92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
45s
max time network
151s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
08/02/2025, 02:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4323

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
5f68d12661795ac7b92ee20d9841ae1f

SHA1
8f2112b03d7c9f0e59d9990fedac2d6470612962

SHA256
3f9267753bcf9edc55ce37a0239a95f2ed9530771603378706dd5c64188be490

SHA512
5792cc67cecd94fce5603ae07b8cf68991af204e2a236490abe826d6b6d582b4522e3de134fc805c34b9acfd4a07879532f0f9c94be139f1844df3dfd2624ad3

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
41f763133d17c7f2067e7be70287f5a2

SHA1
3cdcd93ee85a7b1a3756acad9baaf5f0523630bb

SHA256
57e9d248059efbe42b287d03bc58a03b03eed95a51abf4aa0048c3a1b3eef4ae

SHA512
7333bd9a27a5f75617be9d49525be01ef24a8c44662c405992325d7e4e63917250466f80d42d401361d2c581d4b540e886bbe26b967a3c3bd970d2df9ed4fb93

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
dcaece05678f941aa833684b49ca402b

SHA1
346ab92d448c997a2b3f51f4670f0950a946a3f8

SHA256
3845f644fed042547ef085ad3aa68f39c28ace218b4f543e58868908b77ec070

SHA512
f47f4b8404f7c70352bf439272a603bafb262c56b352268ea7c98d97d532cfae539b3ee0110df397545f915e33c97024f3cba01f8f08be3cf2861ab1d4bde767

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
175ee89100631cdc2436b7445ed6a98b

SHA1
1d8abe8b0e6f80f0bbaab10066b231b50f15e2a6

SHA256
6e710544710f9c2437ffdbca8345dfa18c4c4143af24a979fb066619624ffa5f

SHA512
8e917fc57a8dde579db44f4299c6c95aa23ff380abb2caa324334b64f3af30dd0c054250df00d1fadb176f2ad3e5ed01897652aa055294f59086e82946a66c4c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
1c3ed5bf9857b66037f2109b911ea35a

SHA1
fe4959e28a58d624748622ee531e2f3e3d99524a

SHA256
dd3bcec749de11d0068c73092c1b8842cb9757c2bb55fa6218132968c9d73648

SHA512
1dbb8ee2e5223f756290c829a561372d10f5a2be2ed529497577da58e24f7959dc9f35c13fc9d74a491410e6221920c074cf3d2a971a607fa8d1cf00d2a836b6

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
cd93ab2ee78891de5e31d5c551f7ac72

SHA1
28fb295e3ff302a29f0bbdf8b015488f7c14e254

SHA256
91233edab7e6c90dbc0ee7eeacfb25c97cacd0e5070c56222de4f66c50b07147

SHA512
93c9f8626c82a3d3516ff041978f3463d4ecd84e9219f02a2503c6e9921191c8ff9822c55e14a2a9fabc9e9727c4cb1fae43005dd72994b9045584b24df4590d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
db01a3f464d96992a9cdabe57616706c

SHA1
3907d578bdf05aaf32bb7cfbdd24125b28e4eecd

SHA256
3e9d410ed00ba87622b03369d6ea2c07c29a9a5b8ef641443b5d5332d638592e

SHA512
c1d04b2219bb34d9d0acab6113f7153d4037710dbf10dac9c49e4494937e8f1154d36b84641ebf0cef28b266568110971d30c259b34f6940b8e28619fcc28a69

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
5c58b904b935f7600705ddf7da39a6a2

SHA1
6e62086023b524b5f3087a64014884acb151bf19

SHA256
e597e9bf55dfe2bec4edd5e35eb16f3b3f0473bf8c9e419764f761742e5a4c77

SHA512
4cb10040f4d8220804caa572b0b7ef58b7dca53d2602f71bddeb6218d720085c096884076300c7403656c26de26ca1414172a771cceb5a76ee36fb5289368fc5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
349ae90f9802d9e4a62bee54222bf523

SHA1
21198781f7b01a36655249dc4697a27a7b73c70e

SHA256
7708009c3886dbcd5d05ae4e20cab0e6474f423fa229aa54ed90f4eef9570de3

SHA512
cf58288d452147755e2970ae751cc13cff4757a1c15e80492f4fecd9c2206fc3ffe4f787a6ed2f75a7bd66c6f546758f133c6d061f224f8fc27d971ff268d3ef

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
380cb67f54bcd8270cd7473e35df5f92

SHA1
febf3276953ad5792a62e6ead163492ee32cf30c

SHA256
d8d9dfc83e8168f92b688064d9503a929f797eb7a85004e38e3943adeddb3a22

SHA512
c5e9bd3afa9ef2fd6fd32bfc5cb326b4d30619419415782d5fccaae405f06a8f03d3aefbf067c217315e8642b2f9f454bf51be61f67ab011e446f24694688e30

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
22a286de0e59b50bd542e77608fbb537

SHA1
15885d7a525699045da65c4f77d0250c5503b2d7

SHA256
01da63f32e52d4b3c059c68915badd211bc686d6266651ddf1d1223d018cb65b

SHA512
130436688578927e9e3bf9456d5f38c168df55d17f9cca6379dc582606fab0511637adfd917bf39f850ccdb389f356097e625b3fb26d311866030719cd2de25a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
ee3fa2caa8beac653b7f837c5c37b731

SHA1
21c2a2407e0519295595e2af4a9d4a1321dfdbca

SHA256
6e4a05b182bed65c2f85d4263107fa1af842c2d1dfa8c534ed12c0fb5f84f044

SHA512
3507522cb0e1b370c54ed609e249f6917043ac843768afb979dfb05899cb377383b63d4b04f4756e9217c25b81f5a3975968d6b371047474be031511b070ebf1

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
d8aba1a0ce5a688d6d79bcecc94a05db

SHA1
381e2f1dcb5c084a5253862990e89aa6963dc168

SHA256
6b3516c3a4c280b99fa88fe9259923c70d7341337d85647695c9289489a5fc30

SHA512
48d73453fdfdf467dc22dd9d0602fd3cc747ade97ef77714a991e4ae359742ab7c3787a10508346bb5d75cbfb22e97aab63f55cfaba040b088aac3d12ceec4a6

Download Submit
/data/data/com.systemservice/files/PersistedInstallation1192162205470400160tmp

Filesize
556B

MD5
4e11ce40a2e685d031ed3a0d8826cb86

SHA1
7c12d83ba4070206885953adb79b6b4fd1d232c2

SHA256
ba3d964a5712223659840955e1ab2a93f6e482504ca41cd64a2b1fe37e18f45b

SHA512
a7db4187509bfc8e1ead5983bcfb315c67a2f83cab91bd169f0c1b75cdd8ac05528402985325eaa180b14beefce67945508c689f7647aae59e77cd0c737b5417

Download Submit
/data/data/com.systemservice/files/PersistedInstallation7302717883338975549tmp

Filesize
90B

MD5
d67778213a72e9208b12fa812b365f15

SHA1
f5629f151d85f2485a22dd32a84a7f8ee80ba7e7

SHA256
2160c0164d99aca3504ce3ad113862733879aeb60cdbc06fc21aa992f38b3cb9

SHA512
f4aec252aa20333da50daa6ff1fb0c7a68ff67ed3421e4d3210d02abb726cadbec14d83ab9ab70eab56320bff9c79b03eac8a811d6df85ad2b8bc34270b36905

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
966020bd6b263c15cb90d8c58ce17926

SHA1
2b454dcc3965da07ccb8decf96a874dae321b9a1

SHA256
b262e3e1dee42a887c6a144468587b23fb0028bfee71e1769573b41db952ed04

SHA512
a122a8c05b4f503e438fa0e84e614a87ae11729d345f3036e162c2beaba5e096179285af4b6cbf46fdd5ce25991207dfce2293c68d0643eaddfbc96d046e0a13

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads