Analysis

  • max time kernel
    178s
  • max time network
    165s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    08-07-2024 11:10

General

  • Target

    3db0d587001285f306fbdd73d29ad62ee826a0c27585ebaaf1d993504fdacc5f.apk

  • Size

    5.5MB

  • MD5

    deba43a71712c3a501970e3fc5ab1ced

  • SHA1

    0d9f42ce346090f7957ca206e5dc5a393fb3513f

  • SHA256

    3db0d587001285f306fbdd73d29ad62ee826a0c27585ebaaf1d993504fdacc5f

  • SHA512

    331ca7455b08895c4821e24abd052f287570494862d54bab9039b0bd6476b897c679cdaa0e4f542f1d562063f18f9d076a76876d2807f37d331b6fbfcce6ed5f

  • SSDEEP

    98304:hU7aQYpE7Bm9K0E3Lw1QPenWTCORGRAhvRNB4p31aVCH90fr+6vSI:hUHY0B0EEmPCWdGRjp3cT

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.tech.sideswipechat
    1⤵
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    PID:4951

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tech.sideswipechat/databases/com.google.android.datatransport.events

    Filesize

    40KB

    MD5

    15d5b92dcbda7ef7f9ca327a903e46e4

    SHA1

    ca153b66028a58d90346ff8abadbdf01b95c37b1

    SHA256

    e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370

    SHA512

    2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca

  • /data/data/com.tech.sideswipechat/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    ab13c4d6a46d585f1487c4983ee97aeb

    SHA1

    88ad779a141c275c3c98f1b9a73fc1f318c18c52

    SHA256

    6841064a81c7c24b6edaafcd990f3fcbdf79037b54e927489914b24b0fa20e9d

    SHA512

    5cebfba60171121e7cc114b98d4eef2248c4f87735346184be32aefd7bd881f07e4fe73908ad582c814cf193dbace0d34f3f28351bbad66cf75a6f47664f6b9b

  • /data/data/com.tech.sideswipechat/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    f927c78e3dd44d3516bb36b9ff56c470

    SHA1

    f904ceff235d40013255eb7c8e9c6eb79e3e0f7b

    SHA256

    b7f51f5c4699b83ae5b1f2cb03d4ac2fce564a6f9498f1bc3317d6f428d93457

    SHA512

    d34a631b9d2a3cdc9b4b93c93c697d549bf4accf33e19a91aac9c622af0a63a4ec7db08a1aab71ede7d88f898ffc368ece49a4ea2a805d78a7ffbee4c428f06e

  • /data/data/com.tech.sideswipechat/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    e08fb4e8e79eec14096a2ccd288e932c

    SHA1

    5569033e7713aa8fb2a82ee8e1c67942118f2822

    SHA256

    ce8b9fd60bba650ea133e64d37a439a9259a0f85fe25f223f3f035f5c8a7b41d

    SHA512

    9a3f6cc7ce1944fe63c4aadcc521439bd31553b12ac3d980490659d0b3a0b1d3d8146d235331dafd87d2812544d7a09efe9b7d879b9b668e8d384bb2dae7a27c

  • /data/data/com.tech.sideswipechat/files/PersistedInstallation1334374080271926796tmp

    Filesize

    90B

    MD5

    eb3c8547bfdd61095b477a67c4cf2f52

    SHA1

    721fe2ba9faef482bf9d87cc8840fd782e554378

    SHA256

    29a24c8b972b98f580a765bc04583015c6fef045d13d3c6c7bb322c7fc54f45d

    SHA512

    21f0cd6b9dd14b761b1e1547a6cb0a13e34ada71bca588ceca610d0c0c583c8f68534f347bd70ebc86d3855565ade705375800a90cceb1a77ec74c5a32e386a9

  • /data/data/com.tech.sideswipechat/files/PersistedInstallation1566883679033023097tmp

    Filesize

    114B

    MD5

    326a6ea7ff1a413503e32ea30b0542d5

    SHA1

    765f6f0eaac0afaf0a815e09ce82609f5b13e82e

    SHA256

    373dac1b61f54a4631d7e46e4986aeef8761039a25caafccc3ee8843a1fcb479

    SHA512

    9cdeb6d68c4acba95d678332a722bd3b24ae6811a2a272c12024b73ac357ef82f1b94850ee5cc4de56811eb053e33ee886d908eaa58e98ab01f46c600ff35c63

  • /data/data/com.tech.sideswipechat/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.tech.sideswipechat/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    873503782b007e52cbff67b7b1f791b2

    SHA1

    85972b51035a95f5a2c93bfee14457bafd0f318b

    SHA256

    355b2b865224bd395daf58be717662d6778910eb7d87e8c27287e1c0460f464c

    SHA512

    18f082f7caede24f5968ee6b42008997a0c2d3de14357125b08868a3d24a753451f2d488814033d1807b8d3e8c922f7833d097a4ed37ed0fda9f7c839704fe58

  • /data/data/com.tech.sideswipechat/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.tech.sideswipechat/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    68da19ec342fcb3df2a08f52033adcef

    SHA1

    20280272e941b5155347256282841e6abceeb150

    SHA256

    51139e9d26d4020b228fda07f615c29e89115766a2143eac5f26749689b7fd76

    SHA512

    92148175b99b11f169376ed2b155f2d278c80acba8a0bad20275c12ec89db6b57d7f7b642caa843668758b025a45fbca40ca1187c1c4be61cef4516c4a96a06b

  • /data/data/com.tech.sideswipechat/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    52f0da972058534db4bbbd891d25981e

    SHA1

    a3bf67cef0c26016537daf3f58cad369b56e3098

    SHA256

    ab7124864c13e742084797f3d11e90bf46277ddcf1252e7b186d9a6e8e5f91c2

    SHA512

    50ea7338c4c6b571c749093399eb472763c8fe054b895b9cea288c1d3cd28f0324c977c312db8b653a68239888b4e5d05a34ce9c093d13e78b72e0944ebd454d