92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
07/12/2024, 02:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4255

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
2a6cfe956894babd95622303afdbd7a7

SHA1
805d36838699416a5538bfbcbff78064bfd2816d

SHA256
d52e92c01f8ff3aa52fe922c09e528c51f590cf15ae1d2bc7e8946ce9a485e2a

SHA512
76336f2170cbadf4236195d7a1d8726d04a1bd55d3728075ffb3171815650c90a4e3fa5b795e683d0ac25a4152755fa879842006f7532314cb143a7a8af3d1b3

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
a07460e65d027741ce7c6dd078c44460

SHA1
74685f51d30570097afa31e072a40369bad66d55

SHA256
c977f7c8ac9a20c25b7439ca172f765de569911641bde22f7b77a7b9403cc1ee

SHA512
9459fc87e2dc88a643717714fd702ba43b6d7826c78891087b313e8ea8bf917aef09c8b905062274f23e8c63f08733c880955b2d4ff6b5446599244d0d99ee0c

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
8abb55cad962084ebc83ee223b314e85

SHA1
8ca7ff9aa6182a70c08e0f8fcf858f6716113a0b

SHA256
9ca2ce38cf185f5cdceaeaf0d69332b84b539efb1b27cb66ee65440c87d53daa

SHA512
daf644ce9d28485109970cb35457f25b2a97d726ab3a07188e0867d69757f71bf0fd2cc1dd64f2c8dfc1c2a9e6af1a015969757f9cfc5fcc01fcbba353920f08

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
c1b88e07574b2c784f4d5afde5c10538

SHA1
94db5176a6c1a1d9562f20e813cb8cc9d129a494

SHA256
3fd3dfe205eee8236177940fb53a3f9a975f19aa2ecae144763aee90066ca033

SHA512
97b4f9ec78b4d714f077c6b3473352d26e2342a8cf81f03c1d152bd246d3bc98aec05ca7644c681e8b0de166a19275c074a9c6f56d4df26010d8f62cde74a6ff

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
c6ca1137439ba0963e8ee41678bede07

SHA1
704aff621f93c2d0481e299ff3a3dc5251cf3bab

SHA256
a31c35761b5c501795c25259c8f82d860f199c93c017d892118f56296d48ca4f

SHA512
0aa909289c038e9c43633ff2b0b3bcaa19df0772728c14dfec64825be0eee512aeb51e5ca50509ab21362d5fa13b8c619bf93c2723231f407a504323a9ee9e71

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
6892ba0f2179787fff39e9b2c85f5807

SHA1
c8eb9849fe0bcbd5bf032ed15f82a82632b85fdc

SHA256
36662829de792abdef4d0a85b465e97c82cfddf20636d78bf1f62da85726b35d

SHA512
ff778ac51778603210a30774eaa5157ec5745f4fb6f55f5554f9eebc62ae32d8f613f485abd392634f8f3b217baf9cecddad91ebadc3031620b46f83950c1bee

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
3044f14b5283e6d98ae5b6a3597dfbf4

SHA1
b01c65e9d55be496cdbc961316a780de2842cec0

SHA256
5f14727af164cdad7f2ae3c392ed1a21bb4099d3ad7e3998faf1eb208394c7e6

SHA512
907f77266bf3c45787f3b1d9ac280e773325a1d25b1d92a94cd1b704c176f0c3f23db6acd939c84bb05efe32723240f86af18ee96e5f998de4ddc3730bfa7f1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
21b3a003a597c8150efba91429c2bbf8

SHA1
527139221d0598fa89e4270a208a2e9c5674dbea

SHA256
9a581d83bd6b39406e44d38b21a5661d6536351c06e4671c95bca68aaae268a0

SHA512
a7823130f221b88ea6a7238c8462b70deb08a9e7f5822008bef3af6627aeccc33dd028deb3f1a4d1ada849e6355f2af5622a7b0b6292a28de92aa9ab8a2ad348

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
14b3954cb21f36ee50f854f28a532bca

SHA1
30b862112624cab1423e315365e58a19fbfda296

SHA256
ccfbe36f12589d3636fe25160f9aa1a972716d946f73fd7327c7b453c15ad551

SHA512
f3237b28ed225b36a4f6a44564a06023352697fa1f9f55e30dbf936ce125baac6e595064dc77452288e7dac3176a588afb896834d320bf79578da580ae182c0c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
42c3ee75a8fe8475d4a4f2070102928f

SHA1
23d1cf1a8b6c2b8628620541d3a1c38f7fb3c1cf

SHA256
7ce9230605f981f10a5f2fc8f2bd2a5b05a08881add62e66e90bf49353a36486

SHA512
1ef80112570d0bf4d2fdca3a5dbe76cea0d19ddc8dbd1174cd6b15e9aba00d14af84373b39de3ba33086e19b846e03c4e2a892350968421f98885fee0cbd3b52

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c78f6487621f9769958309686ba00bab

SHA1
ab6f72cedf4358769af3868320fa0ea526eb3e81

SHA256
dbe1521832de24d240ede700a4ffb670239a5c0d7b2861d80ca78ef558979b97

SHA512
f8e82336e62c930e9be8f08aad1fca1147fe89f92758fbd7845009d83264eb6bde2939dfb27c7143e81395e2ac8199d0fa5fe75b0f2297b20e0eebd207e425e7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c90384f72d4713d904d93bae0f447c42

SHA1
fc859274342f955fa13e9da838261cf11647d629

SHA256
c93945f8ce5b821b579fb0831e0808666d40c9a9e25d8ec8640f3548eaf0e95b

SHA512
0257bba9955feb107e724d62599af7db090cb67f35c5a6524c46431aa4cf35ae033abacb135f4daeffedf74fe91968dd8426fdfda7501f81f0e857c36c2c7fe3

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
5587f34e66b248bf7fa7c6789e9ce98a

SHA1
80e45d8947bb2e45bbda3eb61ba18d46685adb1d

SHA256
218e5876b47a013946081e57527a130f4f8b69003bb4958d2bc308cd60c8c8f3

SHA512
815ea8f7920a555f51d653e6711f6b4965a14683bd24ff681d731a65fc1972ac2e0805bab70ff3422320af92deddadcbd54e4594207d0cae7359cc97de3807d9

Download Submit
/data/data/com.systemservice/files/PersistedInstallation1433136916341427271tmp

Filesize
557B

MD5
9b10a28121f66e748f901855ffbb6b35

SHA1
bccaa6e166350f5a2231cf262d9c84194f50bf0c

SHA256
8f6b81d83a270e023e64725995ffb1372ec9bb922afa2f66c602a5ce00f30b9c

SHA512
e76d08024aec065d5c8ec6f6f42d5c3524457658a5411dc64914430a1f6683d0f768b081bdf3f9acae299c708f720208b9308d84af9072001cb8b5431d7375b3

Download Submit
/data/data/com.systemservice/files/PersistedInstallation6311733673911675239tmp

Filesize
90B

MD5
a402e0bbe4bf76991c80634b02b498a9

SHA1
55cf83f44d5924f6b9002f87c983046df48882ad

SHA256
c562aac067618b57dc09a47674c7ed7210e6ee90ae1992825118808ba16aacfd

SHA512
257c01f8c33cf9ee569f0a0103822c384795b14c457b4cce9ac2011dc9c5417340cdeb4b8756d1faa801c4e14ce79f527a40253231538da42caafaf210ef4377

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
1c30c3db7034b7cfa1fbab1b5958e638

SHA1
0701d18bbff1b25bb9ea57e143a9d035eec6d26f

SHA256
a3dac47b370c1a875e40a869f35082ba873ab1359ca680d1bca16c44bc0996f2

SHA512
9db04c3128d4775d3640db6b8a3929da41b9eaf1343afa5c9a36c88b311151cb0984ce105e2759e6465cad12609b71047bafb6c080618fd7505f0b16a88a7053

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads