Analysis
- max time kernel
4s - max time network
137s - platform
android_x64 - resource
android-x64-20240624-en - resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system - submitted
08/10/2024, 02:39
Behavioral task
behavioral1
Sample
5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
Resource
android-x86-arm-20240910-en
7 signatures
150 seconds
General
- Target 5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
- Size 3.6MB
- Sample241008-c5k2davdnl
- SHA256 5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
- MD5 d836feab9d4bf3c6cf086bdc14724c8b
- SHA1 c837cf7b181679a0081165e5fe4aa0eb94f748f8
- SHA512 8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad
- SSDEEP 98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
- Size 12KB
- SHA256 885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
- MD5 ea628e04765adaf4238a5dcdff4bbd51
- SHA1 a801947619ea8c368efe9c006a324dc6339ac60b
- SHA512 c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe
- SSDEEP 6:l9bNFlLdrlOERX4PBX4ogLugMBX4suuKTqiOw2:TLJdTRmBEyPbsOw2
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 d4b48b1187487d808b0b52cf9035df861bad76f874b24cf84c59c2e50c33b00d
- MD5 646d1cbcd9453bb009e441dd0d8c752b
- SHA1 5841ab3f01dd1bdbe3ea1ff52e5a3f81395d7e01
- SHA512 1156e36c2309ae480bdd43fa3f2ddb234782a602dd97e098ec66de85b184b7284a7fba5642b1f8984073428542a8bae49867cf5e5455bf199fa698812a8c06d1
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 9ac2396c73f99b9914a462e0ad3329fd1e6591fac726c26441be29be30ac0e50
- MD5 d0cb6ff9424ac5c0009eeff155fcb654
- SHA1 20165cbf24b7aa0a548d8421b18d844a3c971a93
- SHA512 ff655625af6b65dd4727b31c3175e4e71371cc2c65697c6cadb5c2e2326d41968f3da6ca4513ee25f877fe9098670dacf2afc870a900f1579d685d4199594f2a
- SSDEEP 6:7+/l96An1sg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK6pI:7+twJqLiuWdwRmBEyPbLpI
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 d2c98a5fdef91476ca6caae268e3e19159f0877a03cddf3e72beb6aaeff362ce
- MD5 be9fd8535a8aac38602e8258f2e52322
- SHA1 e99843ddeca0fe34ef4ec7958f1cc08013cc957f
- SHA512 a853d39d05f9d1596d54b94e673cb4274426ad87d7d16ac93257a600ff727780e934b976dc95c91f64541fadcba46abf068b6dcdb636c0705e3180f77f93b7df
- SSDEEP 6:/llgPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKQs//N:t6qLJdTRmBEyPbON
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/core.db
- Size 36KB
- SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
- MD5 045489a0639eee27bca52f48828cd93d
- SHA1 436e7966e7c019273c44faa4d8c5709b816dfda3
- SHA512 c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e
- SSDEEP 96:eMzKMilNJzt69l/mwICfPDKOjK0Eg745TN3PafDDKsgZK5AgZWgZK5cf/ShOqLE0:AuldjKiKvI45TNAKfUf4hI2q1UpKorKS
- MD5 SHA1 SHA512 SSDEEP