Resubmissions

24/10/2024, 03:22

241024-dw319sthrk 10

24/10/2024, 02:40

241024-c537ys1blh 10

24/10/2024, 02:34

241024-c2p6xs1aka 10

Analysis

  • max time kernel
    18s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    24/10/2024, 02:40

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4317

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    45e7189b3265ea0f26bb0edc6d0873e7

    SHA1

    052235fc8301cdd68c128b93db86bb79aef811ba

    SHA256

    dafaf9c41ea65b655fe1887b5049d17f9a0d6e7932b78d45216fb1fc7221d687

    SHA512

    aba5376a65e077c96fc945691494992486c57c1f9911ccd113b1e896dde27649035a70eb61fcc1ee49915bd2907372a3df4edcc117c53077b2ce93835293e823

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    bb0ee79f7051c84bb67247f1ecc1fad1

    SHA1

    b0a2f7c01b3690f65587c0a1c26d400a20d2ab83

    SHA256

    77c705992ffc7ae0ecd35b9257afd94b62594294709e1cbdfb73f0feee46c7b1

    SHA512

    18d0a7550bca1ae5ede5e3554a9812a0a31a114763fdb639f4df13da7215e2ced4b7ef65ab7e9e5a4f858017002bc3fae1fd5fcc4c033ae7cdb1d21aa4674571

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    9d0c3d7e3347d22f3a411696bdc54061

    SHA1

    5d9118fb556582bfe89fc29af6d77b70cb4d5d3c

    SHA256

    e3dd9e6096904bbcbb3c8c15ef981d44c600461dab80c74f38a4c6ec29d45e3b

    SHA512

    24ad19f0f3bcb9ec0d7b47ca29c48117a68e816fcd249cda93ea801f76f4614c44ec46e0ddae8a31cb44aa50e7a2b1338a495b6c750e8d6885b3f5d5f44c5945

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    527bfd5560047b71bc491b2479b3b375

    SHA1

    0297cf1c3fe5389d3498b8add2d8e17148ee87eb

    SHA256

    3b739c48a2a5e1972539edaa62bf23f64443963722149775c0aa2f49b5a14a3c

    SHA512

    2270ea1e887dbe6de96e67a5c52e5e107786084cb04bec6dd56d91e8adc8e32fef1b9e0053da69790132d946fb736a3de28b12efd53246c85757ba049a6f6473

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    34cc3299dc4aab5eacc76204a6617e99

    SHA1

    11c82e54fa1157884b121412cfb8c5e6eba6e4b6

    SHA256

    463875f3f324abaa1ca44858f63e1639276553fe2c9b729123601ad8e97b001e

    SHA512

    a0d201ff1e5456681c298e45ae0b321479a9e960b2e893d3f8c261eab8ae44d8406ab1658897a55b339dcc62c4a645bae3c78167a36778582446c4575ef361aa

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e5cb6af791fda3e7269a00ec0e599682

    SHA1

    62734a1f3e34f1820a45fc7b716be2fc800dcb74

    SHA256

    ee87ebba5055bec61ef18b83de3f68a1d996e1642ee62706607587ffb02bfab3

    SHA512

    27abd95016f5b45c2c77f8e2fa4533108f156ef53090789fb633a34996969a72e21c033404bd0fea3529b323c35486d4d4050456d796fa504968c4923b722a6c

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    73b61f4f45848d8a37d579a789f9f21e

    SHA1

    47df222c6f550469fac387e03215894bdda5bad2

    SHA256

    4bad09a5378900b75890c4f3dce09f050360a8ed6d9deeb0e5cf0c9964ef9258

    SHA512

    af4902b9380bdd2bbe0db0ef6f8543696cbb8fc72e2da2ed8a238ac2548473e0fd2afea87400614ee5de8b93ca732b17e4ee2e847b531eb3fd266286584e7d9e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    4e0656d5ae0bd0464a39d29ea4c180e4

    SHA1

    ece00870f9e40f82ea332b1adac997bfa65290ba

    SHA256

    ca3342c868aae59c13448dd105b05ff9e9bf35415e9d10036923c678109ea91f

    SHA512

    eaedf417bedfa4750cd91ee38da19133b10adf7fb407b9f6f2097ac6bc1a6c67b3f15994acb30ffa215a39409df90fd145ef5fa4cf67943262bd5d6777af38de

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    140c3182039cbbb1ca13e4b128ac7fad

    SHA1

    0f8d59d6080b6915c3bfb1564ccc76b30fe06e95

    SHA256

    455cb1b9b7c6306466ec6c1e96d054f4f19eaf7fcfb0d15abb720d440a94b396

    SHA512

    58f62b39158bf341b3a67b7a750ac1ada41a863df958e48e33ec187b0696ad1632def8587e06984ac56594944a033b74f4ebf13d89ddc9687a13d9beec7a755d

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    d4e9b7a3c113ee746d5e385107162add

    SHA1

    c4082e6f2a79c59227a706f79856d8af431d55dc

    SHA256

    5c5378ea5f5849823972936fb48459357174124b80c6dbc504ad02d640fabe3f

    SHA512

    ed8a915dc7454cc8082de0374af072a019238a75a7a15cb5d2da3b1092722ea66bc74721eca141c4d3c5a058239e0d83a201426b99a3738f305ebe4a37060aac

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    291f73b5cdcc9fbe4e6c94995663d315

    SHA1

    09f044a3f5b7526fd37655b66122351c06c52755

    SHA256

    484dbed7495ddae6121e3600913240ff615154718bf6c91e77e6838afa7aba03

    SHA512

    d76eff273058fdcfe0988090ccec1134c921873f443ada9b81dfddc800690a02cd01b2d0e2bf342d186cb36e79fc13289ea3ddca597125a29e674dca6f55678c

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    d23254236ae316048843490c14c6e4f4

    SHA1

    d6f11cc6dc98734247bd3b884796dfbf5fcc7e2d

    SHA256

    552859cb29c10bcd986d8073ae28994cae27ab063cc3fdb5fcd37c6210a54035

    SHA512

    eccc9dd4167a1d328bca0c09b989785c3bab739907b85e0197b11b62f2578c1f8ba09f5a51a9ce76f62fbfe55abe621a6e083e87545a5757241f147374b8ca42

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    9774983764fabea283c8924b2ca1688d

    SHA1

    a7c454b660f2bdc29609494cd515749641979b9b

    SHA256

    330bfb8d1a26919092efe6cbdf585bb57066fd80d148f0cc611c31b865272f54

    SHA512

    50fd2205fd3f5293d3bff5b788f912694d71973b34d1f89f31da05326afff15c9c506433a06525ec22ce5010c3d0bc1fa2c338a3daf9b7aa53204034c1ffd8c1

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    24af3ac2e86b0cc8162d1bf1b1d59098

    SHA1

    84831cb482a5d40da93f164253c4bac3787a75e2

    SHA256

    d3318f3974c1f5560f0f0abcc2ce71e3b02819976c30957a3fc5d66ac986586f

    SHA512

    e760a1e46768e118f5ca5f043aee763435c61927c6ff4132e1b1b66b30279f63a77fd2e857db10a06b2903ad004ed583490eb325463b55bec68060f6505f3764

  • /data/data/com.systemservice/files/PersistedInstallation2638935014324314848tmp

    Filesize

    557B

    MD5

    ab8d7016b876421e961e3be2b1f1be64

    SHA1

    5e0b8fa9f345c95c1efaf26f8a2467b7b0ffce12

    SHA256

    8cf91d550ddcb5eaf35d7ce79708648ced61133e734b48ac11bd0e77ba4508e7

    SHA512

    b1826c9461d8c797b138d4bc5417a970190a3c1392cae0de4add47dfa2f0113c576666911d687095aa6992767348bbfaa5a16365601f609352e39f059f046afd

  • /data/data/com.systemservice/files/PersistedInstallation3728556612566218220tmp

    Filesize

    90B

    MD5

    9d7f79ffe1e8d44e01da64788ecc0344

    SHA1

    103bf20f9d81269ed18624b1cbfeca7ba1e94672

    SHA256

    6ac66a17c5f8d70df3a680bc8ae1b864cd4900cab94f4697d35aeaa8aae06398

    SHA512

    022e24883a28dbb3039f5c48aebdd4b4ef192a318d91dcd7c32c242559c9238c70dda29f2fdb8232c290a32bc501c19e8e33396f7dc161f2f48c95233f962912

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    37f9898435bbdc3e0528f3193a5e7d90

    SHA1

    05cdfdefa5eff3ad9f2de17707d498263a6e566f

    SHA256

    e3b1d9e927e8aa49cd1867ec971db0d2d77f929fee566804f2deb22b6c74072d

    SHA512

    50d3df872e1303f50de06a7cc8cd135aac9d4a486447740c2b555b817521e2928265f40b2ae1eaf5e4dc4109c5a045d392ecf058e645ea518a978fd86f6b310e