Overview

overview

10

Static

static

10

c4cdcfb645...40.apk

android-9-x86

7

c4cdcfb645...40.apk

android-10-x64

7

c4cdcfb645...40.apk

android-11-x64

8

Analysis

  • max time kernel
    48s
  • max time network
    149s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    10/04/2024, 14:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    c4cdcfb645cb50451f6a5cf792ef91e07aa1ed166ad99f59358eb8b9a1284440.apk
  • Size 7.0MB
  • Sample240410-rc6vpsde2v
  • SHA256 c4cdcfb645cb50451f6a5cf792ef91e07aa1ed166ad99f59358eb8b9a1284440
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
collectiondiscoveryevasionpersistence

Malware Config

Signatures

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

    evasiondiscovery
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  • Reads the contacts stored on the device. 1 TTPs 1 IoCs
    collection
  • Reads the content of the call log. 1 TTPs 1 IoCs
    collection
  • Requests enabling of the accessibility settings. 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger
    evasion

Processes

  • com.android.systemgui
    1⤵
    • Checks memory information
    • Makes use of the framework's foreground persistence service
    • Reads the contacts stored on the device.
    • Reads the content of the call log.
    • Requests enabling of the accessibility settings.
    • Acquires the wake lock
    PID:4471

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/com.android.systemgui/databases/com.google.android.datatransport.events
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.android.systemgui/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 0a589f3f48dc43acb09d4b3cba5251a224bea5ee914b91cdb1777c9d7d4d5883
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-shm
        • Path /data/data/com.android.systemgui/databases/com.google.android.datatransport.events-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-wal
        • Path /data/data/com.android.systemgui/databases/com.google.android.datatransport.events-wal
        • Size 52KB
        • SHA256 bef4f9c4fd3e19bf04608fd36650406b75d2b1409bfb8e95d58ff201926303fd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a83a82fe708d6509e69f61592d6ec017ab7db7b7e1e763483d5ddff3c9583598
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 366dc148274ebc8684235ce9e46b7cc1f388bbe0f16d9a6bb55f0137a090aa83
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 8e8b9deb5f84be821627c86196e343d628a64b3136a34a4dbb49e681208362cf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 fb3a94ebaa25e1620eb1fcae755b1f47175e8070e1099ab5b30d68977508f2af
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 f3eed9b3202388682cc28bfa8801d47cf878479ea570c3bfbf29f1216c4b2c90
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 319d897ea2531dda90ba88bfd570f0a271dbfab929edb16bca76ca0641153c3b
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db-wal
        • Size 36KB
        • SHA256 ba777df33a7baeefc933c81d32249a6d335e645707007208ca4d9147f40e0aae
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 632ec1810aff76db7b3ff7cba13bb9a8158acfe94b8dfe11979c83389894aa2c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 d9e35f295d1f48d84f2815e6c3088eff2d84e75c66c259af9634d47be550baa8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 6f06c4c0b5acc981767112deadcb24658f9099e783aca54a3ebc4c0a5a7e3119
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 36fb2baa66fe81c00eb304206d70086c7278a44dcf0e605ac5cf02a6943a581f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 9b605a8edd7a20a0c9a945c5d66a3f47d9c4bc0ff305e6d673f24b83c0fa8dbb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        prdownloader.db-journal
        • Path /data/data/com.android.systemgui/databases/prdownloader.db-journal
        • Size 512B
        • SHA256 da8a18e94f04890952b5e9fadc905379705e20a111fdd958a0ee7bfe4f4fd7a3
        • MD5 SHA1 SHA512
        Submit Download

        prdownloader.db-wal
        • Path /data/data/com.android.systemgui/databases/prdownloader.db-wal
        • Size 28KB
        • SHA256 6416a85da708c2524843a15bcefaad10033e70923c7e0a26683c09cb4c244c15
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        user_database-journal
        • Path /data/data/com.android.systemgui/databases/user_database-journal
        • Size 512B
        • SHA256 a26408c0917830c2f35a17f7684fe6b7149c812ec655068efdced0fc370ce1fc
        • MD5 SHA1 SHA512
        Submit Download

        user_database-wal
        • Path /data/data/com.android.systemgui/databases/user_database-wal
        • Size 16KB
        • SHA256 ad62a4ddad08ed3370d0e1579cfe1953babf56a44ca8b724559b83e73ceed427
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        user_database-wal
        • Path /data/data/com.android.systemgui/databases/user_database-wal
        • Size 152KB
        • SHA256 919b141ce61ef3b84df9dbf9abc27dbb7a38228ba9ce2b9f9b3afda296e00d2f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        user_database-wal
        • Path /data/data/com.android.systemgui/databases/user_database-wal
        • Size 173KB
        • SHA256 eb850a93f7ea41ddf3f13cdbfd5c5cd963371961331ec1395eddd2e05c66e7c8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        crashlytics-userlog-66169C5C03C100011177004CE1713F6C.temp
        • Path /data/data/com.android.systemgui/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-66169C5C03C100011177004CE1713F6C.temp
        • Size 360B
        • SHA256 478f10b585dd9d3fb868f1b9c0e4583631c02aac7eabb642bf9ce9c0d1e97c8a
        • MD5 SHA1 SHA512
        Submit Download

        crashlytics-userlog-66169C5C03C100011177004CE1713F6C.temp.tmp
        • Path /data/data/com.android.systemgui/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-66169C5C03C100011177004CE1713F6C.temp.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        report
        • Path /data/data/com.android.systemgui/files/.com.google.firebase.crashlytics/report-persistence/sessions/66169C5C03C100011177004CE1713F6C/report
        • Size 738B
        • SHA256 92f231dfb43c925a2251d8eb2723c7e2ddc7d655087a04e45cc4606b4990c526
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation2773175046651300966tmp
        • Path /data/data/com.android.systemgui/files/PersistedInstallation2773175046651300966tmp
        • Size 90B
        • SHA256 c92bc3c05f44f4ff3a5ef9a6b714548fb704255b0b6ccd8f99499c645fad907f
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation7364650858393944495tmp
        • Path /data/data/com.android.systemgui/files/PersistedInstallation7364650858393944495tmp
        • Size 114B
        • SHA256 73e2799ef11d3e652ac62809cf0d57f38903b542a389e7979eddc671c7debdf1
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.android.systemgui/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 b8ed55fae80fde5dce7c3be1f60df872d1cca9a655c5a51b0111cdb762841f42
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.android.systemgui/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 ebb00042e3327018395e1a4e64c9bb0f2482bdd424c67322b9b722b54595b188
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.android.systemgui/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 e4151db1ab6a6f08f7c1e5d9fbf3d92280dd054f3b35d158221e69f9f58b02d9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.android.systemgui/no_backup/androidx.work.workdb-wal
        • Size 221KB
        • SHA256 2f865eb8ba997eb8835df1479a3e301685d963b401a73ceaf6446fc317aeba63
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download