92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
45s
max time network
151s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
12-12-2024 02:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4220

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
a928472d41c278b9ea29212be11b6f3b

SHA1
8f26887474e8fb0a6afb88ce1f9d9ee31b11e42f

SHA256
6bc6b90baae4c2ef42db6c170060c41af02598bdfd1136ae9d6b97b26a889070

SHA512
ce313920d8aeea2b553da50b8c89e1941d461c502768c29e971eb9bca804a6a795092792ed9553b4b11f306503813262b848975812ce439ad5d9dc75249efb26

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
356ee81486e3034b83c2bbcdda060152

SHA1
afb86650abae3b70a496febebd8aaf8f51f80974

SHA256
0959797bb63a0a2dbea1d076ecb6c8078017fe74643905953454e8afe73da1cb

SHA512
e371685bac9794668a8ae256dcfec207369eac0f555916a01faae85fcc5683d87327e30207f4de031ff02dc54a902ed582a17f06b8267e7dfd4cfe29a3c22618

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
3a3ce4b2448b10df3cd9f29ccc76781d

SHA1
12e8fea533df58ccfd6d6a5ffb46e800850c697c

SHA256
07e2095b8344cc82b3ea992c547df9beccf932093e08bbf28318751fdb5ef86a

SHA512
32751aa1a021f4590293c8429822732c05d27fe02be762fbc0d7fb50f52d0e3bdbeab477b6bc0a93b715c6272ff73d8ff544d6ab92b145e971d9d9a188c7bade

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
30aa3193c8b52dc93693dbacc58933d8

SHA1
a16a6e7bdb40072621cce1447db50b16951e0e1d

SHA256
9fd6313919df7f2b7cb88bca1f0400f58c14ef1118fc029206cd7b1432877907

SHA512
4f30b0358dc5e5a9ca2bdbb80a5e46fa362cc2f43062cff69387de719056fd223373fc5d044ce4c8c870b0feff3143379abe726bd30d5e5c87a9f3823779d279

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d3334d6296075366f51bb3848e023263

SHA1
a81b95b1460f880219876f1248156842dc78be44

SHA256
0e2c40746fbecdff1988a0f8d268bb525f5e77f51609f62f5d3433ceed2ea352

SHA512
b41e820088c2ab1cb572562847d033d841df1638b3c9215283c98c5b49e0ee9ed3ee5a7cbd42ecbaa8271ed5fca0478f88041dc2d984aadf48b5151a5ffae1a5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
414e56a584886e94e1c28f5c55180610

SHA1
b5bd1d416555ed85921972830d4e5b29ad7dac3d

SHA256
286f3c54cbebcc5c77b611b53641dc0941143e70b193b3395f3cab1247d2beb3

SHA512
d646929e7b88e9a9ce0fac341a1a35c2ff4c051a5576893ab4c1466e281392bc4c3930f14bfbf9cc79b8358f03a4b660ce00f5ef92d125fb6040cb0f7391ce5b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
5961d9d51a117b5b11383f3770129d2f

SHA1
c9136e9f5d842079d5f576c0050ea3bb12f8fc4e

SHA256
e5ccc95a8e0d55ae44f2debc3868e19cf142d6fd2196bc9ec2fecd53e049262f

SHA512
eb0397971b6ee88600d0442e0f2ca9b90d951bb530c5065d46e089a8f2d4733533dd3436e63a1b46803401b3df1aa95286825d4049eff6a01e4e716a416e0b1a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
2c9d6f1a21f3f9011b3b83872f1c0428

SHA1
30c22dc02bb19bba56defbcf6ef890e617edab2b

SHA256
55ce448af2e1fbd87ad924249d00a48d67694dd741ae53f378bad536d1d728e1

SHA512
7e8fd044b66d8c0e183b092794821c530d9b560cebea03237cdcb1cfae9a22f1a2f4486eae32924824f2a15f6d036868a172b5be52b9645745d9a3c202f9f20a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
7cd1c68aa58c03956eddebecf8aaa267

SHA1
6557e8e8aee46e9e71e4ae4cd5ed4d48ae994e21

SHA256
6090bebc5449d47f64746161248a846f7ad1cc2ad7eeec6c313f576e9e184ce8

SHA512
4dc40458a314973879444570f15aa5937529614cc1fa1d286ec710a321d887d2f8ebbcb31f94dace6253fb8b261f0f4f4bd9fa4d0e4a293a643527ba69a8df7a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c3e5a30d768a1b14a6c8cdaa8c993ace

SHA1
caf0d60606149205ca5673144dcb0bc29efcb99f

SHA256
f43b03fd51ae29d91ed9079b71d191c01d56a8c8334b12c9e830d1ce65e16c38

SHA512
ec80ef9984646c8088092cca57bba1a7881b5604df3472a505f4bd9e811e3c800502ed8cd42dde935b1554975c262990a01e4a0ada01f518e43c3b6f933b644d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
83b44f799cae9219ee17dc06f784fd29

SHA1
eab6d5428177ef90ded6101cd6cfd11dfb1ea138

SHA256
bcb7d57273e3838827206e05fdf66db8626fab3710545e595acab2c154dc77e0

SHA512
83d291057278fbbdce979a8352f0d3c8643754d677e94d1943469ae0be78290f6cbd9058b727787416378481b8dc0ec89311c5ca980d827ac1eabc49c7fbf3a1

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
147d0eb25025a7924e915fb52be093a7

SHA1
b1832f5e0ad57cd7e2dffe81990b0e0193a7113d

SHA256
731b0c6525b0076536bec494ab853c6fb41ad64814435e5563431524316a0114

SHA512
c4dfd9a99630760aa9f893ddfcc6a79d5bf5dc914c6c60ab5668cc8a875aee48fef548a12cc236d2d4bc47e4273bd4cb066664e46a8074807b1a71f0505a12a2

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
71caac42b3cdc67e618fc7b28cc55e0c

SHA1
3f25df6747259600e4eefc47df4e04816b121d13

SHA256
8c83bb076cbdefc8bc88f1998bfb92fad6295c27e19e5f7d762c85b54e13b87c

SHA512
12928ac102025b64d2440b9266ce92ee7135dd5df708510e21ba59dbcb68681ea196ca4bf7e318b3f6c564d91d1dc2e75d0408075ee6af7bf3fb729229753948

Download Submit
/data/data/com.systemservice/files/PersistedInstallation3035304592156208611tmp

Filesize
556B

MD5
46fa74255c8747766b62006c4126a9c2

SHA1
411bc821a1f342a9cf98b60ecf4c8f6e167a1b42

SHA256
6f1134279fd2cbf88307851b1c223118c8329d045befdc043b11b2a8c9f1ad09

SHA512
c0f7dae251cf924863c40bf02cec64bc0b93f05485e0527392fbe937fcb846b45f5f9382ccb4a7ea1ea5a0ac36b9ebf44147978adbe27760383ee6c6a07ecea3

Download Submit
/data/data/com.systemservice/files/PersistedInstallation3686199736404117685tmp

Filesize
90B

MD5
bb4c51c40c4f9af97de02cc43d1515a1

SHA1
08bfdffe76319529d5d2daa8a26e1a2b1f8ea8f3

SHA256
11fb38c1816c0d273a775dfcf6bf9b1982e2011bc5ccde36a5a19caaa61a9445

SHA512
dd0a7bafc2c6270f0571270089c49d9e52ef814b15d7e2b655c7b82b787a8056fb202d9e3c85c034dd815b57193fe13f0a561934dea7539f3961c8e9e5fed636

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
fd5a864bb212721bb70fa3a3ad917e0f

SHA1
944ee54d2a2cada6c32a34c6f286c2e6c9069dd8

SHA256
5f1f291c7b65e7594395e9b64453f80a39f644ca9a807ecd88509d82ab5ea567

SHA512
89b4777b8f0a8722795372543b14c991fddefdc0d1d0c68d92f224e765189c8c966215b0dc6f85b5b79be9fcf86d141d966b5d400e01831a53b75ca1179b5d8f

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads