Analysis
- max time kernel
18s - max time network
131s - platform
android_x64 - resource
android-x64-arm64-20240624-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system - submitted
22/09/2024, 11:14
Behavioral task
behavioral1
Sample
5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
Resource
android-x86-arm-20240624-en
9 signatures
150 seconds
General
- Target 5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
- Size 3.6MB
- Sample240922-nb68aswhkr
- SHA256 5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
- MD5 d836feab9d4bf3c6cf086bdc14724c8b
- SHA1 c837cf7b181679a0081165e5fe4aa0eb94f748f8
- SHA512 8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad
- SSDEEP 98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 03bb6db32b8dd75aee27dacb29c199e04c0336ee951c27e4827a0d8a969d794f
- MD5 c63d0eea13123ab521aa9a724f2837ab
- SHA1 8d612ce2b3a5a3ed29d7fa46ec671ab3c28c6c0c
- SHA512 00d1d51610b316172aeed94dd9c574762e62eaf280bf218979d5662f6c803988e63968bd687f4f18ded7a556f0dff9166652637373e23b34e7eb7e60586f1840
- SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSSJn:rAMEX0wIyNjaSJn
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 4a87245d9acdec0056096a3c9c39479f56049a42f3f2fc6a1e156d7cc31bdf6a
- MD5 2670c817e8cec43f2c4f17c1012dc9e9
- SHA1 9550c11890ea3660768092348bdc9d246c2e3d3d
- SHA512 942be73800512cb432d355620a38965dfd0b7c5913796e5c95e136d9aa060c9c47eec2889bd8c76a90dcc6ea0b19e47722aaf4c554a4f731d339bce02d7d2b6b
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 3e2dd92ec9bdd8c56566c22d319711876e22466fe50eed97d953f9da1cb70688
- MD5 d5225485e47ddc8d7820d2cbe19eba80
- SHA1 ecad76f937a61901d8b73f62f9239354db4949c5
- SHA512 8ed3c4f77335d951319f8bbb465114616b6077ad91b88371c53e679eee726a90366b4d48d1858c0ae03bc5d70cde79c29f4903368a9dafc2bd029bad380a3a34
- SSDEEP 6:7+/l9tFn1GZpg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKp:7+tsqLiuWdYRmBEyPb6
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 c6a97d79e224b436c1e8a17b6323425955a9ff021aa7e3914a9dd646d735b8f8
- MD5 1342cd4f36f5f02ba9b9ffe18452973b
- SHA1 d7e63ad3e1ebda9dfd03a481c2b309fcabb74c5c
- SHA512 d6302d0ecdb7b1001c1150c541d55da8b17f9a3226d540090637bb92e236659fa76f9399f4134205fc292668f5f2099f700f3b37a34fcc72adaaecb1b6382aac
- SSDEEP 6:7+/l9n8HPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKSC/H:7+th8vqLJdeWRmBEyPbIH
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/core.db
- Size 36KB
- SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
- MD5 045489a0639eee27bca52f48828cd93d
- SHA1 436e7966e7c019273c44faa4d8c5709b816dfda3
- SHA512 c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e
- SSDEEP 96:eMzKMilNJzt69l/mwICfPDKOjK0Eg745TN3PafDDKsgZK5AgZWgZK5cf/ShOqLE0:AuldjKiKvI45TNAKfUf4hI2q1UpKorKS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
- MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
- SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
- SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
- SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 fca8465032d83929f06fe343896f26c05d98ef48eb403bb2a2c0cb688f4ab24e
- MD5 0fb51af0c12230ec76e92170451ed59f
- SHA1 62b8263fb648aedd14bec24f3ca7aeefb040b62c
- SHA512 4aa8ff26c28351019a32182f047d90c0fd8395159ae13d3635aa1de9f3e0848ceff7941f723ee305bfa7d057eba26d5e66d4746f00584c905987d39b223a3e6b
- SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl61:TLiEq9zmzrfRmBEyPbP/P+/0Fl6iLA7
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 2363e7afa3b95cfeba3506e88b3c5a1d9cf5272e740fb59cc72182323634401d
- MD5 cce80153bf746e388f8bca0fdca7331d
- SHA1 23ecb66fb616fd76029431d502d22c8622a7b6db
- SHA512 8fc20e639a519e87f240f67e69e40fb259e66571f516f78cbc2ddab12de391fc7e1625002961821e22c660ee154c25adee12f38ea581fa287d59ad628ef5573c
- SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFlsZM+/0Fl6iLA7:TLopmzr0GSP/h1499F5lF8
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 bbf0a8f5b25067759db84ceccccde0bc44d9d2c9c19e88a1ee22f056d05c7e10
- MD5 f51b445399b344c973e896145b761080
- SHA1 31d9cc1ae002ea4469abe182e1dbb3fab4f78e25
- SHA512 263ef64c7eb697b7343a22a2f9aa0bda8838595fb25e608783523c0193cddb343e7cefe5905e80e9171edb2920e3708fc863d396fe94aad1a2e689efff9dff2a
- SSDEEP 12:TLIEU9zmzrfRmBEyPbP/qFiOLaOS/yAUbYUyWlKIGT49blqYFlsZM+/0Fl6iLA7:TLYpmzr0GSP/qsKaT6l0d499F5lF8
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 a9b3019681464f36095e99b46f2d9236dae6e6040df3858d89b3a1d74cf8a96a
- MD5 2688430fe55fc7c03f64463e8190cc80
- SHA1 3b9037be4401d26da7661018dbb1832cb528b0c2
- SHA512 4c6fc08bb50e0365ee1a86bb74032cbacc3a51b39a7d75eb4b18ec3bcbdf4420437d0a8d2b34fc7104b9570b95dc8548dccd2ba85a478d15669aa657342bd3df
- SSDEEP 12:TL6uER9zmzrfRmBEyPbP/RFiOLaOS/yAUbYUyWlKIGT49blqYFlsZM+/0Fl6iLAv:TL6vpmzr0GSP/RsKaT6l0d499F5lFk
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef
- MD5 2238195eab25764b61f2d26ef6a720af
- SHA1 d366efd0cc079f0f87d23c630ec8d99f90541731
- SHA512 478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470
- SSDEEP 6:l9bNFlgls1WnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WS//:TLuEe9zmzrfRmBEyPbP/Wy
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 a248ea132117654a876fa934b695b7fc9d82f85b8c0a8ce888f4d4b0ec2cef21
- MD5 922063856bd8c98144f2729ebab17a43
- SHA1 ae27a486362b0c490a31fed49b852cb9f5e5a53a
- SHA512 4e62f8a289fe2f2bac7a1af68ba7359b12ceee3fe38c7505a05a87efa0bdeaa909f086468e6742e7b358d57a227a2c7b49480da3ee9ab54a3e7067c8a7538ffa
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 ca0a0240dac6706121461564c490f74b343cbaf32047bd62a6c7b00d56afa804
- MD5 3e777aead4f260bf01f1113baa38f735
- SHA1 49a6bcad7a2969f26241f621e0cc74c006c8d4d1
- SHA512 3b3667bc2de63639fa327c4ce905824f70f14f50242f986ee5fb6a9e57cb60bfa0215882bf36585e29144e0e936fa7bfcf9a36e66b2e22b2ab4d1907fb81eb65
- SSDEEP 6:7+/l9ZuUlgn1rll/vg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKGt:7+tiUoJvqLiuWdYRmBEyPbf
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 f157cdb42cd43fa75ef979bd9bcef1bceaf76cca3e81cf0936472f6d85597229
- MD5 1ff264431a27192cb432dfcc3eeadd3d
- SHA1 3c5821b912f7d33e3892672276d17d8451243831
- SHA512 c35bc43d4e07e2f9867aaf700617fc1eb52ed9457f48546f0a50f9d66d5b916d61c02fec5177866bbb001bf3b843fa75790005b2c5eead7b4a2efea2b8022451
- SSDEEP 6:7+/lptmHPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKU/6:7+tpt4qLJdeWRmBEyPb3y
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 3412fc04ccdd6ac94aa18716a55c2292f44200c5e4a9226a2fc7d63ab7e63d95
- MD5 99c09568ec9c2989e158a052de25173d
- SHA1 ad7df7b4d94aab46227c21f0e0efde4dd46e1a84
- SHA512 80f9acc1294d0dd4e4428d0d4261ca9c2bc767e94ab92cd045b846dc687e89841ba0a5ff5b5cad3ec99b4d55f028111f27f165580cc49d3ab38a9b4d74d12dd4
- SSDEEP 6:7+/l9A88FPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKS9kt/fn:7+tkqLmqKRmBEyPb41f
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 ba3b490854e2c6860a104f3ca8f8e0282db142bd77bb298486ed2a1fda84f6fe
- MD5 f994e6e2fed622f11990e0172c6cc867
- SHA1 103c53f605422005bd130f49ea30348de0b88bd1
- SHA512 bba87b5faecd8117b5bc47d2c4b54590804587d2d277d1530648e096deb65ebf6e35abafe4007853cf7f3def8871de872ea3d9da290083d85c07ccc1f775de66
- SSDEEP 6:7+/l9I5pg9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKD:7+taLqL8EA9zmzrfRmBEyPb4
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 2bc0e10e7a465fd0fba33ac6d345b0c6ced73e79cb75aeaa4d10d2dbe44456ba
- MD5 5423015557df07704d435ef005eaad07
- SHA1 7113a4cfbca263917460b477aa59f89221d32374
- SHA512 943355c7f22c77bc8d8fc3c7668b34f0bd0a4b1fb6d649ed4c29e95c21cc06fe184166d6f225ac82a628049ac682f93687296aa1469f52a723332d4a9d592c35
- SSDEEP 12:7+tFbpFiOLaOS/yAUbYUyWlKIGT49blqYFlsZM+/0Fl6iLAPqL6uER9zmzrfRmBL:7+tHsKaT6l0d499F5lFKqL6vpmzr0GSh
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/files/PersistedInstallation7047131978190370254tmp
- Size 557B
- SHA256 4b58c12a0033ef32d777fe8371a8d6b654c3a41062a8ea4c65264d38a448121a
- MD5 29b87854e6b13ff852321c9718b4d5ff
- SHA1 af24ab9062bc46de2d008f01c45b6227c8528e3e
- SHA512 3c7fa2f90f35698d7eca4d2c39fb794e067029e95cd1c5162319ac8c851af23015b4dfdb35c00c9a1b872b16539dfb2e57a465302cf9138b6b9071354f81253a
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/files/PersistedInstallation7786165561397133109tmp
- Size 90B
- SHA256 e118fdd7ce3a87a5483690c7aaab106dd3ebd1d14a47f792e089156b0622f058
- MD5 5dad437072b704743f490bd142d03356
- SHA1 98bf34818742a0108086b3e72fc9e4b8de8e0004
- SHA512 1169c7be6bef6924172361e7074c4f0330295fedacd9d1936814da457a171103f09b71a8820dbde993d811670eda8d300a73fc39e67ff4d78db43b4ecaf018fe
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/log/log4j.txt
- Size 6KB
- SHA256 f9c22389350054374a191a2d99cae2cc9a961967bf3ff46e05862e232f9bc2b8
- MD5 274a70c2d30b91d7ce1b8742be187c19
- SHA1 759d342af44fb6d15111f887e98795b90a23e1fc
- SHA512 748c310945c21f95750e360950e4f94808c6631b75ffee5482910986b1926209b12f8aaf0e4f1ff09a979109f5e3097334217963629b47dde7cf893f80dec051
- SSDEEP 96:vQygFh7deMV4lygFh7deMUSKF6zRcR6KFm0g8ygFh7deMSglygFh7deMUgt:vMh7N41h78ShzRK6r0g4h76g1h78gt
- MD5 SHA1 SHA512 SSDEEP