Analysis

  • max time kernel
    18s
  • max time network
    133s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    23/09/2024, 02:26

General

  • Target
    2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc.apk
  • Size 3.6MB
  • Sample240923-cw29astfmp
  • SHA256 2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4510

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 c16093439fdf619b6395c72756653c27132dc5b7449b6b6749783771df5c4f67
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 2f3540991e8c84dc83c57d04a9cca4c4b6e3902a73f5c1a3ef161f1b3703ebb8
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 ddb7f1a1ca104c33815d2aec19c6e2579a360322cee74b1325b7ae7edf6b03f3
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 5dbf310e1f48202d17bd8afeb9ab918d2ff3dcef25fb68fe32caaf924d1516e8
        • MD5 SHA1 SHA512 SSDEEP

        core.db

        • Path /data/data/com.systemservice/databases/core.db
        • Size 36KB
        • SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 12228d9bb7b75c27b4ad4a996e5b954e24aeb863c77fed500b477a2557bba947
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 66fe734fe0910aece4aeeb350a9c8eafe7c2c7ccaff9f14865b29f4f20cea34e
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 bcc980fa734cd02f0b9f1718eca4513c4dfa5ead0342e3b95584f786c0ae1529
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ae8c30ecd0bcf2d1adaa106b2430870d191c8e48e5854dd1f1d184673a5f59a0
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 712ab9c3769b670ac4334cb3c2950c0a6122a1831f0b3bfc2224d44ad0a23448
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 b9ebbc8fed63ff885ca8ca8ef35e818c1583229f53444a87282c9bbda5c9ba7c
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 9b9b8e4c471731fb64688646e8fe49021007c610fd73a21c74546ee2be4875e9
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 00d76440f3e6b7946050b7da3fad227cda76ef5fd7705ac60156c1468ad86851
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 ed9aac427c5ccbb346e3e2fdde114f284b0ad8aa65b83b0ec19975cb601e1992
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 3adab81fa43c531c3e0bb04cc02fd2f6a9e4df86020812c23d03258d0acaaca0
        • MD5 SHA1 SHA512 SSDEEP

        PersistedInstallation4229619123233296128tmp

        • Path /data/data/com.systemservice/files/PersistedInstallation4229619123233296128tmp
        • Size 557B
        • SHA256 afbad05e4982bdf2430d5b956a52789807b9abe315f8f12066cdfcb0012ae4d2
        • MD5 SHA1 SHA512

        PersistedInstallation5912109502249721608tmp

        • Path /data/data/com.systemservice/files/PersistedInstallation5912109502249721608tmp
        • Size 90B
        • SHA256 737183165fa8d94e330568fdb1bb7b36ce0235aa3b446730d9ab3a66c6c559a1
        • MD5 SHA1 SHA512

        log4j.txt

        • Path /data/data/com.systemservice/log/log4j.txt
        • Size 6KB
        • SHA256 7370a9beaba24e98ba59af97932c3ed9ed0af98ccd45722336e62edb1f59fe0c
        • MD5 SHA1 SHA512 SSDEEP