Analysis
- max time kernel
18s - max time network
134s - platform
android_x64 - resource
android-33-x64-arm64-20240624-en - resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system - submitted
04/11/2024, 02:44
Behavioral task
behavioral1
Sample
92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Resource
android-x86-arm-20240624-en
7 signatures
150 seconds
General
- Target 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
- Size 3.6MB
- Sample241104-c8faassbmm
- SHA256 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
- MD5 0366ae0abf0ada8aed90322bfe07dfd5
- SHA1 2f0779ce64f02944e87674745cb446c5bc620607
- SHA512 52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
- SSDEEP 98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 58550f3d93797ce6352856b8e61fa08c5e6a53cf6e6b1e85afd60a5d9b56aa83
- MD5 e9b3627dd78322350ef105daf4e1189b
- SHA1 f9155d5206fe37fff65464cd342f0ddfa0edb199
- SHA512 ce2d4d6c10dd9f0e2c5ee16bd000614727034dceb9ad8fc97cb9bc700d471e4a34b335822c2aa167e4a4caed2a1d01aafea31a5477cfacb05dcced4d63cfc5f5
- SSDEEP 48:TIg59MENZBdUdndVd/729IvdldHlq8/Jq4qPSGF:RMEX0wIyNjaGF
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 e3faf9d61fa4e09ac4021757c26380407ecafdb270c0508d3f004e21cbd7216e
- MD5 683f3e3551ad550ad3b48bef8ef5dd72
- SHA1 64326288589b3d4e42562cad1f454dd926286204
- SHA512 3eb37ee33fc45917298d342104ad802bdf27d75cdf072b81bfd6f4529cd884677c44f1f69e8bdd17c2ea976f0605d87ee95aabe5a0fdcdf72e50873d17022d49
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 24b08afe91c11b5c107edc9abaa8f1cbfece00e507a3fb956981df6895bef0d1
- MD5 e3038ded6bc523e9c541ea585e3691a8
- SHA1 0fec0962b79e88dd2eb6d7ffd1e4611642394c70
- SHA512 c5bb8f56b83cbf2ad97b2968f82eab5b987383f36445bef3f34799c3fe5732cf01bfa6ae368da1cf23e8ad0b77f87796926b8c116b6b8de3875e95fe9985374b
- SSDEEP 6:7+/l9pJn1wRg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKyqn:7+t8RqLiuWd7RmBEyPbDqn
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 e35aa8c5664bbcb08c72cf6fab07ddbc02b949f7a93b65a024919256e764d068
- MD5 33379756cc4ed79d376ff9b28ce4b07a
- SHA1 85ce0d3a166daad55988e3160c48e592ca4c8c79
- SHA512 00c86f1e4715d67d52b48dc6a62342a7e0187b149f76659f50c4c7c3265f30b01eb6cf6ddb4dd3f51f6f570399ee7bdeb2bf2dadbe72a4a6db001793a86eb19b
- SSDEEP 6:7+/l9+0ll0FPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKmNkt/tn:7+t0cl6qLJdKBRmBEyPba1t
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/core.db
- Size 36KB
- SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
- MD5 045489a0639eee27bca52f48828cd93d
- SHA1 436e7966e7c019273c44faa4d8c5709b816dfda3
- SHA512 c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e
- SSDEEP 96:eMzKMilNJzt69l/mwICfPDKOjK0Eg745TN3PafDDKsgZK5AgZWgZK5cf/ShOqLE0:AuldjKiKvI45TNAKfUf4hI2q1UpKorKS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
- MD5 62ad4a05cbdca7f47b3206b7dbda487f
- SHA1 4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3
- SHA512 0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6
- SSDEEP 6:l9bNFl4/Sls1BElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEBE9zmzrfRmBEyPbBvOwk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 ef369333c531c2754630f03b189b0ed3bce2cd79032f0891a752d2ee0c31c1d9
- MD5 a3a2af92c48d151e83e1267e7240f1b8
- SHA1 16df4e3bddb171a140841c7a00ff7ac2df13ac8e
- SHA512 5e6a46e9f120ee0b89971b206f53020274a098c3bb305df7def89adec239e57c73618bfe323298cedfea43ac6302f13d1439a61eb8879882a357352fdb9da91a
- SSDEEP 12:TLiEx9zmzrfRmBEyPbP/P+/0Fl6Y8i/ei7:TLfpmzr0GSP/PlFJ2K
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 971a4f5ace6d64cff98503770200cd3f8a785900537b6a4e18a51c417bb5162b
- MD5 575a61b4d839a52a739d6a7efa866303
- SHA1 d5775ff26a1cf1d2cdbc7b1f5cddd19e0d1e42b8
- SHA512 ad367306e888809974ba75e7c8c9b7c44e29d3bf96ea05fd21775208578ea3025650a420bff8747b97be910808c357e0087af72b6576005420993b9c8722f50b
- SSDEEP 12:TL1Es9zmzrfRmBEyPbP/hr/gW49blqYFliuL8+/0Fl6Y8i/ei7:TLvpmzr0GSP/h1499Fh8lFJ2K
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 db7145bb97647404a23b93780f836ab1e5b56d593b0e96cac6ed5f04e53fc6a1
- MD5 82a4d6f972ab653e7239ed7204b7df75
- SHA1 d38a991dc660801d0b69b9e5be0e1ebdcca4de81
- SHA512 a58d3604b413b70ddc1aa2bf60fa9e5c7380cf27d84097876b5dd3fa6d238030b039962def5bc2593fdde96c9a2900ebc2d9b0d4bb1f373ab3689f49ffcd3dae
- SSDEEP 12:TLIEsE9zmzrfRmBEyPbP/qFiOLaOS/yAUbYUyWlyVlf49blqYFliuL8+/0Fl6Y8U:TL/pmzr0GSP/qsKaT6lCf499Fh8lFJ2K
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 656c3365248c7faddf1c37796e9adf13acbe05db0eb8a9a4981f3672a11d0e0a
- MD5 d2bef8d6be19aa590856557356b5109f
- SHA1 da10a0d98d0186ffe3c18dcb50e6c426fa814c9f
- SHA512 c17fca900e4d39e56c6fac7a4a0ec8ad1283cf77cd246d1de1698ec14124b801036ddd1636781c5be809aa0e4fae520c75ab392e53f846bf77b4bb21c254e880
- SSDEEP 24:TL6kpmzr0GSP/RsKaT6lCf499Fh8lFJ2+:T2kArSP/Rpa+lF5hIJ2+
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3
- MD5 e3f13c7d7678604e5b293f6672bc0ed1
- SHA1 b16c998ac7ca1db79cd4983b207a292ac1d96e21
- SHA512 b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4
- SSDEEP 6:l9bNFlgls1gElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WS//:TLuEgE9zmzrfRmBEyPbP/Wy
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 982ae81f8a54312a1d4fda019cc2ef9db58951cc8a10bf4250f7246ad73f2f63
- MD5 b585bc08919f95f319c6db789c2afcf5
- SHA1 026a51b2e89dd000a0abe04a3e4e4c6200352d51
- SHA512 916f8a5d240a042ad8dbae2b8634e130de77718cbeaaf78ab9529e6b07c55ad23d3a04cb6ea5a2ec8fe4a51a318ce7f839a4858f04359341eacb4a57e12076c6
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 b054f3cc476c0224dd2e481bc4d0e761156c0448c011f5e49f35cd1cd52a4954
- MD5 77ab40701abf840b2bc5d2ae2e03ec34
- SHA1 bb7cdb779115e80ddd890f1f13d7b9fc8ccb4630
- SHA512 6dafbfa6e6775c53599bde30b1c86160182b1349be88e653b7f8517cd50d7362f71375fd48bf586347c908ae4b0516eee0c429c33df34b5a5b26c2572d6adc62
- SSDEEP 6:7+/l9L3n1zUpg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKd:7+ttmpqLiuWd7RmBEyPb+
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 2cc25b422c3ce3087eb322504387ab91de2cbd204ad3953e392f2e321f00fa93
- MD5 9f1fe520a69ed959e7ed92f2525aa9b9
- SHA1 44ef9fdca503c44097e9ac24f31cf76a2c7e9eaf
- SHA512 bc836159aea8ded5ea49399f8d5f6492a3824fe0481fffb1bd31589df69893845ea0e073f98c7e5ca1ac16a356e8e2c89b1e24bfaf42bd65ca3785d07f08036c
- SSDEEP 6:7+/lSlgPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuK+n:7+tW4qLJdKBRmBEyPb5
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 9473b0ffaece739e7684e4a43787bf556ee0394c57721f999b0e7e7d12754a00
- MD5 361ee410124afe066c729327810b254c
- SHA1 7d0d510a0fab41c815d10aa487f3281ba9ffde7a
- SHA512 7cd66b5e447c297b8b9e1cba18da8d29a95b9bdc3d28f539ba658b97e50f26cb68356c5ce15bb544022993749a54797aca852154ba146a18f4693cc70ac5e6b3
- SSDEEP 6:7+/l9A4Pg9bNFlqhO1oAlOERX4PBX4ogLugMBX4suuKY/I:7+t1qLmq9RmBEyPbTI
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 d398d5767959e622b79f3352205f22de2b26251f9b880be8618233747b8e6fb8
- MD5 306575ea68fdec23be411d3e8b28dae4
- SHA1 64f41d085e4bb8e5f960ebf8f279dc1de404d06a
- SHA512 c30061c72ae44556a14af42e198b484f7e2b56320b7f82b4804c33c7b8b34596b1a20e5282b5da887820072b63a4950a34d18baa311aafd9e71b81675e8dc21f
- SSDEEP 6:7+/l9ijrjng9bNFluls1OElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0S:7+tcj/nqL8En9zmzrfRmBEyPbA
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 5e02b72ba1ab09703b7e1bc2e60c1f7bd2485bd7be48c3b2ced40802cbe13a53
- MD5 c1d4f543cb312f4a3a035118b525e75f
- SHA1 07ae7efa76f3755d69b860e4d349d1cb780e8cfd
- SHA512 a840b5a1fc219472467320ba0923320e1eeacb46fe320339a4b8886f212cfa533d9f2a38613eaa8809c8bff590de164ffa8a26cc78cc622b2f7348e95d5aa40c
- SSDEEP 24:7+tbbsKaT6lCf499Fh8lFJ28qL6kpmzr0GSXp:7Mbbpa+lF5hIJ28q2kArSXp
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/files/PersistedInstallation8651186175751199496tmp
- Size 90B
- SHA256 cf1b32c7d85cec698c5453a742be3ddef7687927dd8850bf1f0bf2a001348c43
- MD5 9fc53efac5cc4bce927cfc1ccf88e88b
- SHA1 f53521be5c6c48d758a845a1cbd53a2567e882ce
- SHA512 73e9fdc25c887bd30ec16d610866a2005656963f7a2cb022ebb6c44ba943496745b9168a310a46112b4232bf6eb85430ae0a7d332c43990f8b44ae624820a273
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/files/PersistedInstallation9111329271934986700tmp
- Size 554B
- SHA256 5dc52352bbe17c702dc9a48e6ec4fb1a749cd05ab1ac243a82189cb04999edee
- MD5 e7859ac8e66249ca5443721db5075770
- SHA1 ced073d96c9ed8b039950cd190cc9eb12eb37ec5
- SHA512 7d6937b2b0356a2285c03d1c724078cce540ebf4d4ded412660760f700441eaf8164269450fa2e5151b253c53a27b72c27750cb522f221a23a4f3d3626e08e12
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/log/log4j.txt
- Size 3KB
- SHA256 517f002bbd62c0fe5bb025dd3642c357b8ce3189efc5c831db12cf9069ad4e16
- MD5 41f798e2315a5a1909c9a0594c52f278
- SHA1 d4fb7b5ce2f03a82ba4d1e4fe16eaf93c1dd36ec
- SHA512 9b68779431b08f1aaa7f7c87b87fd88c3fbbe30493de08e1962d47fca997f65f4d2ab44f02c3cd1dfb87042bf7411fdbde6205bec818199d720895aea92d9858
- MD5 SHA1 SHA512