Analysis

  • max time kernel
    17s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    05/11/2024, 02:39

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4338

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    de57f623a4b21868ff290ef0b727a229

    SHA1

    42af8f24f777ea202456af04e6fe536e2f30e372

    SHA256

    aad2a34faa8e9602176c0d8fe386fe037999b0d75126739474b1ec163d1b17f2

    SHA512

    21cc278d5698c6ad771879f3892e8677a300ec24705642767db4c8c067793bd1ab98f2e893ceb3f6870f1f1fe88bf6d7d61c30152b52cb1860c73e3484f42745

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    667a4ad847666b8cc7a50bb109f4f0f1

    SHA1

    006f7be196aec685304f8c450c30c77aadd6db5a

    SHA256

    033415cbec8d878ab1849d2ca20130edbc1514b3d0a05bbbbfa30e7d8c3da663

    SHA512

    532eda10b1d51c12fa285434c5e1e659b9eff9a9cfd2b877b85b19e0b5f7cada562243ff1c5cb8875bb6b7ef92f12e9d2bbf67a84d7683cdb81d4786c452acda

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    63b43b7395910a85d99c434ec3a3de67

    SHA1

    8b1b32328b334063937b28c5bdee53787d18cf9b

    SHA256

    e74a812cea7bdfbe414fdb0a58ace623036e7487e5ae1471de6c0801f3ed8753

    SHA512

    fd1c3d460f9bb7695298198d4d2d3f65829cfb4d57c5bbb25ead86693be2b13536b296e31e42c5383a6d68229df813dff4f580947be3956975f65f186c7f0171

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    aebb4474e42df6f18c5d155946b690be

    SHA1

    4bde32c1cdf3ff53f24224a8fc45f277631ab287

    SHA256

    26327e2563855bd1af4f733fd2d317c62bd8f8fb67de343d4ee5bdf477a94599

    SHA512

    9f166f1eea407b4dfe2eebb1b29537601578235501aa47f514753ef6f031f8b420bff8e1077d81acecabbaa1091e74e816b2d3eb1c72ca77032287e2ce091029

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    65d75dbad5828f6adc901fac6b2d3404

    SHA1

    9697406c4c4d2077d6c2371c0b49a13e153fc7eb

    SHA256

    de521a3a979bb19422354d2e952c029a7a29c606c8eee18197e179362c6982d3

    SHA512

    b65693323efe49d784fe2e486af232b7921ed557cd37f99b7b118fe445d1348e833281299d6bed021eb3d6f08e708a26f5a523167d6a48bc2ee01f68ba67ae8e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    ef108be80bc8e9135e52d0896b506d41

    SHA1

    d4025cb9ed899085c7f5a5dbcdb2762840cab8bd

    SHA256

    ed1e499e4054089b9f60f2e515fce9a4c7e65bfe8ae772fc209e44cff745e721

    SHA512

    af2d41843d7adb46d263d9840adcdb29ef358d4f3b0cd4d08c6f32c866ffa3dfb77ff3c56fabbf676810cda0f11c15e4b354d77f7484cc8553e4e02293134992

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    3fdd2f6a56fe84ede41a92dbfb408b5f

    SHA1

    37e2ec00a2f536b0bf85a83727bac735133b9be4

    SHA256

    207c7f4a8b1a3cfee6e9c1851170a1592f404e44b87bbed318c2cdfb4ad67127

    SHA512

    b34589bdbbe6ee15b1d0a8ba4cdac6051ab64d284522f131bbd3552ff66cd424eb3c9ef9c5d0d71f381bb70312a21b0ab22938fee9f6272d264777af6a270a0a

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    ca0a6cd8fe3d311cc2adc89f448b09ac

    SHA1

    8a7d95f6f3b041920708eed82224c2e53f37ca39

    SHA256

    ec6bbc29d13dfd53d9e35e52bdd54d4663b8fdbd489fc5db6e14f5d50b2052a1

    SHA512

    15341e7784bd8b03dd5b577ee69d7574678d20be6a9dfecb2041815027573e010494c2265dd1a80cb679b0150a872f810965c5d263669fa929186371092bad65

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    fff71168bd76e0e1319e9578693fb77c

    SHA1

    aef4189c51e8fc2ff17e7c1bf61272792e1e524d

    SHA256

    7691a11e9da13dd1a765cdf31ed9090778074978db64fd99e2c440270e13eef0

    SHA512

    4c3e88c49a35de304266c6971353121537b03fa2b224305d150c8a0fc769954ca80c78a69e0569b40c32d22474db8cf604f8fe1611345589b1463b8b4c8ca401

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    de414180986cf336ca0bf944bfa80cd1

    SHA1

    1f3bcacc76c9c63f3f206b1944cac7fa55278e3f

    SHA256

    072483abcda86479a5282b59eb1ccc4b8ad7f5fc42eccd11334618e4ddabaf6e

    SHA512

    b7fe97a1d3096d5f0f1c01516cb23ca1f7edc1133c26a20f218c7390e71bba2bca0a2c6af8228135d65090028150db747a16146ff441dc040522f8e8a8ce57c7

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    3fddffe305197da3dad6206672013516

    SHA1

    f508f894a7bc0b531588c67092df77d0aa3fc267

    SHA256

    b54e4847ec325fde6287e2f093ddad3f4ac132870b0a3f7ea79182d199eac1e8

    SHA512

    a5d8dfaa3731704b8850944644acccd7ea523d2fc41fd39fc044aa72da26adce36d082db827b83c4cc97151ff3ae64e511ebbdbc2c7043f8c4f17f60df7f5548

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    5bf4980ed2fb5d6df52bc1235c6b0941

    SHA1

    a512139242e308bf1e70bfeca13d205fd7cfd082

    SHA256

    86ab262fe8c90e6cd507e814ccb63b3aacd5eefa82ff5774205d453037f01073

    SHA512

    2df8b24c866c5a73bba5b2225ff93033165c5b0a65b092241c026dbcbd2440464a17800028f0e609b5266586a08fb9c38d2f4936c86ad14a9460d0fd0606e99f

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    4a5eabc8d5fa3bd9347271e0755a614d

    SHA1

    53a2bc4dd8c22597708c034f4e485479b5db0513

    SHA256

    c3292b802e37009cf21bf9387f131117f1a5a1031c7ab83cec4641b3c049c31f

    SHA512

    c6e7608a9e833a631c43167ee95691958d560c3c564e2d0e632f040df047495e16c158f52cabbd5bc4480e4ea7e2753ef1af148b4c5c49ab2e44548b70ad6b0f

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    7e1261dfb12e3ff08a210be3004595cd

    SHA1

    15f2cf2b8ce7bc7a8bde40ae5377ae9e968de3c1

    SHA256

    5d9553be0c813bd67597133e932620dcc61b0125edb01cba4582d5ea6e31331c

    SHA512

    8551be5db6abf61186eec8efa0d85b8ad9f99fc43bb9db0f8f2516536f230faba7aa8dade200de811ba9451875e7fd066bb5a6c029c99ccc3516f994c6a038bf

  • /data/data/com.systemservice/files/PersistedInstallation5561037715576384245tmp

    Filesize

    556B

    MD5

    2807a4e5834115036a4e91fea07fd871

    SHA1

    b2a898fc5f3609f1851b188ef096c6924f2028df

    SHA256

    fcfffebf499e643374d92c10c88bd1ede558306642c8fff4d32f466ee865c053

    SHA512

    d2c7c8352f7ed81cf6392a88e515d445f6f67b72bf05f6c6c8899590bbf4552a6e1fdf8eb1174ca6df782d1f8219fdaa10315d055ea3a7066017881991eaccbe

  • /data/data/com.systemservice/files/PersistedInstallation7123832249328482505tmp

    Filesize

    90B

    MD5

    3022bbb71dff5535cd0245d8f8db4c02

    SHA1

    02434ff40573a9f2af0eff4935b46d3fa3cb3887

    SHA256

    65657f8aeef955c52f2fa5dbc5311d107fcaaa3e86c3aca02ad9d4c30a2cc655

    SHA512

    8a5e742203cd16e5f64b102871dbb3bdfd2be72c94ee0d7628584144b2cfb8869a0f22d7c7b15234279b6a063a1e57e14d02c5165083e5212f7e998e15a7d7ac

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    249205e03341ab551daa8736280b3c89

    SHA1

    d2ffa38a8c3f803af2d3deeb64d0fa10ad5932ed

    SHA256

    af4b53c01d18f48a339f5dee6ffbcfdc099c02beff5baeaab9d636fa699516d2

    SHA512

    5f57d76ad6369f7eb4d10f4c6b65213de8ea8fa7f3260dbaa2bdc39817b027e42541093262c377fb4b656bfa4a88aa1b801c0c8a3e0d18fc209da1b7547c86d9