92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
23-11-2024 02:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

Clipboard Data
T1414

Transmitted Data Manipulation
T1641.001

Processes:

com.systemservice

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.systemservice
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice
Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.systemservice

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.systemservice

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4254

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
2d291b10cf8b717584e04fc46cf9a785

SHA1
b2e7c06d86d559096361ee03e9366e1014daccd3

SHA256
6424d647ad3cb1cf2194306dc0d572031494522af5ab64f52473b289b541a6b4

SHA512
7f5922ab5dafc7f5c8837aeaeaff1b3f9e5cc7009ba994560becb51df6e27bfe994ee507e4e6c76fabc898e4fe29234dbcbacdf393ef575c2e43210bbde9b11d

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
220eda40cd9493eaa028876ad3eeb9b7

SHA1
08f5ef071f245f11c41d06e616014ec0f66a4daf

SHA256
e33b1a9c947ebe4f828d661f8523cbbe2ce5250d2b2309de9d9312824aa5a256

SHA512
e7b483b995f0a0d5f69f3d2fda1b0af1b1e78b6d7222a642296c614a47260e5ad670ee1a9e7f0b15974ce28ded941de51c86a3e62d83b2d9e6e35f07b4675b67

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5690d8d8d5f496729449013f53443587

SHA1
dc987bec233104a2d84be469fd03bb07ec831ab7

SHA256
731b9ebbba07c1c5912eb1876b9f2b8c48aab11889660ef47b5b7100f2422ada

SHA512
7ce7a1e1d52c6e981408510a67ea4bc113b209392a309a84a9b5190208fe729d9eb29bf7f0365db3eaa3c4faa4120ea0655e136223c54bdff4ef0a65c6837acd

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
b667880fe1d3c6abab60c898b840d3e9

SHA1
2847d1e804d9d2d838096c8213345aed81ff8d75

SHA256
ae34c154bc07bb9092fc09ccfbdcaa68541a363fbea98f248e40e1fbf1b76678

SHA512
9374cc4da6fb87dd6e938e17a2f5ea3dcacaa80d667d9e0c7d72d77dfdece67112f3f9bc1e5047bf109fa6a025038f42e7d073d9ad45044ab21136915cda1e12

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a0e62029a3cfb2d3cb31c489c3ede6f1

SHA1
579fadaa1ae4b88bba218650cb0586c30a72a2a0

SHA256
12c2fd377ff1573ce6fd51b7ac0b63e14dddb997e7ff902a6fe46641b9f0e691

SHA512
502eddc60e41224838e5b39cff93d592a5e3030c99018c66a44a0c76785a25d9f1765fd7550872847e56caf40daf15f976e6dc097bc8ab1e5584558b9fbff89a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
fb6e59d25fb90f17517ec0fb4c61354f

SHA1
8043bfad98d754cdb51780731d3cf7d3db3124a9

SHA256
067c9f66f0db857dbdf73a6444600ff30dfeadb7a8f920841014dd03aa4ede1d

SHA512
e3198c96e2e70ca8ba841be67991f81a1fe2946471e87181a573e81a8cad8dae5e78078ef9adf9dbf19f1afd0ea50bad5b2dc2927087afb09f4bcf0272c5a2ed

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
c6f3ec80e551ab2d00fee34da8c40848

SHA1
3a651e5cca7638059757642a498c027d454e0324

SHA256
c1f74c6e55af87580528b4f6f792b81acaf383cffe8bd15bf8749249b11f8273

SHA512
76d2fcd97b5d826146914663c86eb71874a81dedc2e70d77e69e1bd27f2ed0488f5a6b68994208546762c072cf76dcb61a698a67369500c79883f11de2dfe7e7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
16ec37fd8c56ef2bd2a3a31735d5b5b7

SHA1
7923cbf05309d82456ff6f5e086cf682ff037591

SHA256
52d724b9f73b342167325783afb68002f2a47f7227ee56e0f20d0088c1efe22e

SHA512
e5d2873dc3a0a94d14553f0e47d1f8bc1834488c7da7120ffe23492976e13ec8840ce8b32b47dc66be07e3d80d58bce18a661120442808f23e5d86c4063d4079

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e4763e7fdd6ce1eac04fd6a15500517e

SHA1
ccbf3727a7e818c3b446580552930276041d61bc

SHA256
03d547118356a89ab857c2e007d39e8f7afd34d8c6076c59a905396097b038df

SHA512
5041ccb3f6769c355a5550e8d7e0e35ee499876da7188536bf2078143ca98f2bb73c338be5779006a082f4fcc3310ef0cc358336d44199dc02bce4181183974e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
f9aa4a2a95b49111f07bf881b29940d3

SHA1
77f00be6f50768fb71dc8af119b30f340c0d06fc

SHA256
213f0ec637b861683fe04ea95710dfde39e5c686ced56cb91f802e8566076077

SHA512
5a27cf5a608c3067150931530ab6079bc9cd9a6bf70785cd89bb07d58d81bede7baafb134c890f7ddd9f7151974776eae3f2b6ca3d5f026fcced7baed0d1ad12

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
414de4a482bb166909b903b995f34077

SHA1
209aee686e50b5bc7dd0134ea940965d2819998a

SHA256
de42519e8bb38b05eb9cb7463d9d80426af98581bd443b7c545249e479cff857

SHA512
6b4049fe8d441355615e1b0503698d83ba1eebaed6c6d855e9841070d8c836807cb54703ff8a226318b65694247c7cef42ca6e0ad2ba763347752b812fe5e70c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
750015de983278210955532a9238bb08

SHA1
1f0ec3af8e3c7daebf6eb6749b93f01215b4ff5e

SHA256
2300d28f0400ca646c56c3578d71ba3ed26c11c20b8aac4956e21ee85b30be4d

SHA512
a4c0a7525253f82bc120453dad6f79c44b8e52e4c7986bc42d46f72e93afc6def2ce20f140864751667e98706e7a40ae1ab9e6c882414c4f377776db83ae30da

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
72ee1f49917ef376f80c53bba97174d3

SHA1
5a770e7e50953821b57b5a192f9ed70877a1b10b

SHA256
9b4dd5fecb158325bb04fa47467951f2e43363d786d2e8f9c5da7e66d40345ef

SHA512
c82428820cd60d3ab9bba82820ccf55a5e1ba5d26f2058e57f3994d8ad521bf2e55cfb814b6eafcf9f2ec45ceeba5f8113d58ed89877ed3c8953bb78c9d898d3

Download Submit
/data/data/com.systemservice/files/PersistedInstallation5307124621329041156tmp

Filesize
556B

MD5
26f2fde3afa8c2c7f9fb1bdf82bd254f

SHA1
49ecc8933ec7815c511e0aa5bbf32159b338158d

SHA256
ceab217f6496bb61e072e694e4c3d47497089120da2824220feecbba55555cfa

SHA512
76691de9f3e78871473db2088563097eb56f0ec40d7455fa2adacb85399349a5eee9a853e2a87d46f07abe7262cd32e779bac28cd44ca1c1afdc433f1a4de33a

Download Submit
/data/data/com.systemservice/files/PersistedInstallation8571765594751323467tmp

Filesize
90B

MD5
a21d5bbb90209c2b063e0d4a5d287b8f

SHA1
17068f4407bcea14dd6fde30da333b15d19c0ee2

SHA256
b5badb88b3f558089dd524ca56acc42890aea48591888893c7eace7da82a90fe

SHA512
6fb3aaab9b859fe91d536f40417226f03d9dbb43bf21f124193ad5cc5f3cbd8ee1c76b26f3f5e5103f41756219669cc73f9f94c0f43e64060989b01a80e6356a

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
d41b12e0cd58b7dad14ce26c4c35db34

SHA1
6de1ce341dfd3c3c2a93e69ade19c7319801af94

SHA256
a6f5b267cbd22bb4c2f518b5a0e78ad9cd7aa7a575f455225ecc2f4fc76b5df6

SHA512
bb5c2009d13a34308d2d360d34ddb85bd23d487a70ed9a387f2127761a199979f972686ab09ced05c532a2070e0457693222d0437964a8642b4eb3ac0a229337

Download Submit