Analysis

  • max time kernel
    18s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    01/12/2024, 02:51

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4347

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    df4bc54eba3013393e5f89f0f6aba4fa

    SHA1

    6c9faf8fa68c7521c9064b739e6cdc8efe212e4b

    SHA256

    cfe5e259924750c66afba180d83159f1425a3e103739b7d71ce01e9794ece6c8

    SHA512

    cdb3d347ed65f940df56a2badbeccbce6b0eb9d68fc374012481c38ec3874e48dc3bf0b90aa4b25934da6e522129afb7e5b374ff879c72024c7f8f0e57665cb0

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    a196423426ce42997f04d0163ae79791

    SHA1

    2d752966b579510738be2f675ba257bc0ebf939a

    SHA256

    09d921030ca6ce38ba70700c915f26728c54566e2173a86e44be71831a189f06

    SHA512

    829856278b0040c4fbe5baf3235fb06643ade87d25e4aabfb67cd2d2c94c38d9a1fb4ba873b4e4f175052c4b12e8ce67f56a33b8e9aa84a4706a50abd77874cc

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    9df11f7732f6617405fcf0ee69289550

    SHA1

    8623dea378c90b29f687f6fd345708fc089a2f72

    SHA256

    d325ea697b45363471d022ec0a9f29cd98ee137caa14f07ad152b2ab13df71c4

    SHA512

    0bef5bce17937ce56e03ca489e93337dae2c565908fd0ea50951926705b12600f7a5b0a57422cc83a52034c03a259e6079b80ca6d40e0a4a6de3edca9a0d4b7d

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    3e94d0f813f5a6e41d417a5ec2565c74

    SHA1

    e219d06917e3e79487909d26a36df7bcbf2cba9b

    SHA256

    9a71866881ffdd2f7457c859d5dbf961925d9e82faa70c61c4e0cc4905d9f442

    SHA512

    dd02a67df767d350684cc3947ab1e6cb78070b40f25c2ace78b95e8c355e2a8e25cee79cb32e0bed8ccea5285358cb2d982291aa233cd02197952387a3cb172c

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2d48c322cdbaa9aad49cc80f2554bb34

    SHA1

    4d756bce896fd8b898819d7cc8f8c15393ea5b23

    SHA256

    dd1c1da0f9c694e52cfccfc3a042b23441a9e008a8e447361095708e3a29a4da

    SHA512

    54c2c1a89533ce9b20ae4d91908cf198da4d41fc527cef2a34840415ee905fda033fedd4555ba7d4bde8a529fd8462eae83a52ae6da373cd4a44f5e339d3de3a

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    bab48de4a9e42698510bcc4ee68dcfbd

    SHA1

    49502dcc574d2062791d4b8c56de9b31bed3146d

    SHA256

    66becead64f39e43eac7564c26186c0cd02277a2bd90274dfd2f3eabd9852245

    SHA512

    41843693298dcb9e60050edb2802cbd7b631da06c6e11225fd78169def07e081ba8c5336dbc45046ca6f8a9b43ed1f198c20b548e1a0d97882bee977ac02deb6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    8aebfab75a4cda5ff06aa5f078c57eb7

    SHA1

    e1baaafccfee6086545d6f3f63f7f00d68f66659

    SHA256

    40a91f98d352e224d9644f256f0985a8bf6ede8b161b8ac34807c2e095a95b62

    SHA512

    74cd07f330eca04c0255995adda463409b629b6b506dcf7c06ee364b2d293d40e523f9245ebf1c2923e5a86390bc4d7c965b3d9c41ce4e1ec9c5b1d7cac32581

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    024c06d6200121d510d23550f6817120

    SHA1

    bf35a639885e6b01fc54f4d1ea2a4155384ee7ed

    SHA256

    f0852d67561625c0f49e054fcc27d87130e2e7ff571be7405c2d4d5b4fd7a590

    SHA512

    f0cb8d82ae868173c7c477028c0013391e89e87176dc436b2586e92adea508a6358f591c8309e13383d87489db4530434ca49bbe86a89c477abad558d4dc5b1f

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    8c952589162f19f5347ba5a34e39da83

    SHA1

    b7dd0f1465be977363707c7ee4cab0ccc114ea54

    SHA256

    f83930c2e2c9afdb73a3457222134cd539a15f1f52b1196af760b181505eca1a

    SHA512

    4a28922503bbe4a678465e18b8757b0758724c5d13c1d8f9c4824968b9064c4644154c7ec33f84c4253b8a94a7aa0599d62d7b3ae33b1af0bcf0dc70dae9be81

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    e9bff6c1ef905f4356d7aec682f33587

    SHA1

    3e131aa90c1a6fbbcb07a6e523fce624404b1689

    SHA256

    27f758d70059ddd263908662ee4815caf8df3b325682fddc205da0a487cfa63e

    SHA512

    5b7db0f3c372dc11e2ba4db96674b704b23ebfc3c6eb7fcbfb21d4fd6df270398f189703a798e7097e0b977a24904a07e33d7c1664383a64768a9b8d90bcf5ca

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    8c3a22d85fd12ca4f6bf821813d43dbb

    SHA1

    900678fea7e23b8e127ca4c01faf9f221496ca48

    SHA256

    78d5ab19ecf86496f566306c16a56f62e1fb81f9e83f84f98a9b3dd7d5751db6

    SHA512

    c459669591e556c54a92dcf1ed26e5be5b1a1b0652d366ed4f761934a511fc2582ed3eafea8ebb3bbda039381c5b60f670b8f7e0bc03ee714dbb42b7f44b98e9

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    f30da7a1e89d5ff93a5b04cd4da185a0

    SHA1

    873c8fb3dae032b33db12b84b319ff427ecc0f9c

    SHA256

    e09de313d15e8e578b7aed6bac3fa743bfbbeb80809a4ac5864ab065f5c24652

    SHA512

    6266a8373720713605cdd2ef53f4a6f5c1f3866846b8d5f7a38c1d6b248690eafb05f267c4208d8a00d049545ca48dd0bcbc362a6b0acb2258c37d5f807eb97b

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    1728553dbd9578422defe281ced15489

    SHA1

    999348ddace427fdcbe838ec89b2f01da83a9b4c

    SHA256

    f83008ad3770dd51e848f916dadbdf07038dac74db8e4117147dc5106e0912d2

    SHA512

    f17cd7577eaddba36793b3eca2cc7ec7618810f07c00ed6f71eba70cb829d31bc88f6835d2126f3415b78a2aa1304c7726e556279421ee570977bee0b5a1a008

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    c2082f9fd6be99e0b78715f178f5d433

    SHA1

    0971f28c33bce5fe2bfb1fc0abe34a7d5b980c42

    SHA256

    367165fe1adb794560b294f2567af06746f352738c3c68c306a7644a08300272

    SHA512

    ec93cdad3bba9ad346a42e67e22d06ef60e24a350ee9485b633fd69676a793ec911812150f2ec66167a90a85f56756e693183057a2482f2b9ae8b0217adc7e28

  • /data/data/com.systemservice/files/PersistedInstallation1475999947166624114tmp

    Filesize

    554B

    MD5

    caf462e3816ca2d607f9415d812d2a76

    SHA1

    63805821251d91e6903e2fc8c9460a567d47650a

    SHA256

    e0afe69bdb7c5c0b2cbf72a8fb84a2a1875a02ba3449469080507e9daefa3e95

    SHA512

    d9991f4da44dbdee816dcde938aac8f4c675817cb04381f342b2e7f97632b364de05997600369c16d8e38bcc959fb2fffa2ac93cc6c3e0288dc2b3d878ccb0f9

  • /data/data/com.systemservice/files/PersistedInstallation7840646389161433738tmp

    Filesize

    90B

    MD5

    495bcf93463a9b1e9957ba279356962d

    SHA1

    512e9f482ca78dc8029f043ee0191caec120330a

    SHA256

    9998a94ff0fdb09065813b1514c986b931f8c92e29e097895e2508802fb09d2f

    SHA512

    d0e3c650c3a6287cf033c070b97d37ec64ac9781e07d6d8fe690cb1316b97f746f0f18de848891bf052111e0a1e8d29b4af391675384bc2f56a4e4dd9ec6f972

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    65baa6ad9b8179bbcc46a717dc9f0394

    SHA1

    f460df5093037870bbdf463c1ae9e0a1894d97a0

    SHA256

    d7729b5e32a9d04cb0088b57dbe10279b335f00e63703ad8d77d2f52ef361865

    SHA512

    a6f0611a40e5df64f851618c3323dcee16a890d264cf69ef247f9f0eb4506be2bad5a99937789e6e5fa1e280c78e2772aef4278a935257ae6cd5bd5ebb9e48c0