Resubmissions

24/10/2024, 03:22

241024-dw319sthrk10

24/10/2024, 02:40

241024-c537ys1blh10

24/10/2024, 02:34

241024-c2p6xs1aka10

Analysis

  • max time kernel
    18s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    24/10/2024, 02:40

General

  • Target
    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
  • Size 3.6MB
  • Sample241024-c537ys1blh
  • SHA256 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4317

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 dafaf9c41ea65b655fe1887b5049d17f9a0d6e7932b78d45216fb1fc7221d687
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 77c705992ffc7ae0ecd35b9257afd94b62594294709e1cbdfb73f0feee46c7b1
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 e3dd9e6096904bbcbb3c8c15ef981d44c600461dab80c74f38a4c6ec29d45e3b
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-journal

        • Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 3b739c48a2a5e1972539edaa62bf23f64443963722149775c0aa2f49b5a14a3c
        • MD5 SHA1 SHA512 SSDEEP

        core.db

        • Path /data/data/com.systemservice/databases/core.db
        • Size 36KB
        • SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 463875f3f324abaa1ca44858f63e1639276553fe2c9b729123601ad8e97b001e
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ee87ebba5055bec61ef18b83de3f68a1d996e1642ee62706607587ffb02bfab3
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 4bad09a5378900b75890c4f3dce09f050360a8ed6d9deeb0e5cf0c9964ef9258
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ca3342c868aae59c13448dd105b05ff9e9bf35415e9d10036923c678109ea91f
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 455cb1b9b7c6306466ec6c1e96d054f4f19eaf7fcfb0d15abb720d440a94b396
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 5c5378ea5f5849823972936fb48459357174124b80c6dbc504ad02d640fabe3f
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 484dbed7495ddae6121e3600913240ff615154718bf6c91e77e6838afa7aba03
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 552859cb29c10bcd986d8073ae28994cae27ab063cc3fdb5fcd37c6210a54035
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 330bfb8d1a26919092efe6cbdf585bb57066fd80d148f0cc611c31b865272f54
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 d3318f3974c1f5560f0f0abcc2ce71e3b02819976c30957a3fc5d66ac986586f
        • MD5 SHA1 SHA512 SSDEEP

        PersistedInstallation2638935014324314848tmp

        • Path /data/data/com.systemservice/files/PersistedInstallation2638935014324314848tmp
        • Size 557B
        • SHA256 8cf91d550ddcb5eaf35d7ce79708648ced61133e734b48ac11bd0e77ba4508e7
        • MD5 SHA1 SHA512

        PersistedInstallation3728556612566218220tmp

        • Path /data/data/com.systemservice/files/PersistedInstallation3728556612566218220tmp
        • Size 90B
        • SHA256 6ac66a17c5f8d70df3a680bc8ae1b864cd4900cab94f4697d35aeaa8aae06398
        • MD5 SHA1 SHA512

        log4j.txt

        • Path /data/data/com.systemservice/log/log4j.txt
        • Size 3KB
        • SHA256 e3b1d9e927e8aa49cd1867ec971db0d2d77f929fee566804f2deb22b6c74072d
        • MD5 SHA1 SHA512