Overview

overview

10

Static

static

10

c4cdcfb645...40.apk

android-9-x86

7

c4cdcfb645...40.apk

android-10-x64

7

c4cdcfb645...40.apk

android-11-x64

8

Analysis

  • max time kernel
    130s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    10/04/2024, 14:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    c4cdcfb645cb50451f6a5cf792ef91e07aa1ed166ad99f59358eb8b9a1284440.apk
  • Size 7.0MB
  • Sample240410-rc6vpsde2v
  • SHA256 c4cdcfb645cb50451f6a5cf792ef91e07aa1ed166ad99f59358eb8b9a1284440
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
collectiondiscoveryevasionpersistence

Malware Config

Signatures

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

    evasiondiscovery
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  • Reads the contacts stored on the device. 1 TTPs 1 IoCs
    collection
  • Reads the content of the call log. 1 TTPs 1 IoCs
    collection
  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    evasion

Processes

  • com.android.systemgui
    1⤵
    • Checks memory information
    • Makes use of the framework's foreground persistence service
    • Reads the contacts stored on the device.
    • Reads the content of the call log.
    • Acquires the wake lock
    PID:5109

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/com.android.systemgui/databases/com.google.android.datatransport.events
        • Size 40KB
        • SHA256 e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.android.systemgui/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 827f2fba79cd93bdc980dfca4ed00ff1c84d15ec4f1643235d876d43a59a4ea3
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.android.systemgui/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 d44d5deb2849a7103b0785ab0897b71e81b5b2f0f7a4fe5373d19eedb42f16aa
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.android.systemgui/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 e2b955566d96282bfa94db263732915fd2bed90b37755858a5a40d3553f2c49b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c711926522d8c44063da5f27f8eb2f53ca58ad083fe3b3084759bba46d1fc82f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9ada9b81abb83fc14b1321327f31648938743e727a0741e92db6e1b7652dc420
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b0dc5dded779b399c491d83314096989c1cbb8fb434126d1d930e24e4fe60ded
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c7b8c023819c51fd27a411a0cb5a9d591f2296df67c0b495e3d97351276bfd9b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 340fb475122975e1bb2db75722b4014da7bd4889047e0564952546f76501332a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 e0dcf2180fa586355ddb3d5488ff1f8235f69ec25fd0e334da872cb6f3c66a97
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 d656a4b2453e14f968fd53143013b19cae8c3bc965f6ee87ee16f2dc4eb2611a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 f84ea87817425657097989b2bac1b7b07b60c566db6b6d594d1ac01404cc1e3f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 736d0db8e01b82944f5d718e931505deb0dc294c17ea7e70b68655b12378a7c1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 8b5f8f2b0167a4db96398d169a98e52efb294277d1ee65d978baa73a1e814ed0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.android.systemgui/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 f50d85c6fc92ec3a2fdd3e14baab93bf53f8942343bfe3b3c22a9a8afeb97972
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        prdownloader.db
        • Path /data/data/com.android.systemgui/databases/prdownloader.db
        • Size 16KB
        • SHA256 0d1a418d4f25b43224efb7aced9fd47615a4f470710da9ec229b463bf8624a3c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        prdownloader.db-journal
        • Path /data/data/com.android.systemgui/databases/prdownloader.db-journal
        • Size 512B
        • SHA256 88dac78af3ed543df1992bcaaa3820bb20f2907121d633cb2a833e303051e994
        • MD5 SHA1 SHA512
        Submit Download

        prdownloader.db-journal
        • Path /data/data/com.android.systemgui/databases/prdownloader.db-journal
        • Size 8KB
        • SHA256 81cb57c2cde014b17782dbba9d787ec900d993aaf02eece9553a2d378d51f846
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        prdownloader.db-journal
        • Path /data/data/com.android.systemgui/databases/prdownloader.db-journal
        • Size 8KB
        • SHA256 21c62d90fdedb713c6b38f0cd98b18c0a039b7762313def46c204b7001c04450
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        user_database-journal
        • Path /data/data/com.android.systemgui/databases/user_database-journal
        • Size 512B
        • SHA256 0aa00f8ca6f0aeff455b4267a025ef07cd7dde5b6c210acb7b1bba1b2800299d
        • MD5 SHA1 SHA512
        Submit Download

        user_database-wal
        • Path /data/data/com.android.systemgui/databases/user_database-wal
        • Size 16KB
        • SHA256 44e1f9bd78e276fa0ce71babb28c9bc0a284942ac80fb170b2caf4010ef60769
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        user_database-wal
        • Path /data/data/com.android.systemgui/databases/user_database-wal
        • Size 152KB
        • SHA256 055938afb7dc2a1bfdfb277eb30120c0034b1d4a23f715ba40801d11938d08ea
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        user_database-wal
        • Path /data/data/com.android.systemgui/databases/user_database-wal
        • Size 164KB
        • SHA256 4a1cdce98fd2abfc47ca3a7dfe2c6fe75a8033385fd3195a922511936aec3275
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        crashlytics-userlog-66169C5A000E000113F504C54FA056E0.temp
        • Path /data/data/com.android.systemgui/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-66169C5A000E000113F504C54FA056E0.temp
        • Size 358B
        • SHA256 da6f756af80cc52f0dd2f1196b56e4eb81abc5d0d2b4642e4a4cc6402f826d56
        • MD5 SHA1 SHA512
        Submit Download

        crashlytics-userlog-66169C5A000E000113F504C54FA056E0.temp.tmp
        • Path /data/data/com.android.systemgui/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-66169C5A000E000113F504C54FA056E0.temp.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        report
        • Path /data/data/com.android.systemgui/files/.com.google.firebase.crashlytics/report-persistence/sessions/66169C5A000E000113F504C54FA056E0/report
        • Size 739B
        • SHA256 2732489a070cf2f16505d5f43c2fd96d01b1b4072927c07cf71c71658709ff94
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation4750170649595199819tmp
        • Path /data/data/com.android.systemgui/files/PersistedInstallation4750170649595199819tmp
        • Size 114B
        • SHA256 29c2ff76ab77dbd550ec5423e8c03944da27c3f74265a40d2ee949606d13bdc1
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation9032718403263471974tmp
        • Path /data/data/com.android.systemgui/files/PersistedInstallation9032718403263471974tmp
        • Size 90B
        • SHA256 3c872cba70b04c9937d324b806fa19a203ab4d17cc2178310f4c31428557f915
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.android.systemgui/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.android.systemgui/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 ff48b7f9d2be202905543f5426151fd28f15d3ca7e83d043af3adb852eede8de
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.android.systemgui/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.android.systemgui/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 ca4a9c2d275a8378befe77098c02a3fbc8f60656f2fd2cf105ddf9797fb83e1c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.android.systemgui/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 639388a2d0313af4470092a6489b6ed71183a4236b225a73abbe34a99e440862
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.android.systemgui/no_backup/androidx.work.workdb-wal
        • Size 229KB
        • SHA256 eb8241b69f9b1f41fa851667c952bc2fd97056e2aa1ec404bb62beb6f5afc90c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download