92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
143s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
07-02-2025 02:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4263

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
0c49818082a87a660307cb6a6bdc8853

SHA1
d9a17be0730fee53f871a883253523b44fb3a8e8

SHA256
d019a13c4ddaa6493125ddb8e151a7ee3912a2006283abee783698f8f5707ddd

SHA512
9613ec764351e7133e95b7953caeeb7d72e7d43923ee59bb79b55e7ddb342c8a63acaf0440e38019fe877041375a614bd570d55a3e517f38dce83c7af5cd030e

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
f5dcbb87b0123251a46025de5c15e669

SHA1
bc663dfb783b34ba1f5b26b430a36bf2811df155

SHA256
92df6e90fd7f0c30e82c47cffdd440b4f14a964afe7af7e5f7826edf2327452a

SHA512
4119749893efeb5669bdbf90923444894ba365721021afb97a64938b29bb23293eebddd13992dd96c6c59566acdfb6204729e5bf2feca8349ef0add42de1bb2a

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
c4ccfcfa8a04be6734716c0a9113e6ec

SHA1
061d6910e436d6248b9e228fba1da30e903fc459

SHA256
d1cb9f3eee0fdb41eeaa4f8ba5fd6175962c23210313014e4ff5537f631e859e

SHA512
2f63bdd4d615fd48e3674b6c794afadc144a0085f755b7e6791e6f5c75cbe25151ee4ea46f0edb205678d3c086085aee5bdf9a14770efda6a2413557f243de29

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
af519491d6d350d9c1b0a5f157121311

SHA1
7aedec0eee7a769b7f5788cd4bd8703f976a1d5f

SHA256
b99df0d20c726400d20feabc2019cc19ada3ad1ad5ec03ae3b8d60845c66179f

SHA512
a7841f343af6dcace9b91a27f73bae667d1f69a7b02a540462ca67b630eb6c25954e0ace14d48079cdeeb8de2bf99bcd829c3de002d131d42907cbefcb90a01f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
db008901cf15aac9bab1c0c62b61da63

SHA1
2bac6871ec810d9b7a8c32b38e3b047ad20696c2

SHA256
59b559212b41f629b2eb40a789b2adf9c582d76b2089f42a50bad5b0c734b786

SHA512
6a0e42b1df44e5966609b9dae9823dcadff941131b9bfdf0bd3fb1f5fe3585d3c999c83c420fde9b15e6b898fdf13e01301ab62d523988be1126df35406862d5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7caeb7626e5beefeea17f9f60b2c021b

SHA1
1ea294fe7375f7c60a9f5423215fcd4a471f0338

SHA256
52e9338b77fcf7a30f000c6bdbb2113aa54d96aaeade56dd6c0d4d04d7594aef

SHA512
d23e1784a3e22873ceaa528b9f5226053c444790820df896ff67043dc544e1937347ab2cb260804c8fe41b62fff83271fe80e9572f05c905a7bdd9329a3f48b7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
dda26ee7786939bdc521dfa941f8eb72

SHA1
70c8edb73897ef8c8f92d4b74bf3ccfdbb3b6745

SHA256
4646006087691f98d415b3b4e8fd7cfffcf6e6ed912e089a9c7d0ac7978301cc

SHA512
7dbc184a227304e7457a4791607da0f70d8c819708c5f5e0b039c3c14211674bbad5181a758e6a274d3c9163734d5a73624633a3458bf59f621580e063a18dd7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
9fe51860d0c8bb04fafed8fdb8c1911e

SHA1
d96671a10004197a566f73bbc1c2edad6826301e

SHA256
c20c0a0c124607fea4dd6f4bdb9f27784979baba478b46b15cc63826c9dbdd13

SHA512
442e2ae5d0914a8bc33c4ca2029067622d35a40179977976fa5255d8f9d5b928aab942e51bcc508433cf92015658e4d389a8c4fdfc0c95724b9e8c505f73eebb

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
bd7e015cc00812128191b3370eb3b18d

SHA1
c5bc06f8a1c848db7684d8f22f62ca398f708a08

SHA256
b2808bd35b819dbf5b638a62a54f25046dcc2ba4b15b6422ab4c04778fce0eb5

SHA512
3476c21d3292c83160d81054c3e7b7e5dc9855bff6fd92a69f3c77f6546f844cb1cdabee66f875f6e8d8ea32bb0c6abb9c4d92d9b7a72f1c965feb2e85d91469

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
b3b1a86d005fd22936ecca27625d89ae

SHA1
44a2892659d03bf214863a45d86bb62e1066779f

SHA256
9c3416aab60cfd220a7dffc8b3f2f33a086d417604b66e6e73d991cdfe6f455b

SHA512
7621dc24b4112f5a8514f1533eb0cbb929fe0c10b240a02bb41c8ab5369681840d96a0db8ce64f2dcd1cbf97c69c1832c52ef771c3684e28c86ab411eb64602c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
383efabd54c74939b0278192398d9a6d

SHA1
a6568cce568ddb638282a7bbbb99f76f7d936d9a

SHA256
d55e4877569da268547b841593c6803615050a9f70254893277534642b7d95ef

SHA512
2bd74ad296b814ace19e9fe9c1d93ce3c3d9cce7adb4bddfdcf97afbf3317db324adda99f6c5a80533d1f3ff757de6c5ca5ea56788dfb4eb50b611b531179108

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
b92fc865c118c1e9ac06fe194d4ccb90

SHA1
9c30bdc0302ce27a3fb3364b34d3463937386a58

SHA256
121d0301570fe524f5a9fbf277731955f571098623469fc5cc6abff926583a76

SHA512
3e61dbde4a7d98096e72f8849beb0a1161258ee7069481f2ebc126099b63d6b7ff387e5dd6d58b74170b8398e61f7cbcb740855e332a70f59246dd9d2d3e50c6

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
5874419bc9a75354d25a3e757db116aa

SHA1
ab80d788a1e518a94e79ed80a9a575f356ca1469

SHA256
3d95554567574df3677e7617b0cc0850e3b071534da86cd5167d2c64fa68e3b3

SHA512
51272079368f7c9842668644a567975af32e5f806007a8998f4c17689d6272328e582cc8c92722af3d48d3a4b77bd19a8784b52c3ad6c84f59f28418d1190033

Download Submit
/data/data/com.systemservice/files/PersistedInstallation4094140828983904924tmp

Filesize
556B

MD5
b094ecd9b9db6b8a464a0f0a509ad7e6

SHA1
3d962086c3a24503b32a95be5320f4423ecf503f

SHA256
ce2f534b105d15185c4fd1fc8a6c3ea994d4bc640971768a9a5eb0dc812722ad

SHA512
a9bd7ff0713f05c7521a9721786a91bdb43507c17fe9159fa520cb922b0e3b1f1cb06c4dcc4bb4fe6fa083dfc1b0679f27ad57f0003fcb6273d4a6d31c45a09b

Download Submit
/data/data/com.systemservice/files/PersistedInstallation7127175100209560161tmp

Filesize
90B

MD5
f51c3b6407c736738b4ba02f54480c37

SHA1
b333b07c8167f0d34674367f3a0efe305c9103c8

SHA256
e26092497553a69486f624a84a25df0c636735186a4459aebcf20bc06f4559f1

SHA512
76a0e792195258a568ad6eebb9f2d0617f8cc4abacdd2e066b3de58b834396dea320d2f8e5c41ac34b4621150139a5f9b63911953db48532cea8c48fa769eb98

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
569dfaf39f1bea8ce8a267e1d72f62d8

SHA1
df7803cd07de902021ce5844d42a551922acac21

SHA256
cf01dacb0568272e695c14237edcd2b5d5efc152c776b56883bc346fc7408a63

SHA512
2230804afbaaa202f6d3bbd241fb9821af3688d7f513251f021044c89ed73643c273e820fcfaad22d19d6a37f1e9626daea411db6a8dbb0cf97ae8902c43a7ce

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads