5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb

Analysis

max time kernel
17s
max time network
157s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
28-09-2024 02:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
Size

3.6MB
MD5

d836feab9d4bf3c6cf086bdc14724c8b
SHA1

c837cf7b181679a0081165e5fe4aa0eb94f748f8
SHA256

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
SHA512

8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad
SSDEEP

98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I

Score

7^/10

banker discovery persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4983

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
8585cc42ff0dd78180f4e9002d74cbb4

SHA1
26674ac9d8ce19a2810922c133b75b9b63e4fc73

SHA256
f6dab31a6ccbac704010925188a27d04165b68fd823f58185848dc4f860eca92

SHA512
e10a5dde42e1e2817854f9bf00f5c7729805c20569816ae7b9d84189dc35af77728081610bdef52064222ad3c9e0a289da5d03047866e625e7b454d215b90e40

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
1ddaadbe15008b3b46c88a30206ddf03

SHA1
7d77a616533cb9b7b54f3250901440726a919d26

SHA256
ebde0e2f34eb6d8d368a7c11621894b35b4f39ab527a3b4203f260d2fedf7a2d

SHA512
5f1d85a78f142e506f594b7b84fc3eea110006f47d9ce3e1936273d9e576d0a5499207dc136080507a9f1ddebd325604459d4c5676b16266c896cc023ee5217f

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
c60557602f0f4bd97b7ccb8cfe08dcd1

SHA1
c10f421ba22ea8a4e209cb393a39d6b8dc9ddc6a

SHA256
e1c40988badf5fb2a04cb9b398a8e5da85a4f9f15ed332ad1b751829206dd213

SHA512
2fb57d7dc9c8ee34418e60218b30445e5925adcbbb7609752ab37c8890ef0f59b22a75b3f792783a92eeb82cae7af4d6941875c659153a2ab9dd73e95bd5be11

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
b3856b0b71526944943c209390f21b1f

SHA1
235ddd243bdf7384036dfb445185cbd3126b013a

SHA256
194ad3b67dd7c4891a4f455012a5388ba160f3cafda9843f8d72861d5559a004

SHA512
8a45cba548a27e564343452ae6a8fe97e22d4a5b890d69c531d71aca526d0ebc4662af49cb95eb47545c94743d258cfe64ceff3f7d76432aed6bc4e43215b75c

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
c6e3b0373acecdf0b6dab99b3c5ecddf

SHA1
d6871215200d4297bb1c59b12a8d6ac155a63483

SHA256
8fa44eeb7c1d656153d769d7568428d83370948005299e2fd2a84e622190c70f

SHA512
15e028d1f378ad5b445ad6d6866e7ae55e6891a7f89f7702fa5212fae236372a6e534693de17ad5a0327f4d633c20795119491bc3fcba4598a263d96aadb3899

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
84d8075732180a535f009d4b1995ac72

SHA1
34268138cdd1506c3c046c98b76b212ed0438916

SHA256
44c452a7e312160ed56fc6cc0faee393ea60d37b829ee440c8578cecaa3c2ceb

SHA512
dc3d6f2d0576793415573f7214bd57b15824915f1f7fcdd4ffcee17303bed17f87f9dda0de3001a6d73fed39c04873d69665db2f4a44553b11a0f5ce0e4b2dab

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a9898a63afdfaf4004ef3f4fac4b91d7

SHA1
0dafcefaa4d584bf612913fe406416001901a9da

SHA256
48bad3127c4196feded28f983ec374b96db03caf17e7af0ac363f2ecd31bdb9a

SHA512
481144f5f84e77db161a22dfc05157372e84bafb71b2dca77e7904e86cc01473115f248ce0eca3936640374beedd42b5c6d11b1db350f5a03f59c88bc03b84f1

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
0a2233cfa2463dda94b7e4f383459ac6

SHA1
3a2a30236f2828d5217ed3abd77c60b460fe48f9

SHA256
3066f23ef2295dc240fbe7d335954db7e6e2d5a8a484b91f04b38800a27866d6

SHA512
e1347ee0b12fe23aa95e84117fbaab5abc23e8a40a35ec89d7e9cf3e5c44a69cf8b4f2adc9b9f53ececc92c01bc8bca4af00fb6979a8ecdb4779e42883084a80

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f871ff700510a56a54fdd56bc41b7541

SHA1
481548c8bc3254a00f497140278597b915460c48

SHA256
ab18f3bb605f3cbedaffc75b2d5a03fe21ab82179d268331ea907bdcd32c23fa

SHA512
12e3d348199566e137f02b63e4c8b4c722aa086128c0f1cea883d512075b8573d40d889d2b4452d9e3d9c02f523716da9775d93750c242a1a2d9e62f50f60fc5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
0e9f096061e170ce204fa5462f690d32

SHA1
9b0259692bd5662d73b32048806ad96a210201b1

SHA256
a1ff7a79702644632f91631e2eb72546f3ef948acf75122ad8d72975ca655881

SHA512
eb80b83c405c9563c487d6f812577febbde936452623c090301285c2a8d2213c62581044bcbafa3de38b3abb6a1e6c89510aefb71127478f2bc033a1a986c43c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
fee9831ffed4e9353df18a7bdf7c6482

SHA1
38710a0820c9516175e3a0b5553012053b2c9691

SHA256
e9b2483fab8ce9227e22849dd629f878c0909ece3ee24ffc9c47a6ddbd25e671

SHA512
27f49c313ea8b74d37dfaba5c0c47875d8adb727e707452eb0a488764c577b3463ae3543c76893292bd3edad14f1274d4d358c692527abd9e5e104f96f9b531d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
09ed2d46f05ce8117cf4a23d5749ddf2

SHA1
bd6fd3e323e6747e479fee0b67d25d75c64361ba

SHA256
1b12e5c15ca785d5286731d178b1b10568688aa1382d6471d015a12a57849a54

SHA512
75c6c5f721d2373d873549642574fd5d849a612ebeb982ed0b2cf0da4bdf536971eabeefaff29193e3f6b1408c81d0bef85316091786b6a7303ae678928234db

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
7e53d665bac75c2dfab037da533f5c49

SHA1
d5fafc74a576d63f08ed28a5b0d130941f1a1dde

SHA256
218f85bd12dfefc588597855353f833ef6e07c5965f35bc4f76ad530d37044c1

SHA512
3d4ae59bfd7e2673c8570dd50e8429cad84358f04a13d3c24452ff51bd9caac32195746f2dcdfb6ea714f026f2172db7c5f9849e55630be9a3a2caadbfa59824

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
1719334a92fdc6c454c6fda568aa201b

SHA1
4d6de329054986f2c4e90ee9466d4a099d5c6519

SHA256
eabd9802f869268bceb96a9838a2f071cb8da491e7a870a51a240b8e75efebfb

SHA512
e916b7b6d5e09b1c46c497e3b89547b570d7bf6477d03d70ee8c0f5f8b876ffe356a674a0ced6c1844e1a95c88c59f3fa9bdc734fcb79c74dc1abc258c29ab68

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
7744c1cdda8f2783de18aa23406aabde

SHA1
5eadcd4a96da3187a1ee3b4a0577f99aad76571c

SHA256
ecc37bd7af1681a35c480b7034c295612198574a9aecaa8d338aa8ac1c534cc8

SHA512
04c756f53c60ec5bc66152dd14463c759fa0211cef61461d6d3bb9d1a33cafc30f43165a0e2643dcbb7791d9804a22874a05442568a80bd970b60ef85346fc11

Download Submit
/data/data/com.systemservice/files/PersistedInstallation3117814551577221414tmp

Filesize
556B

MD5
2d75a6f61c483054e9ac80278317d01e

SHA1
5c099075f7f5489d08b50969196684b884779c06

SHA256
4d7102a8bf3de1c7ffe13875571dda0d5aa90406ecee1d57a3231eff5e61f481

SHA512
34f17845615610e55323d66b16d0a549e258566d69020d3357af01ad7218f5c3c01532e0341a7863419bdffc8596c96a6317865445fca5d739c5c4e6c1e50a45

Download Submit
/data/data/com.systemservice/files/PersistedInstallation7102590692088997054tmp

Filesize
90B

MD5
89ac4c30b87e55aaf16fa90d3d6a83ba

SHA1
1a79593e64536d79f4540de7a82fd14b18f9096c

SHA256
e97a4192957b75dc8e86956ee500e124b7fcd3fc3f1681d447a9d779a080b676

SHA512
1273120ea52c2d0f2c8d61c6416b8287bd85f56ee3350d21a5c490b3fa09847feca63d1a9aafba04c09921178a0223c61bcce204bfa97cd7375665de4b5c115b

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
8ece347b7a0e22ed290eaf3e2e4c8ddd

SHA1
14dcff87e9d8932c1c40247c598d12365820d624

SHA256
158f1988106ffceb298033059b10f161078afd651722bc736a0375f263a5d71f

SHA512
fd49cf24b2590891b97da7ad0dabc8bbeaadf398fadfeb2afaff116337ec9f8e69f54a10fd1ea77143064ab62bb4813937de6b50a99de87f140552adeaf64d8c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads