92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
132s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
10/02/2025, 02:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4328

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
754681eeb2e35f94b527d637c0125f0e

SHA1
d0b0812fda01e1e74972bfba0e61174753a8af02

SHA256
68ba358138c8892a22ddea3933110f1c46747e0f7e220a5ed9f2bfa30d598af5

SHA512
ba15d500e7122142a89e49a5827dbeb03abc20a2b3598c02966c1099007433d58b401ce83209c9aaf20e1f01bdf10771339a557b7e540b4cbd2015e2199be357

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
d76cc6185c980d12ca12b9a070c47e73

SHA1
a4ff453d468ca9e643776450266191f7ce262d03

SHA256
6155c4858c5a5aac1bfe73959f786b351ebb07c1a852e1c6b92166e1a0221e21

SHA512
73982af9d81092365bc725ba7071eca92bdee1674e62690227276fa26b95284f15effa97346a975e347e1325999d5eb6025aeae33cdb0885df5e937e80c85c27

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
61b58135338f176a4554f2738469ceec

SHA1
4f7e6fb05311023ade4b019ae641db3ab7da16ff

SHA256
5a4152c5ab230faa69746b084dea31a040f8ba01f127965911ac2bc336fe0be4

SHA512
4844e22e2d28e014a5fc43cf6d2cf011a036990a93b644583944ae9f35c36dee92c7eb080db76068e00f36c24ea02a6e8e705b788074e96ec8bedc537440c4e2

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d28b9a7822c6fd05dd9e0d6d68edcc02

SHA1
31a2df63ebbf883b5492507b1633c63c980b13d6

SHA256
9c12934d39ede71419bc4981980e597143bd761214c463d50c231412757c88af

SHA512
6ec0f0fafc0022e73da6be57793983b19948b2066b83ba2c2938f56152ab0f51130f2bc4f4c0b4b6efba429a08f617cdc4d71825bda249cfba72f58826e627df

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5dab69c4dbc7affa8fe4fefc4c6d9b89

SHA1
4d863285f3168c204351c7fec9efca4d8bdc88ad

SHA256
680435a44d6bcdec61ff6da120c0045e32574b9a28844000c9f07085c24b2341

SHA512
006ea4da08f71b7bb3344dc8b405f570f05ac9cdb3bf699f82eadbb4d8e8b103b534945d0778d080994ae0943a82e6631e3f24d57896190b52379d531ee2eb2c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e1563a5cb8b7f2de42abf9cadf7a7b35

SHA1
881997f195ae01227bc4e1b842bcd275b73bddf4

SHA256
38a4bedac6b4b8f785a28844c231c4e560653f09e2701cf6ce087572648266cb

SHA512
329fcfd86d121473a9d0609e674231e5df8f9f80a3d4cd82efbc79132a45f698e1b26be25fee2c4c89ba1ecb6447f85e51931f58bd6cad464d9c679a1aa34b7b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
28dd511cc262f9ce67aa33ac8f9d5184

SHA1
06b2e0cde039595e9317d2d16dfd6ce4b6b4212f

SHA256
470c7e83d6fd6115b8b5888865e48a5e2eb5af2e2183d7e34c210ddc423c8534

SHA512
ad07e556c2091e450d239c65d3f9b62cfa23ce7860479fc05c7a67766aee62ec6ffb09e2deece3dbe298252caa12a7dd751caa12bdae419e53579b4326e94a27

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
01dfacf1244fd9f45d007153c1d2505e

SHA1
8536b1807d82c230157fc4bd827340d2d8d15c9c

SHA256
5d624f6fc7083030e7df81bc237661aec970f54a6844b24153009b6ea088ef31

SHA512
679450d1feddde2c2c075f4d9680110f3779fb6f6f6516c2f7cc120aa516dd4344de8b29964713f7194a72f8621d5c67bd5abc9a03577cd90befc9a2626e7a24

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
7e23d177066f12932dd81451e45219f0

SHA1
7697d386ec560502b792d1fa5f7ee1087a152205

SHA256
08df119290acc179dcdb2445b63e8143e8db059fc1eb89fc5cafcc8e9f643197

SHA512
d1b595d8f4772db6cf13b924a02f31e4ea0bcd1be38a3b955edcc7fe70ebb18674cf3973ad3e7013bbb598baf8bfd822008402bf937a10442919be47b41deb37

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e06f3707bf31faca997294ac5e35618d

SHA1
c6165bf904545e95b233f74f69ce6087ebb3552f

SHA256
1b73fda78f8fbf25f15ff2db53162bfb8dc9a764d47d96b1d368c27530c33d58

SHA512
a478467e90a416fcbf96fb5637b26c94dd67fa11e87821dbee52393defaae04ea1b4d2e474ee32f836dea3f55bc470329a76b78cf66abb676ba4eb64801b9739

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
6aba3fdc669cbc92869419dc43fa796f

SHA1
ede65d849cfc564dced22745c3c166c75ca099e5

SHA256
f184e9a6bf6e90e8f871321adb3ce7044ba872ec8cd48dbe1d1a554de98561e4

SHA512
a92bbb6714d6de3dd31e94deb1e1d3117873e9b826eed91f1ca733552fc965022ff5b32503e87a49d5acb384981c16344919e3694cbd58162dbde424e773b3fb

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
53b4ab2fa6d0cff815f91612ad183150

SHA1
85f4fdc192d28ecad45dd8da9eba1ba241198c5d

SHA256
8f085eea9c856bde06ece24b83d8faf8820ed16d56d375fbd1133e3ea53e67dd

SHA512
46848764db84bcc17ab5ba7c44386ab5729c92091c04924ff670866943f70644afd9b18456fa4de8dae83dbb725824f9a2a8896b7d1c7c2d3edae1efb91bbe2e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
d65727e2d493094d9ce38f766abf1244

SHA1
fb2454efbb1c69c3f8fdec14b10d1ed0d2e8f8a9

SHA256
90eca37955b3ed7fa0687390d431efc95a20d52a5f1ee739fdcc01ce41bd40ba

SHA512
ca6854aabbda9c052b3c9de2ae663af91efdce9d138f576e1ca08fbdccbed232996277855935e5a1003ee26438a519c1dcfa457b76b4e1efa881ab3c743a7500

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2870980749972935098tmp

Filesize
554B

MD5
969c2e04c38082314d43f85fd5215464

SHA1
0d18950968713a35f9886a94cba27c8fe2ff9d8b

SHA256
63142bf5cb81a1a2b4367e22d6931daf6b4cc05d2b8ca9792b3cf48b5e20c9cb

SHA512
ada0755caf735bdf330dfe8d438b3129ebd5831d2baed1895916b92bdc0daa44b52f17b34c4f1dcdee3dde96f8ac787ab42254ac39728429222ceb0a6b8a40f9

Download Submit
/data/data/com.systemservice/files/PersistedInstallation8914322361394478622tmp

Filesize
90B

MD5
8118399b0408176c74a5f9702b188d21

SHA1
de0bf5ea20109192a7aee0422d341e3fd4cf1bb6

SHA256
564ece8bbe7d5742300a87cbfb220edcfc7ff0c2352688324b27a602aef7909f

SHA512
aa42b62f4121783896e7f947e8b60478e883be8a75e116c2d819018865e92480bfa6d6e42278297918baa1d31064f1a40ece8cde551bdb5e8b0c544e3aab99e7

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
3dea49c3fe63210722e36747077a6272

SHA1
829fe2d28357d02dbdc4d11114d2fcb802df01be

SHA256
bba6c5dd6588dca49a1c6d5b9cdb97b7da402c3f2806dc612c44ed8351169982

SHA512
4332be0dad310998ac93a1991d5e57799260cc5a62ce3c29251c2ac55a41edb9cacd4f65e4bf9138bda8e4d7856c6f62a51991847244c501a5e0e2f84dc30e49

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads