92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
16s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
08-01-2025 02:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4257

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
efe0f22fe391d2da0448374a7b07b6ff

SHA1
1d6e4883e0e3617eb99337e5752ab35a5a6cbeac

SHA256
0c2e58047e43efb1daed923bda3f564d47e19a68c2884c34d4c555e6ffd7b34e

SHA512
691c34a264cd176ffc5be979dfbc5174bef371fbb0ca8b5270b8531f6c71eba7f46435d86e7bcf98dcf44416ee523196291ba7c19149de99ac149c8e2428ba64

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
a4d6674998313453b30d5f7d44e3c878

SHA1
56c0a6c13755fd5ad342553ce851368eb3b61176

SHA256
998a1bfd18b437aa457f226ee71c971ee8e1d56c51f12b7ba304b82127d28a12

SHA512
e665e4c8efc3aa2a280f37c0ca82e75e858110c07c55d57d1ff06f120d4b280ee31923933e61668275d9655c53da789fb138b3bc61778e68a326baaa0bfea248

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
36ae082e2bb407cea1e94d95d4e9f1da

SHA1
538e20a43ebb73db5aa828682d7ed555835f6fba

SHA256
0c2dc7d69401c02f32d987830e8934f8751bcf6df9b8eb1d88fae4e13266f885

SHA512
351210b9adcb1b9ec648eb9d4f6e55753f8c04699322f5a108e933f34a9bb7c28a1bed5172673466d3285ad24db9973dc8ded3f672b942f004df923616bb60f0

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
b6cf97683abc4095938d6486060f41f1

SHA1
6ccb5c42102d2fb9a38c569f1b40765d412bb7a5

SHA256
343408a7882da41a7da7491e0c319b524c311bb55229cbf73143a3774638ce35

SHA512
9a04630241f1cdc15db1cb2bec3eac3d5317df61b25f983a0630f5067fa4432f608bfb92283bc22f5d2a06cc26a0b80ed1076e7e0dc6d5038764a213237dbe2b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
83a972191ac7e5ca53c1732a4b3bd6f9

SHA1
5d702a5c36552f4434dce67353b98da9c95ba271

SHA256
3fa3afa8ee4f70263843f6a3b42de77c0246aacd0983959213e5262b7ff14c04

SHA512
af11b49a89ee9218c28d268c1d66aa1bfe7265d83127fa32f63ae400145056db67c4d97b163d26b7c0e8db414aad011ca2ffdc4dbdeafef007c2ab2ab9d955e8

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
99e6666335f77aa2bb42fad8cf089184

SHA1
ca88eaf263e42002fa773b83f9c0a6370f48a143

SHA256
6e06ad63bd021576946d14c4535dae45d1af208f01fdf4a1f689b4e19a2f3c05

SHA512
add8298c58e38f0e9e222cfaaddb17db16a5b86958c117f67fe76792535e7c9bc33281b29018eecb51b130f306c821c03c26a2e6acb5083d8cfc5aa208ab3bac

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
5ee9758a8eb17485dd5945326f6090c6

SHA1
213384531ff56d65cda82af092b48c7011c759b2

SHA256
edad7d9609c3b45536245556460648f284be17a9d07dc914c41ee0dfe3ff2467

SHA512
0be9c82d1be5746c3332387b3ed269ff7d16bff5da76f238f2b18ae509bdb2f48dd469215b9b66393efeed6e76349c410258929d7e246e27f15ee25b7d046806

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
39a9e84bdddaa376d7b6557889d37963

SHA1
076de97b91c5cb1520acb1eaa510b65e286403f1

SHA256
483830d8b88d5e1ab5bf4a0d049e3c55fed6330ba1439b5d25d148df47633208

SHA512
cb529b4de8e7b53565ebf78c49090dce7d94b03a0c8b486a881d4998aad2c0157d4d988408fcb8912fc2ffe5feeaef042ccba6ab01a3d9455027046377c8d617

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
3bb0ee519226e42af2186e9bc931232a

SHA1
b44c70e7b23086d74a6024b078df3bf5ce1f6d85

SHA256
7e2d01e8650af19da788a7a746820fc026587392801c2614fe99bb32d897a204

SHA512
9663003a38e13d5074209abe8bfd57296143c53a3ea82d0a2748664f69bcea01a05dce99b34a36f55d51fa9356f6b1decf0bf7a916ea2fb276f051b8cee20cc6

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
022fdfd4162759ca922595a0ff150008

SHA1
db2ca209bbd596de4523f70cc10fd5ed19466875

SHA256
2281fa7955c32264fe7c4af1b42c7be488d13d5ab56c971b3ac6ea4a6e8e12d7

SHA512
ea724fded276043d2f825b0a7d33f37a93c97516dfe8daf51c473f3f45aa2e10ce405fdad5ef4b1eada2faf084df78aa1bbbfc58c8a8e57e96c80fe629c3f4a1

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
a484d557221d9cf029259c4d124cfcb4

SHA1
d20368ffb3b79d042c60c4cbc0fb317be7b0faa1

SHA256
ce3b6382487cc2b1e22ebdd5756880ba448979bb386c7e59ca3f74e86cd0eb6a

SHA512
56634766c57041a4c1516a0603b1aba27f51cffa495cac3086938c978294669de22b66edc072ee4c2db20b6648f5e7912ae5e3cc1f473c0c7b4c565ed98753de

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
17c7d908f41c421e1edf592695abea43

SHA1
b3fe6320ba07afc423b0c24a8cf137010c87cb11

SHA256
d634aa8d857d2869441f8104e29f6bfc72028d7c5c1ccd62d27a0738aab63b4c

SHA512
4b2af81d19b46142c7d5decd982238889d4c7eadf5e4e5b2a61fc2f31c9c6ef745d8f1d4cdfbf88d7848d952a8f9de13e70c8998040c726d262651655d58be0b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
d48f0a6c4844ebdb5fd1e3f3fc87a036

SHA1
6e2edc2f28c6e9047b9ef640ab11f80a8d5426da

SHA256
bf2f3202edcb430fbd3a2f1563e1195a4d566910358485c29ac9962ac1f97c9c

SHA512
9fc22138165165373e4a4d9aa04c7d234525b89b4e57085819dbb36049bc54dcf91721b5815828e037fbb8a7c6ee4a41a800844e38dce28521b5fc68287b85eb

Download Submit
/data/data/com.systemservice/files/PersistedInstallation1530040250610458249tmp

Filesize
90B

MD5
e5916edd4a89567ac1a2e638f035d862

SHA1
520d3da552bef84aaa05cdc2f944e7753b390819

SHA256
183f6edc1d04bb0ba893ce93de6755aeb31341782f31390cec9e1d6617a161bf

SHA512
582aa16f328807a071560817f4d21a6185831586143909f954255eb096d1a3108a196d5359108a03e2855e38d5889d00c93682b16ee1fe80829205a8397ab8a3

Download Submit
/data/data/com.systemservice/files/PersistedInstallation3393983253921086436tmp

Filesize
556B

MD5
93fd0ee4bfb2a7d791f96810e948382e

SHA1
fe375cb7fceee1f32f985cf6c5a0f40ccb032956

SHA256
18a2f0b98601a04a2191a254fc7aa0d4a702052028df1c9b57b4ffc9417d04ca

SHA512
3108ba1d8da457066dda053b00dd17ab34db34e5399344998b7e3b7d0cea4c8140efc14af98895cf7b7356558b9249d015bb3e518edc101160f042a871cdd36e

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
fc2d5918ca275cf38523cd3a7fd41e9a

SHA1
50b179575d22cb4bdb962a162179671109f35727

SHA256
4ede1d30e34f79257c8c13f1a058f39eacf0a2d7947f743266d25dbd0808a0a3

SHA512
0ca1927cf5363d36981ef31c54139b0045620b2157649bb98a5af93e85d6f96ed446adcf1c4c6ca8058208c8fb2de5d5d5a30c6c4f59d3df36181607e23f3d60

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads