Analysis

  • max time kernel
    175s
  • max time network
    137s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    08-07-2024 11:10

General

  • Target

    47d6d9b52bfed7481c9db51712e4a81c6f773efa1d96ac2c0d71dc0f6f6ddd6a.apk

  • Size

    5.6MB

  • MD5

    e55980951ba288a70f5ae2266f895a76

  • SHA1

    991e820274aa02024d4531581ea7ec6a801c38fa

  • SHA256

    47d6d9b52bfed7481c9db51712e4a81c6f773efa1d96ac2c0d71dc0f6f6ddd6a

  • SHA512

    89644b22b277c9f18177ce755ddfba7f3790d78edce7cadd476db01469f035698d695ed73ca44d62d7e88dce2655420eb3230b8fcc192516693c58dd2df9a000

  • SSDEEP

    98304:+wb49Ak0pAvUPRIpZoBQZkvGgMKj0GMUfXrEid/ilp1aS28J0frB6Q:+wbF1ZIpZAhvGAjKUf7jd+pcSE

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.tech.sideswipechat
    1⤵
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    PID:4212

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tech.sideswipechat/databases/com.google.android.datatransport.events

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.tech.sideswipechat/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    31aded88497bc598615fe3177465b7eb

    SHA1

    63362e7ced1122cad581aadc05e2f96dd43946f9

    SHA256

    23e0872263fd88da8b416bd2b740ae8325c4c9747cac453bd7233da4b775163d

    SHA512

    cce6b3da1c435051af71a17c04292f9100d7e0eaf99750d368ef8872a7ec291d3233bed928192ddf5dbf3ef4047d293fc3872c6c718a6bf29296a6d5c3b293ed

  • /data/data/com.tech.sideswipechat/databases/com.google.android.datatransport.events-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.tech.sideswipechat/databases/com.google.android.datatransport.events-wal

    Filesize

    52KB

    MD5

    16ba3267587928fe25b78c129cb679e8

    SHA1

    79fb1355bed517675200e37f9300ebc0394f84dc

    SHA256

    51747e6f31c2f619e39ec5127df20e0d1489171472414ad50ec2a6f63533b977

    SHA512

    38fa009a4aa92f2b93eaf3bf8d94b440a251f00d938eb77f2336cfe978c727eaeb72504aff101344ac67ba0e103d95519e4195c7448df54a38eb0ed7ee2ac116

  • /data/data/com.tech.sideswipechat/files/PersistedInstallation2581237913250191594tmp

    Filesize

    114B

    MD5

    b1ee91cf2ff83cee08ca84745226ed2d

    SHA1

    a292da3d6b998fddae4ec882fa370d422fb0be4b

    SHA256

    5367cc9159bfcdff7e6f7df6394979aece3b6f70813e4f88d676b141bae13285

    SHA512

    02ecdce255bc8b28495e4163c1c739babc7feb32df6356a105dcb41662c0f4504c8c7b4b7f289ecc816b2304004f1b4c1a251692354c53278a5051def78fbdf1

  • /data/data/com.tech.sideswipechat/files/PersistedInstallation3329849980087073855tmp

    Filesize

    90B

    MD5

    e11cc079a53e2b792ad10eee2351b9aa

    SHA1

    93f94534c9c8e71b2422bc73bab16fd8d1148c1c

    SHA256

    813d7696d140fee1c179b3f66981fb026e71451f4a3599edd3b32f44d4093823

    SHA512

    769e6b58ac686c80d8d2ca79545f2e869ec5dcf20feada0840e9a61e2c8bae0f72afa99acb390f709b8d658a585f15c24dc62bb33f8dfd4f55081caa6b48a080

  • /data/data/com.tech.sideswipechat/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    e3539842a7aa6bf32acb634baba8d967

    SHA1

    5072bf196e62c4d5f3ee82c84e282be0e432acb2

    SHA256

    11a4709a160e497609c61534a51f3cd5fb6326470acfa1ccc7261ad4d2672793

    SHA512

    6f47f0203c749d4f56488c93e4b966378f6b697d92ad9b9d9d7966c15ae7995c8da1e3b1343a912eaa1fe32659fda70df3c2f19a5ebf8ce5a57702a1204e8dac

  • /data/data/com.tech.sideswipechat/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    04445773390ce2383c0c5f14eab1be25

    SHA1

    565380f5019d330eb54ddc041db4ae4daa4b1755

    SHA256

    be1556b4591ab8cacb102ac7be5c17bbb49d2fb94c6cb8f5eea4be57c80394c8

    SHA512

    5a1c9333b0df908e302ba2ea9b07931f7720668622b6a700331d613a9c07923464c9c2c3e6b2cefff900e070d13ebb9ae2fda931feb1e4deb6dda4a9b3c8abe7

  • /data/data/com.tech.sideswipechat/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    6d8be28c9b22fb3f312993743d7106ec

    SHA1

    b6a1a20683e313836d48bc6e0b1f204dd0646317

    SHA256

    3b93ae007f9032e063401ea166744b61ae9373c77ef62771c8b6eb5036fe483a

    SHA512

    5fd410070d5d312ff7a586c6ea96ff25a0a8c958e6b9f407cdd0a2559d10d5ecf39c0dfcc9a8b75fc8a680fd67432ee66db928fc30901530ad2488ae4ef838d3