Analysis
- max time kernel
4s - max time network
138s - platform
android_x64 - resource
android-x64-20240624-en - resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system - submitted
17/10/2024, 02:19
Behavioral task
behavioral1
Sample
92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Resource
android-x86-arm-20240624-en
9 signatures
150 seconds
General
- Target 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
- Size 3.6MB
- Sample241017-cr55ds1aql
- SHA256 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
- MD5 0366ae0abf0ada8aed90322bfe07dfd5
- SHA1 2f0779ce64f02944e87674745cb446c5bc620607
- SHA512 52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
- SSDEEP 98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
- Size 12KB
- SHA256 885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
- MD5 ea628e04765adaf4238a5dcdff4bbd51
- SHA1 a801947619ea8c368efe9c006a324dc6339ac60b
- SHA512 c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe
- SSDEEP 6:l9bNFlLdrlOERX4PBX4ogLugMBX4suuKTqiOw2:TLJdTRmBEyPbsOw2
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 4fe4cbc44f6a21c9c8b6a1a204cbf04df0d5f26ca224af22056081b8096ec2d2
- MD5 52af5b8e4b77ae074a75f8284aee8f97
- SHA1 3240087758fe44d5ab5d3aea61abe02fa189903c
- SHA512 3361e14afae0d6da74141606afe77d0d22d2ee44d6cdea1d0030eea6b9e7748a5a842fd75a4168fcc71469db29656a9ff61f74c014998c6346e8e47a7d4a19c7
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 965a7389078d34a10b768fd56f9ef8b345b1500d14b8af5cd2ae427ca549b88f
- MD5 43b4e2e7713b29b82d4f17e39b5fbeb1
- SHA1 6d2438481892e8381acc1f40ef94e983029f2920
- SHA512 ccf8a0c3b925e69236f8176fa4ff5991cce13ed8e63b9acaf98225f1d74909a13b575c6b6d24b5f9d953b0418acc9f6d3d0d391a45736c9ea17f0d3eff35d161
- SSDEEP 6:7+/l9ZEY0Fn1CIlpg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK4:7+tAY4pqLiuWdwRmBEyPbz
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/core.db
- Size 36KB
- SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
- MD5 045489a0639eee27bca52f48828cd93d
- SHA1 436e7966e7c019273c44faa4d8c5709b816dfda3
- SHA512 c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e
- SSDEEP 96:eMzKMilNJzt69l/mwICfPDKOjK0Eg745TN3PafDDKsgZK5AgZWgZK5cf/ShOqLE0:AuldjKiKvI45TNAKfUf4hI2q1UpKorKS
- MD5 SHA1 SHA512 SSDEEP