Analysis

  • max time kernel
    18s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    17-10-2024 02:20

General

  • Target

    .apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4321

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    882c3d14da3ddb953ad4f9e7583b3171

    SHA1

    1113ee3a313fb4e18a8e7c94ba6930bd99480bd8

    SHA256

    6747728ba12a7fd20924af947cbae0286afa0112f2fa3270fd0b69f5cf513859

    SHA512

    3c550f4e55936a3280a2e3a73b08f587ccda150779bb49fd3a4dccd32f798308caa21dd0fd7fc4468fe24da29d6cbb8fdd0d26dc7ded5d545c7d38817ce871c0

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    001d65217e89cfd81de8bc277e49de00

    SHA1

    c546e7f2d3392647cf48955b2c7296c4938f7811

    SHA256

    6a283d3fc069d27c6ce93b781908fdf3b3505b470aed3f0b5f6b80317f643a30

    SHA512

    77fbaeb6edb9d77910236d6250176829a69d3379b671a584f52d13e1f7f0a236b30b720aa224c7270371275bf59a4d7267cca1c21295bb012faa6c7ebe2b0d88

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    14edfad5a8a5ff81656bfd9a8d05d170

    SHA1

    e53e9676f7cca8f22e7ac957f4dec121fd1cc132

    SHA256

    db5a854b353df20e57d9accf4ee3711325518adfec9ce1e99398cbaedbacea37

    SHA512

    9a6e97d847eb0062bdb47bcc692bd603656c05968dca3bf8be43dec9a0bab6444ea1bf8e85ade61d08dc63e1a030316de1248236e185f61968a24dfe5449e7ab

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    dc6bf048dd7cb74aba752874fe443a73

    SHA1

    58bb4527bb42a6f98b36cb0df0636458b1d57d08

    SHA256

    9cafa01af2d00667e94442acf8b0f0dbdccd2f3d37390b08fba97a1a41c6c8ce

    SHA512

    12e133a44f8819736e2f06849cfeed12dfcdd09a2202bcd49ae75cb0b804ff54fb449e472103ef92889e7d0ebc80d891460a07213e7f96518a13d9aa93f029da

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    34d77888769904b77dfc9dcd6430d46c

    SHA1

    24f6db748859304523bea0274641b2d600f34d95

    SHA256

    a288d6651db909f783388563fc57ff5d0b77e7d05ec04649bf3cd478f6694a88

    SHA512

    01aa62ff2137be4dbb08c49cc28ce1a61887b6690618efbaf94ab87875b3332b1cdc7b7936d5600ceb0830a199631e853a6b24bc6a488b02130a0400d405dfd6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    181e6bd5bc7f7c922dfb1d5225da0bc5

    SHA1

    2b1211bc2dae36b2864542a20960444bbb737d20

    SHA256

    f118da31299884f3e9396a40fd5581ff0dfe68bb142c87ec9b79bbad9f05ac51

    SHA512

    62e2aa58052dc720cf3dc051bc1f3259996c57bf03eccdc3b82d9b077fb8491bc3b9ac0d9acc82f9e9c3ddeb0dbc239f6e8edfec0c1ccea08cfe373aa21eaf7a

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d4f0217c7dcbb2bafbc9a1449165b20c

    SHA1

    0e488dcbbf7e9577587f71b641e08f2cbfcb4ab4

    SHA256

    030fb9246d7c35b78059344269737fb0c53f558783f02fdc94b772c05727b5e6

    SHA512

    1556d09f768774b6f478f95cd3130a7a2bfc64b1c42922a8aa9ad14c504b7f75fceaccf56de8eac70cf54c4089dbeb7aacea6a28193da57570996673776b9b13

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    ee9650090312940a2870cc79ac86e029

    SHA1

    0550c62cf775e315d9d4e761caf4bba60e9e6974

    SHA256

    f3abdb68093f49e4ccda77efef67d68ea05e480e58ef280828a00adb60c9da9e

    SHA512

    528a6974be987841787692d29a16b24d5a3fc3217d91b2589f5133f42219abdfb51a8e29c07bd3d641c98f78d2f3cfef580c9ba63329592b43d16643b5428414

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    1ba18c228528eb4c054897e548012976

    SHA1

    4afb8afcf73688475120daf94f7e94824ca9b233

    SHA256

    7b404389422b6a2becd73a31fee21439804caa81f37e396df5cf7e0d6bdd7481

    SHA512

    541bd464b39db95677fa9f7015d64e49de7ec998b3940558939baa3a4f8f196f346ddace6643ac9eda4da06abc7bed253ad936883e11d566ea6bb7d8769d6756

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    856a91fa7b349cec215667a61061ae0f

    SHA1

    e9c782c9e6b51d6f0b0322136615d87ec589cd04

    SHA256

    ad97411566a62e711b821560d2b42e824f2263d83860eafff0f91dab51870f00

    SHA512

    367e3571f5b435e2199130406613400572090c87dd14a9cc11e425012b283c81b8aefbc9a226cb8d0f094aea005310ae6084afe8f44be297545fc2b8d04db3c2

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    765fe7a76d7b2fa45086deea557c44bd

    SHA1

    e6aff75bbae4e9dce8a37276999c851fa80bde19

    SHA256

    3d7a7b7c2c24e08df4a0a5e2fe9fe2285b0e61b42b40a0a61497f7748dc9bfa5

    SHA512

    872233fafa8a3bfe8e81f00005af15c59f57309a5c35917eb7de88bd55e870b681799ddfb72d5b34f46b1da3e41fad841d2733d0d41f0a23a7a33059e5652288

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    eaea164c6703c73455b014833804e431

    SHA1

    14cf1c72d9876b4ebe72a9a8e585056ba9753f7a

    SHA256

    b0a1e7b9198aca54ff597bab5b210c0776f12c9bd3b12a9eb409a98c3095d8a5

    SHA512

    bc995db54f589c5a0f310942f706f98e98b1e2d8cb586ce43a74ef13767a664930701090a90645e4f78b8706de075ead48acfbfe8d2902958f9aa3d400b97293

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    21897f6089ff222fa5a1a51db565173f

    SHA1

    b7cfb01e870346c2d9ddecb3581c8e5569627ea1

    SHA256

    474d4f6d4ae8917d6c2233dc80edd213921e80e510fc36ec7ce38affc2635883

    SHA512

    3219b3f150d0946a3b7657aa3aa312a667d7fb5e11c634b9c81bd87596574ce14ad038c54033c78f0077d8c8967cdc19be4190610ff89c35e4aee1255fb7dcea

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    47a05caf634bb2255f32f84d9ecf1de9

    SHA1

    6167b8ab33a55b15f3cb4896f244f7bbd2d84b97

    SHA256

    ce140ade60fe7fd083fd586e5f19603670ab46200c238fa4ec5c84f45244662e

    SHA512

    d49d844e8a85dec2bad0842b76b66cf546a1687b3ab7d6b73f936c9a50f36a2772ba6bb4d67e7de4efa94a5e1e6c71f01218c46b9f303ac3c7b9ea768fd6784e

  • /data/data/com.systemservice/files/PersistedInstallation1795004915746431667tmp

    Filesize

    557B

    MD5

    c0769e70b990c6f2d232f0491986c9fe

    SHA1

    fef6dcb8a68f6b9c47180809caac236c7466e318

    SHA256

    13e80fe9e2d0f09931c0af7c52e8a69f693948a18bab8f6ad809185e5184623a

    SHA512

    9f9af9103876974aa468094eb4bb8f7371849b66dd9e991bea17c07e51cce9527c9f3571fd9e288400c7e766db8f750f240c4a20d8df5d716f2ff9325b051524

  • /data/data/com.systemservice/files/PersistedInstallation4637890594161516895tmp

    Filesize

    90B

    MD5

    969fe3b0f5b403ef2d8fe1d80ce74a10

    SHA1

    f6db6b19599d0b47ff25c2e4c6ac12894d138727

    SHA256

    333c85cdc4334ac392f6ff306b915ee698f805e540c8e01034f62165c82ec3a3

    SHA512

    a39a76c6021bdf90bd5e427d00410b3e5d192231bd3f5c90bcafeeacbb2a5b5bddcacfe6e77c765be93faee32ab498a6899fb41e1a8c80c2ab2607582602d1c1

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    95d13b549d63bc51d5754d3e3584ff6e

    SHA1

    5111523296b71e15dce266f3946fbd4bd792cd07

    SHA256

    db0d614ffba933fea029e7a9d4ecf2a16f405243e6a4e66976754cfc62f7701d

    SHA512

    17a6c692a05b7389a151ebb73be255dfe04003f0bb496a68bc616c65678a9c86b57e694f6c7023b8203f8eb654a7c08206ad439301d38166201385d6912bd2be