Analysis
- max time kernel
17s - max time network
132s - platform
android_x64 - resource
android-x64-arm64-20240624-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system - submitted
03/10/2024, 02:20
Behavioral task
behavioral1
Sample
5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
Resource
android-x86-arm-20240624-en
7 signatures
150 seconds
General
- Target 5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
- Size 3.6MB
- Sample241003-cst4hstckc
- SHA256 5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
- MD5 d836feab9d4bf3c6cf086bdc14724c8b
- SHA1 c837cf7b181679a0081165e5fe4aa0eb94f748f8
- SHA512 8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad
- SSDEEP 98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 5eefe7387609bdcbf0c970e82a5ed6360f722debc376334df152f5265176d1b4
- MD5 98d9d1cf50aeacfdf920319f9b5506bf
- SHA1 f1b50931067ceb57caad05dfc386d65435d435c2
- SHA512 d681fac6c9a9b7d03203f96fd6968d05454eeec7db2c4cf24fd6c4ea355830eac0294a58364ed342deb297b108e35cefc4c31041a2a97b8a7163df2740d73fd1
- SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSXo:rAMEX0wIyNjaXo
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 913d4a3468f4d2993c440e38537438baa406cd450bf7e63fff66e5d46064c5af
- MD5 decf98f96404a346feb36d265b4760d9
- SHA1 323fbe246fdf088199ead5001e78d5e6853986ad
- SHA512 912e0dc2ebc48e8a4bf34d7d2a9eaf2efe28761d26f9ee05e04a0deea35018bead97ea0f0b8429c9783c57640ad492ac3339a9df4189a5b6ebfaa4fbbcb71d97
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 69bcd208a6d5477154a7c610282a165b36101fa97f322e21533ee739513b5f3f
- MD5 e07a1968b19d6142d2182e2e32fa29de
- SHA1 655dafb717ec2fea6dbf4b47c3c3bdd9c3ef3ff1
- SHA512 7d7aeec067acf49b0c4e61f5cbdc8cf56fae7b0b3b0d9dd6e412a5e8e18db86e31ab707fcf18b2ad275ef08f15f0da47569a39b461aff126dea437a920c349e9
- SSDEEP 6:7+/l9qSn1Kpg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKgnO:7+tQdqLiuWdYRmBEyPbk
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 5aefd55ab044a1e3eaea1032b5e2371922ff12a1f3ccb250a77cb81230bfadeb
- MD5 e773ba84a722ab17db18fdd27b8d35a7
- SHA1 3b4e808b8a68a3536bdb77173052b4e168bb23aa
- SHA512 8e975a17413c28e47fd1d11efdc5e6679324b614fde4e4a2c932203c52adac3c0f644aef055a20f21450552c5d4edc2ebbc5677aae978574d2a637867bb70aad
- SSDEEP 6:7+/l9mPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKaC/X:7+t0qLJdeWRmBEyPbYX
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/core.db
- Size 36KB
- SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
- MD5 045489a0639eee27bca52f48828cd93d
- SHA1 436e7966e7c019273c44faa4d8c5709b816dfda3
- SHA512 c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e
- SSDEEP 96:eMzKMilNJzt69l/mwICfPDKOjK0Eg745TN3PafDDKsgZK5AgZWgZK5cf/ShOqLE0:AuldjKiKvI45TNAKfUf4hI2q1UpKorKS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
- MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
- SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
- SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
- SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 4f34e3c6f6ddf1e8d5951c72aa37f6c53372ee8d0baf823d1005b806868dcff6
- MD5 efb924fd340ffae91c0ea973364f8fbe
- SHA1 65304997abe27e555bc880ff31229f65be28db13
- SHA512 80b75f8026136850385e7905cc9656366b080482ea82ba1d13882013c3133b1b2ce11b7769da14f4691712748413d402c8556f33a9594f85cd429ffee9f26f2e
- SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6M:TLiEq9zmzrfRmBEyPbP/P+/0Fl6kR7
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 3697f6ce769d68aa404782baae0f52913beb192e0b0faf34a419f9d65c2a54e0
- MD5 45e51465f7f94263a5fca2c14c3a52bb
- SHA1 490a20b7e3e9a0392314427e7ba9c3ee8c0af5ed
- SHA512 4498152e2fdddecd3ce9edd8d96b1f1b675c9307530a264d56fd7f7ee7d438c14d89d0901ebb651cf7dd3c449ebf41297790ed3900d245c3696175a729cc8a9e
- SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFlvI+/0Fl6kR7:TLopmzr0GSP/h1499FilFjR
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 78ad80de64736f96f82a21468f696335d7dc276a051c0e74decff3a2138b55a2
- MD5 eabd10bf2933d98c34fc045f3aadc023
- SHA1 a0849bc890e56e78f0d9604e9006b27b1b00acca
- SHA512 a8207c8f5a2b2b1894d87c7fc876623de2064863f4ca5f9214d760132d25057daf8d4a308b83f77d436bbc384cecc7dbadf4ee6e8d19a3cb514ed09022ddfc5c
- SSDEEP 12:TLIEU9zmzrfRmBEyPbP/qFiOLaOS/yAUbYUyWlZ9Isf49blqYFlvI+/0Fl6kR7:TLYpmzr0GSP/qsKaT6l3P499FilFjR
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 255783ec2e5ec3b501358f4dfdb40573e7153079595f4d1227fbb8c5a63b0601
- MD5 500f463904ee0f8c2402cf41fa38a7d0
- SHA1 06d696336c7e13da3c7e359507601cab5e4c832f
- SHA512 15016bed2052b4133a4716ec18925fcf05df251d648e303094acb9eb3a733e4c4b2df27ed97726769bd63b4bec530a2beb8bfd2caa8801f2eacbaf8803b75c3c
- SSDEEP 12:TL6uER9zmzrfRmBEyPbP/RFiOLaOS/yAUbYUyWlZ9Isf49blqYFlvI+/0Fl6kRv:TL6vpmzr0GSP/RsKaT6l3P499FilFj5
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef
- MD5 2238195eab25764b61f2d26ef6a720af
- SHA1 d366efd0cc079f0f87d23c630ec8d99f90541731
- SHA512 478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470
- SSDEEP 6:l9bNFlgls1WnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WS//:TLuEe9zmzrfRmBEyPbP/Wy
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 6555f82c26dc16f50249505e3a54e0a6c8cd453a1777f2e3677aa1b9ab2b5673
- MD5 bc57db75872a62c9f5420af98b21ff52
- SHA1 3a91da3fccd66e0c69847e4010c3f729b7219d6e
- SHA512 c4e8563cc3561468d5f82704b7e691f4c51bb0825da955aa30106516460091f6b337db602fee27f9334addf3c35446c9a1a67d83ed290f0e29a54a997033a9be
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 3df85a287b2352e1e1a0c2b3a8cf641c0fc8faf5e31450cc9a0aa48b67f457cf
- MD5 984e31a1f8d6772d866ae48d3c31e149
- SHA1 c4fa021c32877f4239b6394f6692813f0739677b
- SHA512 63f8c2a3149934af99a41a74095a5bb4131640b1e3c154f5d791d3fe7891d171927c2f02d43049beded9b3afe155f42ba50fe996884c49193f3351fdf859b147
- SSDEEP 6:7+/l9bFn1Gfg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKz:7+tpifqLiuWdYRmBEyPb4
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 6496cba75097ad62ccb1b081d00d25e2a9906e6bf3c62df6b8fd0bd85aa11a86
- MD5 5ff4821266812a11b9487e0b616f2fcb
- SHA1 1d3389fe6eba00d00ed1110de4c3a9dee4155943
- SHA512 3b46987c77b1901d53fb3724cd7b7ae71c34ea857b8a01a0f6b0f41fb0a48251f96cd1ec1bc6f230a89adca28ac59a5a04ead7419b5019a3de769b857d337a9c
- SSDEEP 6:7+/lJT/4Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK7:7+t9oqLJdeWRmBEyPb8
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 189464d5a05566ee6560c49caa882ece269288703b3f56ee3389a0ac35ac35b9
- MD5 ae3ad7f57801a72da9b43b6cb66fac55
- SHA1 228276fca99b8b5f1965e66194935920b07497bd
- SHA512 83193548b8e65cc15f95c40f6167d3a5e5ec81ee5cfc883b48188d153a0a5dde4493bd162575a2e1d4e0c6b3f5f4b5e61c0575f0e32d0a549f0438f057ddc933
- SSDEEP 6:7+/l9LYl4Pg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKM//k:7+tZYlwqLmqKRmBEyPb/k
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 f96cb0c6991bc99c564dff4b0f616040ed05abbd3f1f27821dc4aed62ce97bab
- MD5 e37b31273ac3b32621f1a67028d66a55
- SHA1 c506a80d29bba715169d71ccbdf3fab1987ab921
- SHA512 e8e6f017c8831b0453f647ddb6c19d395ea5dd454cb25713f369927c0a63ebd2ea5296f671c8fb2e83cfc1c692710ff0630bb28343ea3b836b8f760b32ebe86e
- SSDEEP 6:7+/l9gh7ng9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKvB:7+t+LqL8EA9zmzrfRmBEyPbyB
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 6e145674907534ca9b85f469b732638efe7f96b01260b4dfe05e66304b6457a0
- MD5 954d3132e783b64ccaf1774fea0a0983
- SHA1 f1e0265a1bb6486c934c07a92f738cb8e0e063d6
- SHA512 9371a99b14dab4275830eeefa073de0fd136987afa41bb36bb5a8b3bbb9d102f017d255903d400142d462f98877d7ab2df700d97fe5aefb10a119b3c95f531ce
- SSDEEP 24:7+tYsKaT6l3P499FilFjAqL6vpmzr0GSfe:7MYpa+lQ5yjAq2vArSfe
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/files/PersistedInstallation7068090997680715841tmp
- Size 90B
- SHA256 b7ad46ecf2b6f4654cf9c13d182ddabe654fb0c98b518e91798b87389a8a5ac8
- MD5 19730015776576f5cf68afc582c4b078
- SHA1 42c58d019b15f92d56155f1f5fe3b1c26b7d1c91
- SHA512 f6ed8e22aeb3c545d8b71d7eb2db2d6d165d7a506c75ba7445fa3e889eaf76975e5d3fe56c8212762dd77be727dcdc2d3276deaec84ac90e59df546837621419
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/files/PersistedInstallation8928050477044636279tmp
- Size 556B
- SHA256 f172ffb39e1ff2e1ba54b1c725937e81e67121a2ed94afce74f7f6d18ace2b6e
- MD5 dad8f1fdbda924de8de29eeb4956d530
- SHA1 1ba3ae0a04f1ac56ea0a5d3c7898691c69b03171
- SHA512 dbcd2e99b052a8661308fe3b8de18fbe29a14316c4028485962d71d924667e430286a1ec9620c7f0e8986b980000106dee689ad0a7b0537d26e5ec3d4cea3aae
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/log/log4j.txt
- Size 6KB
- SHA256 28110e436220f2d6c55097b780d6d313bed626eed36fd994d927efae7b39addd
- MD5 65b0a69162e3a09cd5313636ea7feb11
- SHA1 e180df7713cddd1bddfea736c6f38245e4c0f0c6
- SHA512 8c724ff4466c47a7bcb1092898f68bd4a7bad6e19bd1378e49689f97e890b159d7ebabc67f3331db8066018617e08d365fcd1dbc6e237698e93cdd4e205ff3f4
- SSDEEP 96:FkygFh7deM5xlygFh7deMUQtKFVXRcCBKFis7AygFh7deM50lygFh7deMUPt:Fwh7Rx1h78QtuXRlBBs7ch7B01h78Pt
- MD5 SHA1 SHA512 SSDEEP