5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb

Analysis

max time kernel
17s
max time network
133s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
26-09-2024 02:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
Size

3.6MB
MD5

d836feab9d4bf3c6cf086bdc14724c8b
SHA1

c837cf7b181679a0081165e5fe4aa0eb94f748f8
SHA256

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
SHA512

8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad
SSDEEP

98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I

Score

7^/10

banker discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

com.systemservice

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

com.systemservice
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4452

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
bc0aaa4fc1d3918e89f50204e6635d05

SHA1
fe387cd54c9c0e1faf38557fdd2b2d4111cf5585

SHA256
b3f39442ca26ac02b378b90a6d3cea697ede705ca678a82fe6e36c2b479d5335

SHA512
0b918c02ed3f74e1609ca6b1cd0b5069b8c0fb776f5a2c7cd944d8369adb88129da66944b725dfea51218afc987a88d5e04fdf2d16d33224d41e29a89ec8704a

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
dc8e7f0c72c11db7e2023ad3d02ba287

SHA1
c442aa46c85b7fd17436bdb519e38621b78310a9

SHA256
0918d380cfc8fa3a771c285dd87194d65735469ef85ff9bca454bda9b0a7a90a

SHA512
9acee9ad296f480f3fdf1fe6d4248ff0148ee70a98807dbe6738bc7631aa873973e2b4d1067ba11d16dab7b5d05248f27b236e28c56d6406083e82e2117d366f

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
62645bf13c30e89bccedc1e7dd48f894

SHA1
b967e2922f036d8987225e7e79d435813eb95a40

SHA256
a0e5dc3dab3f290b1e7b7291b1ef9bb001ed182c8bfec86b964607115266121f

SHA512
14dc812d309ab7ba08a5e096f0396de0ff9517437d94270de0061885686ea4ede7ef73233cfc249ba1fca9e67f1d1d87287d3a8af9be3b6ac7b1845a8acbe407

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
2f3935559babc2c4e44525868fdedb0e

SHA1
f5082e8dabe654515d716d7261baa8822f84023f

SHA256
d5597d23c1aa0e4cc68d2f0a0911d7b055f7bf1516c2b9420687cafd5454ad51

SHA512
277018117142bc20eef64652f08292ae8599df2d9c5b2ad95d65d15fbf41c2d76c8b5e154e526c671b1a2f1ff7446c36a5d2df060623bf3585f55f2cbebdf5ec

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d9cf75fdd1c2292d986f6c3d5d60f2c8

SHA1
07ecb1d3a26d952ae5fecf54f36699ab498510b1

SHA256
2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

SHA512
442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
17b270ff2f20feb42edd9adf0c9e4392

SHA1
0aea24f6f11e946fefd106716a30dd5e33fc6ed0

SHA256
5b724148819955e9780351075af6f238b2df4bebf41869050fc9c9e3c3f1225d

SHA512
d93ff0acc1553f7b1f15ac4da761c4b4cd6a40bc84741f247a7cb771cd6b76a65a74cf4516e54d52dca2b8c2f6c0d704f488a26d27ec3f5c8b29028155a79580

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
838e60e250e481ed34bbbf78431b8e13

SHA1
db021bd0fc2eaa966a8f8787b6f0dfe15e3d6d18

SHA256
b7666cba948302bf451ccf096055dcb3e54acd0b5b2c5ee6c38034acbcee9c43

SHA512
767fa86b0bc2eb8d7b83bb3f8226c40fc616fbc67b9e681043dc5619296be7f7de2d992e27e150ef5a89cb4fd96c4c2ff11578bdfbe19a13f2984c27efb98995

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
15b412edd62f7808086118791e947d58

SHA1
881838d3e141ff0658d242bae10a1fe2a9bc0011

SHA256
8da9aa2391e2fc666825fad8b4db55aece8265f0710e37aab995eef38935ef6a

SHA512
f5800ae0968464b6f3a19a92a8502279d7b5649ec86ecec7aa7130b6452d4571abf5bbbbfb47ba9c5dffcec21a94cf6b62d65163735d25b74816d7ef05f7a204

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
0162d285bd71833125bc8a3b327b846a

SHA1
9756ff4bd29cf729d2f635f77ae090ad087385e0

SHA256
435d11afec442748305e011be65975ff4abb29c6029eab36e357b5b713942a38

SHA512
2a45410ce9085508a9d7460c238d0bead62733ba1a590076d4e0fe5a0983feccdc1a0d9ee6c6e695491f68c164b41c364e5881680c01ca82417b6fcf06a66c54

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2238195eab25764b61f2d26ef6a720af

SHA1
d366efd0cc079f0f87d23c630ec8d99f90541731

SHA256
599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef

SHA512
478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
30d92079965211fb8b7f69239549274c

SHA1
a4c925a8aaaf0e344c4a127430775a5c1dc13c47

SHA256
99bbf51774794b2a20a4c0e4f38c39631435171f2651d9e0612f3beab41726f5

SHA512
80127f04da46f36d81ca19024d6ac2ece2ff637919d8e6b00b0277efcef34d06e0592a4e15f71248c18fc284f975b573f60e5f05991fdba7c4a21a5df3d34e79

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
4ff43d86c9edc06da3b8ceb845d580f4

SHA1
799f6fbeb87462ea860c2e6b3a36fa987bc320c2

SHA256
9b5156a53f53c4df71cc50ed8e7395ac4ea2a1fe37a43ea42773b8f948a032dc

SHA512
e6e885b255c1e48b56e401857f583a9cf49732963cbe047dd1847d4eccc94e53857782aaef15fe5fa1e385d8f5d6630ca7dc311a5cc5f2ef1caeb4947f194258

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
04404c40369939b465a82797f9453204

SHA1
dac70bcea07933324ab1e914078b8676e2838cef

SHA256
b20164015d2c2b8ab369310f5d972311b25686c3595b821397b2798174b3efe7

SHA512
0da5cdabee36365f9cdeaceb67ec0e96ec78b594dc6ec4c9faf02ab6bd285c62672871314dfd91fd29258d4dbce2aec451694f20aa581b1a8c32dc4d6d5e6cd6

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
23c54189af10e76317151a8a3d344f35

SHA1
25473c95548995c4ecaf42e80af22f37fe226654

SHA256
982b5d76ade98706dccce3f4c4e7d4bb3a4682c4b0c7ca0560e1b9dfb94909d5

SHA512
4b24f66306c8af4c7514b8430ff5f24f1f95e964af90b42ae3e5990a7d4ac04fcac39c3d3552159c55c8b3b14e300cbaeb2630eaccb071dc45253275babbd885

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
1b8b54d3d74ccd241d19474fcee0dece

SHA1
6084209f1fd5f45f8464778688e8bc795868fdc6

SHA256
64d3f01547f04496b14793c7fd6e8e1d037f6ac955f37ae21cd5e3e8b73667a5

SHA512
fbc804a7fbe023a542ea4cd31280b9a1ae12cc02df8aa3194c4022dc797d9e38553975bd09e5982d4fffe21de1e9139345989185a9b5029cb86557bcbc2d3233

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
3edccf1821d4166927d3d58894033908

SHA1
2c701461e037b11d4882478ce76711a326ea6b2e

SHA256
21fb414ea4805976884d498cf7ecb73e04b51db8178dbccbe5aa4a149366e765

SHA512
190a8f600cacef4644a0d997d7001c6d2293e4dfd908205e7b73afe5c839bf45ce17f64fb217777026a5947c2b481bb64f241e38d272ac0f90eb0a99349863b7

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2029449450662343545tmp

Filesize
555B

MD5
ba7cc2f211440a3ce4ec9ee41f6f7924

SHA1
9ca1f68af6234aa5b3b621be9a7a3d6f9f57844c

SHA256
8706f2a6497be34ecf12c2bea896bb250fa52c7c7a16df0fcfb3897879041676

SHA512
34fb769419e28d0901350818cb7b56ae6d7d3e0dbc17cd4210e7f78745afd73684ddb4152404e8c6562f5ae3afa518293c053dd4c7510a69cb68a3fe889772b6

Download Submit
/data/data/com.systemservice/files/PersistedInstallation5721335919149972177tmp

Filesize
90B

MD5
41dd60ea25f49741fc5ce4ddf3055492

SHA1
ab042ed7ad48f7b31e085c85f69b3d5ea7fb138b

SHA256
6ba15957437d25f36cdb747161cc43660055fdb1892f1fa8896b108e4caf202d

SHA512
05c23ab7c804790115e2d4d62385cf8b86a6e0e0b139915540c34a50e6a9f01daa4aab9543350a33dfd284d51c38cd0e54c9f01009c0f2f73cd6234ccd4b5795

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
238a6386e611372f12ab67a8bc9af3cb

SHA1
ded0dcc1934c4085f17c7a2f5517766b5b10a3fd

SHA256
42443299e8bfddeec114ee88548b89b7dbe93359b57bd39187fefab89805428f

SHA512
8b163c7e091cdf9e04ff88c75c11de93a33ca377c6271eeb08437ee40df05db357360d7bab09641e6cdf1a18a44a0a86a1fc48c4effc8b78c5778c14f4e8ef18

Download Submit