92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
127s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
02/12/2024, 02:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4248

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
5f2673dbd049cadb15776b0c015cc82a

SHA1
e72bb5e569b0c4665f895cdec53dcb34c92d1687

SHA256
b39383e14c5f1ed393606580ef0459124783b08a47a11198a48b2ef54d25341f

SHA512
d1affb67fbca7114b916d5e7a4b7d0b4633f9727e106462399e0cfa869457221c42a6e04c5f82ab1a95281f2efe5f728b03ce9360ff01062710565756b62c4b2

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
d3ef6ae1f241f1147df58f26642eac82

SHA1
ffbff132f2a24396360b06bf02a26935bc3619f8

SHA256
24473de4e59a7a28df7798926912aa895ca8937bebdb1f278a8ce4c9c5e06315

SHA512
8e16ac460d2bf96f40765cb7f3c2689301cc5cb31ca887b770a3f27141974cbf6d7ef96f42a44191308e65f835c7a22abed17ccbba334b3c9d0fb25e355b1ebc

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
30b9ff5abc4e06807f522eaf2660c78f

SHA1
cc7604da5959d4b5aaeb6104b20118c3826e3dee

SHA256
a276223e13e816ac12618d342c7a2d6a119f1e40b760e8ac7098789e17c18158

SHA512
275ec93adc5b3a99f9797c0fa8ae1c205cae577edfd9795ade920fe728497031268c3a8185b12f9706fd1e918e174d7e26f394d38b125799e2058bac51f8907a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
86cb82609f85e602384996e8b60cf33d

SHA1
065c94882f74014fef355eb2b30f6bc68a1881ac

SHA256
49ed8510d0e4839512ba291f9174d1f5b79eabb19fd5c777b3958000d73e4843

SHA512
8ffb4dbf64432ff336f2ffe8609a5db5f7d23cc15fed35ecefd58f6463afee5c9897fd679238d585247bd684c4a71584859d60f992772cd8963e40467f512c52

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
84c9b48aff6d067e50be6c8fe3f90389

SHA1
a046c4f59ab8e677ddb1310e42450d48f80abf42

SHA256
1850c143277a07ee671883d6c180b7448568735a4646455c6ea29920b061e8b6

SHA512
f17474b765bf09f421d9fb1d6adc771dde349a9965f84bc3e512599c37eee411e18782c49cebc6026b23df02e3e5a4d6542509fea3a85a477b5d4ec40a24998f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
cfc1615a309d4d7be4dd240adb86786d

SHA1
e39d8ac898c913b28eb7e68cc987a195b6f652b0

SHA256
252765252b910a25f8948e655f809f4e5604c9cdbe188bafaf4466cb01fce57a

SHA512
c5ecd519d5f44b88968b39248046b678e7ff0dd1774e660d7690d935334bb34201a9e415d3ad87ffe9c1925f598c0940ad8329a10ee80e9980fd47b24ad8b7fc

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
ddf28612f379605f8f4034b420bed0bf

SHA1
5da5b848f45100e8e016cd4a338bfc2c637c2348

SHA256
66ac4a6063b322d570fe43bb3c53838e6b86b5312e0bfe1bdfc1a6bf1c7c9595

SHA512
643ffba318400ba0a78dc7e2c51be139f33352c15da3b54a970fc8df0ae3927051645a5bf1f6b39d26ddd09b6dcd6ac11396f4d06805da6a63394032d166418d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
775d528e204477b0e7c5fb30003daecf

SHA1
e6e32f77cd6e2e93ff52c4273978195af9f702be

SHA256
facebb6a778e477bab61c53ab4e3027c4f7d32309b176254ba30f6d3e1e18ca7

SHA512
c65e231e7f9b64e250ef88d7a51abead5078a9b3a2f1f99476cae477da4aae8c7ab85bcd7ef3c5fdeb26748cd8db5a6cd35233ef8b3401646a757a83b411b746

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e2f8f8664d6b0639048e819396a8f136

SHA1
0c88a7494359892d90e0cb2e7f653ca36909f678

SHA256
efc812e4a851c074d979100a46cab3ad4a1665509330c11c9b9c9f15d1d83222

SHA512
69fa6877cacbeaa593afce8e64494626f76f2f9461016fc60a5d03f064b94b1d90c23a84469ae3ec471c90810d2b42e085919bb5c9e097a18a2512040cffa614

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
9ec80d929ad83da186d948bcd616e66f

SHA1
c7e35814f8d94806a99053cbe90060ee241af2a1

SHA256
8aee387da531d0887a0fc086d3e0abe27ced04857c5f5beed2d4ac4e75c32981

SHA512
f0eba80ea981a5b184c02f7daf9a2b84b078103425f823044de4acab1758689acce3087ad7f7c91a413c252603c0825a9eb553c3798ac62e67da7d5ad16577b9

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
515c22da2286ae547787aa989a84fb90

SHA1
c607209a7763fe29ccb63ffa821da091768ecbce

SHA256
bcc140e31937d3810a5c5701be2e49b9acbe534a05759be73beb1ffdcf7579e5

SHA512
7d9f7cf37837670ffb1a66220490f93e43aab56b7d7b54ed2f0f94726d5aa32a9327a977b49e126efd1f8d9fd8404db581794f8c0ae4a72a22e74fc1b9b5a35a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
4a1abfd2e227082975b659c875d3d445

SHA1
4c58ce29927f88d9002854a8bb78805c28dc1bc6

SHA256
eb1719ec3b6330d3130e6f7368cc8b4747e51831daaa0d7fff4ff4195f1f5282

SHA512
46ac50b13561d0a548052936732f7315660987ee578aa0281791f21b1f836dbf16334b1148ee7c8ad21b91cbf0cddff2f204753e8e9839dbc2a90daaae8abd03

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
99df89f6b3cf4515ec9ffd9b87c8eb28

SHA1
f60bcc461992c4a3f9939e35777d54c658bf39ec

SHA256
7abec299657066af388568481defbcc072dcc85c8faeb34a81617140f8a35a86

SHA512
9a7630769b28076d5ba360ead38e0f60b5b0a8f816c7e610b3a0efb58d171309ef7b8f262ce12a84840ee09207b800b75e0c0c6e9c02af30b87c4d29d821817c

Download Submit
/data/data/com.systemservice/files/PersistedInstallation5504344587803834547tmp

Filesize
90B

MD5
6e771f28af7b2f4c0733ffca30f9109d

SHA1
9182ec861b5c581b4c54e2c80d721198ae65dea2

SHA256
12d46ecf691e8ae95f14b8e51e7f94b3da5e55a341ca18eefbd851bc1f53dc1b

SHA512
4fb8d497eb786652b445ef0d61b2b7e05bd0b18461bf706a971843c521f2187dde23f984591710129ec4928ce0bafb6c2474d46acdfda539989032e2b975b33d

Download Submit
/data/data/com.systemservice/files/PersistedInstallation5792180050161827009tmp

Filesize
556B

MD5
4323e00dabf0f60429549e9c9746357c

SHA1
9e2b06eef1b23f689a5b4e9c2999a4f06c2be0de

SHA256
7739f81ae86bc5447a11d2b949cc36b75f6dca535b8faa4bb7058322db126b28

SHA512
47ef792b317571eb87402b52561972f27ed8b264ea18dd9829ef43612e98f91cb75b232ee81d650fec0d83c558f06e5b72b809e87b174b2f4d647ee9477e7b33

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
cfc64bcc238a357f3b0f71e4c7601c0f

SHA1
efc61b442844f5e87aa5fd2d6e5f33f5822d9671

SHA256
5c8e3cebfbf28b6b44b8a952f6b98feb28e3ca652f8c6cdc6a523d7577c2306e

SHA512
2e42b46f09f02f6ab806e1f0fb2d58d0c303b91d8d53b1bf0b79c5e2d9fda5e29330cc315bce4749a48989a6d249d5dc91aa8ee003c19a3e2c870263b0b190e2

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads