Analysis
- max time kernel
18s - max time network
132s - platform
android_x64 - resource
android-33-x64-arm64-20240624-en - resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system - submitted
17/10/2024, 02:20
Behavioral task
behavioral1
Sample
.apk
Resource
android-x86-arm-20240624-en
9 signatures
150 seconds
General
- Target .apk
- Size 3.6MB
- Sample241017-csfacsxdld
- SHA256 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
- MD5 0366ae0abf0ada8aed90322bfe07dfd5
- SHA1 2f0779ce64f02944e87674745cb446c5bc620607
- SHA512 52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
- SSDEEP 98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 6747728ba12a7fd20924af947cbae0286afa0112f2fa3270fd0b69f5cf513859
- MD5 882c3d14da3ddb953ad4f9e7583b3171
- SHA1 1113ee3a313fb4e18a8e7c94ba6930bd99480bd8
- SHA512 3c550f4e55936a3280a2e3a73b08f587ccda150779bb49fd3a4dccd32f798308caa21dd0fd7fc4468fe24da29d6cbb8fdd0d26dc7ded5d545c7d38817ce871c0
- SSDEEP 48:TIg59MENZBdUdndVd/729IvdldHlq8/Jq4qPSLc:RMEX0wIyNjaLc
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 6a283d3fc069d27c6ce93b781908fdf3b3505b470aed3f0b5f6b80317f643a30
- MD5 001d65217e89cfd81de8bc277e49de00
- SHA1 c546e7f2d3392647cf48955b2c7296c4938f7811
- SHA512 77fbaeb6edb9d77910236d6250176829a69d3379b671a584f52d13e1f7f0a236b30b720aa224c7270371275bf59a4d7267cca1c21295bb012faa6c7ebe2b0d88
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 db5a854b353df20e57d9accf4ee3711325518adfec9ce1e99398cbaedbacea37
- MD5 14edfad5a8a5ff81656bfd9a8d05d170
- SHA1 e53e9676f7cca8f22e7ac957f4dec121fd1cc132
- SHA512 9a6e97d847eb0062bdb47bcc692bd603656c05968dca3bf8be43dec9a0bab6444ea1bf8e85ade61d08dc63e1a030316de1248236e185f61968a24dfe5449e7ab
- SSDEEP 6:7+/l9q8/gn1llng9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKqn:7+tgcKnqLiuWd7RmBEyPbbn
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 9cafa01af2d00667e94442acf8b0f0dbdccd2f3d37390b08fba97a1a41c6c8ce
- MD5 dc6bf048dd7cb74aba752874fe443a73
- SHA1 58bb4527bb42a6f98b36cb0df0636458b1d57d08
- SHA512 12e133a44f8819736e2f06849cfeed12dfcdd09a2202bcd49ae75cb0b804ff54fb449e472103ef92889e7d0ebc80d891460a07213e7f96518a13d9aa93f029da
- SSDEEP 6:7+/l9FPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKm/2:7+tvqLJdKBRmBEyPbR2
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/core.db
- Size 36KB
- SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
- MD5 045489a0639eee27bca52f48828cd93d
- SHA1 436e7966e7c019273c44faa4d8c5709b816dfda3
- SHA512 c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e
- SSDEEP 96:eMzKMilNJzt69l/mwICfPDKOjK0Eg745TN3PafDDKsgZK5AgZWgZK5cf/ShOqLE0:AuldjKiKvI45TNAKfUf4hI2q1UpKorKS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
- MD5 62ad4a05cbdca7f47b3206b7dbda487f
- SHA1 4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3
- SHA512 0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6
- SSDEEP 6:l9bNFl4/Sls1BElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEBE9zmzrfRmBEyPbBvOwk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 a288d6651db909f783388563fc57ff5d0b77e7d05ec04649bf3cd478f6694a88
- MD5 34d77888769904b77dfc9dcd6430d46c
- SHA1 24f6db748859304523bea0274641b2d600f34d95
- SHA512 01aa62ff2137be4dbb08c49cc28ce1a61887b6690618efbaf94ab87875b3332b1cdc7b7936d5600ceb0830a199631e853a6b24bc6a488b02130a0400d405dfd6
- SSDEEP 6:l9bNFlsls1XhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6PK:TLiEx9zmzrfRmBEyPbP/P+/0Fl6Pi7
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 f118da31299884f3e9396a40fd5581ff0dfe68bb142c87ec9b79bbad9f05ac51
- MD5 181e6bd5bc7f7c922dfb1d5225da0bc5
- SHA1 2b1211bc2dae36b2864542a20960444bbb737d20
- SHA512 62e2aa58052dc720cf3dc051bc1f3259996c57bf03eccdc3b82d9b077fb8491bc3b9ac0d9acc82f9e9c3ddeb0dbc239f6e8edfec0c1ccea08cfe373aa21eaf7a
- SSDEEP 12:TL1Es9zmzrfRmBEyPbP/hr/gW49blqYFlGKa+/0Fl6Pi7:TLvpmzr0GSP/h1499F5alFyK
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 030fb9246d7c35b78059344269737fb0c53f558783f02fdc94b772c05727b5e6
- MD5 d4f0217c7dcbb2bafbc9a1449165b20c
- SHA1 0e488dcbbf7e9577587f71b641e08f2cbfcb4ab4
- SHA512 1556d09f768774b6f478f95cd3130a7a2bfc64b1c42922a8aa9ad14c504b7f75fceaccf56de8eac70cf54c4089dbeb7aacea6a28193da57570996673776b9b13
- SSDEEP 12:TLIEsE9zmzrfRmBEyPbP/qFiOLaOS/yAUbYUyWlqi049blqYFlGKa+/0Fl6Pi7:TL/pmzr0GSP/qsKaT6lY5499F5alFyK
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 f3abdb68093f49e4ccda77efef67d68ea05e480e58ef280828a00adb60c9da9e
- MD5 ee9650090312940a2870cc79ac86e029
- SHA1 0550c62cf775e315d9d4e761caf4bba60e9e6974
- SHA512 528a6974be987841787692d29a16b24d5a3fc3217d91b2589f5133f42219abdfb51a8e29c07bd3d641c98f78d2f3cfef580c9ba63329592b43d16643b5428414
- SSDEEP 12:TL6uEO9zmzrfRmBEyPbP/RFiOLaOS/yAUbYUyWlqi049blqYFlGKa+/0Fl6Piv:TL6kpmzr0GSP/RsKaT6lY5499F5alFy+
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3
- MD5 e3f13c7d7678604e5b293f6672bc0ed1
- SHA1 b16c998ac7ca1db79cd4983b207a292ac1d96e21
- SHA512 b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4
- SSDEEP 6:l9bNFlgls1gElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WS//:TLuEgE9zmzrfRmBEyPbP/Wy
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 7b404389422b6a2becd73a31fee21439804caa81f37e396df5cf7e0d6bdd7481
- MD5 1ba18c228528eb4c054897e548012976
- SHA1 4afb8afcf73688475120daf94f7e94824ca9b233
- SHA512 541bd464b39db95677fa9f7015d64e49de7ec998b3940558939baa3a4f8f196f346ddace6643ac9eda4da06abc7bed253ad936883e11d566ea6bb7d8769d6756
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 ad97411566a62e711b821560d2b42e824f2263d83860eafff0f91dab51870f00
- MD5 856a91fa7b349cec215667a61061ae0f
- SHA1 e9c782c9e6b51d6f0b0322136615d87ec589cd04
- SHA512 367e3571f5b435e2199130406613400572090c87dd14a9cc11e425012b283c81b8aefbc9a226cb8d0f094aea005310ae6084afe8f44be297545fc2b8d04db3c2
- SSDEEP 6:7+/l9cZ5/mlFn1AhkWg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKT:7+te5/S2kWqLiuWd7RmBEyPbk
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 3d7a7b7c2c24e08df4a0a5e2fe9fe2285b0e61b42b40a0a61497f7748dc9bfa5
- MD5 765fe7a76d7b2fa45086deea557c44bd
- SHA1 e6aff75bbae4e9dce8a37276999c851fa80bde19
- SHA512 872233fafa8a3bfe8e81f00005af15c59f57309a5c35917eb7de88bd55e870b681799ddfb72d5b34f46b1da3e41fad841d2733d0d41f0a23a7a33059e5652288
- SSDEEP 6:7+/lPNOPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKZ:7+tPNiqLJdKBRmBEyPbq
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 b0a1e7b9198aca54ff597bab5b210c0776f12c9bd3b12a9eb409a98c3095d8a5
- MD5 eaea164c6703c73455b014833804e431
- SHA1 14cf1c72d9876b4ebe72a9a8e585056ba9753f7a
- SHA512 bc995db54f589c5a0f310942f706f98e98b1e2d8cb586ce43a74ef13767a664930701090a90645e4f78b8706de075ead48acfbfe8d2902958f9aa3d400b97293
- SSDEEP 6:7+/l9WFPg9bNFlqhO1oAlOERX4PBX4ogLugMBX4suuKmx0t/J:7+tOqLmq9RmBEyPbXi1J
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 474d4f6d4ae8917d6c2233dc80edd213921e80e510fc36ec7ce38affc2635883
- MD5 21897f6089ff222fa5a1a51db565173f
- SHA1 b7cfb01e870346c2d9ddecb3581c8e5569627ea1
- SHA512 3219b3f150d0946a3b7657aa3aa312a667d7fb5e11c634b9c81bd87596574ce14ad038c54033c78f0077d8c8967cdc19be4190610ff89c35e4aee1255fb7dcea
- SSDEEP 6:7+/l9DbMtg9bNFluls1OElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK2:7+t2tqL8En9zmzrfRmBEyPbd
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 ce140ade60fe7fd083fd586e5f19603670ab46200c238fa4ec5c84f45244662e
- MD5 47a05caf634bb2255f32f84d9ecf1de9
- SHA1 6167b8ab33a55b15f3cb4896f244f7bbd2d84b97
- SHA512 d49d844e8a85dec2bad0842b76b66cf546a1687b3ab7d6b73f936c9a50f36a2772ba6bb4d67e7de4efa94a5e1e6c71f01218c46b9f303ac3c7b9ea768fd6784e
- SSDEEP 24:7+tusKaT6lY5499F5alFybqL6kpmzr0GSfg:7Mupa+lYm5Aybq2kArSfg
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/files/PersistedInstallation1795004915746431667tmp
- Size 557B
- SHA256 13e80fe9e2d0f09931c0af7c52e8a69f693948a18bab8f6ad809185e5184623a
- MD5 c0769e70b990c6f2d232f0491986c9fe
- SHA1 fef6dcb8a68f6b9c47180809caac236c7466e318
- SHA512 9f9af9103876974aa468094eb4bb8f7371849b66dd9e991bea17c07e51cce9527c9f3571fd9e288400c7e766db8f750f240c4a20d8df5d716f2ff9325b051524
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/files/PersistedInstallation4637890594161516895tmp
- Size 90B
- SHA256 333c85cdc4334ac392f6ff306b915ee698f805e540c8e01034f62165c82ec3a3
- MD5 969fe3b0f5b403ef2d8fe1d80ce74a10
- SHA1 f6db6b19599d0b47ff25c2e4c6ac12894d138727
- SHA512 a39a76c6021bdf90bd5e427d00410b3e5d192231bd3f5c90bcafeeacbb2a5b5bddcacfe6e77c765be93faee32ab498a6899fb41e1a8c80c2ab2607582602d1c1
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/log/log4j.txt
- Size 3KB
- SHA256 db0d614ffba933fea029e7a9d4ecf2a16f405243e6a4e66976754cfc62f7701d
- MD5 95d13b549d63bc51d5754d3e3584ff6e
- SHA1 5111523296b71e15dce266f3946fbd4bd792cd07
- SHA512 17a6c692a05b7389a151ebb73be255dfe04003f0bb496a68bc616c65678a9c86b57e694f6c7023b8203f8eb654a7c08206ad439301d38166201385d6912bd2be
- MD5 SHA1 SHA512