92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
23-12-2024 02:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4253

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
c7a592bf5bb4580b8f2d14d2045f5250

SHA1
96cec483f3dc1773e59cbd3b1ffadcbe6dbcc39b

SHA256
06e5963b2b83bd495d5f01cbc539b4d6a24437dfb75a6233bd20bf2dd0fd7c4a

SHA512
d6bca093a1c37750421dc11589025d4332e2a84231c8adca5182ff486f806fd628ca53ec95501427b16c216c8d17f892c1a318693ddef6a4ce054873551a3d4f

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
fac2b42a5f962f6cc9259723bc7bf1f5

SHA1
089f98c61b5744c4e07617a1e47d404a652835a3

SHA256
6e8f6da70abbd4f88b4a074d705794e6b2e470dc6bae9c6012d939d9eeca52dc

SHA512
386fcd8ac055d65971c5c5034d6f40a5fc596e9b0c3cc474ad37e944b6ce19305a442efb7e3c75a3fcf238a2334091e24b5bbb6fe354860cef66cb51423ffc04

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
8a04bdf42ed8ba6a47b50c4aa6e07e6f

SHA1
c61c803ef243690e24e2de6fb746f60f4c14fcf6

SHA256
bbbffb3cc3166e99b9453717c75eda88a2f5a1f6241961f4e419d7eb9e3308d8

SHA512
0b5d5527560968d166334176f86a74422f428cd89ed86a48fb1ad5d08c831f334468f31884343e7b5e1261655477bbd6d2fb68d0dd52872760d7ba4dd6838b9d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
939057a1986f172e39ec0facb46f9ae5

SHA1
61deb406934d52e0528f7d76880ec5f4a6d16dc7

SHA256
fb7e51aecaf29834683b15d8f80c0e97bfbb4badd491517a2384725fc3fba5d3

SHA512
6dd8e0bed6f28ed088c113e56590d3e4338ba7e4734a27834faa933c45ac7b54f5519a2b9b4c30fb9ceca7143d86e371db6828402f9ba7a58ee94d0ebba85020

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a715c9fc0c653d54ca8776ddfcc7f384

SHA1
7b63902b986c085e7a566c913b6c52e0d5fca6a2

SHA256
a8138cf2a7ff47e05250c5d2c92ad2577d69a9f8a437d60e4db84a0f2d34491a

SHA512
447cc001cef3e34b89e1d8abea28660dbd01118af560ad57e1c8b48cee9bdfaa342f5e26111903a18e312f85e92b0ec5402fc73eb010d891a292595cea54790c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
608c6f45ed229f51b0784abc8c18eba6

SHA1
155d32d9c91751f0c73ba3031e9f9151e6e8b8cb

SHA256
ffae9c1537ffbd1fa373820649a21009f57802023a7c29709c4803ffc757ffbf

SHA512
3ea19838d4f957a398436da383aa39f82b8872224e2129b3bb47f382920c71d9958372e7f5da50f172732c478a9c76a3526abd1b7fb1d4c8d5175536d6a81c61

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
6366de2e31120a43738219a366780df2

SHA1
5dc3e5745f7e0a493a6993e4d969a73c2b0b97b1

SHA256
798f4d05c94fbf1dca9cb0fed015291646eb81c41ba6acc2fbc3ceb6a9ef24c3

SHA512
2ab7ebc96155d7f2925d3208b8117c1876fa8a40a5f2b759657047abb56ca8c7a5eec70eadb1787a5dfee37923a3ef3622de246bfca0e2400ed764144b5119a5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
109f7cbb9ecc2d3fc3a42a189991d365

SHA1
96ee4b0376e56703943db125cb27fcfafa685858

SHA256
de116ac3a0cad51739741d7456460e18708633965ff2aca393451ccf352abf78

SHA512
680aad3434a3cea8181f682f349d9738a575a8a0e24a6cdace9aa25f7d08ce5bcae668ad138cbac08aff79347da41fd5857a7e635f4e9e34bf8e970280ca3eb7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
6cabdc9ca1790f315158abf5f952f9a0

SHA1
f8851ef4cb2540e7d6ac87127d1970c5cbf60f66

SHA256
d11cb97b52a3f56120e6ba67d03dc85e9357032dce1027e4904b111bd0e137e2

SHA512
4f0d71f2844b07451e13aec08311a92a962e73bb3bdc5314bafb74be0894218355ec87429a5aa73b20a0f69a44637192a6cc50f8d86f2bbcf602ea26a0223779

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
648e97c3439ae38132aaf83a3d556158

SHA1
3e6ac6ca5be51c4fd0575d147313f38a9d8d5a9f

SHA256
7665030dfe2d2766bd38ec9a70e092daeed550cd32fdbfe71d3ff8793eb8d77d

SHA512
52ebf2efc05136476e18065955f31e24390ddc3a76f13e18cc18bcf21d97482b1f82c6a2d9093e9793ac6f5ee714f7c018592b7a44dee7c5f697e991af5b93ed

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
42f3a76ab9c7e6424b053950e5917aa5

SHA1
adee5f52c3855ff24ae89269ae26476984df8405

SHA256
12dfda4b6e470be796c719fad919d8f213a024f3d45f06f474913a1e1bec99ad

SHA512
3da3edba41a43b92e00def1c1a5d87b97b2e99bd0350807e28067f16254ae7e821641a39e146db652b62964d85114f276acdfad8e8c703e840f3c32eb36b4607

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
3a1e78a0566996ee036fbac00e5476f5

SHA1
47edb4bb96d3a938382988b426771c3b37d7acee

SHA256
766b632d15da3da21a83d6a3279f4026697a014fbed8c974981d8579c989da67

SHA512
7315ccb3edbaa05f2f5045ef95d56c18563efdb5321a68fb76195e7b90a1547b7ea0e1f375be870adc3264df8ab1649b3131ed2ca70724a6ccc791a4ff37815a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
2853a1a1481b0d5c94c01ffc4a10db40

SHA1
40ccf2163ab0bfc305b55e6b8114474217bab8ec

SHA256
72c4c8a921115059fa722258f61293eae006cb7ee6fd06a514081282d0197253

SHA512
91ab830c7aa7b70b4d3108ada135fc7da1d9f35589a9cf1d0a2360f324799ed1595ee2a31ce70255db556e82e124812984353ba7bb268c7713320f35dd8fa9c5

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2972241341733437424tmp

Filesize
90B

MD5
67621f017b76347d7ebdffe50b87caa6

SHA1
9b0aede9e070c0a2a9ce633a4444fce18537364b

SHA256
d89128ef9827afe8b23514a6f5238d9ac3cd19fd6f7bb3e32ace85374f24d0f0

SHA512
dbe3b17f6e7ac83b5ebe65d543550e8a9ef78a2e9abe2384a5df3e47ff4d4cc37e293ca1395742c73acedf09304e15a938b338d40f378a509e2e3cfe6e82c863

Download Submit
/data/data/com.systemservice/files/PersistedInstallation752250092824069209tmp

Filesize
555B

MD5
350ffa0836770460a80218a047b9f750

SHA1
28e84ff52c54590e642b283fbcc668b3a5ae553a

SHA256
76e1b9df1cbd956c96c9e137362f8892d47e3a8d6eb091c0646a1a7459cb719e

SHA512
d3dbff6609c8308b869011fa397c0d0d56d7bc83db5eb7be75f5f510aaf71bd816a96fa7d5ab8ebe22a3744ebc96ded205033b552e0d0507285922355452e22a

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
6f0905b497ba6902764b22d7c570499a

SHA1
9ce353e57a0c61f560ab7b57d179ebbe85199890

SHA256
562fcba2efc3a22decae11853887816c165e888100bf383afc494c9747877a56

SHA512
92506881e2cdf3df27c9bfa816163b0b7ec5405c860b4bb91915d0829d5ec708276c30afb36b9417f189590f9c1014a71bb6324974fc07bebb074945a411747c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads