92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
16s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
05-12-2024 02:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4252

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
f7795f95325c7bfa0108a4efb44a8239

SHA1
b84b1c19ff2e105c0f669b307974612d135b23b8

SHA256
f1fa28e941dff38e1e56a4cde44332351f750feeba5741db3f055050aabfabd1

SHA512
3a7d5a3d4166783a23dbb74b2e8c09e2dd0c64cf315db099a297a59ad8bf805a7a65b3bac24f407af53447c716afbfc4ca6546370fc235ef44f88fe85f18526a

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
573e9f7348515e379f47806ba587dcca

SHA1
29571b0bece86b52a47e9c1e1c0ab199cd544d76

SHA256
1efa57154ad11e9e72688ebf1e15f26bd73356e58aae3b212f7eb85e6b1d89de

SHA512
5d773b91cbbe8f306348cbbf2891c2a36135d0bb6406bc5315b8c405729d823a70057d214fec570136b398324ecd8f42934d9a5e4d70e5d982b4bce4bcf4e8bf

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
6fad6a6e7d8f4e25dcae25cc5f316017

SHA1
3650bf6f90f470ff5ef40ae8d5721450d7229ff2

SHA256
f152358a55554d0b499537984d6781011cbbbe1ebe80f2bd68f3524f9fe96539

SHA512
f0b8be348ee41fc38307570e47d72339e0802c1af57be4b682fdaeeaaf543917b89a9f04ef3f5d803140304b3b71241db275477dcefeb80b2018ace1225b5eb5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
32859f3847dbb671826b519368deeeb1

SHA1
3228ca1572a8b6b68c62758e7aecda22957e89f9

SHA256
a9bf1457379ef95d1ae4042c89572da175833f1d0c2159752db338aa8007e922

SHA512
38988bae20e23603da3a9870e5077ff4ef16531740a357c8ee8558fab924f1c6d9f4dde041d997b7dbddbac894248701ffefde370abe783a46f5de297b7abc42

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
c3ee6be92a341cf0eeea5a04ddd4ecd9

SHA1
76e5de1ced3bf4b17621a1395c80cfa74e90546b

SHA256
5e1c036a4279545f5d1aa1056bd345be34d9be22aa1fbdb6d76a50696861aaf2

SHA512
be3f47dbe4a9936c219a68ffa6a5a6936029fa1413162767acae8bc8de87d1cdebd1a93b176652c07428eb350407f7b9275fd8e21ed99e520835a8eb384a2d20

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
275e299c87505a4822ac9f4bb9b5f759

SHA1
2e45f6df9dcee8cac46b6c625d3a0e508f8b014e

SHA256
3cbc9e8458f3a6425e7f2a50ed7d80a0aa9e7ede0c3740307b128522dd04de4b

SHA512
c78372ffbc0014675a8b9d8ab7a7419832cd3c656e4264aaee3452b5736f38167bf92b085d1b62339c61b5a629754775dc60bd4fc025f8c83fc18addbdc3c628

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
d7b901af7496e2983f61c9b8759cb62b

SHA1
edd324c28c8712b0b4fe60f250fc8ee8a1278157

SHA256
b72d181eaf055fb8d1847323235203c5e176ac0461e50499ca07fe4eff8bbb40

SHA512
04dd5d0624eed96afc5fc388fdb6b5fa33390e72efe0a8131919440ee2e1db086eea1dcf37e144f3f73d7393aff67b0fe0d9746d9f3633708810d01598f4754a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
5dcc670319ab8b9c8dfa160fc65c921d

SHA1
dc4a0226aa89bc5a2e941ff5e14165340bc2f863

SHA256
34acb91f4b1d940f8eeb0e93138d8d750a1be62f4777c84b439d47f772c791e4

SHA512
a91d920dc1a6c6dcb9404f6e8d78b41fa88c32878868c86eb8d360d84f18745fd48cbeed7cf20de0205764473be9a352f0da2d1b18d67910134ae26d73359b84

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
f05eedb3c81001bbdd767cbc9e96c818

SHA1
c8a4eb882850e57d5d733823b31a0e82421afaea

SHA256
54879e468f3430052035b6354999dc7b260dc6d8ece339060de1f2497b46e923

SHA512
ebd7a68ed566877a6d80ac557e8d9526c4fd31fbf3388e831e3a805b3c1405ee49bb24a8d2f79c1c07e8cb51c89c62a11f5f39b0e052f1f440c76abd506ec6c7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
a31b651f7b108926c2dda826bf592244

SHA1
c832caf15687ccd5f0cc5a80aaae209422a22a52

SHA256
8302f0a1dff209fd9ad3e480951223659cb49845e0add9b49825279b81fec7ba

SHA512
0fc3fa432ea9d77eb21392c06f315b9544b1798712fe75df7b41b69a41704b4f889757dda43c4d9420e151357d590d289111e234f702bbbe3583814f74f6bf03

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
63ef806d15f4d8025431deb9ce1187cb

SHA1
09943f7ab07a38ffdd9cf41852f91db66d092fa4

SHA256
c125e5a8e604ec1d5a1fe2110eecfdebbbfb9d01c66be6fbcbd483b92af3952a

SHA512
dc9ae46991120168ff602c866fdf37ca5f110e52413fe5ba62e86f1f617fdb20942a3fc90a42d22edfeb2b5c391a6f9f0382ad82649ff1ca2dc1d25b58bf3ee4

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
284d03bf7d0b77fc7a40ebeaa4e08bb3

SHA1
ef9084c7699120a435c415070b7ea8a6605dbc2b

SHA256
511326e479aad0ab3964fa7a7d52c6d6469cc6a1f53a5b37e2ee2f8f7e1f0752

SHA512
88852e272da391b21c9c4c9ffd7815209017bbdc9e94c6c1710d4bd71a20c58774e452856aa48ac8506851ae568093c1a4d545eda0dcd6e0ad97ee6526159f5f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
6a17b6bcf7f019b7d9288bf399e7468f

SHA1
ef49e440fb0a3889ccec53fb638f0faa8a22f361

SHA256
a12a8bb59066d1262305175b43d33b2f1088e022ea7c8175066d6e2017fa3af0

SHA512
59dbe4586dc6736d58aedf1ff8c26eb35980cb253b05243f2fcca0ea63f81ef19e1433121800d10b1531d126e5efd3c5996fec90883fe9cdaeca232dfa09db8f

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2655246002109312610tmp

Filesize
557B

MD5
3609041d506e24b39c677a21262bd248

SHA1
f534259d23990035443d96599cd8c0ccddbd71d2

SHA256
716354291dc3d5aa484a6faff44c1dea1b25a84fc347bd4f1d9e358284e2ce61

SHA512
b1c0accc4c0a6c08f21058fb8d239be3637cfea4b7a7bc605e5fdf968c5c9d3dc915fe62c6437499db7f0fc0088fa3c4aa2672e5f7b4f69d9d741f977c7cebce

Download Submit
/data/data/com.systemservice/files/PersistedInstallation3780776936635026385tmp

Filesize
90B

MD5
526e857cdd7fa6102aad07cb50fbb9af

SHA1
de6641ab92a63410b317ab41ded76bc6a369a47d

SHA256
13e87e8f57d200a80d1941088d5728cc0157b5299b4052d33048b4bd96e69b32

SHA512
784bf86d1f6e2f1e0c1981d90e0ccab89947846b99422d8e5816298e860eebd311016693b21d7953e3e6b9f9fea5ba67c03717b31f2cf84e88edb8b91dff302d

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
d5fab32972a92d49f48e390cdeec4705

SHA1
d6cfe9f0d7c983bb9a06449b7f3c7c5e29ebee25

SHA256
d3a1a02095e8e83b591ee1e46dc944c271c5c19326c3f305cb735521efa5acc5

SHA512
fe7f32dd56c460bb8f69523f05973de3d625b4f43a863fe0dfebad5adbbd12a2b7883d9f63229795aca8da96b549613ff25690d5fb8816f083a4773f87a70487

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads