Analysis

  • max time kernel
    18s
  • max time network
    131s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    22/09/2024, 11:14

General

  • Target
    5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
  • Size 3.6MB
  • Sample240922-nb68aswhkr
  • SHA256 5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4508

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 03bb6db32b8dd75aee27dacb29c199e04c0336ee951c27e4827a0d8a969d794f
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 4a87245d9acdec0056096a3c9c39479f56049a42f3f2fc6a1e156d7cc31bdf6a
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 3e2dd92ec9bdd8c56566c22d319711876e22466fe50eed97d953f9da1cb70688
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 c6a97d79e224b436c1e8a17b6323425955a9ff021aa7e3914a9dd646d735b8f8
        • MD5 SHA1 SHA512 SSDEEP

        core.db

        • Path /data/data/com.systemservice/databases/core.db
        • Size 36KB
        • SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 fca8465032d83929f06fe343896f26c05d98ef48eb403bb2a2c0cb688f4ab24e
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2363e7afa3b95cfeba3506e88b3c5a1d9cf5272e740fb59cc72182323634401d
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 bbf0a8f5b25067759db84ceccccde0bc44d9d2c9c19e88a1ee22f056d05c7e10
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a9b3019681464f36095e99b46f2d9236dae6e6040df3858d89b3a1d74cf8a96a
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 a248ea132117654a876fa934b695b7fc9d82f85b8c0a8ce888f4d4b0ec2cef21
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 ca0a0240dac6706121461564c490f74b343cbaf32047bd62a6c7b00d56afa804
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 f157cdb42cd43fa75ef979bd9bcef1bceaf76cca3e81cf0936472f6d85597229
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 3412fc04ccdd6ac94aa18716a55c2292f44200c5e4a9226a2fc7d63ab7e63d95
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 ba3b490854e2c6860a104f3ca8f8e0282db142bd77bb298486ed2a1fda84f6fe
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 2bc0e10e7a465fd0fba33ac6d345b0c6ced73e79cb75aeaa4d10d2dbe44456ba
        • MD5 SHA1 SHA512 SSDEEP

        PersistedInstallation7047131978190370254tmp

        • Path /data/data/com.systemservice/files/PersistedInstallation7047131978190370254tmp
        • Size 557B
        • SHA256 4b58c12a0033ef32d777fe8371a8d6b654c3a41062a8ea4c65264d38a448121a
        • MD5 SHA1 SHA512

        PersistedInstallation7786165561397133109tmp

        • Path /data/data/com.systemservice/files/PersistedInstallation7786165561397133109tmp
        • Size 90B
        • SHA256 e118fdd7ce3a87a5483690c7aaab106dd3ebd1d14a47f792e089156b0622f058
        • MD5 SHA1 SHA512

        log4j.txt

        • Path /data/data/com.systemservice/log/log4j.txt
        • Size 6KB
        • SHA256 f9c22389350054374a191a2d99cae2cc9a961967bf3ff46e05862e232f9bc2b8
        • MD5 SHA1 SHA512 SSDEEP