92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
16s
max time network
97s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
25-01-2025 02:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4246

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
b36d32b1968fdcba73102d572b876745

SHA1
f0ef5e8350def2530c97db2ad3173f4d4255e778

SHA256
e3b8b546c53df0f207359fe8525553a1e4ebbee66fcfb4f3e796ea7dcbb4ae28

SHA512
47cd76e3ec633446a5cb923ee8fee24c7ed9720e55ba7a9db3d890c0dc09b87b8221c7965f24349d1b8d69cdc094d2b0bcaa38ffd246b199ba886d2d18b585d1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
0e7849f8c1eb09f0b3b47a940aaf8bc0

SHA1
626355f7b07b619a811489a7ec2cc857adeee77d

SHA256
574c15cb43a761f412f9994305f6c4f097632c7f0ba943fbe5cd34cc1e40611d

SHA512
f8db11f41a7b2de55c2c1edccce2122be9d473353ff2b98a3a0a214d1b6c681f17c7454cdd055c4f79b403a939af337cb2f12d0d2af067099f8ff4a5c036e0ec

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
267dc300543be60376a48a2d04931029

SHA1
1a004c0fff1da0d9a29b97f44fea91f889a0843c

SHA256
356add60e40cada320df1b6b3171cb994509be2629ca2a45a8724d0ef57a909b

SHA512
b4fc500e2fd6cd045d0775000a7d533cd396438fbe9c891736ebf4c0bf67a2a7ddb8e45b766492b2eb3743c2a462762f7703bf05d94d2931bd045fc79171060b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
0197b4e792d5879ba42dc92a6ce5b931

SHA1
c2524fd70c9caf67e331af56543fa68c9bcbf882

SHA256
50f0adb16fdd5505e11173706ef2659fe669ed9479b34463b414cc13657e42b6

SHA512
2a4c1fae311eee4b9f731a10cf0aac013d539f6d2404e725622725febef38f67ea081dea7a4dacd4d2f7c72abd590eb23867a8b1d4431399edf83fa001a30d48

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
9593839b12a7b5e3160544678d83277b

SHA1
226fef8ef55944a735e2196685cf8d016c419752

SHA256
92d5978bdbc64f750d88acbd63055af18402e798e4e1f979553b624902612c55

SHA512
a392970cec3995947df6929ee0f552388d624cb07751d4a160f41593ef1282a5dd197ce5d7242d16262435410f6abacd68d2e580b4642bd9c6866006e61b84f0

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
9d438d15d43a907ec29ba9906f2f35b7

SHA1
090d7fc348daad19ee00d0bb440abfb0655cb69c

SHA256
4ec52aa2b2463c5de993fa8882e36739166667ee9867e55a1b1476ebdd1ed02b

SHA512
ba561ce082a7477575c7d68ad6d572680e089cf944885896198a8e9f655aefca89adddad9f9609f25ee55c44419cc8a0e085e943890be2b4bf9deb1b7519912c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
e43756466edd383179d71f3d9fdda4a9

SHA1
d216ffd4e92cc566a60ba176db2e98c7730f0ee0

SHA256
adaeeebd228ad3267fa21e2066a112c9717d1688c92b0a4f5567cf573b612977

SHA512
e820160450adb8e0ed8c429fa698feef54c46472f84306cf1cf7ff6d932fe3c85f48546aef6acecc3a3c2a758be0dafd579c9c9d8e24eebadcddf1a8240566f5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
14e1d2d204174a9917af98b020969c9a

SHA1
40888dab4320b374a12d91550aff289f7b563bb0

SHA256
5463545c21e1d1aa0cc1418b47ac25b8908b0cedf3cafc7ca7e2f53e72a8690f

SHA512
38c52ea738c805481289cfa82fcc19cb141733116312a626e94da78b0ddbc6317c8f409328f82cbe313a7bef552dffe856f315a03c84f4ebf2128e9d6391dd63

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
fe4d14eeed4ef81d0281eef022c4788a

SHA1
302ecbcbbb31211a8c4c798ca9e6e3b312cdf71e

SHA256
b0cfee390773e0e653c77ecb4bfa0d0ae9272ebee877c9ad1978e99dac6e0760

SHA512
3fdcf0941ae4bd997b78b0f909bdf81835fe0e7f0ed142fa18cbd986ca0b7e0f64a92fe99f5f0e3059674aec75b408752131f8849986ef41a594f8a2e2239c52

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
8693fb9f95fe85c38a757e83a9755faf

SHA1
b4bb49d410f2897f177f38e6455cf289e605cf37

SHA256
c11700a38e919d8351f9f3d7a3b23198ebb713e4c6ef9ae108e25bfdd8e7291c

SHA512
ffb66720ec44e5d85375fffe17a3d1565627a4f3b0cceb864d69c374b61ef647779d7f9380e16e1a252c49fc61a9b938f16e8b8fdfe5b70dd804a0afe11dd779

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e3b098392e17e234bd11a14f813c8585

SHA1
86a6963abc271aa2c741c98088584a1aedccd40a

SHA256
d776d38ec698468bf9f6a627eea83ae897971dd284f6b92b8f84edd4f5229266

SHA512
94d36a98b98996f5727e18d84632046df5593cfc10f812119d557c70f81e0afe43ad64d7c864ca1367cdcb8fbbac88e8dd02b23c66cf408d5c188eeaf41866d8

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
19053403a6be26790401215546f4f5fa

SHA1
4254a3e897a9e8644ceb2759ddb94524278d592b

SHA256
1cbebe0a60516fe2be7bfb91d304fa7dc2a4eba6026b2ff4d582176c2700f69a

SHA512
9261e315c1acdf872919a1dbe59a793553aebb1e8aa5c3331886c189b17fa8b55d79d0530420cc8a5244c9ab39fec16c477269975bf4ba72654f49345e1340ae

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
849c5458713041b6427aefe68afb2484

SHA1
07a4f17c2b505ec4f0d9d974e9ebc0779e4ef032

SHA256
58d609ca6da661a9efb900ab08777da276b4a4270b98a85705110e07cd7243c4

SHA512
0f6e56a4368bb378b113c3e241479b432495f5bf6bdafd136f8d1172250e64056e0b49cc96cee80d8e3ace60638c227c3194dff6c896cef1dd4f830341d27fca

Download Submit
/data/data/com.systemservice/files/PersistedInstallation7720800540833195390tmp

Filesize
555B

MD5
26e5f4818ee33c58736f6542274280a3

SHA1
be296bb21e2a647e60ee51a7f343752eb245de23

SHA256
b3003901f7f280cdbe30736ac2f445aa89ebe870e0571b796d9fe07f0156ed36

SHA512
749cba4bb423c822b94c16aff0763bec924cd1327bf5bf8e3c822c992fd7b93a76f764504a0d01a3e04e9b7e428fe4a55bfd2f682a68ffd82dacc0d08fc2affe

Download Submit
/data/data/com.systemservice/files/PersistedInstallation8836034284108158656tmp

Filesize
90B

MD5
f34a1b9b197989bcad2bc7a28330b81f

SHA1
e67c536cf627efd294361a5e09dd4293cc7063f9

SHA256
a62016ed87dd8eedc6bae0b10d820b04fab2423cae70ee8c5d67929284940917

SHA512
d15f9871c5fca2c633ac366825879f9217c4999fd932f31961385c197d39802ed2a2e00baf5a3a2066a8ab9f6a8040594d89803a36f9f61e125fd4477c17c15f

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
ad486bc04bd8242ec8274318eb6f8fb0

SHA1
81581eeba01fbb4565b1c89227ae628a3d265bb8

SHA256
553d6f36cfe81ad77bfbcf03e880c94b3958db0e388941b3b04e9487252cc6f1

SHA512
7f2f78ef834e8fcdb8a22d0d7428ab80dc86e4832fdea71bc57ae833cba74e8b36e88cee586b7e45dc7ff0d698d6d1c477c870a095e60bd4c85677427f6b6b3e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads