Analysis

  • max time kernel
    17s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    03-10-2024 02:20

General

  • Target

    5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk

  • Size

    3.6MB

  • MD5

    d836feab9d4bf3c6cf086bdc14724c8b

  • SHA1

    c837cf7b181679a0081165e5fe4aa0eb94f748f8

  • SHA256

    5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb

  • SHA512

    8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad

  • SSDEEP

    98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4520

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    98d9d1cf50aeacfdf920319f9b5506bf

    SHA1

    f1b50931067ceb57caad05dfc386d65435d435c2

    SHA256

    5eefe7387609bdcbf0c970e82a5ed6360f722debc376334df152f5265176d1b4

    SHA512

    d681fac6c9a9b7d03203f96fd6968d05454eeec7db2c4cf24fd6c4ea355830eac0294a58364ed342deb297b108e35cefc4c31041a2a97b8a7163df2740d73fd1

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    decf98f96404a346feb36d265b4760d9

    SHA1

    323fbe246fdf088199ead5001e78d5e6853986ad

    SHA256

    913d4a3468f4d2993c440e38537438baa406cd450bf7e63fff66e5d46064c5af

    SHA512

    912e0dc2ebc48e8a4bf34d7d2a9eaf2efe28761d26f9ee05e04a0deea35018bead97ea0f0b8429c9783c57640ad492ac3339a9df4189a5b6ebfaa4fbbcb71d97

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    e07a1968b19d6142d2182e2e32fa29de

    SHA1

    655dafb717ec2fea6dbf4b47c3c3bdd9c3ef3ff1

    SHA256

    69bcd208a6d5477154a7c610282a165b36101fa97f322e21533ee739513b5f3f

    SHA512

    7d7aeec067acf49b0c4e61f5cbdc8cf56fae7b0b3b0d9dd6e412a5e8e18db86e31ab707fcf18b2ad275ef08f15f0da47569a39b461aff126dea437a920c349e9

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    e773ba84a722ab17db18fdd27b8d35a7

    SHA1

    3b4e808b8a68a3536bdb77173052b4e168bb23aa

    SHA256

    5aefd55ab044a1e3eaea1032b5e2371922ff12a1f3ccb250a77cb81230bfadeb

    SHA512

    8e975a17413c28e47fd1d11efdc5e6679324b614fde4e4a2c932203c52adac3c0f644aef055a20f21450552c5d4edc2ebbc5677aae978574d2a637867bb70aad

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    efb924fd340ffae91c0ea973364f8fbe

    SHA1

    65304997abe27e555bc880ff31229f65be28db13

    SHA256

    4f34e3c6f6ddf1e8d5951c72aa37f6c53372ee8d0baf823d1005b806868dcff6

    SHA512

    80b75f8026136850385e7905cc9656366b080482ea82ba1d13882013c3133b1b2ce11b7769da14f4691712748413d402c8556f33a9594f85cd429ffee9f26f2e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    45e51465f7f94263a5fca2c14c3a52bb

    SHA1

    490a20b7e3e9a0392314427e7ba9c3ee8c0af5ed

    SHA256

    3697f6ce769d68aa404782baae0f52913beb192e0b0faf34a419f9d65c2a54e0

    SHA512

    4498152e2fdddecd3ce9edd8d96b1f1b675c9307530a264d56fd7f7ee7d438c14d89d0901ebb651cf7dd3c449ebf41297790ed3900d245c3696175a729cc8a9e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    eabd10bf2933d98c34fc045f3aadc023

    SHA1

    a0849bc890e56e78f0d9604e9006b27b1b00acca

    SHA256

    78ad80de64736f96f82a21468f696335d7dc276a051c0e74decff3a2138b55a2

    SHA512

    a8207c8f5a2b2b1894d87c7fc876623de2064863f4ca5f9214d760132d25057daf8d4a308b83f77d436bbc384cecc7dbadf4ee6e8d19a3cb514ed09022ddfc5c

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    500f463904ee0f8c2402cf41fa38a7d0

    SHA1

    06d696336c7e13da3c7e359507601cab5e4c832f

    SHA256

    255783ec2e5ec3b501358f4dfdb40573e7153079595f4d1227fbb8c5a63b0601

    SHA512

    15016bed2052b4133a4716ec18925fcf05df251d648e303094acb9eb3a733e4c4b2df27ed97726769bd63b4bec530a2beb8bfd2caa8801f2eacbaf8803b75c3c

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2238195eab25764b61f2d26ef6a720af

    SHA1

    d366efd0cc079f0f87d23c630ec8d99f90541731

    SHA256

    599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef

    SHA512

    478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    bc57db75872a62c9f5420af98b21ff52

    SHA1

    3a91da3fccd66e0c69847e4010c3f729b7219d6e

    SHA256

    6555f82c26dc16f50249505e3a54e0a6c8cd453a1777f2e3677aa1b9ab2b5673

    SHA512

    c4e8563cc3561468d5f82704b7e691f4c51bb0825da955aa30106516460091f6b337db602fee27f9334addf3c35446c9a1a67d83ed290f0e29a54a997033a9be

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    984e31a1f8d6772d866ae48d3c31e149

    SHA1

    c4fa021c32877f4239b6394f6692813f0739677b

    SHA256

    3df85a287b2352e1e1a0c2b3a8cf641c0fc8faf5e31450cc9a0aa48b67f457cf

    SHA512

    63f8c2a3149934af99a41a74095a5bb4131640b1e3c154f5d791d3fe7891d171927c2f02d43049beded9b3afe155f42ba50fe996884c49193f3351fdf859b147

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    5ff4821266812a11b9487e0b616f2fcb

    SHA1

    1d3389fe6eba00d00ed1110de4c3a9dee4155943

    SHA256

    6496cba75097ad62ccb1b081d00d25e2a9906e6bf3c62df6b8fd0bd85aa11a86

    SHA512

    3b46987c77b1901d53fb3724cd7b7ae71c34ea857b8a01a0f6b0f41fb0a48251f96cd1ec1bc6f230a89adca28ac59a5a04ead7419b5019a3de769b857d337a9c

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    ae3ad7f57801a72da9b43b6cb66fac55

    SHA1

    228276fca99b8b5f1965e66194935920b07497bd

    SHA256

    189464d5a05566ee6560c49caa882ece269288703b3f56ee3389a0ac35ac35b9

    SHA512

    83193548b8e65cc15f95c40f6167d3a5e5ec81ee5cfc883b48188d153a0a5dde4493bd162575a2e1d4e0c6b3f5f4b5e61c0575f0e32d0a549f0438f057ddc933

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    e37b31273ac3b32621f1a67028d66a55

    SHA1

    c506a80d29bba715169d71ccbdf3fab1987ab921

    SHA256

    f96cb0c6991bc99c564dff4b0f616040ed05abbd3f1f27821dc4aed62ce97bab

    SHA512

    e8e6f017c8831b0453f647ddb6c19d395ea5dd454cb25713f369927c0a63ebd2ea5296f671c8fb2e83cfc1c692710ff0630bb28343ea3b836b8f760b32ebe86e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    954d3132e783b64ccaf1774fea0a0983

    SHA1

    f1e0265a1bb6486c934c07a92f738cb8e0e063d6

    SHA256

    6e145674907534ca9b85f469b732638efe7f96b01260b4dfe05e66304b6457a0

    SHA512

    9371a99b14dab4275830eeefa073de0fd136987afa41bb36bb5a8b3bbb9d102f017d255903d400142d462f98877d7ab2df700d97fe5aefb10a119b3c95f531ce

  • /data/data/com.systemservice/files/PersistedInstallation7068090997680715841tmp

    Filesize

    90B

    MD5

    19730015776576f5cf68afc582c4b078

    SHA1

    42c58d019b15f92d56155f1f5fe3b1c26b7d1c91

    SHA256

    b7ad46ecf2b6f4654cf9c13d182ddabe654fb0c98b518e91798b87389a8a5ac8

    SHA512

    f6ed8e22aeb3c545d8b71d7eb2db2d6d165d7a506c75ba7445fa3e889eaf76975e5d3fe56c8212762dd77be727dcdc2d3276deaec84ac90e59df546837621419

  • /data/data/com.systemservice/files/PersistedInstallation8928050477044636279tmp

    Filesize

    556B

    MD5

    dad8f1fdbda924de8de29eeb4956d530

    SHA1

    1ba3ae0a04f1ac56ea0a5d3c7898691c69b03171

    SHA256

    f172ffb39e1ff2e1ba54b1c725937e81e67121a2ed94afce74f7f6d18ace2b6e

    SHA512

    dbcd2e99b052a8661308fe3b8de18fbe29a14316c4028485962d71d924667e430286a1ec9620c7f0e8986b980000106dee689ad0a7b0537d26e5ec3d4cea3aae

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    6KB

    MD5

    65b0a69162e3a09cd5313636ea7feb11

    SHA1

    e180df7713cddd1bddfea736c6f38245e4c0f0c6

    SHA256

    28110e436220f2d6c55097b780d6d313bed626eed36fd994d927efae7b39addd

    SHA512

    8c724ff4466c47a7bcb1092898f68bd4a7bad6e19bd1378e49689f97e890b159d7ebabc67f3331db8066018617e08d365fcd1dbc6e237698e93cdd4e205ff3f4