5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb

Analysis

max time kernel
18s
max time network
132s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
07-10-2024 02:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
Size

3.6MB
MD5

d836feab9d4bf3c6cf086bdc14724c8b
SHA1

c837cf7b181679a0081165e5fe4aa0eb94f748f8
SHA256

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
SHA512

8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad
SSDEEP

98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I

Score

7^/10

banker discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

com.systemservice
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4317

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
1c0631f54c381e55fba94d535c3c003e

SHA1
79e6eef2ae28841236b63c259a8e1109b25f1464

SHA256
6a44d7dc38cd40898f1a72117f4d8e18935e9cc652668568c39f51d22a316fb7

SHA512
8858a9df869052d998f10fe4a480a41aadd0c3868c50567d46eb01f0e06ef2edd18b2b126942a9fc030033eecb1797a6c965c6e8f26db6f5ef272a594d5e5704

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
dd1f080fd1a05529e3c4f668b77136bc

SHA1
985fb2a759e3f9c2749a0eab4f0e1298f29729c9

SHA256
4e7636b1c5a3299a5f068112ae35532d85afdef889e541dc6b52bed6cb809080

SHA512
f138f00cd26627815c46507ee5beb0861f150386ea9dbb6e5f074f6df8933e6b3fee0ff35db84e7267896f122f5ef00aaaa45fcb3c27dfb3667123d046929b94

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
04dcca75cfa194f2e05aa6e0d96cd4a6

SHA1
047d3f27cb6a3bd94512953728fd1591bdd520c7

SHA256
1d51dc064c673283b4caee3c292aedf33859048b655afefeb04f294d4a3d4be0

SHA512
f9a65056d9a58dbf62ced5237e5a15265e39be12da9504d88f8e4b468178486a9ba72b8ec43602ad9745cce25253480509474cad5eace28c95cde3c5d67f4771

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
fdbdedfb7ed2e2080531c521a99c2843

SHA1
f30dec1bf0249b6d069b4dd9f506b1badc8c2d26

SHA256
13ddd2f8dde498a6db23140cf892209067a60709604c4923660e188e22e333e5

SHA512
ea44574f507ccb1d182b5bf1d67c483f325403f8c5e74a224431bc826a1c0a4ed53ae17051875308a2485b118fdc759ab8ae690b353a47353974ee4822da9354

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
62ad4a05cbdca7f47b3206b7dbda487f

SHA1
4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

SHA256
18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

SHA512
0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2cfe11ee2cbb0279da88acec8f9ed509

SHA1
6f4c29f2a6829193e64156c38529d5b1efba6e8a

SHA256
186b5f47bff5dd3bac977bf95580acaa7c62c91daa66be3be07d3bcef1db38c5

SHA512
2e2b67537910a37c2b55d338537e950cbc63f4b1c29abe2f4a5235ab539be35fa29d7f21d41f3367e2187f42e16cd98f27f533def0e5b97361219cb5edda95ed

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a018b2bbfbebaf764b8fd77592b25804

SHA1
5c193ff2d5cdb22520f90290c865077d690e98ed

SHA256
b95fb16760bc894a369620c6d4bc60b7900e946f624fe5776d8729fbab2fa022

SHA512
9fa85a4a54b507e394dd3de286574ba5aa62fc127b41a1ffe64073ee88222ae41c2bfaec2a1bf5fdb43b1692476205ef13bb497dbae90630cf516703110e1ce1

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
04d3e73228119d942f23603b26397c06

SHA1
56a52847838c797f3adaed453d1cbf4b5988be05

SHA256
8a79a0c03d9f9994706952b76116e651a59f1b4689707e9269e11da701203508

SHA512
595c8dff766c28c1b89427dc001d22b5270110c6a2225c1cb9cd35d9455654fbf9ca01ed44d52954d3bc51d6dd1ccdf5a87b4c137c37b7e83dca32bb0332ca0e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
b51b9af13963162f3db4abcb417d2030

SHA1
226d57d6f16e234a165ca70e9fb8f70773ab301b

SHA256
26b13572527630f1b0dec3e853c16bfddd72761754dd092a92734233363fec40

SHA512
c578f28a12f31c0998b1b543d70d7b67f8900ebcf38a2be1be38da0bf6e2c4a39d210a2191344b5f800bd6dd8659576d86fe20825b94f1f446cfb5629ccb18cd

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e3f13c7d7678604e5b293f6672bc0ed1

SHA1
b16c998ac7ca1db79cd4983b207a292ac1d96e21

SHA256
486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

SHA512
b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
521513cf2fe80c850163d18d95ec16c6

SHA1
0040c38da2adab1a4d829e812cd1dd4cbd57a79d

SHA256
8d25bb6d9885d7cbfde092bd9c9e372314502275cf2ae0fdafb6a5c05858e39c

SHA512
64bcb90b5b0db98b17b81bdee22dc07e5f18535c4711cf0fcbcec8de514cb69ac434c00220c2bdd012631d9470c9ede3127106b4b9d51879a16c2e9c84d070be

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
5901753bb528ad6ea0bcc1c1d44b6a60

SHA1
94074d231b86e4925d6cebc664c6666bc2aa729d

SHA256
ea99c902cd4e5f6dde07f4e9ef40bc30e0a0e1a97dc85119673ddd5038350fc7

SHA512
482bf5d0d8c545bf07a3852c528a850f494912f2772624b13df952e2ce21bf0e7c018b4014fc7cdbb8c4e6e5e1efc7db897eae50acf243181fffd7fdff73978b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
34921d0e59de0d0ca365a577be08c05f

SHA1
409de2eb8932c1ea27b2363d7cec84467b8b469f

SHA256
f74048cabc5791ade251110a375bca8ea46968db099cef25fddfc8cf731c9c1d

SHA512
d674ae85bb482a0af8b977f39354728093df9c73f46b076470b3a885e33326b336dc9893289df389b8ea565cdd55a2035c6de7836db1a9ed1e7ff08b2c5a8968

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
6f771ea9328704be40eb8d81ad45aa22

SHA1
ed072bdac9d7aa49b43f1e19d0f695291677a7bf

SHA256
9829987add4296452f11e3e946a79e6a119b263d1fd20079df664f4329c856d7

SHA512
6c4011d0e79fb76c6cefd35df0f3275c7eadc8f7b4765e2467806d91d2203eda3472c1a468fbe1b901819468f5a8077c2ce4c314c3d2c3fcb388805c5f27a043

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
5236fb333ccee3044900ba651ba425b9

SHA1
cc512787dffb6e8d594f2b56fff5f3ff9ae3951b

SHA256
3aad78fb4b6d8abb6a8fc71c1e4956279792b90c71040332edea73707ae72889

SHA512
5dd6ea927c2ba66c703183c5afe96db0d54fd5e089f99570c1a760b3e177a40cb8bf2aee2c0ed13e855e8589c5aefbb8369876bd5abc1ec56342a7aeda7b2dbd

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
1d1ca5f38b54b36d98cb1b48c0890546

SHA1
5c7721be3aaf18234aa3a93036d570af66ec9465

SHA256
94d77acf1b87c6e7a8f5e4921eef71d7ebbc95eac5d87816f27405a851a46a36

SHA512
ed6fed1e797b89f637de7fb2a7d902200165b512c7e4628bd5296d882ff6db71dda66161cc62af3be41b5de589f8d3433b42ed0e3ca273e98bca310a4980c56f

Download Submit
/data/data/com.systemservice/files/PersistedInstallation4878689707175455689tmp

Filesize
90B

MD5
490540ccc565e469655ddd4b3fc1abe4

SHA1
d12ad402002b49aae06c41fe6dee8200898b3016

SHA256
2b121fa0ffbdf4b441effc091611aa88c7e2f348dc4c7c43cb774a14bfc0f961

SHA512
c8268e282898adf44846402fb9ff3c57a3a7ae147c41a7c0a427d03ba5c3e5646a7b915aaf4b878fc2c6f6cbfd0cb6a3b4654605af171d038a594204c6c8fb13

Download Submit
/data/data/com.systemservice/files/PersistedInstallation7418898570387411305tmp

Filesize
555B

MD5
2b0de24174206243ccc195ee6f8754e1

SHA1
acaf054d243376070f598fb8513db961945a2366

SHA256
3abff96ba2e01c536ed86a775ecde60972f1e0fb52f0d0844911549bb40e6cdd

SHA512
564b76d684509a84637dcbb361f22d74e7132c68c370257b2cb3dad8022fe536fb6565643446d39432b5ad534b45e739fdf2214f0b8ac0378c1c5f9632aa45a8

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
95c803dd00dcfbeeda3524b3b6d31341

SHA1
d205b9472b605c2a170eae89d972d3a70d5d06a7

SHA256
161d25d44159285bb8e9c6c49fde6d4165a92fd4a5671e70dc86b18d03acd11c

SHA512
52615b365463dcecebaf90936a4116cde033c7c2f4e77d815315d44fef07412904d5bd5dc33b0eb836d6f1955b03fab73580e8909e4c65a5dc9cec49995b7cce

Download Submit