Analysis

  • max time kernel
    17s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    20-09-2024 01:13

General

  • Target

    2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc.apk

  • Size

    3.6MB

  • MD5

    39fa2c58237de702fc3458251f358cab

  • SHA1

    16e4e5003046f5d07a0fb1eff0dad56d9ce53be3

  • SHA256

    2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc

  • SHA512

    023b77900582d0b6629d587f7411ce5153124cd3870b9533cf9afc5304b874e4353d8dabb7adf8a199768992123e707bc6a87ee682463c3bdccecc8a060e7126

  • SSDEEP

    98304:kyHTjmHgJcyw+WoeX89z6Odp/9hBbW+te6lXhAyHmz:k+jmKcyPsXMl9jS+oSc

Malware Config

Signatures

Processes

  • com.systemservice
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4259

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    f6120891ccd3d5ed518433aa621d36c7

    SHA1

    9b8345bc9dc834666d8f26678a732ae509da2060

    SHA256

    2de3377afbd64491a92a960be9cabdaa0f3daab33703ec7d8bbf14fc0f0a394c

    SHA512

    ea87f8b644c578daf68f732ed2d4a7a3b711bb932d82a687069c48a9a08cc9e96627b12cb3c8766b9288fb9c4768b58716316cc127ceb7d28a525a97a341c221

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-wal

    Filesize

    68KB

    MD5

    4f70c3c778aea1b16ca958fadfae3e85

    SHA1

    a64ccd2ba8561c245c369249fa06785d754c4c9b

    SHA256

    9892394183c837cb74efcd9eaf2587ba65ac07c6e5d422357ce3e4a1c0d99f1e

    SHA512

    20599632d2d4c957a32f16d1f2af5bb0e3d8311f589416895281b6e73c5fd8129f86728358b9d5c9a6940bdc5d69f894abb6695e0760935efe2abfe557e83e39

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7237409e0640cfab7bdbd429bf821a3b

    SHA1

    4c3da934842f8d4835dfe2a9c275a300e5123309

    SHA256

    5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

    SHA512

    c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    b2c3b1ee420d37e4f3bf8e7af529fa94

    SHA1

    9e112ac9be21991409e01531e46efcda9c52a5e0

    SHA256

    10d13e92d9e6953bfdcbd7bcc28797cc77402b11414cbd438003e5e7fba0b418

    SHA512

    b3e953d5cb9d9dfe449fd5c3613bec60463705fe556e4aaa2145ff8863d06fdf4ad95430f6884620ad2e078a84914af2793ec7bf80a2bab3512562344eff0e27

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    cd69c21735c4b21a63f9737c9b2c197f

    SHA1

    ba6ceccac86020c770871f0ec52f62992051e21b

    SHA256

    2cc81b3b412ff301c2f834e4f13823f097f2546ab904476511ec33f478d8725e

    SHA512

    59ea434872b355fb338a7c6fb942dde4def90a1f200d830dd10e5a3289d357c21fd196c686d5c09af29d1c164f60aca6b6b4023893f72168189e7ebd55504495

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    707c373df2e191ad1739f3677a8a13b2

    SHA1

    22431bf083ba4b2232bb556fe1fb3ffe1079f2a8

    SHA256

    b563a20f1d0cca8f86ef74c0fbcad21b4fd8e14e687d26b62c1c7c2bccc88133

    SHA512

    f12ba013f03692bd25dac2207a92941dc3c3c85bd9bd394ee85e9c6a08fe2f9e2cff85a5633c6354a88347ebe82ecb171f5e73d0682bb7c1baebae6affd114b5

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    1f728a467c7a82ee3201d3d5e778acdf

    SHA1

    7fa597cc67ff26a05d17f4c23884473a0e7ff1e4

    SHA256

    f4b07c0a0b461b058533472407bf00c926cb6f7c2b212373497ec1661a8ed660

    SHA512

    5027569244c14280d0f3b1fc0246a58de4d8417b7d9b2504c63e08b9fc38e35d0ccd82d2402d363e3e2943d9d3432e69897a4dae3e4be07af42434f50553fc88

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    835cfc7decf507cdc5e54f602e3f9699

    SHA1

    4a55d424cb32e766554672cb2d0b3804fc47552f

    SHA256

    29257dbf2b37d226ace65bd68d001398801235d93ed830a35435bd4bab4de852

    SHA512

    2ab470c2200d97b545693a4cdc661100e46b0299f3d3890773681bc5f22f29eeda6b6a83a5c627fa22119726f3ce78d40021362a3f018a4f3afb4a08476c253d

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    c16bda7b318f10234833765cf5e787ba

    SHA1

    5a82ae1f8ec5fe25e5e88436e8c9eb3eb20210f7

    SHA256

    4ae82852eac0b09d05a8dcd638621c2821991140f588dd16b274ebc7ada1c618

    SHA512

    62ce57683a482745ceac2ccc29d30dfe7c8b8976f9674988bc25e0960d2fca4f9a3e758f97ce89850968157a6200adf7a6b51145562d18f14d320cc5a3851e1f

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-wal

    Filesize

    36KB

    MD5

    d21509b9e55513ccf53670700bf05133

    SHA1

    65284553df8e6d99d94c19e1aba087be370f498b

    SHA256

    966fea0673b5272922f66e1d7d670d76d48d6fda53acb0c4d15a47c3c9d25d25

    SHA512

    d2c4b2c76280e015891260875a20f666755fa7e4acc575ced7b47762c840beb13a0410343034f715dfad4c80591b8a240ea8f8371c76461e95be5a6c849602d3

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    737da802e5dab565682114986f800ad9

    SHA1

    f5263ce81cfac34f0e125c65c8b9bc3e2780850e

    SHA256

    3733cc5ca5fb2092022794cc21ab94fbb1b46b76342b1e8a6e8f17a8222cf5bb

    SHA512

    cfc1e0365698cbcc65b1839fc01f4d27bfc7d6a019e3c1a1b2240c2af9294acffc80fdbfd2bc6d2ebb7d0b328185f0eec84cb3cdbf02983ad37661b25f48a057

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    e22206d6a2b86138a1d450ea53637db6

    SHA1

    deac45cd8e3e99c5db02537b17b19df9a908ccb3

    SHA256

    ab944194b35a6cf0677fb90e74d6248ce2a5703c81377e25ab46c4ee42058533

    SHA512

    ee6dbc27e416332554c32bb14d0e30d4d443d78974aedffbaad4f0a0b775013bcbf65284a28ac487a79b7af1bda9b512ba88a47374c6fb0a7912da737ec14c8d

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    7796cf1fd1ecd9bbb7fbeee79532e4e9

    SHA1

    e5034f93d80ece8002a39637684feff0c10d5c6e

    SHA256

    63206d42b0f5bb94da96724a88c5789fa468ba70a3b42ade7f62975a52fd0bd5

    SHA512

    a5f6142a1f003929edc4f9d732c1b764515f721a95bcf9bb83f1c063b11bf9f33cc9acda21c53592a95e154a2bf796b43afabc30d8caa1d886cd6d0eba993859

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    fa85ea549773a208882fee0459e60e56

    SHA1

    54cd4e15cc44fd0f9aa2ee6a919bfd67182f4aed

    SHA256

    04435a954596d0d73aef2fa3524ebb384847c24065b9a7fe89a6e63b44f8d6d6

    SHA512

    473180974178697e62ed235e7c463ae2301bd8f277126510940601cbb5547e39c2698eb7f49efbc17b687b70adf07f2a30e8bafab06bc9be2ae65c8865f0c82c

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    f11212327de2590278020c334e759bf0

    SHA1

    6e7cb0572f4d7212fee87d60a61b887b1177d8ab

    SHA256

    ce555c0065abca1424c5c00ed5ee3c3db83188d96fb9918f0aa36a96fd7b442a

    SHA512

    0a78c73db7446daded6561184856a98d4ebc47376610574e41a1c8aa7525f22eb648cde89a0b66543327cc75edbfdd3ff2b8b1c5cb4a03fd01ef345617a37106

  • /data/data/com.systemservice/files/PersistedInstallation33716983511088438tmp

    Filesize

    90B

    MD5

    c83c0259a69a7ce29ec0e4dc2290bc64

    SHA1

    5ce06cd009aaeff307cb2ced464ffb27edcfd0fb

    SHA256

    f32bbea44967bdba4ad8a28ce6f7583f5a9089e31f5498063b39ec69a486ab4e

    SHA512

    57d75066d7c26f765646b742f543254c9d475cb6cbc54e97e5f36790d20006855c26096c94158ad3631ab15fd1647082e22e87468f950a391b5080b7d7fa161b

  • /data/data/com.systemservice/files/PersistedInstallation7891314875793033754tmp

    Filesize

    556B

    MD5

    be1aecacd8b9561dec4c40bc7572e262

    SHA1

    1ccb793e419c44729021ee100b1a99b581599d35

    SHA256

    0c04b075bddf73abd5ec905d445f092641933b3f5ab2a138d09941ec7b916163

    SHA512

    6afc8af4fcb53b7232e36bfbedb945ab35f92255b79492dae0ca4cc6d140a5a181d33c6e497c66b348615acddd27ec6dc08e1a00fd1755482d4badf043eb2b93

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    6KB

    MD5

    3566ee528bd91f14178b1a3ee39bc4db

    SHA1

    ef6beb199d222dc8afd20a0d83b09f42db900213

    SHA256

    031b9d13bb3278b4e275d69b51a42077131fa7f37dc04f6d2d73368666c4521e

    SHA512

    a32bf27aa905e08623fa2fa2a03ad2daa249dc4ce5e964a3dabd2f19ebab049e8e9ce34a0d257afb61eb3bd0e8b3b0fafecf5a03ba9df1ecc7e714eb85cf7701