Analysis

  • max time kernel
    16s
  • max time network
    133s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    24/09/2024, 02:38

General

  • Target
    2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc.apk
  • Size 3.6MB
  • Sample240924-c46xfswfld
  • SHA256 2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4468

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 e620c29767751148133a86bb0b7ecbbfa42a02296330875c932c0f07a3496d88
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 d17fab2c5c6b027c2c699cccc77e4d25a0b9d0d0541f6d4d2ab14437fd9ae3df
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 6b0b4f399b7b68b405fbab97118dd6e5e297d46ec2e110473c1d6ac475b9922d
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 dbf1a23e7a945b7a388880f0761b4a9fca309a770ccc2b9ee0882bc5010a092e
        • MD5 SHA1 SHA512 SSDEEP

        core.db

        • Path /data/data/com.systemservice/databases/core.db
        • Size 36KB
        • SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 18f5b9ee7bce77a6115eb7880f55e3459a7a730f5943bbe0a192c7224a7e6507
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 408d9cd92b79b74970f841300f4a5ca7182dd7f7d622bd834ded7c5d95955762
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 75c9c6c8e54bcdd39be2f82ce5b29f71e764b34531c6914547975e7ca8eb86d4
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c5588573e5906c249b519f79b6d3d16d459b32b3278f875498daae0d515adbeb
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 45b720ee1e7fbcdf37b56ae9cc551099bd48db896839e166726e3e1f2a35e84a
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 26350436c7a618ba1432667349a97aa103bfefadb3a0587d2beab82ed3529942
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 9e43c2fbd965b027a63646e141c9821b1d3bf1ec8687918dcbf79eff5d7dd53e
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 dfb92d2f7901f39ec2e739207c303d3f85d3797f150b5d44e855eacb993fd19a
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 3d70a4c3d4f0664406982bd7a239c34c89ba3a97a2cb67fcd6f07824a467b403
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 4a8f049260b992321c4a1aeaef008354a52b11c6a480beefc74a688ba8b1ce29
        • MD5 SHA1 SHA512 SSDEEP

        PersistedInstallation2555355192621664966tmp

        • Path /data/data/com.systemservice/files/PersistedInstallation2555355192621664966tmp
        • Size 554B
        • SHA256 4a258c75cf4439263d203c27f7ae16c0306185d86ad6207dfc20ec7d9645eef7
        • MD5 SHA1 SHA512

        PersistedInstallation4286745939011602713tmp

        • Path /data/data/com.systemservice/files/PersistedInstallation4286745939011602713tmp
        • Size 90B
        • SHA256 2012559c9b5e7b70508cea5cad40a9fc8dd5020f4faf8b6f60b13c8844e5caf3
        • MD5 SHA1 SHA512

        log4j.txt

        • Path /data/data/com.systemservice/log/log4j.txt
        • Size 6KB
        • SHA256 76a0dada2b3744b4806533d8a012e5b7c40dc268e9a3fe4e5ece01591f6e1be2
        • MD5 SHA1 SHA512 SSDEEP