92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
19/02/2025, 02:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4264

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
7fdcd86163ed5fcaa8dd7683aece8028

SHA1
1dbd5e45905933bf254af5d8d57a0b76e83e1468

SHA256
76d36db6d53547e61dc4550a7d92c7585b19f665e7a07c00cc8ff9a79d467c7b

SHA512
97e5639af78ef8c8be0a0720ed3e1a94eb8f7753d05bad1209243cee2e4dcae7e782e964b9efd2b783b78e83c10c39055b13f2cf72b8f36c64d2bdf199c6178c

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
5a826e14b7fb0a90c7f5ed006cf5a11b

SHA1
31b5730c623f52607452948b4edc5a19424f0f07

SHA256
8ced102aa4cc4f6d639521bb52c1ff5b1e190dc77e1feb1e2b0b05b2f79779be

SHA512
5fb6e92fb4d17025b6264bf3847cdcce1ded5d0f404a83db2a63ef55b702a9ecf02056ca908391720140fc58b8b0544245b6b1717b868bfedf2560a5669fb55f

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
924e3b78fdb29ee773e57be0cc0a7efc

SHA1
56c02d02c36400cca099d6a3669222fd6ec47444

SHA256
abfbc4d9f08818f0254c2abceb6aaae811fdabeb05de1bdd58de36297545ffb8

SHA512
a620618d731a2414c7ad4e9584aa2cc7ca7ba153d5ba83d3b380e9989e8ea438e5b7378df4e5c306140aaf245f2b42ed92da86d72345be8e58b93c959e083594

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
c01195a3e10efdd79439b12963e40a84

SHA1
82e2367e2983d97e71f2fc41d8b62d6f1a4631a3

SHA256
a45ed0f36a8839b756401ad439d6cc69c4bbda14e80444ea9a4b514449517582

SHA512
69528dff1cba683ed6dd7a95ee05f5528be1ade5d7156487bce2107fd189009debe4ab1635d96206fd5ed8cfade7255f116edb2def6f2514f8e81fd441fc0d70

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2e21cab15590e95a41345eebe57a5252

SHA1
2fb0b3762c5f05691380959e2aec1f1f8f4c0115

SHA256
0d37db168d5aec5bc030aa6df97da5b07f42b531d948c736c2ee5ea55b190d3f

SHA512
5faa5dd212a0373995bff2241e1e2bd9a2cfd89a358185b5039ab3ac4f456ccd7fb56b1bee952baac9ecff00ac06a27eddf647d3faa1bb28c09867076511982e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e5ffb874e9fd69f6fd7b62772a01fb9c

SHA1
3de491b8f7bf20dfcfe9bcee77ea7a89af685ffa

SHA256
784c9fae888f87067aa086e6e2a69478095357a511fb4542e78f5e7f0e387efc

SHA512
51b6d8107841bb4afa451a07bd18b74512e0b3c8a37cfaa787c12116ce52ad45b7fb457b2b3a9efffe7992cc603a24a3a76f26edded0cb896de1a819da0e0784

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
153139b20052e2c57aad244bec1584f7

SHA1
52829472e9b56d6f0333856070354e8c9aca9e75

SHA256
4d47ef5159e8765fc583de7a9163c1bd4c1800655326e90936d2e76f42533dea

SHA512
085ebbd903a384463ede58e019dd5585867d54f7125c6cc53224de212e905cd729df06e8ba049553cdb3cdc88eb76ca8d301b0000a4a45c370b09b35e76271a2

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
2ac4c3b5b58a4c92a522201b467d60a8

SHA1
65ab71f44915d30b04c8772b07cfb456eb6ea294

SHA256
c654cbac644bc7ab6a657a67beeaee3832df5d34436fffb0e417073b142a8e52

SHA512
1ab5f201d4faeb6b149c21df617cebc0397eb58629f649a68120124946c95746d6f35a311c64800ff443281300aaec18e62e8915d1e0eaf7d14cd404af818fcb

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e620a6c9370d052e7ff94b0e4314ef92

SHA1
9c8b6efb7b406e2e19c91fcd7d83301e8b91566e

SHA256
747f62930e76432d2b10d16837d7a1cc29879f020a040d8497ddad3118c1b107

SHA512
c51ed9acb92c58461ad10490fd9863edb639af480c0a571defe14c63265a6041392c79b13b630b4d90103b18b0b0d91942e5bd8cde1b32fc52cd001e37721ef8

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
55bee6e137bcc51e9d869342722d7d7f

SHA1
1a83e6945cd285e2770eb932f327a34933ec6094

SHA256
3c762f1e5ee1f75a737ec9ef1152b6902173c4ccde5045f0355de88e64e30662

SHA512
620d08dbb6b0016bf50f805b62abfa5f4c6cc742658d969e16d9279e7d4ec709e808f3bac051d19b0cc0098562dcda0dd60eaabaa4d249604b20d1bea549da99

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
63604c62b3d1c23af2a7bf1e70263eae

SHA1
56e935ace0f26cb3b5d4b285065499f2e8600089

SHA256
b0b22acb44da09ee5aee8f7f5f4a79dc4d55a99c887f3516bf175be8df485b65

SHA512
c9763658e674f3a7159bd1b8a46b8e9ab635cb5351f29fb83d15ae5d65509b2f41c0fb658796c86a5a12b0c7df5642e2d5c9f662ed85ab12d4fbbf5462a9e362

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
67f87b3287271b5890a30fd00b26daeb

SHA1
de35fb1e1ff65f763700f9bc702a9fcfdb6541c2

SHA256
83e12ada551a4376c639a7bbd7c19420e2ff98d1922fcb8d6898b5437b31b170

SHA512
e246529c80a9be69b6d4f6f7593b918ebfc40f2b8e58572e678e6aae9a0cbe170583ebeaeadb81338fae4768533ff8431dc27c6414e5612cd42d0fcb7965f13c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
190dc2f3c5d36fa085361b01e6d9ff97

SHA1
0bed83c2b88c93ec8ac1aa6fcea1f393bef37dc8

SHA256
1a053eac1c1d7560227ff75c3f55f6baa870cc82543a8ba334f972e25aaf0d83

SHA512
7b10c29c26ee23035337d27369d8456f399f9b5cc3a444558ca0f0b97b70314bf7498813b5ac64ede563b39024490889a9b1a59a3f5f1e953b853513277fe45a

Download Submit
/data/data/com.systemservice/files/PersistedInstallation6674361894953698724tmp

Filesize
556B

MD5
64cdda57b36bf591a890cca0d6d2e63f

SHA1
874868755b4bf1a6640e0bd5b5548b6a1c555d71

SHA256
16748ea77fa292fa3464c515747b09e996bb2f17b40bb7a4a0c5710f75ff8f25

SHA512
c2166ff49a7d3b1eb548d8d240c011be575203648d1056a6207a2c857dfa7cdffc41c4451da5f7d497dc5035ad707fa4cc971478157f39b084e1cf8887938858

Download Submit
/data/data/com.systemservice/files/PersistedInstallation7271305973871451134tmp

Filesize
90B

MD5
4fc63902636bf09107b78622ab55dd94

SHA1
edbb225a63e15d18f72c9242038942cd0cf183e9

SHA256
12cb764e09f725263cab8c37ed08b213178d63d0c9fef39b3d82c19437d7b9b6

SHA512
e5ce58cb68a3f7825e8fac54fc937eb2420d5f7cd32f000fe282bb65499920c6cd7460b59a4425186e32a1467f4272ab93d4ca600ed9a123d35f3803af12e669

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
1523db66bc611f3575c44b636ad47adc

SHA1
ceb0a56b9085deaa44d7af20a20625fab75eec1e

SHA256
1d6f0ad7cb069b5326ae738412fb05d487f591961585519767deb2515f8cd5ac

SHA512
b21ecd37375652e459add467175b83044701d420454008ba095791b032baa8e95fc8cc6cec9ee417a27cb76928171ed2f677fd7a5c55729a1c009ef403b5be3b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads