Analysis

  • max time kernel
    17s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    20/10/2024, 02:34

General

  • Target
    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
  • Size 3.6MB
  • Sample241020-c2hf3swbpp
  • SHA256 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4964

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 590c9d81a705cd61cd242e8531317fe71859fcd06d9be623bca69450b889d3b9
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 ca488d3c49f81e95826316aef3ec3c7c55b27d7bfcbdaed0250356579298ee29
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 5ff0ba4d43dfefe199252762cfae278bcd47b49a4f1719c2994dc613140bb6a3
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 b516cd6e68927775ed34b298417b2b5d1da4bee2ee4d1906c03f6631e8665592
        • MD5 SHA1 SHA512 SSDEEP

        core.db

        • Path /data/data/com.systemservice/databases/core.db
        • Size 36KB
        • SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a9cde8b71096d03f0958ca4d701397811e4cdcc5228015a15d5293a00c162f51
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 cf6450e3a079313f0fd7859e7bac64367d94b272a6be2f2707145886b54d38e1
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ba76fb93a798a8478f64eec8895733515c6573e04d04cd1f09a73a3f10ec56fe
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 f3463b4273c42442554cca02bdb6b808f4dba0050d1213ee7b008ed6e1ffca24
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ab18f3bb605f3cbedaffc75b2d5a03fe21ab82179d268331ea907bdcd32c23fa
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 45be56fd3de719532b34cc165025ce1c72046e69b79def5e53b010ce02fe3818
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 317bf723357e04465e764688798f2d1c8d69e855c231a10f9415f1a44b82a4e1
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 cb8f7e597a9fe7180290618bc3b0e08f5735e271de23016657abe4d289c19788
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 449532f60b7ed2e92f64847373171f1c2e6530cea7f0d8837ec8c09d00c76ae1
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 c012a7fa6bc1625fba3b8f3a0d4828069539def585140f42c21a65c9e657e68f
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 483a77aa5dacd8cb6638b6f57608a33de3e929d4a78b28fdaa9e87ecc88bfd2b
        • MD5 SHA1 SHA512 SSDEEP

        PersistedInstallation4986749282291392193tmp

        • Path /data/data/com.systemservice/files/PersistedInstallation4986749282291392193tmp
        • Size 556B
        • SHA256 cb16568a72c42ab6fd17ed0e09ac82afe31fed9f284d0be52c318d0bc8df0d94
        • MD5 SHA1 SHA512

        PersistedInstallation8241865170978626494tmp

        • Path /data/data/com.systemservice/files/PersistedInstallation8241865170978626494tmp
        • Size 90B
        • SHA256 4845fcca0acf1c03ae8c5f1be85a89ca8e5d0a1c918e8176400f34c7edecd5fb
        • MD5 SHA1 SHA512

        log4j.txt

        • Path /data/data/com.systemservice/log/log4j.txt
        • Size 3KB
        • SHA256 75fcaa81c10c83c764918ff8a8ff76b15f5ee1d173ef279c849f8ea925a5dc32
        • MD5 SHA1 SHA512