30f6679ceeeebe14231a5e

SHA512
dc81d2c3fda8912f24949bf680600bc7a0b949ec052c1cb0cc5a5ce8780611f42154434b29b7a60c062d45163b4f1e2c5f4af37c9a22cedb322190c110e7da4e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
a1948f8e189f24c95104d46d7e9a5a27

SHA1
a3746201104a1bad2eef670f947edd7cd803b46e

SHA256
3006cc5c2e436601e624f674d4f5ce1c1b298d2c687924e2d85320bf30d04e7e

SHA512
3eb956bccf74921c859d5cef58cfac91775652a74e9054929c8a31eba184789bda50b62cab055a073a20b6274fa52287c64420a3e8a5eaf82aee03342d2b5a79

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
39ab2cf7c6fd0022f1da0832128bbdd2

SHA1
081ec27ec4cb51c4faae82160de0ec9d1e474329

SHA256
5a2b3fd1b996c3e3b02c1af254ab54255f0608a7c1a80f32b6b9b3aeff80ce69

SHA512
9e4ecb7a01f767e6aabb5b134caa29a6d548d64c64e469d49d87ba9a390c2c7776ba40e478f519cc33324bb7465227d24f1c1e12c6f6302bc16c0d2960456cf1

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
af0d9e1d6e5c1fb29db810cb9ab9142d

SHA1
cf34512bc1d4e13df5792e29db1fa7c4117c22e1

SHA256
3c46f7facca3777e0b66bb158ab56c4e6e6b79499f4e9b9ddd9d32e36eba63d3

SHA512
756a35c6e8c55c8ac17c43d3fe6351863fb7363c86cfa7b032b43cc82e08daf6a8fc03ec36c6e4528bc8303b98c26281177fce73cbd283481734a49009b1f774

Download Submit
/data/data/com.systemservice/files/PersistedInstallation1671621519289658230tmp

Filesize
554B

MD5
cc01a951b87b48690267321a7f336074

SHA1
a9318f548243217591b39a5a184e8805ad983362

SHA256
f3576420cc4c43fd5a055e3a6cfc97ee9d2c62845d0a751296740b7ffb975948

SHA512
75532ae57ef86aec00d9241e5db49a7564a6f58c03680651064cde30b6e23ec71559826df6ac2e849615b46006e5018ad7712e944f5f4852b4ec7daf5e9b4989

Download Submit
/data/data/com.systemservice/files/PersistedInstallation4765142925623051942tmp

Filesize
90B

MD5
18f7a5a65cba6dadcb0160dba505cc75

SHA1
342ed4dd92f840f624046872da756ef667589093

SHA256
271e4183a8b3a010bea1cffa6f5ad0bddb595b93cefa5288cd31dd658f7005f7

SHA512
3cde72b5743129304fa996c64b80698277429d34d3237b946ee40e1f6ca6fdad11cf2335ad1deee4d274a4544ac1ffa8adf847727f4eb84b2439feb9f7f403c8

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
afe715f1a8b9915e4dad99904a1fcc2e

SHA1
f4d8400b77fe70eea32403c6c1a4894253654ede

SHA256
af6762eeb226f13acc24e9ee752dee90cf1c58c7bf1db001e9ecb2c0e387a049

SHA512
54259fe3902fa31e2371c24bc4c267d7bff294776adfa9022b3e56e595d3e05b8b0c24d7954c98e7d660706ec13879b9086090c683fd7bb4164e2fe3fd5f9f5d

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads