2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc

Analysis

max time kernel
20s
max time network
132s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
10-10-2024 02:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc.apk
Size

3.6MB
MD5

39fa2c58237de702fc3458251f358cab
SHA1

16e4e5003046f5d07a0fb1eff0dad56d9ce53be3
SHA256

2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc
SHA512

023b77900582d0b6629d587f7411ce5153124cd3870b9533cf9afc5304b874e4353d8dabb7adf8a199768992123e707bc6a87ee682463c3bdccecc8a060e7126
SSDEEP

98304:kyHTjmHgJcyw+WoeX89z6Odp/9hBbW+te6lXhAyHmz:k+jmKcyPsXMl9jS+oSc

Score

7^/10

banker discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

com.systemservice

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

com.systemservice
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4345

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
ca76bdc7e3ded377cdebd9c2efb7732c

SHA1
4734c62cba827a8e2803d40ee656966d24a2e3e2

SHA256
47d755797913829db8515a40d750f20bf38b7f92ee7fa593b49591154b97dc7a

SHA512
f603ffcd6c92c40bdedf28295c051da2984132d22f49d55275dcd521cd52f6681b15c962991cf7085f629d2f4e70daf09b3336aeb0500cd730b69f475c782097

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
4dfbf4c9bbf34520af0faab72fffb2f8

SHA1
a001d20e62ec844ea3037a59b12902710ee8832a

SHA256
17aefed42f493eaa33b864c69d93e67c9b40a2ee1afac22701486efa89ac6ec8

SHA512
8e7fe1a59e63bc585e48d2c5ff39f781bdd4b7593624e818b92a5f5383afb68d45c89840761acf37812ccea7301f33850e0cb67f34379301d82c4351db2dd6c7

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
9d7206a2e77535c8a2bf2dd6289d9712

SHA1
c284c5e3596cfef34a909ed73dbe07ae87ccb69e

SHA256
01429c0f8de9418115bee86ef0801a0d8d51c6a9f3576478c1cb1c37e6d62ca9

SHA512
4d84a83b7582751218a631678ed075358a2e342d07c1a48f4f9902303916199e9febb37453626071e92885d7fefb86f59e317240113c95986b96917185e1b462

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
c6e53f1407a4aeeba8393f7938b102b6

SHA1
d45a260d35e7efcb44313276071b61ca95953f12

SHA256
49269a9563880b457610f8dc85284551949d43e0a75b7d6dc169346b76b05833

SHA512
6ec64bb563f00c8b2e9e652fd22469b1370496a12ac5a428d880af3fc42f4dab973b35646343558d0af2bf5f41464bb1c632f6880202ba046cd69d0c9e5822cf

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
62ad4a05cbdca7f47b3206b7dbda487f

SHA1
4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

SHA256
18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

SHA512
0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
4490caf0edafb23afd9df4a5b7b64853

SHA1
4ef66ca81e379b52f961d98f839d39d97ac31eac

SHA256
57c48764dfba0dc374b4c49e222cb304cc016986afc6c90f0ad5e6144ad12e63

SHA512
f8d63b26f5a611fbaf468b841454456df859ea9f15d7e1fb4f41c90400612a8fda3ddd8c998ac53378e4bcd9ce67f3bcd1f880f342630cbed316e33146b033d6

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
dacf71e49534d9ee605dbd33193418b3

SHA1
7d993746a8ddd3c57be93110114cd5ac2479a4e0

SHA256
7eaa619fd1710507de8b80a435a6440652bca5ca95994573406b7e7ad6f4eeca

SHA512
afd9c6d94f7ff52108b8e0628b1e7d672739af5d38bdb371e237367bb8c3f59051bce6d6f2aa297123c310a9bdf23c3cfa37b993b11878008d5ce015ab4b6cff

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
cd574948f295d9ad65c702e06daac8d2

SHA1
2cb6c7191fe1d2b1a42c712fa0c3ace4781edc8a

SHA256
258e5b9ef03476c50abde8d076d5b1b41b3911b453fb9af140af94b69bc7c597

SHA512
eacddf2421abb8faf369a6071fb0f86910f22f22c053d3ee400834c62b596d9be2846d561bf62bfd83b717ff2f62e5784f11044a967bca101fff570c1a9c3566

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
690e7d328a622b30c0549ac417a7944a

SHA1
674d55e7fcaadbba845d32b634314dd80c4f70ca

SHA256
99c82d16efa66580729f14f327b12cc8c680ac4ae3641a65080b5d3693b02929

SHA512
0eb48b2653d6c53dc77e641d9d358d17338686cc5554b83e8e5010cc3e6be86c12f44df32a441663a857178581f97000fa282b8b2d47127f385e75f125f5c6dc

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e3f13c7d7678604e5b293f6672bc0ed1

SHA1
b16c998ac7ca1db79cd4983b207a292ac1d96e21

SHA256
486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

SHA512
b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
f6118fb8c4fc222a228ea0c5ea2cfcca

SHA1
3ceadc1d872ac5282988120631000eb7a0d85017

SHA256
68e6e4f9bf8439a6f506a7a343e4f8b6746314471caf302dd2ff7cad1b37e64e

SHA512
0e12ca0e94b0bdb20e68f8d6b7161fd9d99a7d5acb221aa48fd2e82c29823e17d043d8d32cb46001e2e9660fada0628c0b50a33e893323d01fab31b5b40969a3

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
c4f138f5ecab4c9ffa28d0b2227fc5ba

SHA1
1633553f5d3a143d1992d9568bada3dedd5ad761

SHA256
3ce2fe7bc5eece014b30e1e9399729a0af333471b5b8fac18cdbed241691c6f8

SHA512
316a57932c64f7e7c380b179f9d1da0876b6c0877b2f3b8fdd32e0662ac3d726efd918852dabbc4f4a13303c52da02e9c77eef71d9588830b0008acfc4258472

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
3342312835702fd4dc172c4d46731375

SHA1
8a3fcb8df14a81b46ff589835cba6d1aa7100024

SHA256
955f59f7288cf55ec69d0ff6f261eee03b6686462a2eda8347189da86ffd256f

SHA512
5f1f56566eae5c8e051439571e218191d50a715b6b37aaa29540c0c2cd16aa83d208d1b89c7120f9a5749a70a2259b84d5c8cabb7126225c57a43ca03c643663

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
f085c56be6bb09e9671029ff5adea6bd

SHA1
ab7de488dbc2230dc1884db8dbf1304269d0b0e4

SHA256
e0b54d239b4eb782c44779317f0f21ff0a2e439cd77e9e720da104b7fb4401e2

SHA512
18fd78ae2a95ba5af46c3c8973a647f922985b3350c108c109af9090515dd3da37b54adf16642474cc9b166fa0bb1923c20516a1405b4dbe7605c403dca300e0

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
540f3a6e9c9efb00b38b17c4d65e289e

SHA1
8fb635c912690658773be8bad28a3d994b2ad519

SHA256
8b702f15b73faec4b75efacdce454fef50ffd8f533f5362ef8f89d4865c4b7dd

SHA512
fe263a585e69e04fe5ec9de7800afe3e10d82b684730dabaa42be50175765df7eeecda22bab3c5da297bb668d3d88477b13d467eee331ce0f2e93ce501039697

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
4ee75a47102973d98bd013a7347aaa9c

SHA1
aa19eafbf3b997b03b9f4e104ae1d4459152a9a9

SHA256
d6890469f03a4bf24787b1cd22ec4f3b3b7c64e725b475c1d61b264cf136ec8e

SHA512
ec40313eb6ae0d9ff13b386596bcc7b4b4aaa41cd44ae07e1240bad8916cd0a1429e0fafb2d66d7d4fd61ebd152b70238c13ea5a93bf0f35df58d6812fbb6bba

Download Submit
/data/data/com.systemservice/files/PersistedInstallation6170206355456171433tmp

Filesize
556B

MD5
66cd574a44e3dc7137b5c1176f350c52

SHA1
669d406c3c473f77093f49359448e399629f36fd

SHA256
3e272a5cc2cff8141853945d4284a6d23fa067d5ff871ca4b8712a81de88cd49

SHA512
9a2f74ffa3b42b56aa54030cccc49932a2b928aa9e5edd95a98456e2d5a476ecd1aada0ffd628fe250332aeb7fe90cebf3d3b0a48d4ac35358b03910edab53cd

Download Submit
/data/data/com.systemservice/files/PersistedInstallation6688929212795213002tmp

Filesize
90B

MD5
cd571a4f5dc3406352e4f4a8f7cd6833

SHA1
2c532b1c826781bca236fa4a1b4c47029032d66a

SHA256
9e758c7590cef9b0cba64e4925c3febc83300d49b15e8a9f22ab25fa23cc19bf

SHA512
eaa7180c9b4056e6c2eaca8658c328f8ca1b366d5afb732ce59b8eeae0c30dbfce61706deb82304b4a1d599cfbc8e14a29570fbf2626cfee721a908e4ce74890

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
918B

MD5
08cd4cb54f291b62ff3da675ae5a5d74

SHA1
7f22cbf9e4765f6859b0537f2890e737509fd75f

SHA256
c4a7b637ffaa4bd5c69506f4f6f5f3a1418efe5cbf0f4f12bd79ea220088f9be

SHA512
ecb291a20533a64e5acdfa6bacd7cab69280fe9f70f4efcbac913884f545f57575d6ad3049214cdcc7070ccdf007f27c70ddbff2e7a234109b689dbdfafa6233

Download Submit