Analysis

  • max time kernel
    18s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    24-11-2024 02:36

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4305

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    13cb8875c619e3f68e8ecade616131f0

    SHA1

    381b1e291a6f6a005d3929778260946832f4f04a

    SHA256

    586a85f24c74c6b0f6aa8e79bb8705a932c65dafe49daa26f4c253e3b8346f5b

    SHA512

    5b72d4cd6aba7a70d307cbeb867144a6486e0c1b20ccf5c00696b7199143dcdfa25754534aa354086cd1e5cc2b657faeaddcd3a6b7e49fe9891df93b99a9447c

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    b448bd17f7984bd419e0931cba795e2f

    SHA1

    86b8d0a9746305ca9fc6a453805c16583fc2282b

    SHA256

    141266e3438bbb6c5d27590565883941bea139778d30c28d74e7782ef83c085f

    SHA512

    5d0e503d8cf8bea3987d425c3b6782542cc941e828440e8c0dbdc6ee95f79714f2dfeb634b6ccdbc129d20e280f88014419fc60918f1b7e0b7f72f82d5f84cc1

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    eb046f3bcca6d56739c6d564c4335ae7

    SHA1

    dff0e9d1657c7210fbc801d932e27823f1e661a3

    SHA256

    6714f498c38cdd20cf8e410ed8eb8a7132224e5123801b3c80d5a61c1ce38092

    SHA512

    320ddbbca4095b614ed23728ce4655c6f94a3fdcdc32b863c169f17a1f96b6d0fa41c5ca20fde24f8679868e97c58c9028976e995d0c329edc544868de1e7369

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    d3c5df54a06b0ebc587f42831865e758

    SHA1

    91e78b453a3c881714c7c17b9131f7487ca2054f

    SHA256

    98751ccb30053b5633b6caadf159d1d9c4b2519c8136ea91da86dcb6c1afffc6

    SHA512

    8b7b15e142c0dc9197b4b7819beb3bac63886c9320c3ea42b31c535b811b919ffd59748b4ff1135de093654f1f151d2d2ea7eb7bfbbfa34df921a1643a2c8e07

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    c29468c2c5c1ff5693f8864e1abaa960

    SHA1

    2b85c02a8f1d51fa0c6616969819046f768d494c

    SHA256

    594ad44e5ab1ab74c8298fb2cd3301cc4d8257e8844fe6df5d5b53d3c8ace23e

    SHA512

    0613ec11029ac6cdd9d471fa5c61634b19766fa202925f2a841293aca8ad2cc13e87743ee01980dfe8be68248f81494f82559db7cf7bf329684a6184f799811a

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d58b7764eca55fe23df7b3a65c20224f

    SHA1

    a8837288930e7fb1bf817c5a0278c34ba018a0e4

    SHA256

    f22fc824313b1d4e8e8551c4d4928387329a94d2c3ccf47272b93aaa48b667d7

    SHA512

    29f795a3b4d00b9647610ab923bf46fe5b667aa19a149280d419df180b42645246ba654c72c509f46a7d2ac47dfeb56bd989b0160afc301f96e8d611d897a229

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    c1971ed336081d62077d31e96bada24f

    SHA1

    2639e060dbf32767ad66c6ba84e16c963c575904

    SHA256

    c8b6321f1393d54e051dca6cce799b486319b94065d2b0d2d9bb833807506550

    SHA512

    b58c2b0c76ce1473d03fc2dc163b81f40e834319d9e48b1f15fcce2da9ca5197eb00180e9bea9217d5333042517ba1945434d2a23dfa2fb4775d6aa2ab68f18e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2666d3325c79b0de677903155fb26379

    SHA1

    8ef598cdc795ddfc120dce97efcc6a54bb373028

    SHA256

    2d00087d8ec69153ffa37c108ff767516493f1fcd7408f99864101272c318076

    SHA512

    44fdd95880d4a06d695d755d6315468fc2bceb51304a9994c4efc1bb035f81d4b358f1c41e99bc71c317f75756731b47e6f895152a9a56a4504929331abc3d2a

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    d8afb14620979490c0f9e5ef098e4712

    SHA1

    1feff5b24c66d3701431916f4416cf07b0bc12bf

    SHA256

    b0fd97e26c654ea9e2627a88e0a7e3db277ccf62fb49409b38da4ff9782c7297

    SHA512

    a8e6723d6adffb4bac288848d950c82f50cbb48f69ed4fe825c359bd28bf1799760158b3b8c34e5b2dde4a705a19ded103ce671338d0be516a4580e081d6f1a4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    3bb40816d8f975c98faab8cd39800124

    SHA1

    6c9785dcaad6a7cdb8759a88871f861da14a9e50

    SHA256

    33a6342011ce4350c21ce34857406ad9cf5abc17a084ec97fe489f21c61dd295

    SHA512

    8386740f1e4ea0b0a3c6fd29b2630fda580952fee3c57d167a00c71d695726e8c01ae48c468772a005516f99ff09cff92d15ac5cfaba75d5129e1a42811584eb

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    c213c0a947dc2a9111de52fc12a0e31d

    SHA1

    0ed4a4568c0ce3d8a98718886a4ec7af261a0a74

    SHA256

    3b35caf501c8332a2f8fabb7f4b1b0384fbe4447886995e7352bc2d2f362531c

    SHA512

    c371e1e190f0e2f97c46e3e56876520f12c83eaf3ed9ce1ab0e753c4a8da1677d2183f18968b1b5d971d9a8d202f5dd34e0a67497e106370f698de3442c6b605

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    2ba4b637119aa8cd8d5d2e046e4718b0

    SHA1

    b1791dbf0bef96735aaa78d977e6cd3d91b81671

    SHA256

    d368f13b131f7cdb925c8605dcc8250d2a1beb0983fc1b7066c869c72bd1bf34

    SHA512

    5bb049a91f594c8dd69fe44495cde8bec454a8124a270ca881b3b53c2e10ffd904c544d327474b0bc5b04a52812fa68cfaf9787c63047c87158afa542c654c69

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    2055ff7286bb2fcce8d96ea12697a344

    SHA1

    e72eb5c6b0ccac778ae0ade353b1119fa33de244

    SHA256

    2f2daa09fa35afb54d31f061174f1291b6c1ad2625ebb371976d1fd81d1db897

    SHA512

    0d58e469806a4a236296a81227c66e3c997c4883aa51c362ba785fe4f4f3735d1bc47e8508245369ff82aafdff588ed8b75ee0f5b865a89731132deb4cd2fe09

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    83ab9dbc2b5950291652b0f0e49302ff

    SHA1

    9261a008c83fb006516443e5bbbb60ecdb34149e

    SHA256

    6e083ce8d6d914d9bffe5361a31fc2236aeff1788f1a483a8fe1f277d5f0bbb9

    SHA512

    1f995826afcc05b7f571406431a89915958aa455bbdbfc92e3eb1c7849011ab8cd0d039733dcf2853cee3353cd03d7475fe98abfa8bf135f9afb0d08fc97684c

  • /data/data/com.systemservice/files/PersistedInstallation1964216941575424376tmp

    Filesize

    90B

    MD5

    6abaa2dfca16712039fa81e2ca7531a5

    SHA1

    723f7250ffea88a0becf7bff1a2ce657e8dca670

    SHA256

    731c3525421ed34a23ff4747f45d216149c9eade275d0db99eb8c176a402f9ea

    SHA512

    66c577354d0198a0a1daf347266b32d07261b3f2ec8758042c2f16e52f2ccf82993ce63065e5fac0e0824e57048b3424aa53334efbb354b9e8f1faee637c3fc5

  • /data/data/com.systemservice/files/PersistedInstallation7246216236106997681tmp

    Filesize

    554B

    MD5

    5b2d74e7d0d9de4d0543c7cb613e05fe

    SHA1

    33a1d14cfae0c06e5984e6424668599f2adafc3f

    SHA256

    0a78bb462ebd7f35703f9494ac137ba085d9e9baef1d0db2d568748d473e9e0a

    SHA512

    a72e18038228410c709d2b8cb78153dc64eb73f956d43de2632fc18e5e466ea2841e8af6e5e9c767dd5c03752a25d483103385d935fae883855728d1e8a7ca23

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    22b2f5c67a1439939858de166a246f3f

    SHA1

    93102cf2cdaec9ca180aa20569feddd621b7ef17

    SHA256

    ebb52538795c25f524fe794c73b44d6d7815fae95e14fd8521d72683989e3e74

    SHA512

    3fa204ea3aaa99a23ad72fe9741672b8fa6b9670c3e364ef6c0c5c1ac13368c4701061860771fd3b7056a19f395609b697b4832ca78a9ee336deb5e3d364023d