92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
27/11/2024, 02:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4245

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
a6cf747836595352a43ae14c151d30b7

SHA1
9da91fb6f550d5aeda6010920ac6a0a2d35d6988

SHA256
327d3f96cb32483890772a122d740cbaf61ce45e9474c67ba00c2097c04d8d6c

SHA512
1790022ca73e83073895142aadda7c37c519dfda8ad24705869638eaaf507638943911a0fad8632c36200b00944da1ceff0bfd952831d1e0c91da650019f8fce

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
2d19cb0e568f875dc6184d9d322bc871

SHA1
deca601c740b156f275b6435a46b2433fe787bd7

SHA256
28b0721846ee6b13b2d27c34aa13801fa15465c964023d3626acb826f97273f8

SHA512
df863c84cb5cd84b83092a8f40e90df88b046a5ab5cac8012341d3c16497245ba4c979b6ec8f368183909dd5279df811e338d1c539452fd3a2ebc9d60343ad24

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
394a64bc91db75bcbcf4a27dc18b1c4b

SHA1
25a3fe31b0ebf45ca4a199bab47e6edf16e50e28

SHA256
be098579ad051d0447c1f8f995665a1ccc1a70fca0b297fc4ed4ccbb382d6860

SHA512
797f07995460858414ed41036690752cc74c23ae3a45c960528e569afad10cafba75a9497ab4650f2302b9f9ed5ceb126e78cb9ce930c804d83e655360f75c68

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
78b3ca7d9443d7aae0d3c5b3e490f71d

SHA1
e1f49ec5eb34f5f1ee7e4c3bf161062af0eec808

SHA256
9e1766666244c89c27b030faeffb303ef0501cf8f3ba9ebcc20a6feae5f4857b

SHA512
6e7f7def2d97ca1a679a13c565cfc3f4b090a8d4ffd46d72db81ef2fcf5d8ef44214c8c817dff191361f442bea6b82e406e9704c6d2cef5f88d3c4bff81fa9cd

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
8356c57aa7d1c93f730633d8ffa05cb5

SHA1
68367729a14d0b736a1245978fed272508b2b155

SHA256
c5ee34ecc24b478d856ce73d37c7325389dcbc67200c5c3e895864e6dbb23187

SHA512
29d4687a0346db8388afb6233bd6d874e97634deaac84a8a3fc997c4f5ce16bd2db6ecac29b7eaeb20f010d4a56116ca954e6304cf110cfed532b5553fe7a6f9

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2c2d9fdac2cf1588fac92a2ee84f8548

SHA1
7e12d309359090e581905da948c51c5e35b81096

SHA256
d914ebc4bdbde8f74cfd3a0130b4ff9d87ce369076025bc3a70f8654c2d475f8

SHA512
a41b61bf95c8c31f60ca7ea08b4d6d13202d1080ff4c6395574237931301cef217ca55299732ee8dc7d517149793c80d812882e50a62368216253b87a0b378bf

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
8faad321ff924c9495a7ceba6a7e0a5a

SHA1
9cfcb18c35c8251a5a9eac1540d3ab946448a245

SHA256
5f6811f717f7e3d3b9124ccf4da51a6f51fce3dc7a4fdc6b35ffe7bf37e49c4f

SHA512
183ebf40c3ef8b9c45871b81887ddc32d2b7ac1b9b322240870e50ffe7da6d81953c41d626c7235ca200949fd0518824ea743760665d1a994c7a92cf4d9522bd

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
3d55e61106ccf9d36b293ad1ba4d09a0

SHA1
8df5ab7bcf64a46b6e7f882438ec12326263a0f5

SHA256
4d44cb4f46fde9be15661db975a50065a2121ba85ff6d9ae58f8643366115c43

SHA512
9d817fd4a5ca85995ff0f5eb0f6459df00ea3145bfdd1024cc3420bf3b29f5ed78bf89540886bf29193e37d308b07b1170852b33e344eedea9397d1a18a01e96

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
cf11751855e66a96c30c245c163b43bd

SHA1
46720bbaf34c7f321b1d442cfc7eb71ac101c1f2

SHA256
b4f9b241f97a6a15beba679fe5f2491cbf87fe8acfc9b8d86bd4016e4a97211e

SHA512
e2d81e8bc9615e387808819a8247bbaa95d21f78a18ae951d8eaa6f118a912996420a1caa9413aba8e6b1dc0d32e6b04189437169532df38cf3979dd4bb1bb79

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
1d6dbe4b36c4cfe9a27abde772f02026

SHA1
0ba9ae395c07b955dd0caea38393387dfb12de14

SHA256
8b2130b2cd7b1207757553760894704eff50c6ff1f1ca5b5d62d3317a5dd66c2

SHA512
611b560c0c5741ab4d932439142a392a50b7ada6e9f216c2febb06863933a2638794f489998de283efbff6e1bba4a6490d346bf214624e686b2ca7b5590af0a8

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
b6127a517a3e46d0f0c0d2ba845f9cdc

SHA1
bb1211ab5927901acf2e2e7631c260980ddf8a73

SHA256
8de23e303106632954f21ac10d6b50b32a64bef460c00e576d74dd2fa0c3e6a2

SHA512
94df7b9d1e035e3810660482f6ab018ef01953ff27e03953a9fcbc37cc1c2d97f325a85ec0a2b09f84f4dfa9efecb796faf0ee355de58abb58b74888c81103d3

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c984980634ba0b68047e3c8536a307ca

SHA1
05e4b2da3b1b41f73500befbf8638f739bc8c262

SHA256
4f393fef47f09011d16800d31d958655524edc90357b9956fef9530a8ad5da3b

SHA512
ce8580a6756038323b27c39ffa45a8b7445bdc1bd646ffe8ed26804b25759315d215d808fb6b6c95f0ccc0b887cdc5e4cd2bb8e388cd9ab084f2e6d8425c6c0e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
5c7882ad85efc8317278f5a7341de526

SHA1
f8d6e1ec3a25948086663c3f6319da122fa60fda

SHA256
15683c4e7bd32127a9dc9f2d2e2c8768891bd20c00a72a98a8c55818a59e3f66

SHA512
a075d775e6c5276e3a1399b0bdad03960a29c5b5ea529a159db272fdb15dcae898c395594f5ac42f5cb0335667a0ca9941ec857c13f9c451a6ca4f247a0067d6

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2789666952444613379tmp

Filesize
554B

MD5
7a8e25ecf414b5265afe632ec8a3875b

SHA1
c612b96ca8f7d690f2b816db004df5dc041b17ac

SHA256
38a084fa1eddeabc17f3541a2548b70ba95cd2024a5fbdba2da5032789de7199

SHA512
c1d46c0c7e21760ec531491ddea4ee7095dff2daa624a74df960765a32e065b04249499651cbf4bb7754466bb75b46a5bdf99e3345830b95f2263b66db05c6ff

Download Submit
/data/data/com.systemservice/files/PersistedInstallation7439510745987611340tmp

Filesize
90B

MD5
727f7b72a8806a3dd0527bc9adda81c3

SHA1
d2ec064980f9736ac1a13a901926b5db50c0a653

SHA256
7387e203bdbda1e9290a61490ebae79cc6d9fbdc3bf65d427af5fc840e7cc9ef

SHA512
9f322e3f87a1b76a80f2fd406b04c4cc24ff02c5c35daa6153ae148e862d96b9e74e051da1bab3d093bb02fc7663e0ee5d1df19d2a4b769fa916446780e74ce4

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
4e99bbcc5d2415b1c2dcb3fca366bad5

SHA1
0d1051de94c742f5a13e1139a8c46c9e1b330808

SHA256
7accfd01b8dc783edef579e35f5b489dd94ce3c29741cca297aa19ac927a86a1

SHA512
06bde9b015d6d578d358d9243af2d7e9ec11f84a285f541e45cdef3ef50899d021efd3db1ddd95d124c8523d938f37aca94264a2cf215a38310e1754856a70ed

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads