5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb

Analysis

max time kernel
17s
max time network
157s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
12-10-2024 02:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk
Size

3.6MB
MD5

d836feab9d4bf3c6cf086bdc14724c8b
SHA1

c837cf7b181679a0081165e5fe4aa0eb94f748f8
SHA256

5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb
SHA512

8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad
SSDEEP

98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I

Score

7^/10

banker discovery persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001
Acquires the wake lock 1 IoCs

Processes:

com.systemservice

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
discovery

System Network Connections Discovery
T1421

Processes:

com.systemservice

description ioc process

Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.systemservice
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.systemservice

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.systemservice

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

description	ioc	process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5066

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
f77cac461d384c19065acacc38fc9936

SHA1
e28586acac270aeda2dc1a67f1e8a3ff95d86894

SHA256
89d86b751e139f86d44f39005d3a58f2c823d60821812ac4c523a054d5b7ee65

SHA512
298892728737912e0d492cf0a38355826031cbe04e0cfa345cd03aae00890e1e2c8d0815c09c8d12f8359096967f9052b57b547b3d9794e4a84c0ed8b00c8f6d

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
dd25b53ae3119589659d9228479972b2

SHA1
d3fa88d57814967d0b7b0be5cfee1c59c6f63679

SHA256
7e7a0ea1345542b78bf52c69b32e66e8c7c80591eb395980647afb1201e5c73f

SHA512
5a850a3060ac3867944fa792281b0330a4356338e00dbb0b433d3440a9ade22e444ed6b35e3ac07e5729ed8bc31f12bfd9480e991de6b0582bda3ceb3a88a65c

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
48bf2c3d05eed20e40a35ec94d351178

SHA1
bb2c707d90902f9a148c1fcd078c476ea9a9652b

SHA256
a488f09a36405d21a583eadbe0cd73487f68aad11e478df70014b4bc4e445053

SHA512
92dc088d7de75324b5afd28b85896e73c532b9d0b1e84d1aba44903f5ee2ba9b114d6468e112c608ebd8841305f244223928234a02611bca47574910a55d2b23

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
80b3d901bcb0384ccc744f5d11804b0b

SHA1
c5320919db6393b1e024e2da38492a1589d8cc1e

SHA256
6bd8659dd17db45379c61b5009f9cf9b479671ea99c89014cde9420d61b5f3de

SHA512
acd8c1d0b8b8117ca5a924ebf7c29a41d876a71d0d20a71aa006a13e70a8401212f59cf8053d6537d9aaebd20e5162cd433ff826b405330bcfa2e059f636c5fe

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f79d0afe99eb7605e416d500fa88de39

SHA1
acaebb2cb4a29bd879e8d16f7006ed9d115bfd41

SHA256
c73f6c329f10431ac0274688c13354d976123a5d28c2aeae1aa686329154851f

SHA512
07800bbd7cfec3085457874dbacf4faca86ac715d109887a50dcd95635e2b4d733dceaed9cbc62a2e890dc94bfb02fbc67ef1e692b3c07f7962a58e95f24f3a2

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
41b8d1419b4dcec542990b9711f84ca8

SHA1
d2826127d23821aa8c05975bbbb76ae0ed008d06

SHA256
88d45f670c7eeb7d350d8765234be710d94e699fb3310f29387fd991f1d560d2

SHA512
09b3bd18af8362c4794cacb8af123e05bba0826cf1948d752eb382e36fedef0e44c0dfc7d7dc73e24a6d076eac64e89d868e9bd563488432277935dd632bfd11

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5654bd47c38a42120b7473430cc79d99

SHA1
6a8361685b01446f688d310832dd597237a1d01b

SHA256
1ec0b16470d5c34750c4960fa63e9fcdb7986590f7b07a6f1ab6a23319d41995

SHA512
cb6bb0c1c2b8e5eb5ec3e1aa14199cd40cd64c2d56f58bb540018e2889e3612ff196c4ec01359d437c25699f0c8f667b6300def9a964d034259ec0e17cb6b0f3

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
52ee690ba9590492adff56d46b9ac537

SHA1
9ff897f4c721ba21e514bb0a601369d6c0711972

SHA256
bf0114dac0969ab321c5c5ee3d7d49ff76ec6f693252c370bb75b20af5aca093

SHA512
9af275f7bbb6b6a08dbf9da5e05639d190421a960f34ccf2e75609b17804b90680270d5acf85813a18d21ee646a1c9e74e053731b00302b075d216fae0e39d20

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f871ff700510a56a54fdd56bc41b7541

SHA1
481548c8bc3254a00f497140278597b915460c48

SHA256
ab18f3bb605f3cbedaffc75b2d5a03fe21ab82179d268331ea907bdcd32c23fa

SHA512
12e3d348199566e137f02b63e4c8b4c722aa086128c0f1cea883d512075b8573d40d889d2b4452d9e3d9c02f523716da9775d93750c242a1a2d9e62f50f60fc5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
c57a1df85dcc95405db9e3bb69fd6caa

SHA1
f9d6438fdfc963a762d56209e1fc3a539da53728

SHA256
da9d83c6724f30f85d9e27327e8f8dabe1f929a03b1bc859f795a889970974c8

SHA512
eb906356eea3acdf1a550cea6ced0f7a2e2e0f85b2e34d3cdc42a814c08c07ac5e3d8d695a30c0b74b08500a67de7a902f912767668343cda88b0a50da18a42a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
f9c69ed4f53d0cfda846818a2b6984ee

SHA1
7a380fb400a3bbbbd9f2896ccc8e6d1546d29fc9

SHA256
25de131b1bf716ca1cec921818edeb6fc4ef1cc2d329227fbedb757d1cbee30d

SHA512
cfedadbfc7f5b33789ac66b61643836f9bd642a6c56487bcdcb5fc2eaa8198974e48135554cbc18bfa68e2140a357fe56ccba8bd826b20ec64d61fb142b5e536

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
581010ce8864fb0df3855d4cce323f6c

SHA1
a4b77f6f0819f4e93b000839cf232582fc60197b

SHA256
db5ad2c5a1563c5b480f31da5122b97556628d39d48a693c54b918587017a46f

SHA512
5ca0f571b6d7872d942add6e02aa048f3449cca661b20ed3edb11b83854adece1f9737502a4ab6e7f0f23c9768ae2e2c312221f90541a69c42a7fac9977795b9

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
7ec67e74ce2169843aba456ce12e588e

SHA1
c5847333144c50e1b79e416e21b9a935abae3e51

SHA256
0d06dce8d8057dd059011e39d2749280bb53c1ef08cc22741bead0f6c33b95a6

SHA512
a68aa3112ab31efa170cd51708c487c95b8227fca144096ba8e91eddb6d9a38b578bf59db103df742ab2c83ef5316685d7cda72fe151cb112f65e8a717e3a39c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
0d5d45b6d2b41baaea8d7185995831a9

SHA1
80167d844b2ddf2e1f820a92cab8766464359762

SHA256
dd9945c4de4d0cc3864a977ee250a0e6f325658ff83319afb655dce15579e740

SHA512
70e490d4f9678d0c41aefc2d4cd69a8d3216492d059df4ea12e720ae3605e27891039e7946b0e6ca15e239d0ac9ba23b669153d2a99c489ec85b9954152a3f94

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
25af6489736c22b9b2b204b5edf150a8

SHA1
3bc6534ef891a74a1aa2b8bea6894c41052949f2

SHA256
da7de10414adec8f3ebbd2a54198e5fb8b666b406019c241d34625aa5e70341a

SHA512
e5cb3f7bce9e8f983950a4b968fb9e3dae96ff8758818630b5bacd07f08d0a85101e96c35de3a511ac91beef043ea25f652ee3d92bbc92acdcfc813bfd7ba149

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2687748230458060166tmp

Filesize
554B

MD5
533accfe867f80df2c95713e08e42802

SHA1
9fc357696d88c5a1abc3432cc4bb2908e2ebf50b

SHA256
b0dbbdedacb74c6a5d600a2ba58e4175b38c2775cafee9e22d7180f8193cd202

SHA512
1a10d207b1f95543af9519bdab495cea1ea52fbea5d26da4319fc88e20c56f43c5fac9952a2a2977137e69cf65deb49debac3367880515e17c9b86eb8e430388

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2851739750592590998tmp

Filesize
90B

MD5
8e49e329e0447659e247b55e0ce41813

SHA1
98a17d2dac7230d91127b242cee99d2551c1e182

SHA256
7c16b6ed39746433e5789423975b6cc37836d966cc928648aacdbe78230da60f

SHA512
b85dec9da13bb4af19f626aeebe2ace9d23a788061ed8a24fc295b3c22d12bfdd68b9e7043b9324845e0bdff080a693be84569b4a1690c8845f9cd87e3c7cfe1

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
3KB

MD5
aed9ba110f7cfba258f6f0068dd01d08

SHA1
544d5212fa7e0dc232f00a67aebf60a26130ab58

SHA256
03ce330ca7f6b1c86fc138c701b21996cc25997fe66fb26a10fdf81b63e70858

SHA512
b39fc1c9db8337b616786e1d882c87ddf903c43c4fa8392933e4f96b40f44b8527a007fdf846dd71777c13ad0b6851cdf6e7245dfb5e0425f120a6c92bb69669

Download Submit