Analysis

  • max time kernel
    175s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    08-07-2024 11:10

General

  • Target

    47d6d9b52bfed7481c9db51712e4a81c6f773efa1d96ac2c0d71dc0f6f6ddd6a.apk

  • Size

    5.6MB

  • MD5

    e55980951ba288a70f5ae2266f895a76

  • SHA1

    991e820274aa02024d4531581ea7ec6a801c38fa

  • SHA256

    47d6d9b52bfed7481c9db51712e4a81c6f773efa1d96ac2c0d71dc0f6f6ddd6a

  • SHA512

    89644b22b277c9f18177ce755ddfba7f3790d78edce7cadd476db01469f035698d695ed73ca44d62d7e88dce2655420eb3230b8fcc192516693c58dd2df9a000

  • SSDEEP

    98304:+wb49Ak0pAvUPRIpZoBQZkvGgMKj0GMUfXrEid/ilp1aS28J0frB6Q:+wbF1ZIpZAhvGAjKUf7jd+pcSE

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.tech.sideswipechat
    1⤵
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    PID:4965

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tech.sideswipechat/databases/com.google.android.datatransport.events

    Filesize

    40KB

    MD5

    15d5b92dcbda7ef7f9ca327a903e46e4

    SHA1

    ca153b66028a58d90346ff8abadbdf01b95c37b1

    SHA256

    e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370

    SHA512

    2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca

  • /data/data/com.tech.sideswipechat/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    7b0ab4b401ae9caf07c457440cef5438

    SHA1

    76aae1c35ab1bedb03154ecc4823ce84a86ba5b0

    SHA256

    358b2d2f390e624fa4cf9843a88e9e79533e8e6d3a617c919c57f6e6e19f1af0

    SHA512

    702f748d7e8fd7e62b58c430c3f62de695de9c3ec7c25356a79c41abe7bba9f009cb215bbf9c95ea4ac1caa773cf50326bbbf13265a007daf2e35cbe22db1487

  • /data/data/com.tech.sideswipechat/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    521b93aee167bdd26ec8577585b66554

    SHA1

    0611eabd77a1722fb26ba93eaeafafff94365603

    SHA256

    72174ab538105d5324e0e6bdcd37fa5eceaf17caf26bf6becae951221942fb41

    SHA512

    91e09c394083293258f8ff221fa7c02e25f04bf94a54db0f67386f01a8d4adfbb5ecee9a7df016d23bc02b531dc746e91cdbcb02cc3d7e8ae2fa7f1287169938

  • /data/data/com.tech.sideswipechat/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    9ef4e0a90c07739e8defd888e99c93aa

    SHA1

    93c7e693dc304050696449d0ffd62be5ad861452

    SHA256

    8a62930f7e1b57b5cfed48a68d905cc504859b1eee03dd4e41ac948626f25b43

    SHA512

    dc9efc57fc58973be055d5ed293ead342fa27dd7400b8f809504d60f8d9ec3eaf4e534e37de8174268badbdcb0823de7b751d21ccc9adc85c4391a1d7b91dbc5

  • /data/data/com.tech.sideswipechat/files/PersistedInstallation6839660057251045627tmp

    Filesize

    90B

    MD5

    802182392d5898fc930eae3cef0a6d3e

    SHA1

    87719b606482f4fd562f272377c08d55366b622f

    SHA256

    57e8ade66db3632775ee48b4b3d2d49097f77a65b61e30ea922edb7ec1779fc1

    SHA512

    64d708c5c3ec3250455df49a8e16f89c7c7181893653668501ffdd64280743a8582c10d39f754bd591644baaa898fdd60a94484ff4e52eabe5877f45cc9504ea

  • /data/data/com.tech.sideswipechat/files/PersistedInstallation7443922537098164452tmp

    Filesize

    114B

    MD5

    7ecc423c78b1fc1df70724daa9c033ec

    SHA1

    dd2f9246639bdbd63e8855b6ef38ac6cac39b314

    SHA256

    9a10d72b97e4e62ae9fc145c5a7617e4c4839a2465d0c091daecef4c1a131216

    SHA512

    124a350ee725677db59cd4a3e8c90b6c70f8a37705308fcae4569dcc58c6993e9d9ca1965c985d34ea0483f99f8a8e1bcdb60a7cb96373cd554f6f3f964a6712

  • /data/data/com.tech.sideswipechat/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.tech.sideswipechat/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    0f0a4121deab375cae3b4e12e1bf605a

    SHA1

    d63d608a4a1ada0c1a99b29501631d6d3e6bc3ce

    SHA256

    a627b5e0f53b4e255e9936380b940efee78113c8efbed18bdb435dddefdb598c

    SHA512

    99b7caeddfb7751d6584d72be70fd9ecfbccb6520f0197ea5b229482f3d4ec6db49e08d57d0af938a7f12e845ff0638684b629b461e0d100795d1bf554d392b5

  • /data/data/com.tech.sideswipechat/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.tech.sideswipechat/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    b4ab02ec023360bf4eb123c71ae5ae41

    SHA1

    fd201f30706bced43c45b5bee9e6c071fc5b46ab

    SHA256

    0ec29bc135fa6125293d40675a9a1a0a6be668af14036a67375964a65c6cb915

    SHA512

    708ee88b077c985e37fe70582114adf9c487ccb7f27e63a647a3b6ba85742772d1b82ee0de728dacede3aa95a9a366ff4ebeabefed01664580b2c88335a4a237

  • /data/data/com.tech.sideswipechat/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    9ad3caed89099155e722c140a987d252

    SHA1

    2f6801bfcb76b8dadce14c163ca3a86a867bfd82

    SHA256

    f826e7d9f14f3bc7e3bca1d6dfa4af1b85a79c70b35ccb570afef2a9e1e5acb8

    SHA512

    ba264297b3356fb0037a94e98625ab5fcf41e66e1b27d27e435cd70b08f1e46ffc8b43c0b5dae452e55cb2e1c57c8e6cf465a1a07cc708b2f89936a12360d7df