Analysis

  • max time kernel
    18s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    22/11/2024, 02:27

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4315

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    18615d36bdc861bef736526dc5d58dae

    SHA1

    f329be674ef5fb540d0a1cbded34a8461f9db7ea

    SHA256

    359a6867c5fb15ccf743c95847d8e96247527d7b163894df8b36d3944d44ffa9

    SHA512

    d9a9cecfc77718119ae6f2552abba9198b71dadd26d99310a326aab64046378099323e992b17ac74d67d873de6a36416447278461eb8df6d7ab53f8a68182081

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    8ba0c82b8a92b439bba3997ebc0024af

    SHA1

    558d5354501365e6a901b980894e5110bd3e5b5f

    SHA256

    b58e2ec3a6e61c340519248682257856bfeacf041a33f8eb89182c3a79ab0bd9

    SHA512

    4e77680946293cd62dc952f01787b4fc8dbae3740a4815d155924ff3c487d365f5816dbab5ce69dba9560c8e2f9f3f93c0a5332ee5a165216ac681ad8e0c8d0d

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    4ae37e70c7b169ab7cbd092a9f2d2f67

    SHA1

    684ce6df883ceece5016234c56108e1444ca9ca6

    SHA256

    f5cb39042fe557d06848783e233855cca009e2cec6c199f3652d4aeb9dc956bf

    SHA512

    d46ed112ee97eb20ba5880bf59310caa78cf0a64dabafc9b0333ae6d9799fb65ec60a338465702c01ede3f9e003eb7e12c6e90b108bf1761a21e0d3e0f85e123

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    22d8c6ab94705230363c288333a393b0

    SHA1

    6f08c23428c0789fb53ee3e5425a653b826d17cb

    SHA256

    638110ae047e4b58ea0efd6f141f8c3fb78bcf163964e1542385c660726569d7

    SHA512

    32ca64d761e2354533965254a5e165d271a49c43cbc3674e3d027ae8c1ff2dabb442addb517c059b4016d23fc4c026346400d5e01a991ac83a6603e8084c109b

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d40a71ffaeee42a351b34eafeea110c6

    SHA1

    654c994e31cd8664f5007c7ce75ec2a98376fd6d

    SHA256

    7f291f1d812b6d178819560da04c44839ac614e604f70e4a9636827c86bdd688

    SHA512

    926419af3d5bcd40ef9f57840c849d5c77fb0afdc6afa04e549be50e16bbde5612b44c02d2f98e7d0bcdac759d04d6c78a645ce0329b7852e5f6be13ccaa452a

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    c0fff72bf13db42fe0a6270060fdc408

    SHA1

    5f84a2fde3dafc0efd52c774dee575e9a4c3b139

    SHA256

    3c9c98ea80a7cd997246d6c75bcf73d4b50002c19b8e7104ba9ef0b6213108fc

    SHA512

    94f4f3fb5f314369f6dbfd7dd726bcb4a2cb88646c65e13cc9f045efe403139875e280366bf4ca561166fbec0c5c6e3abed8a7996f2ec87fb8e6f3a400809fd5

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    9d4726831a37a45d20565902f221fdee

    SHA1

    81b5cbad3cc05a3005e2207a2d9c77ee18e05e18

    SHA256

    333992c2bdf282d361d99ceac8a6ab3eb0494214ffc9806958f78ac53016daab

    SHA512

    2479dea9ca51a84ac35a353412a5b2fb25c4e3c4e4f75224313f23f9c045f4a53c079e9fb3e5a0851b6f383a4fef6576075d20dda2539a9c2d036588a1c52642

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    66bf12b3bbe6a12c424c7fc7e4b45cab

    SHA1

    48a96135e03432a6784de8aca6c24b2709323c9b

    SHA256

    a7c9079c1b998b2def68b98bab3725ad90700461cabdfe775dfead3bcbc0e0cd

    SHA512

    849325e41e77b370df50995fb768bb3f5c8140528afaf19a7b7063d2f3cda8171b9963e9e9eec09869bdc16ef8889276ef9b7a9351deeeeae22078e732acbb92

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    d1b1acdeccc13609555b042410784078

    SHA1

    581821ab4d06f4d5fabe4f93974a1742c9cf1dac

    SHA256

    dfd97480cf6c6d6983ae3c13d4053f177091666d0e8e5b2cf5255c547bb5bafd

    SHA512

    142239293b0392373b0e8609c69b3f6a8a4798c794496bdb4ca0bd4cd365aeb55eec2afbd67d836330eb92b5fae13e88fed1c93a4985182ffbbefd4c2f42ac90

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    79f92b7a4c0ff9e519254687a4462bfc

    SHA1

    ba4f533af3a471196e36c63a5c9b298ae9501868

    SHA256

    dac6a310b399af1d4045353231051e64c14f0a449470a2dc237bf75284fd8431

    SHA512

    9b9afb4317c6fb9b1b7800acb01618cb4e20b5b3dd95f5852cbc1bc0ad03c2401eaa4a220ce6238313df5380fd2f5bfda29db3b99db0b3afc2fd07f7cdea9c3a

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    e8c61eb544a89c97ade2a4f11f0c7388

    SHA1

    37a7bf4f03dd27188cacd4d3784cb0fe914917f0

    SHA256

    4ff195336d18133dc09f13da9c94c311639c2855b95cbd676dde70d03fac0c86

    SHA512

    06b6163a5a3cafa4770d76b341666210ad8cca5ef374dbf5b73922fc3de3c80a16969ad64b5369c58d22e2db9c28f9cd174dc50d501e0cb489feb000dc179aec

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    fc9d65913ae5e8c581325aaf370ead88

    SHA1

    3febfe08997441d6b2c8602a9ae48ccdaecc96ed

    SHA256

    fb41235eab5f203f04fa569a886f57860417dc8f7ac24c55d67862d90babbaf0

    SHA512

    451aa450c3f547f6768c7d97c046e73b9c4820c03253c3695fe9fbc109f2d842af5f26a0f058489ee23640cd0a519fe53172fe985d85dc8629b2394f3397fc60

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    6b4e491c01d202e3df7f570df7d1a9c6

    SHA1

    c669974d2e1010cb7156768fedb125e7556b6133

    SHA256

    7c586a8a313e9aae6b0e88daebcaf45f78027b9e49827beb8e462c897f7c57cc

    SHA512

    86afa475f20a9ac57ab08a015d30a6f73f12b6344b4d4043a160c4c863aeb1ff61000bf812f5400a94c676f0a36f8c3b96552771aa746b789926520aee6a0d94

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    e7eef13cf94e0675464a57d69b03be12

    SHA1

    bc2fdd23d1a06562d609c8ddb0c9668e376d0a82

    SHA256

    21db59c21f136acdaa44811bcb228abf4a01cd1bcf5eaae68bec39e2285378bb

    SHA512

    ab1b54e8d281d3e20dc4dbdc2921e90f2b10833f1a07fd60ab4931e3ea0f041225b58600ceaca437bb1d77993ff73c4db504fbab7c4ee0a8d9616d9ad4fe3818

  • /data/data/com.systemservice/files/PersistedInstallation6156816282229143832tmp

    Filesize

    554B

    MD5

    4d1c1410b22fd883fc244dd48fe7ab26

    SHA1

    3ac87b562a23b50ce664276fddd17d1dad07a4a6

    SHA256

    da4a54ae7c75b1b554692a305c100416dc9064d847a70eb317ccd9ade3be8ae5

    SHA512

    a0f8faf0e7ba14e0070c78c5ce70b03dbc9176790acb083a55831b185c3e6855507b1351dc942ba068209ea8c825272d441bd3644bb4a120eeb088c0a81b367d

  • /data/data/com.systemservice/files/PersistedInstallation6338733501820803709tmp

    Filesize

    90B

    MD5

    d4366798b75041f48abc9c25be15ff8d

    SHA1

    592712f5af6ac44f522de3ecf31d056953c02021

    SHA256

    229da911cb94c673e03b61ffe5da23a677085d3752b36134d571b61c6f4df23b

    SHA512

    8f64c97bbb0010e36332b3d11e78f43758eabe19d8773d46accdd747b203c0a554be33f655a8acf515ea264f2e7ed28ef87ea92e75832e9ad0b385c2486ccf74

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    1b8d0dd19385547a10934741e6436f53

    SHA1

    f31a17cfdc8615f84fd099317f0f3ca3a45cd8c4

    SHA256

    9191d603793ccd4b485877bb9ac9f156652001167d1641a145aa902b93310d07

    SHA512

    d6fad9ad3537241814b46408b0737a7c7b79532ec0b0f96e560eb10a9f97effaed8aa7d63adf6f79e2c20115573ec686b3721baadadba091748953754148f923