Resubmissions
24/10/2024, 03:22
241024-dw319sthrk1024/10/2024, 02:40
241024-c537ys1blh1024/10/2024, 02:34
241024-c2p6xs1aka10Analysis
- max time kernel
18s - max time network
134s - platform
android_x64 - resource
android-33-x64-arm64-20240624-en - resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system - submitted
24/10/2024, 02:40
Behavioral task
behavioral1
Sample
92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Resource
android-x86-arm-20240910-en
11 signatures
150 seconds
General
- Target 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
- Size 3.6MB
- Sample241024-c537ys1blh
- SHA256 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
- MD5 0366ae0abf0ada8aed90322bfe07dfd5
- SHA1 2f0779ce64f02944e87674745cb446c5bc620607
- SHA512 52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
- SSDEEP 98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 dafaf9c41ea65b655fe1887b5049d17f9a0d6e7932b78d45216fb1fc7221d687
- MD5 45e7189b3265ea0f26bb0edc6d0873e7
- SHA1 052235fc8301cdd68c128b93db86bb79aef811ba
- SHA512 aba5376a65e077c96fc945691494992486c57c1f9911ccd113b1e896dde27649035a70eb61fcc1ee49915bd2907372a3df4edcc117c53077b2ce93835293e823
- SSDEEP 48:TIg59MENZBdUdndVd/729IvdldHlq8/Jq4qPSXM:RMEX0wIyNjaXM
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 77c705992ffc7ae0ecd35b9257afd94b62594294709e1cbdfb73f0feee46c7b1
- MD5 bb0ee79f7051c84bb67247f1ecc1fad1
- SHA1 b0a2f7c01b3690f65587c0a1c26d400a20d2ab83
- SHA512 18d0a7550bca1ae5ede5e3554a9812a0a31a114763fdb639f4df13da7215e2ced4b7ef65ab7e9e5a4f858017002bc3fae1fd5fcc4c033ae7cdb1d21aa4674571
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 e3dd9e6096904bbcbb3c8c15ef981d44c600461dab80c74f38a4c6ec29d45e3b
- MD5 9d0c3d7e3347d22f3a411696bdc54061
- SHA1 5d9118fb556582bfe89fc29af6d77b70cb4d5d3c
- SHA512 24ad19f0f3bcb9ec0d7b47ca29c48117a68e816fcd249cda93ea801f76f4614c44ec46e0ddae8a31cb44aa50e7a2b1338a495b6c750e8d6885b3f5d5f44c5945
- SSDEEP 6:7+/l9Blgn1Ws//vg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuK34:7+tl+/nqLiuWd7RmBEyPbe4
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 3b739c48a2a5e1972539edaa62bf23f64443963722149775c0aa2f49b5a14a3c
- MD5 527bfd5560047b71bc491b2479b3b375
- SHA1 0297cf1c3fe5389d3498b8add2d8e17148ee87eb
- SHA512 2270ea1e887dbe6de96e67a5c52e5e107786084cb04bec6dd56d91e8adc8e32fef1b9e0053da69790132d946fb736a3de28b12efd53246c85757ba049a6f6473
- SSDEEP 6:7+/l9mPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuK8o//3:7+tYqLJdKBRmBEyPb03
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/core.db
- Size 36KB
- SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
- MD5 045489a0639eee27bca52f48828cd93d
- SHA1 436e7966e7c019273c44faa4d8c5709b816dfda3
- SHA512 c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e
- SSDEEP 96:eMzKMilNJzt69l/mwICfPDKOjK0Eg745TN3PafDDKsgZK5AgZWgZK5cf/ShOqLE0:AuldjKiKvI45TNAKfUf4hI2q1UpKorKS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
- MD5 62ad4a05cbdca7f47b3206b7dbda487f
- SHA1 4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3
- SHA512 0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6
- SSDEEP 6:l9bNFl4/Sls1BElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEBE9zmzrfRmBEyPbBvOwk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 463875f3f324abaa1ca44858f63e1639276553fe2c9b729123601ad8e97b001e
- MD5 34cc3299dc4aab5eacc76204a6617e99
- SHA1 11c82e54fa1157884b121412cfb8c5e6eba6e4b6
- SHA512 a0d201ff1e5456681c298e45ae0b321479a9e960b2e893d3f8c261eab8ae44d8406ab1658897a55b339dcc62c4a645bae3c78167a36778582446c4575ef361aa
- SSDEEP 6:l9bNFlsls1XhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6K/:TLiEx9zmzrfRmBEyPbP/P+/0Fl6OMi7
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 ee87ebba5055bec61ef18b83de3f68a1d996e1642ee62706607587ffb02bfab3
- MD5 e5cb6af791fda3e7269a00ec0e599682
- SHA1 62734a1f3e34f1820a45fc7b716be2fc800dcb74
- SHA512 27abd95016f5b45c2c77f8e2fa4533108f156ef53090789fb633a34996969a72e21c033404bd0fea3529b323c35486d4d4050456d796fa504968c4923b722a6c
- SSDEEP 12:TL1Es9zmzrfRmBEyPbP/hr/gW49blqYFlwCtM+/0Fl6OMi7:TLvpmzr0GSP/h1499FCtlFwK
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 4bad09a5378900b75890c4f3dce09f050360a8ed6d9deeb0e5cf0c9964ef9258
- MD5 73b61f4f45848d8a37d579a789f9f21e
- SHA1 47df222c6f550469fac387e03215894bdda5bad2
- SHA512 af4902b9380bdd2bbe0db0ef6f8543696cbb8fc72e2da2ed8a238ac2548473e0fd2afea87400614ee5de8b93ca732b17e4ee2e847b531eb3fd266286584e7d9e
- SSDEEP 12:TLIEsE9zmzrfRmBEyPbP/qFiOLaOS/yAUbYUyWl/P49blqYFlwCtM+/0Fl6OMi7:TL/pmzr0GSP/qsKaT6lB499FCtlFwK
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 ca3342c868aae59c13448dd105b05ff9e9bf35415e9d10036923c678109ea91f
- MD5 4e0656d5ae0bd0464a39d29ea4c180e4
- SHA1 ece00870f9e40f82ea332b1adac997bfa65290ba
- SHA512 eaedf417bedfa4750cd91ee38da19133b10adf7fb407b9f6f2097ac6bc1a6c67b3f15994acb30ffa215a39409df90fd145ef5fa4cf67943262bd5d6777af38de
- SSDEEP 12:TL6uEO9zmzrfRmBEyPbP/RFiOLaOS/yAUbYUyWl/P49blqYFlwCtM+/0Fl6OMiv:TL6kpmzr0GSP/RsKaT6lB499FCtlFw+
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3
- MD5 e3f13c7d7678604e5b293f6672bc0ed1
- SHA1 b16c998ac7ca1db79cd4983b207a292ac1d96e21
- SHA512 b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4
- SSDEEP 6:l9bNFlgls1gElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WS//:TLuEgE9zmzrfRmBEyPbP/Wy
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 455cb1b9b7c6306466ec6c1e96d054f4f19eaf7fcfb0d15abb720d440a94b396
- MD5 140c3182039cbbb1ca13e4b128ac7fad
- SHA1 0f8d59d6080b6915c3bfb1564ccc76b30fe06e95
- SHA512 58f62b39158bf341b3a67b7a750ac1ada41a863df958e48e33ec187b0696ad1632def8587e06984ac56594944a033b74f4ebf13d89ddc9687a13d9beec7a755d
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 5c5378ea5f5849823972936fb48459357174124b80c6dbc504ad02d640fabe3f
- MD5 d4e9b7a3c113ee746d5e385107162add
- SHA1 c4082e6f2a79c59227a706f79856d8af431d55dc
- SHA512 ed8a915dc7454cc8082de0374af072a019238a75a7a15cb5d2da3b1092722ea66bc74721eca141c4d3c5a058239e0d83a201426b99a3738f305ebe4a37060aac
- SSDEEP 6:7+/l9s4n1yg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKbn:7+tUqLiuWd7RmBEyPbE
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 484dbed7495ddae6121e3600913240ff615154718bf6c91e77e6838afa7aba03
- MD5 291f73b5cdcc9fbe4e6c94995663d315
- SHA1 09f044a3f5b7526fd37655b66122351c06c52755
- SHA512 d76eff273058fdcfe0988090ccec1134c921873f443ada9b81dfddc800690a02cd01b2d0e2bf342d186cb36e79fc13289ea3ddca597125a29e674dca6f55678c
- SSDEEP 6:7+/lwPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKZ:7+tIqLJdKBRmBEyPb+
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 552859cb29c10bcd986d8073ae28994cae27ab063cc3fdb5fcd37c6210a54035
- MD5 d23254236ae316048843490c14c6e4f4
- SHA1 d6f11cc6dc98734247bd3b884796dfbf5fcc7e2d
- SHA512 eccc9dd4167a1d328bca0c09b989785c3bab739907b85e0197b11b62f2578c1f8ba09f5a51a9ce76f62fbfe55abe621a6e083e87545a5757241f147374b8ca42
- SSDEEP 6:7+/l9S0mHPg9bNFlqhO1oAlOERX4PBX4ogLugMBX4suuKolM/9:7+tUXqLmq9RmBEyPbW9
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 330bfb8d1a26919092efe6cbdf585bb57066fd80d148f0cc611c31b865272f54
- MD5 9774983764fabea283c8924b2ca1688d
- SHA1 a7c454b660f2bdc29609494cd515749641979b9b
- SHA512 50fd2205fd3f5293d3bff5b788f912694d71973b34d1f89f31da05326afff15c9c506433a06525ec22ce5010c3d0bc1fa2c338a3daf9b7aa53204034c1ffd8c1
- SSDEEP 6:7+/l9Kdg9bNFluls1OElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKg:7+tEdqL8En9zmzrfRmBEyPbr
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 d3318f3974c1f5560f0f0abcc2ce71e3b02819976c30957a3fc5d66ac986586f
- MD5 24af3ac2e86b0cc8162d1bf1b1d59098
- SHA1 84831cb482a5d40da93f164253c4bac3787a75e2
- SHA512 e760a1e46768e118f5ca5f043aee763435c61927c6ff4132e1b1b66b30279f63a77fd2e857db10a06b2903ad004ed583490eb325463b55bec68060f6505f3764
- SSDEEP 24:7+tUsKaT6lB499FCtlFwtqL6kpmzr0GSdc:7MUpa+lu5Cxwtq2kArSdc
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/files/PersistedInstallation2638935014324314848tmp
- Size 557B
- SHA256 8cf91d550ddcb5eaf35d7ce79708648ced61133e734b48ac11bd0e77ba4508e7
- MD5 ab8d7016b876421e961e3be2b1f1be64
- SHA1 5e0b8fa9f345c95c1efaf26f8a2467b7b0ffce12
- SHA512 b1826c9461d8c797b138d4bc5417a970190a3c1392cae0de4add47dfa2f0113c576666911d687095aa6992767348bbfaa5a16365601f609352e39f059f046afd
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/files/PersistedInstallation3728556612566218220tmp
- Size 90B
- SHA256 6ac66a17c5f8d70df3a680bc8ae1b864cd4900cab94f4697d35aeaa8aae06398
- MD5 9d7f79ffe1e8d44e01da64788ecc0344
- SHA1 103bf20f9d81269ed18624b1cbfeca7ba1e94672
- SHA512 022e24883a28dbb3039f5c48aebdd4b4ef192a318d91dcd7c32c242559c9238c70dda29f2fdb8232c290a32bc501c19e8e33396f7dc161f2f48c95233f962912
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/log/log4j.txt
- Size 3KB
- SHA256 e3b1d9e927e8aa49cd1867ec971db0d2d77f929fee566804f2deb22b6c74072d
- MD5 37f9898435bbdc3e0528f3193a5e7d90
- SHA1 05cdfdefa5eff3ad9f2de17707d498263a6e566f
- SHA512 50d3df872e1303f50de06a7cc8cd135aac9d4a486447740c2b555b817521e2928265f40b2ae1eaf5e4dc4109c5a045d392ecf058e645ea518a978fd86f6b310e
- MD5 SHA1 SHA512