Analysis
- max time kernel
6s - max time network
136s - platform
android_x64 - resource
android-x64-20240624-en - resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system - submitted
20/11/2024, 02:30
Behavioral task
behavioral1
Sample
92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Resource
android-x86-arm-20240624-en
7 signatures
150 seconds
General
- Target 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
- Size 3.6MB
- Sample241120-cy4vxatkfl
- SHA256 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
- MD5 0366ae0abf0ada8aed90322bfe07dfd5
- SHA1 2f0779ce64f02944e87674745cb446c5bc620607
- SHA512 52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
- SSDEEP 98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
- Size 12KB
- SHA256 cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36
- MD5 163b0e3f017becbc89b9d7f330b78f09
- SHA1 1ef9cd8ac8655190468d0ccece0a4738634ab0f9
- SHA512 6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd
- SSDEEP 6:l9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKG:TLiuWdwRmBEyPbZ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 6c17d42fc021968a413663f6da57c004904a0ce3790de0437a44b5c1aa1b44b3
- MD5 86436d0bb7475ae10fbf409792a8509c
- SHA1 9408029a5e2b5bf2321c506583d98f5911ceff34
- SHA512 e31789fade837f5dcac83d63eeba98f3adaee56251a74d97fdb7cbd7353997ac014857e5f4d6a57b972a238edd73a2636e8ad1d61f2498b9ab81c28b4af71595
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 3b0cc339ca06440d407d598cd3f7241793bace7a81f98284d6635bb7f743a028
- MD5 eefeca27a35a0857d50941f508f33965
- SHA1 fb35478b1a3f6d0e4fd829b3abb71c2ed8c5f463
- SHA512 384f5542621288fe83098f50ef62119862f24ca5e89a82500e26e19d86606d66b981ea6b9c20df3511d4767f05bc655361e8b374980f92e63cca6805f0a899c4
- SSDEEP 6:zllgn1rllng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKK:z/K/nqLiuWdwRmBEyPbV
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/core.db
- Size 36KB
- SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
- MD5 045489a0639eee27bca52f48828cd93d
- SHA1 436e7966e7c019273c44faa4d8c5709b816dfda3
- SHA512 c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e
- SSDEEP 96:eMzKMilNJzt69l/mwICfPDKOjK0Eg745TN3PafDDKsgZK5AgZWgZK5cf/ShOqLE0:AuldjKiKvI45TNAKfUf4hI2q1UpKorKS
- MD5 SHA1 SHA512 SSDEEP