Analysis

  • max time kernel
    19s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    23-11-2024 02:42

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4347

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    aa195de10d747f5dd3eb14896b19593f

    SHA1

    b49a0ec5da717c576b82474bdbdc7275a9244146

    SHA256

    8e58b636736efe6d1ca15b6c18aafeb333b364f5dce7a267af6e3b6d31abdc7c

    SHA512

    04f357294c7cccdeddc760583b8e0827f35efbfa836354112c2b9168a9bc0f17bd91188305e3909f86dab478f4ec729d856de6d69aabec365636f8d70bc5819b

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    9acbae802a6d42499c1ab65bdb157485

    SHA1

    5b7e5aa20c713471c99358e1d78af8fd7ee1a30b

    SHA256

    a0a8559c231f6fcb464bd150313b01007ea5a1597bfff3eede18485135544e11

    SHA512

    1563af04e496015102c47f92ba008326f805b7f7e6a90147fe7d2fc9c8b4b775a11759a776f7ffe54b2b23e79f898042449e2339d3bd9d7131b2492b4ca00ce0

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    a871e86dccc9fbf72e68e056abf4a2cb

    SHA1

    d5cd28aa6f9605a44e218074c2d65fb242dba240

    SHA256

    f8d82d597af4a605497a6625bf5d774794cf083f3fa9ceb2599024aa5860ec47

    SHA512

    2bf635e07e63cc89fd1e1a48558b99f687b71f7ad3ff279d9d563d684bdca0b56da3db2a12dcbe70773e1b43643cb40932958d54a6b3b2c5c63dc5432e9a30b0

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    fd096e33f3d8d0bba084d862ec651a96

    SHA1

    811aff533d5a643bd999c1c406303479312fb0d2

    SHA256

    59a488963bed707ff98e4966ca948f3545939daafd0691c8bbce869b0df270d7

    SHA512

    63ab8439f9f5267143e435c6a37321dac09b5ae5cec6b48d6a7d20f6adc7c8fbdb41e057d95ef36d093ce6da48a58a136fa4cf14bbd695bd06b8b18176c67c9e

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    8e8eb0d0599780c00a5021b78ea7c551

    SHA1

    26d4fdfb16c6ed390e7b6521f31eb12cdd47f028

    SHA256

    3891fc837d51c7ea0c1f450ee0bdefcf645590297b20f80b87ab3005cf8191a4

    SHA512

    8125b8a7d0aa1434f8c9af4d23c0fe65d29866462293104052b85e4385a95711fe83c29bc3ff56738e5448cc94518e964e1149eda8d64d5d78c3194c8e73040c

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    450cfd998e5702f76179a846f89d8f4b

    SHA1

    cd9cc79cace091602607f361aea155545deb4364

    SHA256

    462055d6709e371755e9def0a0a66a13676914c583d9d0cbd08f269b12697911

    SHA512

    937e60e7a13d6e0ad6028e7a2a4059edb6877c92ca09eb704637ddf17c1f748255208310e579f5e83eb6fd2c4628038e0b6ce9fa77924b2397a1d99fd21cb4e0

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    1ae7e8156ab841f874be3ffcbe947c71

    SHA1

    2826bf50ee19642e8565ea925070ccfb1f2ff7e5

    SHA256

    0e330038ef75a4c46b7bf971326d172d59854f423707d15426abbacc1a045277

    SHA512

    24e14afe1c9e44b12b1bd3bb8960247fb9f3249372cf2ec98a44e406494079aeabd0621c3380570b55a65c757aacf3a17e1c813c19b41fe123d60d0a7e51d3c2

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    a42a21e15d6d19347397f3f779883274

    SHA1

    9ac163d65ffd44648f7fd98b2b75c27c11bd339f

    SHA256

    7555abc8344e5b33cfcd57ecb782670596f580de8e9700344ae73f8c8cbe1a74

    SHA512

    de5313223f425324c74207e46c3e6c39a831c2f31b590b57abdaa817f11b8e04b854a1f0a1f69f06f685e2ef424ad5cb54fcf543519465ad2f77aa0d7b2193c0

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    7946391c84c477f123367dc3b845e85b

    SHA1

    269c2d150b69b8df8062a202c4ac7a5409266ce7

    SHA256

    45333a4e8eb85b04fb07dffae313ba0590341c2b74092f3191cfbfa0ce245ce7

    SHA512

    4dabecaba86bd8322806a1675812c6e1e64c4127371639c7b60c64383fa5f6cd5a03fca3da5d638f95a24def5165c5e3bcf7d4a0e163e606014fb85676a0ac1c

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    bb444d470c0f0afa3f52bc0eb713c72a

    SHA1

    0e58d5012ed8952a06659bff2959ef3cf1259e63

    SHA256

    e3e01048767d7b3c511c9771520bfba6d653157adfc45fb2c3f62715f3b52cfe

    SHA512

    5550818826a1efc0389d84dab88e9bc3e73d981b4cf2e96aa309a31b97e3e72150d8afd9c4d4296abcdee0dc59449d19a2532c460dc06a2d9ad381a3083ee459

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    956791b5f5cdc610fe4acca655a77d47

    SHA1

    4537a3e609edcb5b9f00b9eb7a99513bfc9747ad

    SHA256

    4a9e088c9aa4d7523cb245892356f96ee42d21ab11ecb1680f2bd2d223e74a66

    SHA512

    59959eb43bd8b7d73c967f37af6574dbf29e05077569feb2704d3ee97003c4936fcf9d217ccb29a2b696bba411d5e85ea20bb3bef8b5636a9718097ffb3412e9

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    cef0b6c2ea0a904ee77c4f31369517dd

    SHA1

    235dc60dffc319ad93990b4f105e6d4c81e0d4c4

    SHA256

    7561b1557da98f0bc40cef5ae9949fd1fba96099f1e29c6efe368cf91083f4e7

    SHA512

    3402df6f472d093a51b0010e5b0cf7a295e651d6ad67e69574d5f7209957ca594716d703fb77390c836811083ef0c6d49cd5650e4af1abdb57fdb6c37d3d40d1

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    46352993159f103ed670c7938e8a47f6

    SHA1

    b04457e3f9107ce621c7099d879ea68270d1f8d6

    SHA256

    9f6b96853fac7dab41159f6cf111fa36936f3ae785ee28777ee8fa9f72391b43

    SHA512

    4f8d7d9c84a757f16f728e089e7e07607bf6f0ea1f54892e715588f1c005502946a58610c2ea5f8b4229055b3553208351ac8d289a711ee7ca8bb65c42b521a5

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    aa375426c5e873e471ecda58533cbca3

    SHA1

    39e1451d3ee17dedfde06db6f38ebcbf0d8687b9

    SHA256

    76589ffa53718c8785b3b1d673d54afb6c4909800994f6656ba2e315f5bf408b

    SHA512

    aa12a527d94137c215a5ea83ce184a276d7194ae37831cc90b87423e9f5bd75cd12c44f166e8538638b7e5765a8b2c9b1b1812534a5d28383c3406efb9862ab5

  • /data/data/com.systemservice/files/PersistedInstallation2298181032083477534tmp

    Filesize

    556B

    MD5

    f0287233a116505f8d2e02c66199dbfe

    SHA1

    28ad8f29d080324e77bf2819b60d1d3690b385ce

    SHA256

    82fe67fcc694aaf96519ed91d8f1e5c76bbd03183a9f15b8018656c8949ddb92

    SHA512

    99c9c7745ba2f135907a7ae62eea02c0a873241e7f1622698e777cc98147d63fcec53e1fb2d1081e21bd976d5ed047e9e987899e68c3f6b02031a85f20dd5e17

  • /data/data/com.systemservice/files/PersistedInstallation5750975506920935654tmp

    Filesize

    90B

    MD5

    8f86d89a4a3d8d046c25584b02a85ee5

    SHA1

    c6d9215437e5656bfa6998cb235bc4ee99773683

    SHA256

    6521c107b3a26b759c454c8eac963a208f69022ffa07793e64e0042cde4af210

    SHA512

    4379170519aef5911ab1941a122f6396e2d314f8cab3226ec034bb348c4230b1ac2b2d28e6d5a34a73d7fc917bbb61105efd4c584bf449772def1fc70f8e3b10

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    dc5c3a9717c47eb7764e00c017707506

    SHA1

    454006e3b0e42ecaef2afc0d2fe2a58f1759f47b

    SHA256

    6cac286106105a5e3c7c947135d95fb028f4835a90920d47a19d53d5ebf68d02

    SHA512

    a311039add7c815a713d049852b5bfe11a2867d4c5521587018d98216af905c70c7cbf52a8ae249f8513877c9096b6e222f5cd1067d1a5160321407770396293