5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb

Analysis

max time kernel
16s
max time network
134s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
27-09-2024 02:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
Size

3.6MB
MD5

d836feab9d4bf3c6cf086bdc14724c8b
SHA1

c837cf7b181679a0081165e5fe4aa0eb94f748f8
SHA256

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
SHA512

8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad
SSDEEP

98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I

Score

7^/10

banker discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

com.systemservice
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4611

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
9d019d03c3ff33de01e4851b372f1574

SHA1
416d9f39a853ae28929a6215a07f60ff3e16f93c

SHA256
0e523902827af6f06bd31f12d0c0e81994af5d8a4e07c35e00f177f415d3e258

SHA512
92f873de16134ca57ebbabd6c800ee30e57b0918ada16cf5640de3372a87ee4eaa01dbcc5c6374dd243315ce842bbd020bce5d898315a14c3a09ffd4d101639c

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
8e424bf9312391f9feb990a60a126296

SHA1
6010245baec454c0427a0a7c1a01d86374fb5bc4

SHA256
e111bc6695ed6551a069eaf408406d15e69bfb232adfc0ec077122eddc1b8944

SHA512
2d4e0bf600f704c16b0c18b8ccfa95f5ccec97de059f7a8752a8d0e21a0c28b27b046e76ca213c645a33b8eaf7fc6e1d96f3552ad8d535edb326b37dd28fbeea

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
30203010967b38e22d0fe448c4a59a03

SHA1
e3c62aa58a587ef652617f00ec3f60349935e067

SHA256
f557d55a0807f9e3fcd1540b797a48babb1fd672cb39152bd5145456ec2257b5

SHA512
e70a6a53c9ae42b744a68b305c38bfb48ad0e20b56556d5ce24ece297beda2f8ae7cfea8a10c1493b892a079533b651ec598ecef8153831c989672e5a40879f1

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
6ab44e2018a1bded21fbfa21b7f91e85

SHA1
81670129196f27057c4f9bcabd47d1467eb9c5b9

SHA256
8e8f63f37fee336576f06ec31f3934b0465e98e8078c54b519a33cbf34152ac4

SHA512
c4c24f2d1c57970693578df33f6280751e4cfe3381f6ca7ca9fdeb6ea9963be58bc04a254168dc3e130f9f3f47fa16b7c38cccba5f239df7a4a68b522b4584af

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d9cf75fdd1c2292d986f6c3d5d60f2c8

SHA1
07ecb1d3a26d952ae5fecf54f36699ab498510b1

SHA256
2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

SHA512
442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
806ae8d8c8e03a141539cd5a2fe1a8fe

SHA1
00c35d4531b72de5e4284fce71620c260cf54d78

SHA256
efcb7babe5c0a403fb712210fa08b8482dfc61aeefd8722c243bb3f9964c4829

SHA512
dac7aecf1206badbb36056c88caef15c25024b575fc5f52452307679157ce72a3cd1d35e83c4f048ee8e0f3f535e120213a1316fe1ae141537271b65e077f69c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
ac6b99fee5b6bd5d2967e9c955cf7c4d

SHA1
b85ded7915645b2991ae92e22cca2797623965c8

SHA256
6a69db5e832144a13790ce5689d02e2ae48254917991d8e17c2031b297ab3695

SHA512
17bb84ada9b286dda584b5e7ac7b76df92f8d1f30a10cafa2384a7547aaf5fd4c7ee06ef2ede93a93e8455ce493ae4d966a156bd0ffcb69d8e81e59081e862d3

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
86d582fe1b43156a37d20a045d617a2d

SHA1
8f8df01b5d6c43a6553bf89ab388db53b8edba1d

SHA256
1f5e06c941fe8a86a702697efe2b3cee1145dd20c0ffad685f4c4c5f3bdc1b3e

SHA512
0c918a04b58b37aa9809909321df2611bd042280175afd2b90d14401688bdd36216c008dc21fd22967762e7f49942094615e22a5dd936c14a45d3999e71f1a27

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
96817157e8b745ccca117f06c0aef1c6

SHA1
a76ae08917d72d4aa389c42385cb8e4bc7dda744

SHA256
7c8df7dfa7c884c224b751b72254821788e917ac74df35a6366606407e6686cc

SHA512
db26a4fa346e2beb6bd0585f16bcc2f8378533d52b2317ace5161975a6043617ae50b2903e4d67ce6d0f75ab4cc1d95e364dc9ba08641503f0f06715aabb5929

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2238195eab25764b61f2d26ef6a720af

SHA1
d366efd0cc079f0f87d23c630ec8d99f90541731

SHA256
599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef

SHA512
478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
7a10e441aef2cb30b398a7ec5693004d

SHA1
ee9db4ffe598395612fe5fedd0e9cd80ddeb2c19

SHA256
3bb382102a59240f56867f25a44dac3dd0de244be82cabd5843656b4ae9ac93c

SHA512
1168e177609bde1de8f6bff0deacd67b3e83a1fea58b3acdd9e8dfd5a6e0b2b86b26d0285b9b98157e07ea7b6f2c2d503ce48350453d9202c07da08563bd19c5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
cf99479529b82cdbbebc37f15ac07fa9

SHA1
b690f7bcb831df4c7bdd80c1b4a4d5d68c863514

SHA256
de18208c412433564ab8b32728cb63b8ab359b176c8bb903bcf475aea4b761e1

SHA512
e1c1433bd4410815def7eeeedf90347e6f21ba0462ed8ba1ec92e3d102d6ee6cac6c233618ee1c1c66da688f19d13ff51fbaba1dc2dd1cb24a60abf5be239e29

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
e1a40d8a336aafd45792dd4fae182838

SHA1
ba3482b0cbb8dd84483e50bc863685272c4fa73c

SHA256
ef59d9cf2d9f80370a38e8dd374481d30f4b3a27aff84cbe9358eca61d08d102

SHA512
47107083c29de2a942a596d2b27561d61449b0bd5dc8aada6fd3e2b845ba0adbdbc0315e84d2e9cda3ba5ba6c920d38c6d53645f0958418545f2f5272af76a3e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
25723169a85020b0873ac87c98d46f4f

SHA1
362d5f58fe284d82b9906de90537e7ca81b7202b

SHA256
b79dfcfcbe939aea9cc7d388de44d15f05d8b26d2ab2b8966fdb5205e8b5116d

SHA512
5a85166ad2badfb2588c3ba3321cf1cccff00dfe379657d681f919221fdde5e0f1c4f09458b86e39ea48be1640047321b7d413bd20b1732c3b9004c0e30171df

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
41804e76e877fbbfb38a52d45d2bf622

SHA1
6bee77033abd637c3be3d2d9d06f7d4e4b2ae74c

SHA256
f3b0d27cc509b109c21e2ef3b810c2fc6c752aeec10305687d86ee2b1c10c9a9

SHA512
70e02afe69eca2cf7781d42a47bf3f87a4ca01cf8794009d2e0030876f83fcc6fe7c72e89e55f597076644ea6493ce994b18fee2c80369a55e0c8d2d957ec830

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
a979e73d88a8eededcf55626a1d976b8

SHA1
2312f47f176daaefa6dcf3a464839ae5e832a1d3

SHA256
86f1ae200ab0ee4a9cc38d10720e6e1208d822eb934ab0633f8cba1f61053d13

SHA512
689ad45eb644caacab85fb0720b6487451af940bd21c673afce6ea33f5a4a21da55dfe0b325b283cc5037a52a3f95301db38c7d42da1633e70300ae7903e2039

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2509912978668354280tmp

Filesize
90B

MD5
2aae402b32dfcf0601581ae7f8d28319

SHA1
9615887094b922b75d4e8175d589e7f33c3b68f2

SHA256
d76bb7b6fc8166420ab336fd77e708b96d8d6eba41ed0dc0d577a9965d3b8cd2

SHA512
2bbcceb33a54585daf529b6926bd02693a46db1ccf430d1240911804f702a29015e49a1724daa2fb2b9f7d5367a21008f6e12c4c4d608110c8c327fa5a5d1993

Download Submit
/data/data/com.systemservice/files/PersistedInstallation5754799734118253705tmp

Filesize
554B

MD5
4506657e46116a6e233758a84102ce99

SHA1
1d610948c9a0cf082d8538953ffc82b7c00a308a

SHA256
068249951aaed302ed5e9894eebb716d597f72973641e3e33bb02e08af966247

SHA512
c1d7a9c5f15639c6b47004e50989f1d4cd59285a97266ac63b961dd0e659f3e9d1a38351ee47e0731714bb8202d12f7a8d3f14e8f864ad6f2147d17aee89ed82

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
ea45ecc11f6b5850547e51518e053eba

SHA1
b2cc9dbfe3070da2c2f30a707155b8bdfb1f29e4

SHA256
1154c4c01b1ab785efce9c59b56594b76a9d8105f3e7b3df05c86223e4b9fbbf

SHA512
c4acd8df1aa1e455054337404282935ca2f82c063e63acfda24502b173cad0bd888b8f8238a355fd7a40eb0b406121de3449452c5d181edf0f1219a9c1deb069

Download Submit