92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
16s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
07-01-2025 02:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4317

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
cc83b2ecfcc76a831cd9b98d95c42bfa

SHA1
34e3ab1bd0e25f0d9d3e2ddaf2be069a5aa46a91

SHA256
a1db6d02b4af8964aa74b2eeff0bd2b13a41d971d264ce32321449dcc016987c

SHA512
385d75ad92e5a0675328218aa80f330468bc9fec5552eef665c26f493f7822985ea54f781f9cef512ac839b6d23e21f867b5c2eafd6b608d2dfd10e7758d1b1d

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
e56a68f9b67df3da76598fe2508f9474

SHA1
8f5d2e7a5918317aeb10c0ba58a569686803d79d

SHA256
f5cc6f9daa7de45c4fb159cbbc491f8f46606b58997312db21b28dd2f740bf62

SHA512
b80ba9e58b5f371da46bc34e5dbe278ee9a37369bf8a48d046eefd6d4b750f2ad71d9a99fe943d38f979cd04ac9b295687473cfd77a25b2c7b252e423346ab89

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e8edd8d4f46e34916ec405c64c1b8c51

SHA1
9cfbd099a994a07c4ca19a473dc3f54971b832dd

SHA256
37992a70006730f76502d1be17eef82d32c04f9347ca9cccae322b1d98fb177c

SHA512
7409ca26675213df4b40d4821ca1af7587eee3d206fbb998804a39a8382995fe2fd3461e7299cac9e31b29cbcd43a607c96c9a6bc2b33ea8688b7081e2763ca5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5bca156dd7982cbaecb2a35016543f05

SHA1
992d2b6dc9076a676fd7bab2cc0cb8f59438f289

SHA256
ba35332aae4e255e7c5c7c8406d20d5c8809903f43a96c31ad4519f81d93a169

SHA512
86a801c484dabb4a015d536b558c18330e3b201cd798040dc4b9f2841945924c8d9d7eeafd1d6e03cac15b01825d4c18dfba4a5d252bcaff29c18357c02c9dff

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
42ccbd05b8ca2c1a848b3ac6530b67c2

SHA1
812b89b19e8f08809b2bd26bb5da1155d2a14572

SHA256
7a660e51551b7b7294d05c65ac038770f2bc38f004d2b9ac188f36cc161bf4f8

SHA512
526b1cac68f04c07eec80a771f6420eb4133330c1ef30b9777635c1ee2a1fe64103619d85a6916109d503387950807f63bd4d631f5cc67c953aa74e6cfc9b0c8

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
0711ba21e710c08b1e32eb539fa26d8a

SHA1
dc4e06231a3df8c5f21080a8ead74d3bbd5e2c49

SHA256
ae130d97cf969caa193734e0f9e30185eb5fdbbfd49f6192a39b8e0a5fa7b26a

SHA512
015081ae50ee2c572cb40eb4a094f483e9925a74f46faf7f84f142f281f773f232345b71b20e91525baa4409723d881b07a48378ec2630e46607f3d083aece66

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
bd99334e256f10b7c14208e6d160d88f

SHA1
222a61524956ea4487f4ce6b5cb666c976e5c8eb

SHA256
bbcd9ed7f39ab5c38ba1dae099ef0c5cf43d68a3a14adb21ae616ea2b7db9785

SHA512
2dd7132cd0763434e891be5276e57a6fb252206ce881a6b70e53f73d3a7409c963586b62624328ccc6f36dd5d2fa5b5c7bdb2036668011bbde72c5c6da7347ad

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
d950730820950864be9408e9acd5947e

SHA1
5bdc9188511c305b22c542a4d21abf2ada7cf10e

SHA256
c9e30479e81c5605b8b6ee95b9248359198cda4f7d8a5d7f775f06195fbb964f

SHA512
1b8785d4bdd0a66559a798af6d3cd035a4da14f63b122716882ccdd63d6fff2f1f0b45839e6a1fa9fd7a54bd88ec2b3fc087a0d4451c58c3ab2981060798875c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c061740419c831eba1e31c092c531186

SHA1
b90786069e8ca82a0fd695c8dcf45e900b317ad2

SHA256
32783426b8a270f0045fd1e169d5fcce7869f2f29d6bd325bdf10c64662582d8

SHA512
2d10efb2d98be5a45054929d76b5038f29b1b51ae51ab9dae574dab390624edca56f1e5c5e06afc7dfb0de62a3d047c3dcf92cb76e07b59c9b479eb26865877a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
7444d1d7bd3b34bb58c2c0733b23dd50

SHA1
49e98391cbe0da242661f9225b8cb1b67e4e104c

SHA256
be65fe0d8463394ea45d6576b1605ee27f7088aafb12d42dca42a084c508df5e

SHA512
78bab6afbad24f7ae3b2efd7f460b6cc610bc27e458d2bbbd3a4869365505d4aeb753c2962693b1f9f1d2a5fc466fc8c8abbf42b42deab9b99ca104bcf677fba

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
471853e682749131a3a1f875700b8e4a

SHA1
5793b5515dce83103177470f8c228408dc42a463

SHA256
a5684933cc53702eb791090c318b84d7188e0c39ae27bf130e93318e518475a8

SHA512
1c10554880e6a9cc9ce15579d9c1ace33612001fd88bba0aa3df05cd3e96356ca88335551459c6b918e5670b04efb898574bade2e39d47f9c52ca697d2a7db16

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
4a1fdd8cdb0686fc43e755ef8f167ac0

SHA1
9f2dfea822e3e0ba7a54b02cb7c40b6837a3a9b0

SHA256
45a33248fcdd6e0636ed3189588790d7ffd67f68b096f771cef83cf7d383697c

SHA512
b0367001c8253f374242fcafff622eb82a1d965fde8b2b869cc36f29fd4e79bec9baf8a50b11e2eb2229b88a00205e386fd08ba9bbdb387ad78b53a3d7681b43

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
7fccd422b3df36454ac04ce060c56a8e

SHA1
6f604c075a0d1dada5cafc8cbd30cea51ffcd16a

SHA256
8a46684c7f8ef427ae35823b078b19497d3a2bbd6bffcfe0360b070b20e163dd

SHA512
30fb7b9865554cdd794ac7fb0580bd8ef748ff700e9e7e21cd79ca72fd2f63b62f3c6de3bef04200ac00aaf412631f1f9065a8d81159038cd54d2532f0c407e9

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2295205616449044186tmp

Filesize
554B

MD5
b29f07b7611abda668103364f161d311

SHA1
0b9bfd41b5750e75635ae14c079cfc18cfa72572

SHA256
dcf81e81cae6dde7ed0d77cfeece7f0551a6a618c0c56f612bb05fef87f4c770

SHA512
b5265fc116e2d83976a1c065cf13a5c51a72e9f54aebfb0bf914318fcc50b0b194d7a7ee9cc8c2f12bea690e651c7ca72bf2153c2cc9d50adafc4e1f1aef45c9

Download Submit
/data/data/com.systemservice/files/PersistedInstallation9119829267808584407tmp

Filesize
90B

MD5
38251ea067fcb3a5a66dfd022ce53347

SHA1
c4f1185242c2d4bdd7238408399981b3533eacbf

SHA256
4ee240613a35f002b9608787a366ebb014393a43fe46ecd33fabdd85d4adac21

SHA512
5132147d168efebdf6e813f6fff9811f855424b37c7628daa053634dbacfdeae4d823b94108f8822acad4131d50875b3c63687684786db46c2eb8f8894959abc

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
f5fb2297bce4d824df5dbbfcb506266c

SHA1
6bee5aeffdc39a05e9b58492544139671e921a1b

SHA256
710a7a4f2301c8f90627069f026f3495150c9e4049160222d9bca65390bb913f

SHA512
4cf139ec6d3bd71fc934e2856581962acda6e1f10f138f241260e809129d12dbc58f93aaf62fd90f46bb4d362919ae0efb49127e15c4bbb7e74a0dc21be885ba

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads