92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
19-12-2024 02:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4252

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
5fd3f3ec920d6665d2ef0fe6cb9c986c

SHA1
540087d592ee93919eb4e2b4d716afa29853162b

SHA256
1cd8beecc63058616ecc62618c8912bc5303f164c23389521dde46892ddd1dd6

SHA512
fc16fded426b3b4ff699792299efc264f3719ef007f2e3531f7f07dad445745c03ff4cfc042cad659520e8fb9a6bdab7eafc8e47378391cc86805b4c9f5ec221

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
e431f62710a146ae44f619c6e2338ac6

SHA1
4d57fca30e6e21249a126a65f8040f4357e282d6

SHA256
f66969de6f59ff308fc0871baa4265c24330ed608951ff50b94d1e94836cde09

SHA512
6b2e9aea2e2653d7f0d9858ad6a28bcc277cc488489b2bd5a1bae4564f7b0b53eacc7e2535f7b330f1449457234d65180be914eb164d43940cc586234c71ff49

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
871fc630835fd291a7026c44dfd2386a

SHA1
acfd5a41cd58eff1e6cd3d17d3556578435be707

SHA256
8d90cc2aac8edcd9796526cf2c144febb11c96e0fb4a107382963691fda1905b

SHA512
217212d2c1d7a47f290fd091adcb9dbd8e4ebd7b5214892fb4de39d2d01c892bc97c2c1384321b6167bd5f6686bb43b64d526b8dd659596f3c9c08e2d19c9a5c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
fa35858a87c5bbf202983022ec771062

SHA1
454facdac455493ac00cc5a3781ebeb9324039bd

SHA256
2823b9d4d608f7e51f88973c7ade06f9b4ed2a48d66f3f17ca1a5f46d516e039

SHA512
2eddeca19fc580da6bf4799cfbc1a007098e718ec3a7104b04a611f772eedc13c3b752401889524b828e4ecf134404290813305259dd9e1f4827bd87643efe98

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
0caab7735b4a6820be106374a0c962c4

SHA1
e73bd8672945d1d1e4c413dd80cebd67b00d051a

SHA256
4374c65166155987681b44b61a7cbcebba8cabced7c27ca881a809d87c9c5fa1

SHA512
2e49a2b818cc21da8ba0da939bd67f14f105baa7f3ddf59c7d02840d2483a7e60cd8a584f36787ed17447c8ec5fc41ae7284a0be53ba3576ac43125b5a31d147

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
fc6d11cb1bc22bf12f1a5710e5a93d75

SHA1
d4a5965001468000af57dc53eb0b70e36d8d8d80

SHA256
c1835d355d6ff7b948caa76635b92149160dcea88d4c35583f885764563bc0fc

SHA512
117cb4d0cde97162c6fce93c98e77b5a033356b05369f8c7f822500e7665b265054cbcdd58ec53e4c46b02fb3ca109e1751f730494110f5461feeebe278da92d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
1eb868ada067e358fc3efb79dee1460f

SHA1
fa5df4e69380837e408a2896e235416929b7fb5e

SHA256
7601da097b2f46a75f7e15eab4015eb53bc2232757b8e4e9d63d8650b6a2b0db

SHA512
2abbf1913fa86b8eee5f8fb9bf607b83893eb0ba919f37efd78fa9dd83bdfe1e623a75160429ce442bbd3150aac0f2c47ba621f883dcab508008fe75987471e2

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
e22a3dc764f0a3a02dfa85b1543f5657

SHA1
739f6fefa2d528ca102a16f51ddacdab444394b1

SHA256
b313301eae13f7cee5cd2c30b5ab3d10a76ac57e949979328b173b05947e8262

SHA512
328f1902306c7db073a93f99d51382e95d581e6ef290004ac7dc646a64a54fce1e9ca3c15607d66d0cd611b3bbd2b6fb2975d59a67d4a93b5a1614e82b1d2a4e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
9075c187afaea021a49ccca68c856715

SHA1
701c92f5f99479e2baf825d8957a3437cbdd85af

SHA256
b3947b5cffa10b899d63cd133e0a1511301ca5b1d67b1d06fae8f8b82c839532

SHA512
3d555c5bfeaabd552b3fd71d63ea57ea47a803077db7b2ccdecdaf5b94eb5e0476b6c2b793a2e4d9625d442d23e4a303606e6d07c4f570bac160d1b3d042b470

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
d78e30ed53e8c9478b19cb9f5432a6bc

SHA1
6b058733dcb60cd6137e67f8ea39ced4214efb57

SHA256
9112b10b11e561cbb3ac6ba032c70ddcf4897a59b29ba69dea8d7ff8a9d1d23b

SHA512
0b4e33cb03828c96b22115515a6f79ba0409be000131293c171f03f007eec17b82efb1d41b513fc88feb8e6dc8af9f69bb4c5870f6c0674cf7838f24bb975044

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e2c9692d546d9b892e39a6577129bfff

SHA1
85313500d7e4468dc70865aa712921604d187580

SHA256
aa5113a5d5919a7e3d4fba16655ce1ecf106a342331a9a37d84b5cb5189fcd6e

SHA512
e093e30b7b88dddd1a90711bbba36ef732fbabcfc23df70fff3ced45e5e700da1b65d41e23812e7588e70abc5452f4c0cbf68a941d497fa565a6c028f6f775d1

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
4bfcf314737b0e7b021a0304de4b6241

SHA1
18db1f76f0387970860d140bf564c29a0a355502

SHA256
c66f7200e35f330d19cf74777f2f46813f5ded59eb062dccdc4cc48730bf93bd

SHA512
1fe63c8ce206e4099519af56e35911fc55c156dad47a2e8bc2f3074c693a21f6a8d4ec3feba62338f97db36148db433f306d9983df983eef64d5e013d4d549e9

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e616c126ebdaef2558beb3d904aef56f

SHA1
38ab11829fb34a3e71b61ab1c0adea3f80d4c1e8

SHA256
40db38e7f82ae578d1cc04ad67d93dc9e03fcd6a3ef5ddfb0cbe4bbde4714f2c

SHA512
2036665522907f813e04057b3be1eaaca820a276282c39727831d9c519a80dc083fc024531e0a2c2a6728ade8f0aaaf399754ae1b4c6a900e390274f3e2c4406

Download Submit
/data/data/com.systemservice/files/PersistedInstallation3333051923635901389tmp

Filesize
90B

MD5
2987ccb8b74eac33cef6cc88d2ddea3e

SHA1
132b2632f609590c38260b50477da96e36844707

SHA256
dc1c2fa45dd09a4398181f73b4f6d0ef888e6bf62e02bf159d23184be8419626

SHA512
5cab3f12c021b5510bb85f22820d6bf11fb8ef6749d64942eb39e1b843a228fb7e42abce34ce6681f496bd1a2266f3b811c891d3d468f0bb1f90d87f6664d5f0

Download Submit
/data/data/com.systemservice/files/PersistedInstallation4265309679659372070tmp

Filesize
556B

MD5
4485c5f727b6d66a2b271c34a398bbef

SHA1
023a8f5df6abdc050b6ff17498ffd966225a7a5f

SHA256
adbfeff4da212278c2b4b48bfcbae026f35564e7c4d501d57fe70fe31ca12c91

SHA512
570bf1b95061a7ef8ab013c005f8f217459f85659f6111dfb91a176c0f0aaf6a40953d34ca19ac926ea4462ce9d1ea5e416aa67818a6e7185180c607f63add2a

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
aba5abf487de110da459dc60ba5743ce

SHA1
af45c0f025bfb593b33ded5ab08e7e9577768b34

SHA256
f3bbdc5d49d272e67a07a7aee2b1ca994f906997a92f774718660df51ed54bfd

SHA512
f9f8eff4a67ccb3ef2887003e971906664e746ae86f675212c53bc7c0691a4c0999a0bd087de58ef8beaf071bfef0a54d7684ffa1f9a49dc825915248e8f3f7d

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads