Analysis

  • max time kernel
    20s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    10-10-2024 02:23

General

  • Target

    2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc.apk

  • Size

    3.6MB

  • MD5

    39fa2c58237de702fc3458251f358cab

  • SHA1

    16e4e5003046f5d07a0fb1eff0dad56d9ce53be3

  • SHA256

    2c193c9f18db13d13903e0cd15c90ff9c3623d2a0b3b74c4d9e2a173e87cc4dc

  • SHA512

    023b77900582d0b6629d587f7411ce5153124cd3870b9533cf9afc5304b874e4353d8dabb7adf8a199768992123e707bc6a87ee682463c3bdccecc8a060e7126

  • SSDEEP

    98304:kyHTjmHgJcyw+WoeX89z6Odp/9hBbW+te6lXhAyHmz:k+jmKcyPsXMl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4345

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    ca76bdc7e3ded377cdebd9c2efb7732c

    SHA1

    4734c62cba827a8e2803d40ee656966d24a2e3e2

    SHA256

    47d755797913829db8515a40d750f20bf38b7f92ee7fa593b49591154b97dc7a

    SHA512

    f603ffcd6c92c40bdedf28295c051da2984132d22f49d55275dcd521cd52f6681b15c962991cf7085f629d2f4e70daf09b3336aeb0500cd730b69f475c782097

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    4dfbf4c9bbf34520af0faab72fffb2f8

    SHA1

    a001d20e62ec844ea3037a59b12902710ee8832a

    SHA256

    17aefed42f493eaa33b864c69d93e67c9b40a2ee1afac22701486efa89ac6ec8

    SHA512

    8e7fe1a59e63bc585e48d2c5ff39f781bdd4b7593624e818b92a5f5383afb68d45c89840761acf37812ccea7301f33850e0cb67f34379301d82c4351db2dd6c7

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    9d7206a2e77535c8a2bf2dd6289d9712

    SHA1

    c284c5e3596cfef34a909ed73dbe07ae87ccb69e

    SHA256

    01429c0f8de9418115bee86ef0801a0d8d51c6a9f3576478c1cb1c37e6d62ca9

    SHA512

    4d84a83b7582751218a631678ed075358a2e342d07c1a48f4f9902303916199e9febb37453626071e92885d7fefb86f59e317240113c95986b96917185e1b462

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    c6e53f1407a4aeeba8393f7938b102b6

    SHA1

    d45a260d35e7efcb44313276071b61ca95953f12

    SHA256

    49269a9563880b457610f8dc85284551949d43e0a75b7d6dc169346b76b05833

    SHA512

    6ec64bb563f00c8b2e9e652fd22469b1370496a12ac5a428d880af3fc42f4dab973b35646343558d0af2bf5f41464bb1c632f6880202ba046cd69d0c9e5822cf

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    4490caf0edafb23afd9df4a5b7b64853

    SHA1

    4ef66ca81e379b52f961d98f839d39d97ac31eac

    SHA256

    57c48764dfba0dc374b4c49e222cb304cc016986afc6c90f0ad5e6144ad12e63

    SHA512

    f8d63b26f5a611fbaf468b841454456df859ea9f15d7e1fb4f41c90400612a8fda3ddd8c998ac53378e4bcd9ce67f3bcd1f880f342630cbed316e33146b033d6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    dacf71e49534d9ee605dbd33193418b3

    SHA1

    7d993746a8ddd3c57be93110114cd5ac2479a4e0

    SHA256

    7eaa619fd1710507de8b80a435a6440652bca5ca95994573406b7e7ad6f4eeca

    SHA512

    afd9c6d94f7ff52108b8e0628b1e7d672739af5d38bdb371e237367bb8c3f59051bce6d6f2aa297123c310a9bdf23c3cfa37b993b11878008d5ce015ab4b6cff

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    cd574948f295d9ad65c702e06daac8d2

    SHA1

    2cb6c7191fe1d2b1a42c712fa0c3ace4781edc8a

    SHA256

    258e5b9ef03476c50abde8d076d5b1b41b3911b453fb9af140af94b69bc7c597

    SHA512

    eacddf2421abb8faf369a6071fb0f86910f22f22c053d3ee400834c62b596d9be2846d561bf62bfd83b717ff2f62e5784f11044a967bca101fff570c1a9c3566

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    690e7d328a622b30c0549ac417a7944a

    SHA1

    674d55e7fcaadbba845d32b634314dd80c4f70ca

    SHA256

    99c82d16efa66580729f14f327b12cc8c680ac4ae3641a65080b5d3693b02929

    SHA512

    0eb48b2653d6c53dc77e641d9d358d17338686cc5554b83e8e5010cc3e6be86c12f44df32a441663a857178581f97000fa282b8b2d47127f385e75f125f5c6dc

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    f6118fb8c4fc222a228ea0c5ea2cfcca

    SHA1

    3ceadc1d872ac5282988120631000eb7a0d85017

    SHA256

    68e6e4f9bf8439a6f506a7a343e4f8b6746314471caf302dd2ff7cad1b37e64e

    SHA512

    0e12ca0e94b0bdb20e68f8d6b7161fd9d99a7d5acb221aa48fd2e82c29823e17d043d8d32cb46001e2e9660fada0628c0b50a33e893323d01fab31b5b40969a3

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    c4f138f5ecab4c9ffa28d0b2227fc5ba

    SHA1

    1633553f5d3a143d1992d9568bada3dedd5ad761

    SHA256

    3ce2fe7bc5eece014b30e1e9399729a0af333471b5b8fac18cdbed241691c6f8

    SHA512

    316a57932c64f7e7c380b179f9d1da0876b6c0877b2f3b8fdd32e0662ac3d726efd918852dabbc4f4a13303c52da02e9c77eef71d9588830b0008acfc4258472

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    3342312835702fd4dc172c4d46731375

    SHA1

    8a3fcb8df14a81b46ff589835cba6d1aa7100024

    SHA256

    955f59f7288cf55ec69d0ff6f261eee03b6686462a2eda8347189da86ffd256f

    SHA512

    5f1f56566eae5c8e051439571e218191d50a715b6b37aaa29540c0c2cd16aa83d208d1b89c7120f9a5749a70a2259b84d5c8cabb7126225c57a43ca03c643663

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    f085c56be6bb09e9671029ff5adea6bd

    SHA1

    ab7de488dbc2230dc1884db8dbf1304269d0b0e4

    SHA256

    e0b54d239b4eb782c44779317f0f21ff0a2e439cd77e9e720da104b7fb4401e2

    SHA512

    18fd78ae2a95ba5af46c3c8973a647f922985b3350c108c109af9090515dd3da37b54adf16642474cc9b166fa0bb1923c20516a1405b4dbe7605c403dca300e0

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    540f3a6e9c9efb00b38b17c4d65e289e

    SHA1

    8fb635c912690658773be8bad28a3d994b2ad519

    SHA256

    8b702f15b73faec4b75efacdce454fef50ffd8f533f5362ef8f89d4865c4b7dd

    SHA512

    fe263a585e69e04fe5ec9de7800afe3e10d82b684730dabaa42be50175765df7eeecda22bab3c5da297bb668d3d88477b13d467eee331ce0f2e93ce501039697

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    4ee75a47102973d98bd013a7347aaa9c

    SHA1

    aa19eafbf3b997b03b9f4e104ae1d4459152a9a9

    SHA256

    d6890469f03a4bf24787b1cd22ec4f3b3b7c64e725b475c1d61b264cf136ec8e

    SHA512

    ec40313eb6ae0d9ff13b386596bcc7b4b4aaa41cd44ae07e1240bad8916cd0a1429e0fafb2d66d7d4fd61ebd152b70238c13ea5a93bf0f35df58d6812fbb6bba

  • /data/data/com.systemservice/files/PersistedInstallation6170206355456171433tmp

    Filesize

    556B

    MD5

    66cd574a44e3dc7137b5c1176f350c52

    SHA1

    669d406c3c473f77093f49359448e399629f36fd

    SHA256

    3e272a5cc2cff8141853945d4284a6d23fa067d5ff871ca4b8712a81de88cd49

    SHA512

    9a2f74ffa3b42b56aa54030cccc49932a2b928aa9e5edd95a98456e2d5a476ecd1aada0ffd628fe250332aeb7fe90cebf3d3b0a48d4ac35358b03910edab53cd

  • /data/data/com.systemservice/files/PersistedInstallation6688929212795213002tmp

    Filesize

    90B

    MD5

    cd571a4f5dc3406352e4f4a8f7cd6833

    SHA1

    2c532b1c826781bca236fa4a1b4c47029032d66a

    SHA256

    9e758c7590cef9b0cba64e4925c3febc83300d49b15e8a9f22ab25fa23cc19bf

    SHA512

    eaa7180c9b4056e6c2eaca8658c328f8ca1b366d5afb732ce59b8eeae0c30dbfce61706deb82304b4a1d599cfbc8e14a29570fbf2626cfee721a908e4ce74890

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    918B

    MD5

    08cd4cb54f291b62ff3da675ae5a5d74

    SHA1

    7f22cbf9e4765f6859b0537f2890e737509fd75f

    SHA256

    c4a7b637ffaa4bd5c69506f4f6f5f3a1418efe5cbf0f4f12bd79ea220088f9be

    SHA512

    ecb291a20533a64e5acdfa6bacd7cab69280fe9f70f4efcbac913884f545f57575d6ad3049214cdcc7070ccdf007f27c70ddbff2e7a234109b689dbdfafa6233