92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
25/02/2025, 02:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker collection credential_access discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.systemservice

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4270

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Clipboard Data

T1414

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
b2503d3a3b3aad81a097df3c55bd9794

SHA1
fef7f215304d2433b47d801e23021d0b3b915ef0

SHA256
289260c6687aa9f5eede5d1c049d5c91dba987e53f6e70e2ebe06ce2d7e7a8f4

SHA512
3ce439dde42e5cfe580b25aeb1ebe747294393301151956afe9128578d2e95464b9518e5cd1e915bc53d3b8321316b9792a505544b20df9fe0e60fd313a1c227

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
af81241686d981e93ac5e526f1489e8d

SHA1
4d3251d5082b2e39c9b1b456672ae848d4435cbf

SHA256
7d227ca6de621719caeedd0e4c70f9f8d11348a3716d1e5b087494ec82b9e0f0

SHA512
c3e0157117a30aa21ca4fc68c33b6e8bb2e75d6044965ceaaaeb68100175bb8dd454edb9d1dc5eb8592ef6d617f3ee39260929efe98e05890f8662828ebcc5a6

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a4aafbf271d0461c52acf664e9928462

SHA1
862cc87cdf76728ef15dea43487e46a8d3985774

SHA256
caa4f7c397842c08203731e44c1fe023482dfe72700a73cf78f52253b1ceceb5

SHA512
da844411b00f27a0766e12ebb56ad42c5233a405483300079e602868974de40bba9a515edcffc3df2b1ff72f5f21a4e7e28ec411f7f2cdbaa13442b8df13aa70

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
220a4fb337ef058459439f2f442f164d

SHA1
d0973a2e0b0244ae2302d7b849c8d6e0b93e4edd

SHA256
af714ccaa41053e10ff50a1e795a8473086e6129e0345f8ec115796aed7b50cf

SHA512
68248fb43e35f558be026d9f2e1d0b7fe2c165666cc39401509bd15d9b9715f9f6bc6d176646b79b404061ed097a5d7aa9bdeae1503973ea0b101e7131580ba4

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
09cdfad89833c4a03b8f61a511dbd6ea

SHA1
7eccba780df8e321fd793f4011a14ec64dc2adfd

SHA256
d87156c9f04dd35ab3272b48b27bcb68e4211f642ac14e32ca9dccb926a7a3c9

SHA512
cff599aabd2049507002b99ca979b037a056c95e2e6f4a83e864fa8a810d42a169a272c2bf067ca63bd0ddd4c20ffc9235ea116f459f3da9c4c8939983f84c46

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
92ebd05bc6f2d22e51faeb01ffcbf063

SHA1
4fe76a65292540197a6e0d4f31ec223930b1995b

SHA256
a1ce18b14b82974ff183d312801bad97ae02971f3c03b2d1e4de7966bfd97eeb

SHA512
176a7d76848efce4fce97573536214bb45573785a5e5264cd33d6f710f40a0a982a7c71ec9ef336c4b6a23a26bf2111cd26ed2a892a72cf52985d11398d6f0cc

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
835cfc7decf507cdc5e54f602e3f9699

SHA1
4a55d424cb32e766554672cb2d0b3804fc47552f

SHA256
29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

SHA512
2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
93dded8e6cd9c666885916ac71892fd7

SHA1
18995c8c6361d4d185d389795cef11d25c43448f

SHA256
50905828a5e24519468cbe8bd9ce5844ca4df4a0b704ae6e12923fd765abbb3f

SHA512
faae663b60b29b29ba24c86dd6aa304a36cfa6d62fc968b4f18f5a2c73074c68df791940cbe8ee289b3e148ae33059951ee8a0d9a6669d75c00386ae48436801

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
7c156e15c7397f95adad9aa2e3fce02f

SHA1
92f9685b7100b7dbc5db8668c037584808be9bc5

SHA256
1f6e1a30586d32f6a288739c17049129d968bb883a6ae744c25b05c16af2c6c4

SHA512
664d6526a408a72a4db1db901b71e8d24a73cf626c8d6283eb7969c99b8efbc6f52e08463cdcd80da3c0509100e6120e522ecf29b64537085e077cc18a227f34

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e4668cb94e2a04f925ad259f48fd794d

SHA1
d136eda4f44ae93ce5c209eed226984248031327

SHA256
ed51c10e9f0499a1a673e0343ca03457514b3f5476eb2c69147a782594e16976

SHA512
42e86de76838f3a098254e80333f268782515401a8756687825a8bc574c3a629255f694a06a792d265c4cd42eec0ec2a3e88c0ee3358701cf2971877b0cabbd9

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
0294562e7afc25d4fe65ac50a7714e09

SHA1
a300631f05aac071173ed1b586f510f06346f606

SHA256
59349c073fab446b7bad69092b104dc56ed7e972430bf778dd27c650b3c2fa9f

SHA512
d306191ab79600dc1a859da647cd1335f614610837b0183a6f54a27954ecf533b04c6cd75f8563e064db1b2d0f3e4aec2587edb32d6d78b69467e644f1ebc5d8

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
a81f49a3230038b49189755e070c761a

SHA1
a239c725054b9e2a9986ec1c59f669312e6a2760

SHA256
887c728ccc3506a896f9b58f47e5a8b207a0f8408a12489935e7679ddb255b5e

SHA512
8854ec4fa7bf0acb078c1dee69cc3ab010250719cd8b087d07063d7ef7d2f548a78cc77086dd8ee1130db4ab01c387b03bc5fa41374d48d37ff1b9789570e152

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
dec42f37177fde558047c97a856277ee

SHA1
ddaaee9ccde65911515841cf4c1c740d832476cc

SHA256
8689b9ef0dba988f1c10e2a904875dd64b867a45f259416d3ee45c22b82d3461

SHA512
ec068c6a5a6e51ba4c691ccf25cc9635ec61c2a81a5d0cdecbf38553e5a71dc7373ac44a2893149d9b7f8eadbcc117b020d1e34daa1f298cde6ec97c9c7c96a5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
31a952a6c7f91d845b99e61096af32ec

SHA1
2ccd635f25d571d87ddbfcc332e61afe1ba7a569

SHA256
20f85e429cfc31df2d981247a687e521a86427f9874083946d430d396934e2a3

SHA512
5289940b3b94c2f950777043bac163da1f9cb751f7af44576294527b9891745105fc5ad71aa963584cf684db81c9df6fb9a927636f1bae33cd599d2b6c4c7ffe

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2200480334993545408tmp

Filesize
555B

MD5
20d163a51d196a52e90d86bda00c1e45

SHA1
935c5fc82be34e1f597b41dbc13dd525ccef8b8a

SHA256
15a7af6bfc43d7cb2c4b90bf8110113f0d99624999b219a7ad5244fa0164dfc8

SHA512
2676ec272ac2b87ca24891f2550b1c67f7658e6d18102d8e63f01b3ac0c267152a2e079e1602baf9e56178ad5e3b4bf320d1513688270d3c0e8ebce87124675c

Download Submit
/data/data/com.systemservice/files/PersistedInstallation3801166084903048450tmp

Filesize
90B

MD5
3e6a085f2876a2a13c9b951c2f98e630

SHA1
e95a81613a8dfe597393c08e5f2d8e5127508915

SHA256
d68a36f00109fac78d06bb69ddd9b80de764eea9c5a9d5a38e0b11596d8036d3

SHA512
7079098f825ccd3a015f84974e0a03e9a4de248e52c4342a1bf32c2b1a31f05f3b55af0cd007d74f7740442ea25bfd644bdc0ba5a3aee48ef74444216ce2f9fa

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
be790e0a5eb38b7214dbd303ac88ea3c

SHA1
0f58fc661397d9e476707a2f0d3d1dfd3e983aa9

SHA256
97ab29aba94552ecd10b4e0e10d2c7bb1dbad0e465e7bcdefca01f6ce57979e1

SHA512
d351fd9f08779e8b7a953908e144fea33846191979960ed5cd8fdb304289240825b572b48dbd332df10a62d6eeaf4fcdd5db7ed1fbe9aca6acd74e199e6d4f6a

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads