Analysis

  • max time kernel
    18s
  • max time network
    148s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    18-10-2024 02:13

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4329

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    d3fe208aa082e15d8bb17d81aa95adb2

    SHA1

    261c9b652970c37140f040c34298c63785fd9219

    SHA256

    beae0b6c928978b4f6a6b22cf113388ff96bc9cb7d4c164f60023d5ff9c3c73a

    SHA512

    1f06a391f6dd78345f34a0ba8c8718a7a5d307fb131451a5eb06a5bb0802b26bf38f077b3e7356f2e1f974a3e0e486c5c39809602c05240dd989ea0e936e4e1c

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    1afe4b75ec1f3ad7801d6d13553f2ad9

    SHA1

    b4b6f5c383831ab2fd826db351b1070c8bbd5455

    SHA256

    c56c3a808b36ec1235fbab02c4cf5028df02042b761a8b10c5a0eb25dceb7d6f

    SHA512

    43ce0fdedae527604bffb4a3d6760a7945c714a7fdb22aea63c7093185721ef77048808c6ec9f2ef78bb9b0655aa288737058abf0f62c82fe007b027e1c9da49

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    53eefb4a9797e182f3adfb752b37dfda

    SHA1

    3cdfbfc150ef7be518c0734fb05f3c0aad2826a7

    SHA256

    703cbd10b0e632f97e23b90d919297952cd2651c4be42fad5217a971e247f916

    SHA512

    76618edb21f7ec345c2f6e47aa9faddcff7bb888973f6ec28820da0907a47c5e3dc476986ff6b1e6c15d27fedd9cdb8cf25223e148c6e20eeeacf3b86e0283c6

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    aa97da081e125715ded2331841e09f93

    SHA1

    6f7a3a43c032c5a461fc61d061b77c5147b6d732

    SHA256

    b522b549152a20e935097fc3e0525a0503ee38ce67f45679cba99eb1a395919b

    SHA512

    f7d1ca27ae2a9b67960c54c84a808b6c631483fe21378f659393ef3f76940013b50cf425ac264e31c22e0d7a17022236f23a47a4af5308a52d003f626d36cee4

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    48fae3728661cf1ddf6411d748bb3dd5

    SHA1

    9713902ad8ddaa26a1229de3def77021471da627

    SHA256

    ffc2e1f5e132de144305aa4d36fcdd2457140e50aa0816dee763026b89e573a0

    SHA512

    71eae12fe40acf6f0b0be89f050c2b46cba23c55cbe096fe848695865cdd5144f9c5fe597208c6b9820708568298bca9bb697973f600448e29e6afefed18b6a0

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    4b88439383d86136d0038c55b5042e6b

    SHA1

    ff2731e3d7501c6a8baf18ecec666bb39fde167d

    SHA256

    24030ad44ff15e703cafad31b27f3cac4b17014e19a2204f9886120aa0b74222

    SHA512

    b8cf80305163768347fb46afb62b8481aa99e3c2a518aaf06023195e77cb9811af7b797acc390cf36cea7c2fa95267eb5453d2220b24251d592e7341044d44ca

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    4b0def4bd2fcc2ebf5f3df0f983bb8ef

    SHA1

    81152e2bdea5ac63ffffa52512c950b7c55e7ab9

    SHA256

    d4c04f53828df603e528d68aa1fa6f5a0a715ca5729899f4e1416fa58275ab7e

    SHA512

    97d16d320c6445954683a281250d92967073d0e0f4351b37424604409ea009f00e9eda9c5a6fa5277d97be108887b0d7f0ef99811fe071e8cf6f7fc5db70f9f2

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    c5594936eade798a7b30ba9f4d59b123

    SHA1

    724bc15decb3249b7e3a1ebda51f66f2daf21afe

    SHA256

    89f4c417496930c432a3c03fd7c038a54c18cb217e5fdd66cce5842dc57b6f10

    SHA512

    23201035183bc7ee9e05a3ef33dcc69dcce5d871adc5c2e6f4f93c9ba1d95d3cad9cb03558370705df9d0bc7a834b3fdaf55ecd6e843e9f790109d057862f623

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    0708083ff12abf442b21fecba46bfa73

    SHA1

    c442401db72dce54ad1fdce5675684d520e60ba6

    SHA256

    cc139c9151d9942e1dc6e3ca47ff8c569007b2d6b12d55cf7a4466e41aa929f7

    SHA512

    9bf3093dbba98c26d85033b90e64ca5f12495be792b35694113997d20b264a232ec33314cbc79c00423842d1dedc50e92410f77b8e2e7d2ce9dc19ea4ef57a95

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    d6d3c43c9c93a3c4c8198fb0343b9835

    SHA1

    7af8ec362fbb85edd501451f6e118ef6b344d44e

    SHA256

    505382650dbee4830048cf396dce481709f8b8dc876985f9ad1231613eaef953

    SHA512

    98dc9f6c486381aca9528e2b2982aa9681f0813270b3b2b80df709a7b38a14ba4cae43bafcd909a2cf729481979711c314cbcaeb5cedb5c4e24e282791b815e6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    2f65d5a1ad2a45c976907980d4337072

    SHA1

    93f4ce04bc4c1293538d455ad66ec62c519e31b2

    SHA256

    1be470d79d36a94e60b4339c9e8976eb0f4c8e208756a52959f6ea47661a8f8d

    SHA512

    308901380a1e242e812f8c209742e5d00ee20de9bcd0768765d3e090b6b849e4460c6707a0842c6c05ecd1089f220344cf62412a013e09c9784cd2cfa495031e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    066ee502c1ea14098d0f34b5fd8f63a3

    SHA1

    c131995904bfd39d5fbeee11d8e1b676c4a71f29

    SHA256

    f89b8560e4bbb564109526be63d19e559229997abb0467b6a81c74684ccf7e1e

    SHA512

    a86acfa88e7826d86987e8c3b467714121cb705599e25ee7e7300cabdce691ffade463d80fedb11325b49d4f0d1f566ba9882b7b31a5bcc9aac6f90641f0cf60

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    86e6c6d75da7af94dd0f6ecd2f3b98ad

    SHA1

    6f55c6e5744e2fcb2e4c55843801fc13775df6b0

    SHA256

    55b833f355aa234791bd31688bace15f00f5827ac3475f0385ffaf5fc9c75a34

    SHA512

    17f305e2b44a9a5efb1d7537c1f05734d8bf360bbdbaf58534c5a87dfc0eb2ad92a326e0a071efc0b84bb998b99dae692b54156a85d8eb1ab01fe6d0015d8fdf

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    e1f96bddb2a175166a815deb8bf91b37

    SHA1

    473b9045eef9f783b892f31d7c3249ba0ce9319d

    SHA256

    43ffbe2c9d290cd0f852042af2ced8e115d5460318343b2f3a3859280978b7b4

    SHA512

    5d39ae4bf99f564f05b4780f0e83db9c30a78318df4380bdc587f3c7975c4fc2a3f17f477028bf092cf5824607180e93d17e9c91f09daadaa0583abfae14bdaf

  • /data/data/com.systemservice/files/PersistedInstallation2652386279855877767tmp

    Filesize

    556B

    MD5

    94bb2d94aa3adebd83fcee1e7c2be8ca

    SHA1

    5c2bfcae49a5028fd35642d3d03ef75d38c7bc06

    SHA256

    414aba9d5b678ac066592b7b25c91b9386f82a95d3e9434fc1a0879443313e2d

    SHA512

    64c6d1de24d3a4051b07dfe5d7c6359d354afe35249074cf055a1d03874a0fb7afd8e747e09e23e614997639455421655ef933077620b208b21e32b477affd53

  • /data/data/com.systemservice/files/PersistedInstallation7486577087302033219tmp

    Filesize

    90B

    MD5

    dca961d08f862b7edcb42c76730ec571

    SHA1

    3e3e92f6ef5cd340c27a6ad8d752b651be384e1b

    SHA256

    dff9f46b6eb893895ce92e5ea9645a0d2c39f2fcbd756bbad8ccb95e7bf767ea

    SHA512

    8b80af7ff4b80c5311a1a282ad1d99b10f474cda425653086b57d40aabf336f034702c6b03c2a5caae440986fa8fa359f052aa1d53d5433760f83b45ed02b171

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    68f8ddede0185370aed49299af988157

    SHA1

    abf65cc102b8755eca27fb18157a09dc90b5475f

    SHA256

    91c66aafbc655366a1ab24b8541450ece62e35bc174fcdb672f062a262b02059

    SHA512

    cb0dfb81eabe4f4113f4ba6d74703720869f983c76a0d89fc8b2a3b73d1e6a087ebf65c888d5a3f15037be8f08bf413504857578f1a838342a2f21cbbdbb263d