2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc

Analysis

max time kernel
16s
max time network
133s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
24-09-2024 02:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc.apk
Size

3.6MB
MD5

39fa2c58237de702fc3458251f358cab
SHA1

16e4e5003046f5d07a0fb1eff0dad56d9ce53be3
SHA256

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc
SHA512

023b77900582d0b6629d587f7411ce5153124cd3870b9533cf9afc5304b874e4353d8dabb7adf8a199768992123e707bc6a87ee682463c3bdccecc8a060e7126
SSDEEP

98304:kyHTjmHgJcyw+WoeX89z6Odp/9hBbW+te6lXhAyHmz:k+jmKcyPsXMl9jS+oSc

Score

7^/10

banker discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

com.systemservice
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4468

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
75d48ba18c1d644504c4c693775f0786

SHA1
35e63c727e4b31ce26b301b2bf25f52af5c5408c

SHA256
e620c29767751148133a86bb0b7ecbbfa42a02296330875c932c0f07a3496d88

SHA512
e17722ec8013e0953867cdf523e2da10bcfc74555ea32a067938cda68395b26f186e2cafa53a7a4319aaea958b7a3cdce56983ab274f7b273a4a9720f98f8b36

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
130527cb3d15b8539e9e2563eeb8a042

SHA1
01be7f61d44a4eac78c213b08759cf304edb2d64

SHA256
d17fab2c5c6b027c2c699cccc77e4d25a0b9d0d0541f6d4d2ab14437fd9ae3df

SHA512
7226f3fd4b235fbfeccd7d02528974485c736cf0a056df1c159b42881c4a196d6b9c0111ca653d669ed08bee7b7208492cb750bffe188e987bc9147a75367af6

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
6df6b755b82a7c2a3d57a2234770f9cd

SHA1
101345f251f18b224cb9bf8040cc76a314b07f2f

SHA256
6b0b4f399b7b68b405fbab97118dd6e5e297d46ec2e110473c1d6ac475b9922d

SHA512
69396d5b913da1b47b0e6404f47d5707b827a50dccd4f0560df0831bb81e272c9adb331833b225375de55bec5e1b05b40c38571366ae6476a8a03d460f423278

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
65c1615d994227c9980552611c9bfa73

SHA1
800be79878f4541bc6ef8ec6d5970fdc4f57b7c7

SHA256
dbf1a23e7a945b7a388880f0761b4a9fca309a770ccc2b9ee0882bc5010a092e

SHA512
630c608490f8ccfde3211ee5857654ecd9fde4ae88a385bad4b0b5a3df3daae4f17f18123249736650cb3eacf137c72bcb9e99d97d31d07174fbbadb84730c91

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d9cf75fdd1c2292d986f6c3d5d60f2c8

SHA1
07ecb1d3a26d952ae5fecf54f36699ab498510b1

SHA256
2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

SHA512
442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
670b9e6cf5862d9274d6332fe6ab1151

SHA1
3ee7761582f4a3189da10751215e807b58899012

SHA256
18f5b9ee7bce77a6115eb7880f55e3459a7a730f5943bbe0a192c7224a7e6507

SHA512
b9355fd6de7ee5b95f18534519b7f333c688bd589d5736e2c58aadf3ee5ff3c2fc897b20d966eb1b00ebe6fdb80e515ef03c1297b8f6d28468e89b2c6654390e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
99714ef9274f7025e25ac843eca4c0a9

SHA1
c552e62a4eedb8d05300f1b33af0675b149d0b4b

SHA256
408d9cd92b79b74970f841300f4a5ca7182dd7f7d622bd834ded7c5d95955762

SHA512
545fd768ef992d85d846b09c911d00b0d3a09e50d596a53459211a8ac0bf04f08ed68e81810fca20de82cfe04fc90ed8ad2c105e1ef0d91551d877e27e639a75

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
72e4a54b49aa0b45f33d06916dde1be5

SHA1
98bbdd6ccec77cc0b680c4f49042170103027ef1

SHA256
75c9c6c8e54bcdd39be2f82ce5b29f71e764b34531c6914547975e7ca8eb86d4

SHA512
960ad763a03c040037d719440e37ce74a885329ef5d2a172b6b7215cff0e1175338faf1f69367663dda4fbf0096daf09ce0430c84248c161b974c677d123219d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
82722948ea0b4f698709f6cc2f6f584a

SHA1
a1eafed6f4ca2c1aae0269066db03cdddd7f75d5

SHA256
c5588573e5906c249b519f79b6d3d16d459b32b3278f875498daae0d515adbeb

SHA512
d6b080681eabceaddb3f0c84dd689cdce54c87f9d9afe17f4e9fee0de0840b26dff4f5761322521e9ff2fb985536c7d9d8ef638da1a94c327e91dc98a77e7ff7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2238195eab25764b61f2d26ef6a720af

SHA1
d366efd0cc079f0f87d23c630ec8d99f90541731

SHA256
599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef

SHA512
478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
cce0d03a197ef71bfe783208a9f879d5

SHA1
c39e6fa82595108571cbb48e814fc2cb53f33e31

SHA256
45b720ee1e7fbcdf37b56ae9cc551099bd48db896839e166726e3e1f2a35e84a

SHA512
f65905af2133a9d8e66c188fe0db50cd92fd8fc791341eab7e93f64b935208770cc2c98c0f6446106253c68a9709720b91d725b966b22f899084feb594442050

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
50bfbb8e7ac903a17860ea2350334f0d

SHA1
a0fdec2f6b85a9bc643b85c891e0661c5bf0fa1f

SHA256
26350436c7a618ba1432667349a97aa103bfefadb3a0587d2beab82ed3529942

SHA512
cd3e0f56a38286a613540e24aca99b8b2f12789258a8ae68d0a9eba212bbe3a7e6f4b5a64e837b7e6b4f8b2b15b7bb7fb76e5288e26c2e923387de8cd11d3857

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
40c0014a98800296cbeb2ece08497460

SHA1
1e975e1e5dca100ed94556c5a1aed93bf48b3370

SHA256
9e43c2fbd965b027a63646e141c9821b1d3bf1ec8687918dcbf79eff5d7dd53e

SHA512
09cacebb83a85308e0fabd300b149671344039b5b141f11c1312b05cf4598d3e32c12574b5d15aa2b10d201e0ec5045c20971b7be2e9f9016d8cd106a9239133

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
bea5d989c6901fc7566cb06962a3d508

SHA1
a8e485cc10b2f0a1eee09c0ea23008e867e0fc1b

SHA256
dfb92d2f7901f39ec2e739207c303d3f85d3797f150b5d44e855eacb993fd19a

SHA512
7b417f437db6658f70e84cd53a1ec716a425c89cf3f311622ad36b8167c611710d5ed1969ca5c8be5e93fa5de247b8e4a411967b7a315539adbd27e6a320ee51

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
6557299176341a724a4d11a61fc78519

SHA1
26a51689e58e8a48c624e32495a0d1ad223588bc

SHA256
3d70a4c3d4f0664406982bd7a239c34c89ba3a97a2cb67fcd6f07824a467b403

SHA512
f25e0c9522e228bce7913af8e321f5fbf691f02c7de0359a64ef161833be493be98ac5e0639dea4f2ac82942a9164b9a4232de5ce455e3abac73a3577923a09e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
5acfdd5d88854c3392a04f9e4de087ea

SHA1
6b27e4f1f10fe641de0f310aaca8b8d7b98041d7

SHA256
4a8f049260b992321c4a1aeaef008354a52b11c6a480beefc74a688ba8b1ce29

SHA512
21c262cb00ee279248dd7225d5270b31e6e10cba8d04a64ab3b502f8a4644239b10561a80d7ff0c5566fd08663fcd004efb00fd596b3ecbd69fd58442ea82d23

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2555355192621664966tmp

Filesize
554B

MD5
1e3d11e148ca0920095c8e0f5b8373e2

SHA1
8a946393fc15e9391166f1ff413c5e32228db7b0

SHA256
4a258c75cf4439263d203c27f7ae16c0306185d86ad6207dfc20ec7d9645eef7

SHA512
b145e637d7378be3d7154b0bdef6e939053b533ae673882e41cf0a88e061f530b4ce3c792108ce14cdf06800c2f6f59d1d984d55a4c7f0fb0c8de381a1b920ab

Download Submit
/data/data/com.systemservice/files/PersistedInstallation4286745939011602713tmp

Filesize
90B

MD5
45d0fed01f7ff87f66b265daa08b4087

SHA1
5869fc8a2d27c43ff6243dda29a81cc145b091f7

SHA256
2012559c9b5e7b70508cea5cad40a9fc8dd5020f4faf8b6f60b13c8844e5caf3

SHA512
238927aea5bf056f92d7be7dd978d0a455d9809d73f4ba8a26de4da177c14b4664bfb67ca4e0bcd6792dc8019886544dc30754f56340270e4cbbff89e0037a7a

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
54d9c6818ebc36068489e5c6449acc90

SHA1
2a004b27966560623d5533a1337231366cf2c5d7

SHA256
76a0dada2b3744b4806533d8a012e5b7c40dc268e9a3fe4e5ece01591f6e1be2

SHA512
7f99090a526b1c8c81fa308d3bc6bfecc4ce0aba51a2dbc3168efed6f8169118221e955e9fa0a6cf95aa0e52ff88e3fcda917597dec80490ad52bf96c7db32cd

Download Submit