Analysis

  • max time kernel
    19s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    22-09-2024 02:38

General

  • Target

    2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc.apk

  • Size

    3.6MB

  • MD5

    39fa2c58237de702fc3458251f358cab

  • SHA1

    16e4e5003046f5d07a0fb1eff0dad56d9ce53be3

  • SHA256

    2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc

  • SHA512

    023b77900582d0b6629d587f7411ce5153124cd3870b9533cf9afc5304b874e4353d8dabb7adf8a199768992123e707bc6a87ee682463c3bdccecc8a060e7126

  • SSDEEP

    98304:kyHTjmHgJcyw+WoeX89z6Odp/9hBbW+te6lXhAyHmz:k+jmKcyPsXMl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4336

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    1bb323ed68ea8f284c46fcbe63e66def

    SHA1

    b0673400bb93127fbfc39620bedf7ca11450ad7a

    SHA256

    2b64a1c09a029ec65232443875362816d5f911db6f9e0192c235384deeac5066

    SHA512

    985388afae29e511cbca33497de364750fb44e86d8e0924fbb94d937d622e29f0a8a3ea840f77a4273559af611aac1caa02deab2ca91e66982337df8076e6146

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    ac60677f15b52db99c300920511fd5ec

    SHA1

    bd05731ff8215942b11090661bdf2d321f8e7f39

    SHA256

    4c077ac5803ded3bac68e5b9a4b230d3152efeab99f02d5c8d6571edd9287172

    SHA512

    6732b2bab51f97fab9a7c4048876417a5386c272397eda4df6223a7cc55ff5e658cfe2040b4ebff4c03fd5d058a83417fe2219d15db069ac03629fd12ae4af10

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    bbb4ac36aba25acf435c1b0c213d644d

    SHA1

    41f489a2b4c63d262b1aec529b8ccbf13acdb3c8

    SHA256

    9d044a210f7f90d0d074e12df65dbb826c9926fe4fa8df208bee1207c11f6d6b

    SHA512

    b12c26eba473bc937caaa911fc92bd04aa122752b3adc607fa4dbb7fbcfa9845fc459c74f3d49df3055e7f993ada8b433e160615e88e962c0022b8633a4dc109

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    22663f60af6ee00cf0f8201350598a94

    SHA1

    429a25f483623d680b31807134dbbd9243de2a62

    SHA256

    1e283428809db7f531516b0e26d97fbe7eac6e218f63fb19d974136eae4f8df0

    SHA512

    87fa5d68935264ae3a87e68111c307525335794d91bb78b33f34ccb036c580f594a431fff936f406a677f9c362dde95a06d019da2b943dff42318a474ad04b0c

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    0b814fc8c3a2f272429c3eab328f344a

    SHA1

    a50e275181fff65c9ed6c90dfbeeaea62fee1c98

    SHA256

    d8970d40bd853e1d987e9b7850128bf48bd271f62a6c0192d5966baeb035df08

    SHA512

    2d385d380fa20bbc3ab6a1bcb78030cd50d0ed0c20973abdf51f45dafcae2ecd4b0ddd5e9c6362ee883abfc61a4e04b64630d9de3700174c43865f1d5ef5120c

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    a93aca2caf26ea15e633777189f04997

    SHA1

    d69829e9afbb345369e65f5cc7f64b8b35804969

    SHA256

    76c71af8b8ac9951398c76689c599275326eef5fa1c3b62bae753c1b92624d44

    SHA512

    1e6d0e109d01dc3228e9587b816adb4b02bec16680be55ff37d54e26ad1d06d14ca26bec9531cd2099d8016545fc54ec3e3956896b7b149ed2d820170586143d

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2e7e22b38b400fbcc8275e29bde47803

    SHA1

    b07f93d9891da975f2b0bc1d8b0e7c2acfb41ceb

    SHA256

    3ada7b452490a62673baaa28d7ca66229b5a942921f7be1cc53eab7824de4985

    SHA512

    b8cde226e4ee2f6fe633156f0bc7fbe66e2dc6dfc85eaee396a947770b751ba9737a54d9b39726ad7eac2d2611c4857e7b3576d336eb3ce88629b91deb3c538a

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e7145c20b2a60fc997d9c3090a899083

    SHA1

    16ca872ec2f0f96c563076dda57e22bd08855266

    SHA256

    7d66e766f99ce0cc9a498f722cf77d8a5346c17dbe015814fc2e240652731f40

    SHA512

    e3e57f39fd95bee9c9d23600e2464fc2289cd154a24e32905f952fcc193680ec118d761b3b1395849a42303d3ec6b716cb7c48652a2e4e1777e5021fd2d3f08a

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    02a0b8d8dd280c86d5232bc656d9312a

    SHA1

    4ac45197d1a7f74cbc03420390d74003cbf5aa74

    SHA256

    a81208affb913f4e297dd4d65d33230e005dd9953408a6078b54220a5440b3be

    SHA512

    1e976fbb6e39cf76fcf09224021668e3f676b22fd1448eeb9e08748d611a434b2e4894cdab44f9f3f9da3181174fef11279dc2c3b3c2630e51f16e4ec2ba14f9

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    8f9267c5074e69fced1439168ae580b1

    SHA1

    8dfa54012c3cb25e5c68511832c421683fad41bd

    SHA256

    272bfba3d8b0956fa769242ce4228de902ab01b5a3bf0f1d626bf29922eedcc4

    SHA512

    e5a19d275b642092d36b93089b6dcdbf73af7402c756d95e8d3014c2466bc19fff0229869cbf1675728f4dc6636106456fc2ea2f4aa513928117e143abc75c49

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    4067be0205e33c95921e33c6e40105af

    SHA1

    059ffe5a8cfdcabe06e26c0102e5e78a532fa904

    SHA256

    38d2da20bef5f9a85b1e2330a1287b1925fd61e5d17358890e1c49ab7aed69b5

    SHA512

    4d70adc354b7ac8598129068f90c0efe995bdbd979120869185678cee638f6c966ce37442e61c7f9a5724d630e56224f19c82173ff5185ad96a2ebe334173228

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    15421148f90be579de71a8fb3dee1fe5

    SHA1

    745c5d8787aed3af2ae4953ab9ab4a75cfecb536

    SHA256

    4a827a8ef0179f60f48b3c157c8e3c26deb3241a37fb80ba6fb606ea70b7b626

    SHA512

    b816d67142fb05f1c2e2920fbc0cee9ccb40f79f888b9ab2d8ebd4c301f42d916317563e4aa763246848e8f02ac805e85530a86629c11bed1f6f58eab3d4cb9e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    91bb884f373540c22e20bc4bc9705902

    SHA1

    04f3b0b8417fbd445b87f4c25d168870ed669a7f

    SHA256

    ae6f530f9456f852ece3cd19912042c15f127922580c471a75762db4b45af848

    SHA512

    c169f74471128d16df9eab9b79579b8ae252f5b48f38e18efdbc65af4bcbe8af453192d67895195a7069bb87a9ed83f9e0e8bd3a1b9dc6662af038ae1fa85ffc

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    cc2694ad1efaa76d405bfdcafa5dc813

    SHA1

    8feba191cf5d10f7140263f4253980be71231992

    SHA256

    c790b84934c0b3e0dcc70043ed4146b35140f17db426f11864bab1c4aa8a49d6

    SHA512

    c94d05dcd53e93803ac03c0ba0c47a2ce5fbffa07714e154188d16d067607665b686d681525165d22e81ff9cc490eb7b581d047eaed1d4cc569a431873a017b8

  • /data/data/com.systemservice/files/PersistedInstallation519741140021859406tmp

    Filesize

    556B

    MD5

    5de3a348244bc0a1a49e902431af321e

    SHA1

    b9672538818d36acc62ccd5a923fbd13085b6220

    SHA256

    a11b5b8f51f4c733f07ca660166779fd2cfa7f6904803eed160afa7f9958788a

    SHA512

    f11e312ca64bc12ff88f3b90ecb3f0a40bfdba682a6a6ea513abd16e0f8b32de8b6fbecfa656af63815a67ca63f4621c30002115e3f58e3084e72577117ad0d7

  • /data/data/com.systemservice/files/PersistedInstallation8402303993248664798tmp

    Filesize

    90B

    MD5

    5eedab097a896d7bd56855fcb7bff485

    SHA1

    afcfd9cdf932fcf79a9f810738ba6ec18a8a23ea

    SHA256

    bd0d746761303d08b58d473dedb5567b0378b9950d82873a5f1f4d78363b83f5

    SHA512

    7a69f1a1f54f1bf150fcee78bf1d3cf185707bbb498f50777e4a1cd585dcbe24ee69b46d467a02a0108e97235c5d42a4195494b8eb7cad26044d8ce44cc4eb65

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    e2beb701203c35dafcd73b92e549d8b0

    SHA1

    35e66da6f843baf307e96fc31b08b04b9c396748

    SHA256

    efce432cb001c7f1672176ae15e708709c79004462e652bba1e0711fa9805add

    SHA512

    9ec4a445c4a58999355463038bea4a144b2b393dfb5f4eee56a8d2bd15757464d8e04e2ce48672116dcfad8f68fca6841524b431b7892e7b92d01331ffe719c4