Analysis

  • max time kernel
    18s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    29-11-2024 02:28

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4312

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    4b42326a85c0c8e222c1f3ed94bfddbc

    SHA1

    8a2ca45b8b39700260397947d35b2ef974dbc67c

    SHA256

    b7a9d1ed281ff96a2ea60ecc5d4e28eff3387649bc7c993e34884a14412482e9

    SHA512

    b2b94dba59210f22a3c2d03839e644c350209c8a9a7a15d474b8e033ecb25d2be15c421a35197778497033956425848a01e7a22df6c4c0256345d2391e0492ed

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    809c2206ddbcc475a843da51b4b39989

    SHA1

    af00fca94542a69e734fe95cf6d79f450c2263bd

    SHA256

    e997249cd066222144a4618b3d3472e54da9d88cefdf6d43d665d1b70beba20d

    SHA512

    f48f382204c687e219ff5f23507ac473b991bf1aa26c5d61d56b7b6eb135b18c72e0fd951e159d03267ce0ccc75b2e687623b13ca8e2a8deab7bff83fd7f0cc9

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    59ef05ce233d7c1ad717925e51936c19

    SHA1

    aa76aa583536582833f097ac62766bb900ecd0af

    SHA256

    d6c63887f6bdca15a711c0e85a2cbcfb88d862a48ff4450f0cfaa299b21116c0

    SHA512

    5134036b8520ed90f2d906db11d462a9760d01209054df83e4bd353fdf5f21cb08caf5c7895dd8c72f4b09c92738ae5c3306aaa535707c9d458495fbdec2a41e

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    b1b414bd130c992c069ee5e3dd788e11

    SHA1

    7c2bbc2ef6096bc3201bcd9200dc933ff22823fd

    SHA256

    a5a1db153f4f68ab425120e20c2fbff41cdf1d3336cb4d2f6e46ed60b3961d79

    SHA512

    4a1d2752782e53fc97b2ac70073f2febbd442a8b19fd510da96822e73699df6a85b0fecc6fc556bd79239328c3ae7e3fc31062e776bdf7a5c847fbbb2109dfbb

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    8db0edc1a2ade1859bd4cc5874ba1611

    SHA1

    9e472e755b933635f2eb3d8751fcf2826aa3fb07

    SHA256

    0c524dd3d76c91b1f8cf385c8f5f721f24f0758fb3e2110c1f61b44a50e17953

    SHA512

    4030b0c94a4f2b34a057289179169f1f4d3fc107fa283340fcbc8b5f938df497b99c0f2a8e555fc57465cd515fa96761195741f11353dbb6265970ae32dccde8

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    bff7a6625d08d10761e3c4a5483c8ce4

    SHA1

    187d8993157d29d30cb5d4fd3e9a5ba0d2c290f4

    SHA256

    aba86fc83c0eb6685d7e0392775590e6279d3a88c6dc10270a617738c35439fb

    SHA512

    de7862fa424d4ca9730efdfebf67a370c7f4fa4243f396491c4e9c542317cc7dd30240ab53c7ea0acabd928f8a7941fb539a02b48cc595e3f74d886cf4e870b0

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    4fe1d9a38c8fc17c21e3895976ad9e12

    SHA1

    4c81a82676118f7d12e25844600809a8e63b95ca

    SHA256

    1e0013cd445c0a0841e757e3a06a8e7844f0b38acd690acb767dca83d39ab76b

    SHA512

    7ae170277720cd4600da759cb884ccd8e833a5623c584fa9696555d2c9e7caf160f29469d80e3a4c683bd6edf134f33ccd39b20aa2db148d673e7aed3ce8a35e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    a407a4abe613b98f7ff142866d4b8e0a

    SHA1

    b20d4e7a64ac134eaabdc60e71d4a4ab04554b78

    SHA256

    4f78896698b92a7e81e0ad08504103aadb678dbc9792673968d8c6b10ad4e196

    SHA512

    d4dd7c804351c6fcb5dd63f882ded16a9a4113df91a872f79b65f60d83c597e89435b9c63afe1413963bf1ac0f83573a78dd99141ff8268b0c9522ac13280394

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    98990bca43e875f71c2f7337d7178811

    SHA1

    a7a0eca343e299f7d7f7f8de30f00e938ab07947

    SHA256

    6011b64df29d55a5cb63c3408cea9e5918fb8eca413f3576a1b6b511d5592b36

    SHA512

    de3f6a612de45d8639f67158ca9314d99e072eff01e01be22e267e1e462b33dc9132e4108a9a523b76b1a0285ac5fe2e2a6b8e3f6afbdf39bbf5dbbcc06be1b3

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    c03648440ca2d799033b4fd387c779e0

    SHA1

    96814a5169e973a0688c805e3b6c44661f601695

    SHA256

    e779b42ee54f48b91940aa0a18990017a72bbc793b545b8e6a4c3b07b3d538e6

    SHA512

    1e8dd46d76c3efa23d8cb03c6270aa5b09bf90d674b023bcecfc41bb7a04e616a836ed7c8929430b487fc3bf870e3e3d04cd68c48f6912ee05d3392d744aa5f5

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    230e9c988b37ee59d579ba037e7661cf

    SHA1

    072f714fd13d0766a3b48f4e3a7f853a3c782341

    SHA256

    4906a02edf988305550243715d737c7e61c7df093b577ecde9bb6ca37f71b931

    SHA512

    7abce2c7cb9a65017cda725c185e3a5813397782c1dcd460132904b91bc1397200af3e129fc580c642e24119f6bedb73b65bd0b059d5f92f3a7b45939cc00bf5

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    60ee1a9c34129202aa95e71928df09c9

    SHA1

    3ac25b7ab83cf2ca3ea995b13a9727273af5e6f6

    SHA256

    6fefbc4044f83bf72c885f664a9804c7e6655e0ad0eec44bac8477baee6b8199

    SHA512

    37b283e4c87e217a92917fc95ff38a8f8f10b9cc2bbcb1464cde518b865aea0e88310f04d9558ced5cd61053bb953a79c48cf79e2ab0be360845cf610767abe8

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    8bf9b722b6a4d91eb2f49c8eb02008ad

    SHA1

    a6b6fe3b7d346ce152c99d67332de5ad65f1d1e9

    SHA256

    f0a53ace9dee146e6a059d3d635ed2ae8fa17aa0223b688e59a04d9b8ced8f1f

    SHA512

    2195e55f80a97ed53971d830f8074c248c96f2447ae4c6051f9fce473b83b7aa073999dc42e1bc170fc52d0759e5d2d9aa8b998fb3f6187834551d759a3fd56e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    4e50daa4deed06e516f7db469ec9dbe0

    SHA1

    f665a27f7d2db06ff93d993e2c3de544e7422d65

    SHA256

    bce074ee3fbd2b85bf659d4a78192e4d6ea260ba925c9791c0b630377f8982a4

    SHA512

    25b567433220e19c6ca12019375d115937839ee3a695e48f27df227480c882ce3833bf8b9290773bfcb5c333b4fac8e602b1b53d0a71d971324999e77e165bc5

  • /data/data/com.systemservice/files/PersistedInstallation2455480368288390182tmp

    Filesize

    90B

    MD5

    a443581132e02599a1b201b046b04e46

    SHA1

    0912254487d30f84571ecb6b1faf44ce41d7b26a

    SHA256

    2ac727d8b337346233da1e29c895ad9dd003ca21db03bfbd83277dff9e2b4b9d

    SHA512

    92209ad5d10b519a7c54fabbb07be718ab250bf99c1d14803e0c409c96848557a636141d52a1c24e1c10d9e36d21a9e4e5586374d823543b1323d2b4f34bb015

  • /data/data/com.systemservice/files/PersistedInstallation3915167060526919187tmp

    Filesize

    555B

    MD5

    20e23ab674951285b4d227912a81fde8

    SHA1

    71e080e08cf2d4758e3f1432d2e0ac5a1472d711

    SHA256

    76f64b7e9c18cfde1d3ac5f5e1bd88c3d5d075cdd8abd480273be3fcdd78db3f

    SHA512

    e45ebe74ae4923956c4b441c09da24cf70754f6021d1b0b803b207677b7269f462a444321193a963d6e324da1625a64c02304d177f8fc68a341bb0d05f9d07dc

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    40a95a50b61a6d65f380d9d52202f1b7

    SHA1

    b518b8fd516881ed129a2755c8b60e6fe9ff5844

    SHA256

    997a9e1bc221f190f88b07e42c142226e4b7e5327a58ba3cf41f60c3d6cac7a5

    SHA512

    3d43f545a0a1f778a451eae81e2aaeb0687056df8e0da3724cf9158ffba3224edca1ab0a1ce8cb986312be649f891ba845281d0fc49d42cdea022e795b10e0f4