92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
16s
max time network
97s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
06/12/2024, 02:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4247

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
988d7f4039ceaed5bc04a84543860625

SHA1
dffa0fa8d1871c3278c09a5c1174db534ff8766f

SHA256
564b447dc6df9962172e5367733d5a35e4e6a25672912b58eac97c632bffdce5

SHA512
b81a4021779b66bb50292af96dd2cb4cd9d28bdc3195e4bea92cb89ba97f24a619cbffadb960a8359d6b57ba66aa2a9898b45d634b8c390b584c2f16126c96b9

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
d5cf74500a6ce07320fcf7873f7cb1ed

SHA1
aa1ce17e9ead42535c42157ae4f8610eda8cba71

SHA256
a194b8f01cbbb1f5e3a2400eb454c305bc9b831a72e533ba97da91612fa5d485

SHA512
4aaf62a8a15a578bbcb9e20514938c4f4b4980f0d4351c0bbd907b11eaa530b0d58feffd3b50e950506f4c2166daa061d517e66a5f42cbdc5be74d03e840af8f

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
6d47c8c44c6abbf6d6f6420ba3c43d4f

SHA1
54b1094517291104b496754d1c71976e6fd334ac

SHA256
aa162bb9b8b1f72968c3504046453cb21e11cc7478e536e0fdd0f73b36980f32

SHA512
805d67630b7d1d0297745dc387697029f688867d0f8c35660938e33a92ba2914b483e2a37a99102aed460a4fce44a2221fd09be54517726814bdf08d5fe17c3c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
b737c8c5eb4a0cee8783d8852c130437

SHA1
32ef4676684e9474fafcd3211faeaac283042b15

SHA256
bf1c532a972e1b63bb8885c8bc1ef9f8615a01818faedec92ba532f2762882a3

SHA512
a601334dd002d97c2a44fab14091ab646e82a3a9bf693c12c7dfa8b06be5fa60a8141bad8c984d573dc2918975bf9f3960a1143aa1aea10c797d729b8b811491

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
703ea093ca23413865aa32bb2dd8bfb2

SHA1
cbfa02cc59453cfe850ace29241c0310562f98fe

SHA256
52d6440eb052c4c32f0e1f4468160c74510fb1390430a67fcdaa4b1d07f5cc00

SHA512
5fb174f2bab1ab30b7044c3006e2900c60d046bf3a18df7852e9974386ea3473f35c5cc37f9d513e811c528d44044c5912a155ef7ef7fd0822af2ef72c6cf36b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
991c4dcdd527e01c059c91961dfbfda3

SHA1
9b2ad6e6f67b07d58314fabb8a58790d8cea29bc

SHA256
850fc28516fde69b3f3f4e71dd3396f37ba758bc4500c09e80d5d98b3801abaf

SHA512
964fbbd59495fc0e5a07e00ed1b1aee1efd16ce3479666ecb806dc6d82b02d410344745e2f2b4dee31bf5c0ed2af3b8b0e52c5bc0e63ab97904ec24376d68e2c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
deb83279c223d723a0944ae976e2338e

SHA1
fb450cbcb77f6f498c0ead1548a3885749d2fd27

SHA256
8631cab6baf3fdbd5c5e7c4b5d87342706eae373a7a77771cda04b35bd44f024

SHA512
221e0aac74d3ec08e750b4e76590b904150a31cc5b4d01ba49d50556ab2996a2c889872aed52e9b73e6c575bc7fb48cf30e37a543c562a575d321d1629e570eb

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
d05072945371962f1e556c12053053fe

SHA1
8ab3a379da050683412dcd5ef2c365717f19933f

SHA256
40fe8d20e31210411ccc4b3649b9e72eb8adcb77aa6910bf3fcbacd2ed840cd6

SHA512
290a7299fbd2f054a3afca7a448ece914cd5c0a2cc78f83635aa3ee675b7f7ed5dce6f6917bb215d666f09ba141a0b4c01f0b67bcf602a3405fff35583f7da31

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
9a557cc555c4680a2490d8726696a27c

SHA1
e9a9cd3d3f3642ce63780afac1997ad3a2200683

SHA256
a78f6f399e796a0a4fa902eeffb9b2573727aeb82fb1d9452269041c270646e1

SHA512
2902b94fda24d55cfd51577d7c7c5f4c288cf1731874ee59711f486f8c62579925a0fb8bc71fff2c1251039ea761f6ce2e0d6b6d623b01dabcfd7af10ab37816

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
0efffdd7653bad52197bc975515f75d4

SHA1
7db5537629da7fdda242e79617ed63613038757c

SHA256
c97b177e2ff1bfbc51feaa98dff6af2eec82849e72fa25cfea485091ca122d6a

SHA512
3ba91485b017b75e7c0ac86575c8249aa0a5c542640d8e8b297ef08f95d1d5e07805316a8c54437e73cb47e579c0ddf3919d3004b65b066541305f7b3b1247cb

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
0a04bb6810fab5f0ceb6f3c40877b0f4

SHA1
52f98808986f84be885e73953e3afe228393d668

SHA256
bcbbc2007ab474976f520892d4fab614396b1d573441f389e99a6e82934c88c9

SHA512
24373ea267f19f68e930eb598b58e4b1ea9ad2b888d1a029a2b6aca552fb91d7a486e9a19c90b7f5bb35190b579687edfad91119e76e7d7ac299c3a4bf903066

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
7cf8f025e597a07fdaa40d3b1def6096

SHA1
c7cb3d1f1927b93082af292c99b2bc620d657525

SHA256
3fffe267a85299861772e39d6a1467700355a4695359d036b3dcd5cf8de4587a

SHA512
dd87768c3dbd4e92d2ad2db2ffb966ce9bfca0fceaadd27d491e556134d5f1b08e6aaab9a09dadeb7a854682e167629f61a22931e3a89f63df8927334a16dec6

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
494468407b2ec37852d2428b88c318c2

SHA1
95ec325bcd1e58dd3a2f312bf4461a0470c58727

SHA256
84502e29c90ff919f2198c3e72a9d3f47bc5a4696be6e79c7dbba92956399ff6

SHA512
fafdd53632498be6143aa8513c637f8c2ea764878ce78aafe0888d4f9305eb54fae46226808ac3c42e5107e5ecdc6ff874bfd4497eb09e502bb67809288d7625

Download Submit
/data/data/com.systemservice/files/PersistedInstallation8949426906781482807tmp

Filesize
90B

MD5
8a055ee79cf2caa1f6600139833a4e5b

SHA1
f009516d70c5c77a3ee1cd138117d51853ab8b22

SHA256
5d2240c0ea8c2e7111050ea12467109e46a5b275080d5d7cd086b4465675f0f6

SHA512
0a24afbbe8fae9ea3115eaaba57b750e9b5f8cce60b28444050767fa62c45e562ca6c9f01f47d3ef89fe8c843fc582c6b02ab3a50a2be3956e09c16703339e49

Download Submit
/data/data/com.systemservice/files/PersistedInstallation9015190121461049829tmp

Filesize
556B

MD5
36c72a18dd77112808492965a3f93c12

SHA1
e6119bb2a11fc5101e233851378b2e0102b4d3bb

SHA256
bad9d4fed910230108eedd4e3ac679d7ef0a0a879d9bb79ee0858f2694dcf0c4

SHA512
83478d59404a9f01e5dd4a889ce5fed1e3772527d9b73edc0c1c8c613c331395d37e5014f97cb9b08769e7150a33a9b2a65959e3c35ea2a6642433aa1978db9e

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
2add1f2e4d306535e7383397706d28b9

SHA1
c6737804c53ee653ab9d7f45871a13e68df63b7b

SHA256
1fc9f4900df3cf96d9f8c3c3c96a25dceeb8f802148abb41ea99d1f9701c274d

SHA512
002f8a76f83473b369b847f55e57876ded90b78fe1997987902411b08b135eb17201604ad741e6245e2baecc43f84503680328a1ed8ddb6c1a1e80e855bd7316

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads