92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
08-12-2024 03:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4259

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
89cd97c8d6eadcbcce64e5a5d5c7e501

SHA1
9f68858f9faf0081085ddfbf10d440fe57a5d448

SHA256
3f14653048dc8d55beed97acdafec4bf935d6cf9b31aec9f242471d9d23a2279

SHA512
238ff4abd158aacc9b51ca607bcc8e7dcba205ace4e97cefa7f2ecf46f06943d4300979717c5f3cf3c20edbd9bae31fd37eba25ef6a5612dd0891b1f7fa79831

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
78535585910d0fccc640033c5d020272

SHA1
eabfae4178fa59f3e37b0f19d804e561b9083fff

SHA256
a4dc023515216b73891e7c8a242f7e1ccad144ec988e84a6a4e07fbfb554dff9

SHA512
9b88a46018694829abea2c607b7f290ee99b2aebc863118b12ea8f99d55da60630be1b936f85f37804089620508576f3d9f0a8e694a979d3175b95e41522a10c

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
72096e0c893bae923f16f91a81e49f56

SHA1
f0c1ebbd5cc4806171672712a0035444c12b4b43

SHA256
349c118e106d716478e4ddffec62cb5efc03b8423dff1ea549fc31f6421708bd

SHA512
a39dcc1b0dd773964339b332515f4f9ce9e2e083224da8adc76f63191a6528fdff7b233ae98429260ac8c8d74def6ea49ffe0d1d09d2ae63a5a83a73965e9b04

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
58ee1ba50cd4ecf2fa59301844eae2b0

SHA1
ab5340a1f14de3168eb3a40c371f25831e9ed12c

SHA256
32d51858569f3d7f6b30c84edc083fa1c4fd7d004b88b26597022ad39bbe7f27

SHA512
cece5a302e9e84c9ddd9bc8a2bbfdf52d7162b675d5f1bed23a54066c7294b4fca558dc647d5cd46af07c5a0122334ef165a1c1353dc79e58964bab0644b435e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
6de872033c6bc19e5b51402ebdbc8cd2

SHA1
7f60f299e3b3fb160a9234e80a53d9f29daffd7d

SHA256
7cfd2cb8dcc320ec51689c6a5ae01b38bc675c865b79266e33a87eff6611c1b8

SHA512
14733f37d2a8302c5fb864a0adde0fda6ea908858e408ee253a3a87f2467243055598faf0b3a165de4fc30602271cacb1d9278bd23ec95a0cadb78fdb5edf5aa

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
868161f5fc222bef23c92be4a7e31f64

SHA1
fd8771dd3e258e1d0f334e6ee08dce65b686bb42

SHA256
b3bb2116ea135fc158c55e64d839466cb837949191fd483b81f9e34f6889a9e5

SHA512
02fddc412de5cf8996c0657ba626f381daa84e4fcf96c6e376c8d935c6de2bf373212bf88505bc11611c73e4fab2a10978d05479608e9f9b014470d67b290ebe

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
ebf7365977c343cab9dba61daddb0d26

SHA1
f88b6900242d90603ca575bb4a111ff4a317b8a7

SHA256
3dafc72e1f08e45374f4b353ee3d2e271c8597f81a54b99e192ec3c2d2ad94e4

SHA512
a31bce82cc8b44df520341f58ab037461d216aab9279efbb9fbbc323e1605543066d185be416976bc676e7efa3035a6429e6bb0c569c479b8ee513ebeedb7694

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
bba346ff7453933248f62f3679be0d8d

SHA1
487f1f56aa42c33503eff8c0169f626a3a98c65c

SHA256
e289b12175f9d6d98e097df305083391dd27e225b4536ba3bcafb001d6e5520d

SHA512
9bbcd39c42fb59a0d93acb76dab964671b35da3ac5f1523548ae7c156c33afa578a1366dd5e1ead340d8d510b475bcecfbf449bfe52d032774838fec078a51db

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
df06ea78dcc8a6c4703fca0d481787e7

SHA1
ad9ae3038e7d098e937ffee0ddc0d5a46dc06ef4

SHA256
a30bf00d03131db6fed5277171ad6fc42167634c505283422c8f7aa416551a43

SHA512
7a030fdd4cf7a56ab124f867bb0674ff05c9485f0a0f45fe7df02465fa5dcbd7b886c2364184d5c1a1623e3a1f546254cf5e9ab90568e2420a9b7fc87be6a1d0

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
97fda2f8e22851a5d6407357a9423d61

SHA1
40ebf9808016f9f5b3e8abda35d726d3c89fc1b0

SHA256
2daa2744f0a12beeb412e7b643e4dd388b07fc961bc289af4ee54d85fd980493

SHA512
deefeb24e80c57a24a250967853e33875b9c2e836e6ef63a4f4e9c5ff9e41630d0c764f9cd8d064a610bf63501d5264a39422387309f02462c7bd6133d4ce72f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
a2650d53bb70b12ce4c8acc2f7c7aa05

SHA1
94f66258e8c00ddf84bb8fb8b138871f902248a5

SHA256
853c2881e5ad71d684c3fcae67e77e1c9f1883f94e8bd2b9158b192f34dc2e11

SHA512
bce84be8b3068e82ada67ac2b2758bacb7d7ed56b8265600d47baaa58f1fd6f36cad8ec81e7998f1c0a63b78324e11cd7398bad42452fd893e2ccf65a1086fdf

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
02966cc9b76294557451bd14505233f1

SHA1
e3d901017c1fada2f2bada776bc834ae212b7fb5

SHA256
1e43bb835e60ddfdbc4db73220bace33b8420de80e02e6a1611bbf4ee3c6c86e

SHA512
1ff8d42a842d2a54723868daec4bb61fda684ea7d57464f9fcae68b92897f7d1ddab78ffb4c27573d207125246348b2a3d45e597dfe9c12bf7f7099057250f8f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
d51767e4cd899ca4f12f7ccee486a700

SHA1
f48f183dcb2d8f3c02f85c7b408d3024ed2ceb1d

SHA256
7faa7acf9ef6f9d20814df2113a3e3dea8c04228dd1ab429c34a397c6e1501dc

SHA512
d6a20b463f766c79d31c88634bfcf8707c670caf273c6541c2cc8a29e29c415e43f486e6bb67078ae31ff5a4196e8376cd889d8eec57a93dfe8a3eb0c5bde8dd

Download Submit
/data/data/com.systemservice/files/PersistedInstallation239600351727135387tmp

Filesize
90B

MD5
c143c80499bdb9e944cca18e995ec3d5

SHA1
0715a2454460502fdc0c431012c9a76c3b1edc84

SHA256
127670e11a90874c7908ad6ca8d571d935c2ec15796508a20b2cc6b8f2e4e1c5

SHA512
a494b8e662979ecc7c95873197c51d8bb17a7c8c566fce2db1f8130bc48bf4c702123ed4d2b0d77bb1a7d8674fe8082e34917e874bc01e4955a2c99950ad7535

Download Submit
/data/data/com.systemservice/files/PersistedInstallation4642463415013955975tmp

Filesize
556B

MD5
8a717ee131e24c344dd1d648796da524

SHA1
14e77206cf876baeeeabe7d282eefebd31e82827

SHA256
e7e658b05a527f572ea21f026694426d49cfdd37237ad592584d88c43219f1a1

SHA512
48f1e50280c7f0aa8ba65e4f09cbf81bafc2ffdf4df7e87f172c115aa6b516f3696a85daa23d24241b740b0980d7853559c02ca16a699555c7a4feacc618b586

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
49748d8647e00bccfe9f9c42a2e35ff7

SHA1
897f628a1afa2fd2ea2ce4c97a3c58ddfebc8eb6

SHA256
9323710d2a5f0ea4db1208f5e0251236aa7788e7f0e85c8f24b853ed2e133013

SHA512
50cd55b99e67fcf2dd9985ea4bf1376d8c796b8fe8b9e4df7f55b065f18818c66bc3547cd263dcd77e7ce9bfc66d1ca462852c913ab214025209088bb9ec15ae

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads