Analysis

  • max time kernel
    18s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    14-10-2024 02:24

General

  • Target

    5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb.apk

  • Size

    3.6MB

  • MD5

    d836feab9d4bf3c6cf086bdc14724c8b

  • SHA1

    c837cf7b181679a0081165e5fe4aa0eb94f748f8

  • SHA256

    5d2ff3a0a3820997a9929df3c53768079a7b4515f28ec4dc87dcf646a543d8fb

  • SHA512

    8c7801c5f1d8dfda39e0c65bdbea83feb8f217b41b69a245d01dd9e983a6a357c8b0b2be79123bed07e638655fc66ef3a093cc01be68c696ecfea5ab6c692dad

  • SSDEEP

    98304:5s13ZL3Vf6JqeomaMDmQZ75ub8GoRJ6Odp/9hBbW+te6lXhAyHzwI:eTLVf6JumaMiQVWovl9jS+oS4I

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4346

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    1e6b40f901b92f147e1a53df91f5b2f5

    SHA1

    0b029f262eca1f31aa466c71af9c68bfb6d0118d

    SHA256

    2e54b85f2543e985c14b0bc32d884759c6685f0652497f950d4b995f3a5af2c3

    SHA512

    e5e17a5d99e9fd909a630c771a20fd0e4221cb69a00c002e883e61bb79436cde5428833a0e36d6957c01065c217034b325aa30d2217b8c62dee7758c5e92555b

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    22e43547faef21277996c55dcb14056a

    SHA1

    248d94c1f84cb52332ba267609aa7d22935a59ca

    SHA256

    4d232aad8ac0be05f1388b9c2dfcee2fc1735296d98f0da236ae0687c64ab534

    SHA512

    9c5ab8fff7aec75e936d1f331b937461c5118338c65c2d756bf2e6417b903fd930a6a31f14196c0696c2859e04c583890acd7325ea50fc9e4fc7a7532bb3c3b0

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    e9e0de584050e80b52e4fc34dd3433b1

    SHA1

    66aeb9c4547e0e1574e870679408343038334123

    SHA256

    c7fcbfcfbe2174f5a2c23c77dbcf1d72ff154184bd4016ff375b72661961cb6b

    SHA512

    6e288f6087cdf51b5ec3787702213b1f13684b5ae37ba3d7adf960f95c35ffe567ba247066a17881df20afde1705eed0c735ac19b92329827919b4b283efcd52

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    c429405c8a26be2ebca4dc4861a971f4

    SHA1

    34664c754b1870fdedf208781ffbf3851b7fbc33

    SHA256

    6285fee68e8ee1b053665ff7e828a51044bee1089757ef2988aad4992f5a8edc

    SHA512

    2211e886ddea3ca157fa56ee68a62f6f46f7fa9dceed334e6418f7bc01ab6ce2bb8595af9aac85ba3fd756bc8bb2fed77eb0e76bb0021734779dbc295398939e

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    11094def90bc81bdb9481f70e4bb9308

    SHA1

    e2dd19bf4be397240e897b8ed8a6bab63198ddae

    SHA256

    b70ccb98622954025fb2c2c194717ca8a7ae8b3f8025e27b107faee50d726501

    SHA512

    794ffdbab2481f78149d7e49786fa5e11df6b0c6b78c1c5b2ce0a66dff6dfcc0514524dd685ab13a4783f8c23dcd884d071d49b80c4c0bcef844c03d343fd42d

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    301e24c528a4e66b725bfbe660108618

    SHA1

    157d662af320ba94ad90c447f0590417a1350da0

    SHA256

    f8c24aae60861b457c263e38af7f8049c9e53a9a0146a13fe10e6852dde07b51

    SHA512

    7fe1a614dd710e13de4fd7b164258d8dc20dad10efc36e1abb2896441a502be0b936461470cc9660f257e3bf5ed3b9e63895afe899dd12a8e2190aa5f8f8644d

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    69b3154ac4724ce0efb1fa0788b4f677

    SHA1

    ba3bfde2b230fbdf466514d2d63e610ad628e2f1

    SHA256

    0885dd51062a5d7f170705b93a8e4049415d424cf60bcd29d9cd31b09f05015f

    SHA512

    48da1944a0754d3e7323628a3f86993f3fc2837ce7606528eb000f92be06bef13377db81cfe6ecbfaa9b81ffbf0b02c3a9d27b0c01ed9aafc88abbbaf0d09077

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    55fcc5a384af2c8b26601a5dc1c8aa31

    SHA1

    ba52d8240eeec289e8f421e8df7550d7bd05e2dd

    SHA256

    7647702cac197d44ab1d3ce8dcb69f7d8841ebdc2a8b3f0b8742b4c3de87ec81

    SHA512

    40db5f79485db59f0372cfddc0bc415dc5d068abc3f3e3fb2d5e383240741352a2da3405129b214e27dac7702c3a831facd33732289264bcfadb86176920ef08

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    93bd07621b8303575cef4cca89e196e1

    SHA1

    3dbbdafb3c43ca7b0971775e383a0482cb642f96

    SHA256

    855d050ad0094ea8b9ed7bdecf4290414de2efee308feb5d91a4ad3fa32b3af3

    SHA512

    01694aadc2e0097e4e3a9e2a2cc555af9e5a2a1c9fbe75506f28ffee3573b9661b0949cd3497d3696364fd9c8cbd70053b60ce6a8e7529a42f01c727341f44cf

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    c09e60c4cc84bf5f263109d60473a38c

    SHA1

    5d65c44f2c70ccaa09c8d07268ad3bbaee729af6

    SHA256

    68015359b5ce496ee12f0b740a8a81c501c50fa2980bfac8838d80bf5ed1f345

    SHA512

    6f59beb2625d4c222f60b5f09ddc472bfd16cd66f960b7bac49b56887829ea5f853e322fa21a875e422c1becd9eb3b6583268903406fd958c43b7993c692a848

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    d736ad947c7b94651c9d7df754cb3d54

    SHA1

    4586967d63a56e10c7d91024be1c8f62aad86041

    SHA256

    dae8b4c81544b089862bd58f7a98d75dc5c9cb4b7d5e7f18c22114876e0decd8

    SHA512

    1de8784d440b8301530a7a9e343113db9692ad7ff52c9296a8d6f4e9dc6ea8fcadc96469f6a7d862e86e5ac4715213ef836132f30946488391b7c679c34fd499

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    565f128090b6d8bf279eddd8a269f96e

    SHA1

    5cd0cc80bb0ce1b15d4b5890dbb8f4f79dd4d4e9

    SHA256

    5535ebc190988c5c7541f7bbc3edd3e5b3166bca6ba7fab780443cded2870706

    SHA512

    fc5d6329e2cb1a743634f8b4d534f5a7bff67df21097a58aeda5cbfdf88a9f930c6fd73e100dfbeb078a0bc1531e516b7a36f0ea758bc2201e437fd9a6575dfe

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    571c1f317b5b125c36f26f9a7ab5fdbe

    SHA1

    a63c964e13d50659f8fb71e5b26e0dbbadaa4963

    SHA256

    7efd0cac264b8cc24c3b04037381b60ec59895feb0a93762e5e979dfc1b11bd7

    SHA512

    4de82cbb47deffbd80b4320f0fc89930f51896922a2c8aa9ae0246c5dd1358121aba1cf07480c8669a70beca7942cd2332fad60bb33763be5d48a7196051b1e0

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    7bd418843eb8ff05fbfade74c7f81d4e

    SHA1

    3b9181063395192cc84eb17fec7ee8c28f0f7084

    SHA256

    154afed0fefe254bf635e8f05e3353c56404653def1f2bc734f3c9afdede276c

    SHA512

    3d48b9a40eaf0364eb444b15791e7d4b2d74ae77f65a3163e7870c3071da10e687d2834998819671188003d6a100c863fddd752b184b048f7f5c1d3b41055b2d

  • /data/data/com.systemservice/files/PersistedInstallation1938020140300566432tmp

    Filesize

    556B

    MD5

    e93ee3c78801ce8c93db3d17a2f52cff

    SHA1

    d111942859813ae3d56166efbaea906e5ca2349b

    SHA256

    ebe66ad6c77f3c9914ddbfa3828f48fd8638e067c7ff2fbccb98c13c83e9465c

    SHA512

    3de1746f19718da4430ecd5d3243acc7154bb03c8324690ca53b08192be07ee8f0108f126950e3dbdc553543b8f14d56b2245ed822e963f76f22f0bc508af68f

  • /data/data/com.systemservice/files/PersistedInstallation8574180373123795536tmp

    Filesize

    90B

    MD5

    ceb23ee548f71e7780485aeacd783e64

    SHA1

    94cd1c62e206dd258bd10a8f8410fe60f64da136

    SHA256

    001fbd0feeab1d17e05ef70580575196db9913f36d67367ba9a8f40add7fe739

    SHA512

    9f0af04e5751d3d41c675959605c039b67d9cd45b4d39c369370f1a1122e272994c76307c20f6154e117bf057b59e2af68a59c6a7f79a6d3c0e204b94fb62477

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    9a9c7ce8372f0ad6ab49e577c979237e

    SHA1

    358d17e02fc5e4f4b6e33f7f7db5fb40088c630a

    SHA256

    dba1453903264f3599bc36128f1cf68d742e22e844f0d148a60c3432c9e64688

    SHA512

    cb6e9368a82c25e56b610f3ea9ba9a9ce53e8a529a3c534518eae159e86d52c6454d9c2a320f12de56238ab551bc5c4f0a18f00d15345bf14f17e779f8fd8721