92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
29-12-2024 02:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4263

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
334170027b78a2ddd536baf6d19c9b6d

SHA1
9b8d3481035aee83562c518e79d09bf649184c4e

SHA256
c50e177dec86593360aaf552f000adc3310633c1f696ba27464f244e7d4a130e

SHA512
d9eb33b1c6dfdeb0b3aa5408fdb15289e5a7e7ebb0dcda2ed4e9eb1494a7fb4fe205c06fa9bc0a9974406dec6302171d9a8511338ffb14072508cbbb15aec0d8

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
881e7a4fb9abfbe1e1c4c9918ca049a0

SHA1
dfba56ccfad91326188ee97f7e9b361dd6d88958

SHA256
fc12781847c8ffc35197c5a222a663f1dedac3bbb8f868333ff595d776d0332e

SHA512
266ce625c89d68b4b335924d86c4681a3edce30b5bc29aabac31c805eae9022e852506f8512f1307a9639cef6c11ab62dedf25374abebb50f739a677a0febbf0

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7d8d2f685e76f7521978a01e84a0d9c7

SHA1
adc5a2b4cfd069919e24fc97380f3a2082b15183

SHA256
6b94ea424bbe5cd503c2288cb5198dc815e51b20fdf921a0b398ae912ffbd6f4

SHA512
d41ab2e2b25192a3ab681be5c0384a8430fd6cefc0e2d724051599d5eddcee07bd2b932250177f6fc16fd9d034d6610b985530b6419379f980ff415e738f16bb

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
146af52fd8b5563b6fea736aa2544bff

SHA1
54ada6434bb5822b7923b90fdfef3b8a144213b8

SHA256
d4da054dc71b4aa6483ab52f1ccc3132db4786065628ada3ac2b6462e581296b

SHA512
5d26513cb8f6cd8ebf25d298b958a16e7d8654ffe1acfd674f81e3d123cb64c81e5726c210d440254dc7598bd02d004b460a8a8b1825b936ddd708dfeb46863d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
93bc4536171c52012c80332f2a87ec42

SHA1
09c26bd416878578018f12d995e42e88e2d235e7

SHA256
83cd0ac1eedae1ae5172de6c168a475d7d0af0c7f84e30003f44b2c746457c15

SHA512
75309cc876b6923bc40e881f0860a8c5cbb68d75a6e4248e812667a605d8427a55b79888576a27d5cfede9929257ccacdf7d4e9fee4ab14abc466bf597b72302

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
500f11d898aa1d6d112ed5d0355ee2e5

SHA1
e2759b5d9fc972101dae4950e839c900e8bb8726

SHA256
7abc26d9ad435118369ecba09ffa9bc127a63581ce299a3a18c621d67db819e3

SHA512
84973712139509369461ed19718bbe4054ac5562b803b18652379fbc568308e345d591e1a30331036c09f0c70990607fb40fa73a10005440d3f6fca2bdfa220e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
e1c33f0e9dafa65b9b8b7601e2d63676

SHA1
97a5a4a78a896679e92d5221eb1c152086d9fa14

SHA256
bbfb88c90ae4e084418372c84ed3a82e31516518eca2d79c02addca10199d3dd

SHA512
ff413b3e0f2987f7e6811c1adf500ad9ce4bf3a8f4c588d0f47f231202cba7bec2ef43e1c7fee79bf97ed7d64abfb92e76674df32ef4a5c15b6a00ddf45e5cb0

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
9139b8443b7f8928fdbfbfd5d4ed16bc

SHA1
9fbd0693b0582d8514c43dab762cd5ed0f2ec71d

SHA256
5d73513e26a104113f9da3f428af902f778752c4fa678cd002826102d928d22a

SHA512
06cfc5e7802543aba9c3b929f71c23396a28788a2acdcae3db86f8826873306c931fe29f2e1c642ee790ead7d4e0feb4cd281fe564f23f24137999eade53b767

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
62519de7c6cec22118863251f0d32a07

SHA1
8377c4f66268c1ed6bb41a60095a91962a641282

SHA256
5c62fc4bbac6e9a8dd175f0d803528c962ad2191170f5abfb898125f57a5d99e

SHA512
2cd4e087382c387f835e680ebbfb1f2cc409848782418894b9d636b112508c5c8ceee033e8faf539d48c206df96239e39b519f21da5121d24442247e6132de39

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
13a29c5a310c24e5359590ec69cdba9d

SHA1
e48052594e18708e7ab4b261ba3ea4bb5acbc512

SHA256
9f0e03f31d954dad3cbbca9c3e0900db24c17b08d1fefc02533ee42d2cad2b33

SHA512
03b8444a319bc6b0bcb083469f2f749216011537402fba86d53bcf084dcb92884fbcccb2da2834548a379c1f52528f5b2ce44abaf8976803848ec1e3e2c055dd

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
315789d1c5792d5088c372b192cb172b

SHA1
2d5b9bb14f6de15ef4388dd8d4b77ccd55a294f0

SHA256
d27fac0b78495a50ed4cb1ffd64ee7020816c3eff338b8035282314776c6a510

SHA512
75423a4dd0980721141517a31849ce9ceb706d158089b2bc6f4a6f6d23bc380d9bcf044da80ddcade866a4ee772be6a47bc41f05bd360c2cf476015e5219bcbe

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
a5b82fa179d5d97ba2f5ef63219b61c5

SHA1
edfb9e297226c4c5eca8cf34de3c05e695f18101

SHA256
b2695d316150deb03b4cdc1bbfd83e6a632094c2ea010b87bab8b31f0b2cc326

SHA512
1aa4ed07eef144997772b1aea03b95f6bf042e4162a75fb19fbb98170284e316193043264aec60c1b584895d64aa451190503c3b61dffd153feea56e4b343b94

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
21979de1c0adf7b3c3c34ff94c08e437

SHA1
c8a5d670a8e50ca670ab32e96720d8f19ae2f059

SHA256
92e3cd221344ee7db56a3e1853fca1b55fb65fd1677510c70b4052278931474d

SHA512
dc1060bf455071c55a84387033928b6b5450b40db69879c69f94911fdf5549c7741a37741901da809144c1f9ce7ad10c77749f257d74811ba51edbacb732097c

Download Submit
/data/data/com.systemservice/files/PersistedInstallation5179251166552484677tmp

Filesize
556B

MD5
640e800d02bf9535f86a2a4901b4e7c5

SHA1
f70f08ce523ece6b86e27ee2b75e6abe63c66180

SHA256
00481488aa7ab35f848cc5cd2c3ea0f98bc22f0fe32fa52327a69dd3b726d34f

SHA512
d65e5992928da2ac5fe7d713f444946c0da0d3f7ecea791af20aebb33f6e04ec55a193d01e65e8a102b788738d8391aaadfc6796490637c9068b4da570251d8a

Download Submit
/data/data/com.systemservice/files/PersistedInstallation8976405024482243761tmp

Filesize
90B

MD5
32d63144c2b5a20d5259db283e25dae2

SHA1
6839e18b3996f12846bb5ee1146d0e1e9f7e1613

SHA256
a537987643f0311175fa4c688478581071010efa66f1fd9c416698b19682f6b5

SHA512
a98f8f9acd9c7d0e69a2728b505a74b77291689fc4605a9114f87ad83811944e3e4d9bb914cd168fcb342b36e7b009771b8a8d93a0a082486516083913087380

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
08cfdd48cf744ac097ec43d4b938c618

SHA1
f6377168b73be6d3ad513c97bc24d6c03029052b

SHA256
1eaa824106da40b1be01b76a2bd62a22e209592ba3e6b9e2779b6ae411289239

SHA512
eb7d55c43da9ba486f377f311be3ba4b5f61777da295b46cb339d1dd401b273fdb0bd819a920cc92085bf03453870eb98730b089e30a1031f0f24df1e93cac92

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads