Analysis
- max time kernel
16s - max time network
133s - platform
android_x64 - resource
android-x64-arm64-20240624-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system - submitted
24/09/2024, 02:38
Behavioral task
behavioral1
Sample
2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc.apk
Resource
android-x86-arm-20240910-en
9 signatures
150 seconds
General
- Target 2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc.apk
- Size 3.6MB
- Sample240924-c46xfswfld
- SHA256 2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc
- MD5 39fa2c58237de702fc3458251f358cab
- SHA1 16e4e5003046f5d07a0fb1eff0dad56d9ce53be3
- SHA512 023b77900582d0b6629d587f7411ce5153124cd3870b9533cf9afc5304b874e4353d8dabb7adf8a199768992123e707bc6a87ee682463c3bdccecc8a060e7126
- SSDEEP 98304:kyHTjmHgJcyw+WoeX89z6Odp/9hBbW+te6lXhAyHmz:k+jmKcyPsXMl9jS+oSc
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 e620c29767751148133a86bb0b7ecbbfa42a02296330875c932c0f07a3496d88
- MD5 75d48ba18c1d644504c4c693775f0786
- SHA1 35e63c727e4b31ce26b301b2bf25f52af5c5408c
- SHA512 e17722ec8013e0953867cdf523e2da10bcfc74555ea32a067938cda68395b26f186e2cafa53a7a4319aaea958b7a3cdce56983ab274f7b273a4a9720f98f8b36
- SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSZwJ:rAMEX0wIyNjaZwJ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 d17fab2c5c6b027c2c699cccc77e4d25a0b9d0d0541f6d4d2ab14437fd9ae3df
- MD5 130527cb3d15b8539e9e2563eeb8a042
- SHA1 01be7f61d44a4eac78c213b08759cf304edb2d64
- SHA512 7226f3fd4b235fbfeccd7d02528974485c736cf0a056df1c159b42881c4a196d6b9c0111ca653d669ed08bee7b7208492cb750bffe188e987bc9147a75367af6
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 6b0b4f399b7b68b405fbab97118dd6e5e297d46ec2e110473c1d6ac475b9922d
- MD5 6df6b755b82a7c2a3d57a2234770f9cd
- SHA1 101345f251f18b224cb9bf8040cc76a314b07f2f
- SHA512 69396d5b913da1b47b0e6404f47d5707b827a50dccd4f0560df0831bb81e272c9adb331833b225375de55bec5e1b05b40c38571366ae6476a8a03d460f423278
- SSDEEP 6:7+/l9HgSFn1Y/ng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKN:7+tlZMfqLiuWdYRmBEyPbq
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 dbf1a23e7a945b7a388880f0761b4a9fca309a770ccc2b9ee0882bc5010a092e
- MD5 65c1615d994227c9980552611c9bfa73
- SHA1 800be79878f4541bc6ef8ec6d5970fdc4f57b7c7
- SHA512 630c608490f8ccfde3211ee5857654ecd9fde4ae88a385bad4b0b5a3df3daae4f17f18123249736650cb3eacf137c72bcb9e99d97d31d07174fbbadb84730c91
- SSDEEP 6:7+/l95Kl4Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKi7//8:7+tKwqLJdeWRmBEyPbTr8
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/core.db
- Size 36KB
- SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
- MD5 045489a0639eee27bca52f48828cd93d
- SHA1 436e7966e7c019273c44faa4d8c5709b816dfda3
- SHA512 c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e
- SSDEEP 96:eMzKMilNJzt69l/mwICfPDKOjK0Eg745TN3PafDDKsgZK5AgZWgZK5cf/ShOqLE0:AuldjKiKvI45TNAKfUf4hI2q1UpKorKS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
- MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
- SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
- SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
- SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 18f5b9ee7bce77a6115eb7880f55e3459a7a730f5943bbe0a192c7224a7e6507
- MD5 670b9e6cf5862d9274d6332fe6ab1151
- SHA1 3ee7761582f4a3189da10751215e807b58899012
- SHA512 b9355fd6de7ee5b95f18534519b7f333c688bd589d5736e2c58aadf3ee5ff3c2fc897b20d966eb1b00ebe6fdb80e515ef03c1297b8f6d28468e89b2c6654390e
- SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6S:TLiEq9zmzrfRmBEyPbP/P+/0Fl6K7
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 408d9cd92b79b74970f841300f4a5ca7182dd7f7d622bd834ded7c5d95955762
- MD5 99714ef9274f7025e25ac843eca4c0a9
- SHA1 c552e62a4eedb8d05300f1b33af0675b149d0b4b
- SHA512 545fd768ef992d85d846b09c911d00b0d3a09e50d596a53459211a8ac0bf04f08ed68e81810fca20de82cfe04fc90ed8ad2c105e1ef0d91551d877e27e639a75
- SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFlAk6+/0Fl6K7:TLopmzr0GSP/h1499Fd6lFT
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 75c9c6c8e54bcdd39be2f82ce5b29f71e764b34531c6914547975e7ca8eb86d4
- MD5 72e4a54b49aa0b45f33d06916dde1be5
- SHA1 98bbdd6ccec77cc0b680c4f49042170103027ef1
- SHA512 960ad763a03c040037d719440e37ce74a885329ef5d2a172b6b7215cff0e1175338faf1f69367663dda4fbf0096daf09ce0430c84248c161b974c677d123219d
- SSDEEP 12:TLIEU9zmzrfRmBEyPbP/qFiOLaOS/yAUbYUyWlpjEIW49blqYFlAk6+/0Fl6K7:TLYpmzr0GSP/qsKaT6l7W499Fd6lFT
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 c5588573e5906c249b519f79b6d3d16d459b32b3278f875498daae0d515adbeb
- MD5 82722948ea0b4f698709f6cc2f6f584a
- SHA1 a1eafed6f4ca2c1aae0269066db03cdddd7f75d5
- SHA512 d6b080681eabceaddb3f0c84dd689cdce54c87f9d9afe17f4e9fee0de0840b26dff4f5761322521e9ff2fb985536c7d9d8ef638da1a94c327e91dc98a77e7ff7
- SSDEEP 12:TL6uER9zmzrfRmBEyPbP/RFiOLaOS/yAUbYUyWlpjEIW49blqYFlAk6+/0Fl6Kv:TL6vpmzr0GSP/RsKaT6l7W499Fd6lF3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef
- MD5 2238195eab25764b61f2d26ef6a720af
- SHA1 d366efd0cc079f0f87d23c630ec8d99f90541731
- SHA512 478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470
- SSDEEP 6:l9bNFlgls1WnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WS//:TLuEe9zmzrfRmBEyPbP/Wy
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 45b720ee1e7fbcdf37b56ae9cc551099bd48db896839e166726e3e1f2a35e84a
- MD5 cce0d03a197ef71bfe783208a9f879d5
- SHA1 c39e6fa82595108571cbb48e814fc2cb53f33e31
- SHA512 f65905af2133a9d8e66c188fe0db50cd92fd8fc791341eab7e93f64b935208770cc2c98c0f6446106253c68a9709720b91d725b966b22f899084feb594442050
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 26350436c7a618ba1432667349a97aa103bfefadb3a0587d2beab82ed3529942
- MD5 50bfbb8e7ac903a17860ea2350334f0d
- SHA1 a0fdec2f6b85a9bc643b85c891e0661c5bf0fa1f
- SHA512 cd3e0f56a38286a613540e24aca99b8b2f12789258a8ae68d0a9eba212bbe3a7e6f4b5a64e837b7e6b4f8b2b15b7bb7fb76e5288e26c2e923387de8cd11d3857
- SSDEEP 6:7+/l9xGn1Dfg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKY:7+tnQqLiuWdYRmBEyPb3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 9e43c2fbd965b027a63646e141c9821b1d3bf1ec8687918dcbf79eff5d7dd53e
- MD5 40c0014a98800296cbeb2ece08497460
- SHA1 1e975e1e5dca100ed94556c5a1aed93bf48b3370
- SHA512 09cacebb83a85308e0fabd300b149671344039b5b141f11c1312b05cf4598d3e32c12574b5d15aa2b10d201e0ec5045c20971b7be2e9f9016d8cd106a9239133
- SSDEEP 6:7+/lzqPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKT:7+tqqLJdeWRmBEyPbE
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 dfb92d2f7901f39ec2e739207c303d3f85d3797f150b5d44e855eacb993fd19a
- MD5 bea5d989c6901fc7566cb06962a3d508
- SHA1 a8e485cc10b2f0a1eee09c0ea23008e867e0fc1b
- SHA512 7b417f437db6658f70e84cd53a1ec716a425c89cf3f311622ad36b8167c611710d5ed1969ca5c8be5e93fa5de247b8e4a411967b7a315539adbd27e6a320ee51
- SSDEEP 6:7+/l9zPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKW3/Q:7+ttqLmqKRmBEyPbrPQ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 3d70a4c3d4f0664406982bd7a239c34c89ba3a97a2cb67fcd6f07824a467b403
- MD5 6557299176341a724a4d11a61fc78519
- SHA1 26a51689e58e8a48c624e32495a0d1ad223588bc
- SHA512 f25e0c9522e228bce7913af8e321f5fbf691f02c7de0359a64ef161833be493be98ac5e0639dea4f2ac82942a9164b9a4232de5ce455e3abac73a3577923a09e
- SSDEEP 6:7+/l9flAg9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKzg:7+tUqL8EA9zmzrfRmBEyPbqg
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 4a8f049260b992321c4a1aeaef008354a52b11c6a480beefc74a688ba8b1ce29
- MD5 5acfdd5d88854c3392a04f9e4de087ea
- SHA1 6b27e4f1f10fe641de0f310aaca8b8d7b98041d7
- SHA512 21c262cb00ee279248dd7225d5270b31e6e10cba8d04a64ab3b502f8a4644239b10561a80d7ff0c5566fd08663fcd004efb00fd596b3ecbd69fd58442ea82d23
- SSDEEP 24:7+tRsKaT6l7W499Fd6lF/RqL6vpmzr0GS3:7MRpa+lP54Zq2vArS3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/files/PersistedInstallation2555355192621664966tmp
- Size 554B
- SHA256 4a258c75cf4439263d203c27f7ae16c0306185d86ad6207dfc20ec7d9645eef7
- MD5 1e3d11e148ca0920095c8e0f5b8373e2
- SHA1 8a946393fc15e9391166f1ff413c5e32228db7b0
- SHA512 b145e637d7378be3d7154b0bdef6e939053b533ae673882e41cf0a88e061f530b4ce3c792108ce14cdf06800c2f6f59d1d984d55a4c7f0fb0c8de381a1b920ab
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/files/PersistedInstallation4286745939011602713tmp
- Size 90B
- SHA256 2012559c9b5e7b70508cea5cad40a9fc8dd5020f4faf8b6f60b13c8844e5caf3
- MD5 45d0fed01f7ff87f66b265daa08b4087
- SHA1 5869fc8a2d27c43ff6243dda29a81cc145b091f7
- SHA512 238927aea5bf056f92d7be7dd978d0a455d9809d73f4ba8a26de4da177c14b4664bfb67ca4e0bcd6792dc8019886544dc30754f56340270e4cbbff89e0037a7a
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/log/log4j.txt
- Size 6KB
- SHA256 76a0dada2b3744b4806533d8a012e5b7c40dc268e9a3fe4e5ece01591f6e1be2
- MD5 54d9c6818ebc36068489e5c6449acc90
- SHA1 2a004b27966560623d5533a1337231366cf2c5d7
- SHA512 7f99090a526b1c8c81fa308d3bc6bfecc4ce0aba51a2dbc3168efed6f8169118221e955e9fa0a6cf95aa0e52ff88e3fcda917597dec80490ad52bf96c7db32cd
- SSDEEP 96:elRcmKFGygFh7deMUfvNlygFh7deMUeO6KF+qf4ygFh7deMCalygFh7deMUUt:elRVBh78fvN1h78eFRqfkh7Ka1h78Ut
- MD5 SHA1 SHA512 SSDEEP