Analysis

  • max time kernel
    17s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    03/10/2024, 02:20

General

  • Target
    5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
  • Size 3.6MB
  • Sample241003-cst4hstckc
  • SHA256 5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4520

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 5eefe7387609bdcbf0c970e82a5ed6360f722debc376334df152f5265176d1b4
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 913d4a3468f4d2993c440e38537438baa406cd450bf7e63fff66e5d46064c5af
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 69bcd208a6d5477154a7c610282a165b36101fa97f322e21533ee739513b5f3f
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 5aefd55ab044a1e3eaea1032b5e2371922ff12a1f3ccb250a77cb81230bfadeb
        • MD5 SHA1 SHA512 SSDEEP

        core.db

        • Path /data/data/com.systemservice/databases/core.db
        • Size 36KB
        • SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 4f34e3c6f6ddf1e8d5951c72aa37f6c53372ee8d0baf823d1005b806868dcff6
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 3697f6ce769d68aa404782baae0f52913beb192e0b0faf34a419f9d65c2a54e0
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 78ad80de64736f96f82a21468f696335d7dc276a051c0e74decff3a2138b55a2
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 255783ec2e5ec3b501358f4dfdb40573e7153079595f4d1227fbb8c5a63b0601
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 6555f82c26dc16f50249505e3a54e0a6c8cd453a1777f2e3677aa1b9ab2b5673
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 3df85a287b2352e1e1a0c2b3a8cf641c0fc8faf5e31450cc9a0aa48b67f457cf
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 6496cba75097ad62ccb1b081d00d25e2a9906e6bf3c62df6b8fd0bd85aa11a86
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 189464d5a05566ee6560c49caa882ece269288703b3f56ee3389a0ac35ac35b9
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 f96cb0c6991bc99c564dff4b0f616040ed05abbd3f1f27821dc4aed62ce97bab
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 6e145674907534ca9b85f469b732638efe7f96b01260b4dfe05e66304b6457a0
        • MD5 SHA1 SHA512 SSDEEP

        PersistedInstallation7068090997680715841tmp

        • Path /data/data/com.systemservice/files/PersistedInstallation7068090997680715841tmp
        • Size 90B
        • SHA256 b7ad46ecf2b6f4654cf9c13d182ddabe654fb0c98b518e91798b87389a8a5ac8
        • MD5 SHA1 SHA512

        PersistedInstallation8928050477044636279tmp

        • Path /data/data/com.systemservice/files/PersistedInstallation8928050477044636279tmp
        • Size 556B
        • SHA256 f172ffb39e1ff2e1ba54b1c725937e81e67121a2ed94afce74f7f6d18ace2b6e
        • MD5 SHA1 SHA512

        log4j.txt

        • Path /data/data/com.systemservice/log/log4j.txt
        • Size 6KB
        • SHA256 28110e436220f2d6c55097b780d6d313bed626eed36fd994d927efae7b39addd
        • MD5 SHA1 SHA512 SSDEEP