92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
11-02-2025 02:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4241

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
3673515de85c4ced2c5eee30cd6a6787

SHA1
37338a8f7d014b75134e166b1b5bfebd8b1ceff7

SHA256
bd162c852d2b87573bd92dbec47b096883c29197afcdc257189460052d2f5718

SHA512
1606ca6b040b79f0f47626dad07323ca00d512825ad94df4a3d42c48e6ddcaeefa3d6c993a3c158cbc72d108b4c6885466a7e7b79654e842fe19fc7a0943ba55

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
cb59a2ac6715a7934b3cc77141f1e138

SHA1
a3efaab95bb18f25fd9d82a402d5ee92fc48025d

SHA256
fd996db818cbe5c6fac9e37b0709d4638becb99a745805118aa0f7dc945b6bd9

SHA512
4c1439620f792a3f4399dfc8441b27699a906fa144d00514d95d9ca5a1b91ec8819f0e2e2609813a88b0ffb2452aaa53c0dfde7b936d8a3969bb155ee62b07f0

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
4179e8b978da3907970329dbc159f848

SHA1
fabac27ee732a616bc7afc4d55051bc6112c2a91

SHA256
4a992569b17cb88fc102196ce0bb1433d125d9e7efd676de74ec0c379c2366d1

SHA512
9fc68989246bdfeac4b31fcb52b28d1bf41fe016e18753abb68175a6a382ac60bd9c83b308955fbb6e2407bee686aeae0b3aeb7b89cc96461c537602800bb705

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7a0c3f648cd709e0f07fcfa36c39c8e5

SHA1
8c21eac5573d8b852c14d2a102cce4b5ec245105

SHA256
8f91ae3ef180ad5a164a83d2f5a97a6b0497bd64c8e1f627736f443148690e4e

SHA512
abdf0dd5ba3bb08c4b9ce4dbebae09439bbc6af0099d14f0e7678e0ad92b8ec4749e498ac52c0ee2cf6da9a1159825ecbdcf240a533d674ee8755db14652764b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e84b0f8493f44fa0845590e964e682a4

SHA1
01baff2901a5570064855902ca9c5d8fa6d34f43

SHA256
17ad3631254de069d2521db22d822f1c8f80ec8b6d0b0c97e63161c8a54ab31d

SHA512
209626a73a5fe5bc41035e5b5e5a751b1fb9faef151370a505377bbd71d215ffd37c749037b3cb7a6102b20335a07bb8c37b7d6d133d550dcc11fdd44869e901

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5f88ed79ed9f3b49568ea2e565499d9a

SHA1
be8fa126301dc61d2b521502e0eac5bf69740a96

SHA256
9c1e695a5a544c4351665683a3e0764b738a0dcf2032f37c09f89c3c6efd005d

SHA512
c585f24d20b34673d9af80cf4a20c7acb5cc985fbebe3738b37dc2970d00e808a6ed1c45b8082356291785b4631bb447f57a8feffac9b1e5bfe0a448e38f501b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
3a45628cd49151cb46bb1f08a452c4f3

SHA1
b1fc48cff17cdd0bbb62163264b15fad32c512c6

SHA256
edc1b087ecfacd5fd6a8c2e49dbcf398c02020b6caee6a448b6669a260c2260b

SHA512
e4ba5ebfd29cba31dfbab72b10305a17a5bf005f5caefdd2f4d6bdc7521087250f2c2320a4e52fce022546c13f2df0b9e9daf9b127606a007bf40b59c737b723

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
a8e37f34a08190fd693d0219e44ca40d

SHA1
2634d3ba1402604116beeed8a62782258ff2a410

SHA256
88c344b4388a5d2f2c5921c218f31b5b9777bcdc4e19ef9c88129923e7fcd0de

SHA512
ba22114d5c8fe6f0960c03f49b83d2e66e19cc66a00407783589d9e01050b224e52faa9604f01310fb82a945928e00e67022ab7d4516b34bac488c7cacdb4f9a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
ed1d6aa3c4a058ff3400716fdc01881c

SHA1
02ef28620520f3a044a83d76fbf0e5ca9dfdf4bb

SHA256
cb76f9a33d442c3cff93ad66d8fc5efa0ee528e2b3d0754f0a80d36b9f253f8a

SHA512
39921ced3251d3b0460ae2bf861719d94fb490eeee038037fdf08e773cf79864744318d6d008de4ea315e5a87038f24a79304d598319894d65e5decaf53ab2fe

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
2ead21df9d483f6b749520bdd5816acb

SHA1
4b0922de1f5bfd1272e6e87d57e59bcdee2291ef

SHA256
acd3085778c88e197aa83d9c31f4ae7595c51f9fd5ba53f4be08fdee84806681

SHA512
f8e5c8052a01a3789a5dc5919016508d6c3e0e89d0e95157ea8c06c7a565e6cf28de5428a14095932618b70a590e87fa6ccf8709a0eabb0224d136d2eb564f35

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
a2837afc40edd600a925ecace6729a9e

SHA1
c31b5a9d39f5d585162133d135478a1c1a3132de

SHA256
ca256a8e236b24d453e5975c52924dcc6dfbe2cdc3f61bb592138cc3230b5694

SHA512
75fa95a2d6172947fbc754c98656f2a84ebb7133822ad724abde46a382d5a6ebb10d84e22ee8aaa840121814bc88a219196d79b79785358523801ba28a9b4781

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
773a4791c02d961ae9a43f77afe39339

SHA1
0fada0c13fbddb44a04ee1c86df2cd4c62bc1eb0

SHA256
f3fbff2411d1ee86776cae04c6067cc26f8a7586d7ea37f08c0b41a54f100ca2

SHA512
62540e0af20eee2b853a02fc87f6026d4579f3cbff27cc818d09363e139c36b6bcc9a0948128ec004558bc95fd35323c816c3db42531f4bd853ea56d4a3ec00c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
20472c09ae7c573082001007ac93f096

SHA1
735f10c4a86755b06e2347a657689b16cf621d4f

SHA256
dd267df8074e0a73e5d2c56e0d76feeed8fe1890bc484d0459571aeb00111def

SHA512
35f9cb3a25584599edd6a40eaa6e3d65f322a6730a780d6d15f12ceb3c2983f84036902943b075535fcb0c255443d6977113a2b634e00cff8e693ca401dbcc5e

Download Submit
/data/data/com.systemservice/files/PersistedInstallation4690336812093967732tmp

Filesize
555B

MD5
fa2bd3f554fde2c7fbf0f4cff50647dc

SHA1
084c37d4fca69677feaa41464a3d0e29ff573d35

SHA256
a270ef046ffbdc4e813bf4598c18cef96802a3b7c5971850550a198f860cb3ea

SHA512
e6c979ed7d7f77367b3c784d60bf2f44dd1a3e719f89ed129d1192727d4ea9785c9b3b82f3b5ece0f1e18906872627486dde4a990b42182cb16aaddcd0c61152

Download Submit
/data/data/com.systemservice/files/PersistedInstallation8325605584769747244tmp

Filesize
90B

MD5
0a8b9afc8941c9fa37b347dd6119a4dd

SHA1
d1f75fb38063d40ceb4d7edd209c7af72808d34b

SHA256
5669f23b60615571864083b654d1751e590fe1b6236d62449e314aa518ef4140

SHA512
1203b1de1a0f143effff245a908a658f9273a8e39eeb2bc4551b9c7221a62c38b0c8a8db6c98de151c982d97dd0974b69eecfe7bb1b3396a553db35b2e24ba13

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
d15a899654ceb4b96b55e28ab3e432e6

SHA1
39593223f9655448db3d3ddca86001a80a57bb9b

SHA256
93a23befebaf9637875ac00f7aca7cc528cc80d87d763a95d3aef5761845f911

SHA512
438fd81ec7a37dc146744bcb147b5761cb5a96069a2f2d638ec9a5daf12f43170fb94000d5fa520c71d34af50dd801360915583602774e5d4d6562b659cdf081

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads