92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
16s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
26-11-2024 02:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4256

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
4a576abd5315c1666bbd2ce3a6eb8c7d

SHA1
812ee8a185eb772fd5a24948ddcd8fac5d5d72c5

SHA256
d2c71f4199bab3c2e0739eb61af382931b28ce11c5445d7d2a5686510a51e0b1

SHA512
84c0f48047cd0a5d13e0273bd56375a9d7d698ae46a114c82689cd01c1a325d8406352ef95d958927d50a5e4ad81a20db6bc4761f724d031e7b43e2008dc9e33

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
f0843f17d9e0dbd3383188512dcee465

SHA1
d8b723375f5db5b95e2212431893e81ca5eae7bc

SHA256
1a664b35f9d7517c04cf969f2634618787009b28e030c3c71dc44a9ab3596af2

SHA512
381da0ea3bb6253cb4d416130e31c3dbf0f5f63a95e28e83f919a08d3b0ed190ba3bac7177b83196faab357896fcab66ed81e5d2e5c5269f24f23a136f00299e

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e856253ac05ec8e304e7688e1f0c43e7

SHA1
31b185fe4649bf894cdd31217faea4a9c92377f4

SHA256
257f8bd2ce67bb195aa9ec11010065904d2fd3ce0e27f72a8a23376a86dc447c

SHA512
9f0fff2d368e095cddf40f4597d26026e2a87aeb9f4b422b5027076d0244b1a8113f288718745e5041edf7d5d07543b93ad1a164f5d9419e717c3bcc8d9036f7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
798c74f6284b2e53b6483400d3f67f32

SHA1
e625e55389435913befa0ee6a80fcdfbef89a633

SHA256
ba4e0676d30ecaeb54cd69564fa1d8c3b6378e2c4dc8944c19e1247c13eda02f

SHA512
8aeb951fd93a90144c778d507b2189b8c6f12f17493728991709b3c9a1a7615f732e82791a29079550da2fc2f1da80b12b85bb8d7569a30685ba2a8a08d658d0

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
3580344df799de17f5acd361a4c6a7ce

SHA1
d15b09d806f3f8e7f384b003cdb19a6e0c338b00

SHA256
9caeffadc64cde0b91dac8da0230497c01c48029a649153174e61a5067f2b14c

SHA512
7e1cba6ab1cc9fde579c87f4a62c8cd4238dd5d6d233a12d8185fa764ad30747fb85e86383467555a67321d50ab823b9beed935753d5b264006a11507146ff9c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
434851524f660e84fa75da30c426bd2a

SHA1
667d514c97b58fe1e9749eea3895a89692c8f894

SHA256
78d8a9c9a7b8b68ed58c8751f16f0eea53602c1023af187aca98df92b5cdeb5d

SHA512
2f9712f40a243bfa7d28373e2e53540c31264fcef233422a37dbeaf721165b3361a7934effa7e9deec00636af486e5311e25eb2b3269bda76d3dca415511591c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
4179c95f286845cf17797519abbc4189

SHA1
6ffa2c56ad2a3817b7a9119a575e3a15615b5cc2

SHA256
2c36169628cf2c29d3baf5089c8e15c772af7c9e2d695d3829486026f67a19ff

SHA512
220f8aea2ee94a2253e47762dd037713999f0086c6a19c62c93dc9bc5c3b0cdb22489b855b490a066ff0a6fc9c93df6fa312d943ce0fb2d4647329b1aa81c824

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
e9c011de2c1cd81d158ec1942a75a660

SHA1
43aa0054f47db2ca64495a60a7a1dda9d0f36083

SHA256
27443bc1862bf61ba9175761e72a68354402c3301fba15a7bc2fbaae4a3c3558

SHA512
34e745c25021b42b86e186df91e8cd628a7e8165a4a2521eb790e064e29f07d4e8b8fc3ce8f7a5d70b2cdbc2faed23491eeaa4b843410fe874e49b3d80fad7a4

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
94ceeffb08c51dc9ce8c762b8b64d79a

SHA1
a4d3323f2014257ec05d37a2ce949a935d50fd8a

SHA256
233f81e20c8ca248545abb0676ca8635abb6632bc4e83c1f491c19577fcf1454

SHA512
05a5767951a0b9b4c6d6af63d17f0ea58a569945080ce2dcdd24a5f2b586553315d70edf5a37050563f1b7fcf260cfe8a0cb51012c9e44290e5142685d49aafe

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
40399809d433538e77a48f9b30d7d95f

SHA1
800a1d6b048423239c7f83f6b91fdbe3a2f07c4c

SHA256
c4210e4cc2e5e7e0320e453b91864eddba4008ee4529bd845e59c17f2274d847

SHA512
4fd0d5949c52df611e0a2ff957614fab769540c7159af331bca7bc595931b9dd3a277bff5feff2f706856c73183eef53975436d93b55c4847434385443708ab8

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
b455da58fe077579c7319e57c3be0e3d

SHA1
744e4c20a97d8a69b984486d0c9e6f3dcc97792d

SHA256
989f2cd6ab66ca9d36992c759098edee330ff2db1b53406128c8e662e90482d0

SHA512
33be0fb91b5851abe1f593196a729469e95c71b7e944a4768e7dc2ba3fea34d7f0acde1c831874c20409091fac82dfb990f7132b6c75913b69c853eb4320c523

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
bd4b72ed2af21483b3df37589827981b

SHA1
c83be5117cceec4600f545819f042d1c560407d0

SHA256
e5941a4ed70b93904dafd3fff3205d580594bda13fb221b0e267ccf740283820

SHA512
6fd817400edc5d551ff9cd557caa1eb4071b7eab14af0a72ed68a85d852b1882fc1c4bdb2e475948dada4db857b8131039a4ab0685a0c3ed796c515022e452fc

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
50433b9f33477b2a8318db02fd9b5acf

SHA1
60a0bcaf257b195f2301bf5f6bf6f00f57426e03

SHA256
f88cf76ba311833defcc145666310ac9eac5ef2d2213498d81e8806c5754cfa9

SHA512
c2d01c7098cf5ddbff6edb485f54b049543c475e30834d151fc15ccab41fb4053149da7fbdc998256b9cfb5f2db2fdebdc7c59d50448002ff6961ffd66817435

Download Submit
/data/data/com.systemservice/files/PersistedInstallation4568468165388998432tmp

Filesize
554B

MD5
f25c33d02fa087d660c79ee4fd49e320

SHA1
3124179c2e5bae01a9636c5b88ceb3d87f88d903

SHA256
54b1ead41baedc8596119ad78e2a4753d10b2575c3c4b3f4f3df100b4c56568d

SHA512
3b7ef818f5851b415e95cc6b00735bd9954444cc05e28cd0bb9f07c2d9752248187b9ec11fdc83c55578dbee46a3aac9c42d0bd48e7a727772f6b609bbdb96e4

Download Submit
/data/data/com.systemservice/files/PersistedInstallation8263729118904646784tmp

Filesize
90B

MD5
18e78f9b47fd4f8ad94f39aca4554884

SHA1
4a98af4466df9ab236eadd1394f8c74bf4e102f8

SHA256
974045a5d5c02ce646f4c5bfc28c4f82b08e593c33d8d0fc955e35f2e363aaa5

SHA512
324ec8dabec34e119cee88395425f0a43f0cbaf28614edb96632dff27ab87125f712b9c080de926ac4b7e8b1ada33b3c5691c45a5e3c88c638ab77715cfed9cf

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
4a9eba71571bcb1167934a48c2913d12

SHA1
57ce6877088c92d98b8e5461b41e1a3bc362ce93

SHA256
777f7cc34d4de9e49262a4b11bb8c1fececc1bd935fa72e33325a1079bbd00d9

SHA512
4b7609c9ee3df3d2caa49b379df663b7336e910bae3c336896a1a7006b37a266bd014cb1fcf95d334a89fdccdff8377c2eba19232889f15157ddc0372307d604

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads