Analysis
- max time kernel
13s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20240910-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system - submitted
09/12/2024, 02:42
Behavioral task
behavioral1
Sample
92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Resource
android-x86-arm-20240910-en
10 signatures
150 seconds
General
- Target 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
- Size 3.6MB
- Sample241209-c7eblstkek
- SHA256 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
- MD5 0366ae0abf0ada8aed90322bfe07dfd5
- SHA1 2f0779ce64f02944e87674745cb446c5bc620607
- SHA512 52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
- SSDEEP 98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 e267b342be944dc153a7980dec20583e656c146c46c6e5fa884de1624d64ba63
- MD5 c11829dedba9fec020d43612f7864826
- SHA1 eda8612f3c5d18307f45db0433379219be0dc8ab
- SHA512 bdb6d26fd7ff7164e36dd5d326e5fc6e15366fc526846bd57ed0a40a7c1805fba61ecfb14fb387d9d150839fb52082ae997772125b37d3b6683920f1f9fced8b
- SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSo:rAMEX0wIyNjao
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 8a1443441899dbd241f44f79bed81f11575228e9c08e9c4b50741f46b353e7f6
- MD5 41e96e2324858808693713f8d279e4ba
- SHA1 976ac7c45682d0051a5fbb975d1539341f0dbd8b
- SHA512 6804ebca987bce6909b4d16f37259327247f97b95c91ffbebe4f683599212e6d95bf965d16cff8650073a2769eb8210e17f7a91ea881f40eaeb025dcceef08d1
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 d729db6e296018c9a747452af0a206f5ab8f54609a4175877728c72992d9a4e3
- MD5 d1ce046fb71a0f491745ff834b0c6374
- SHA1 1b276f6ee9b081591e1d2bafdb6e42c4986e974d
- SHA512 b69c77f32ac5765e65637e5f474bd3edb6698eeb958d320d07f3cee14506de763a49f1f40ec6c573b8221224810dbea7d79c422b1ee7b9be6e3c57828bfae72a
- SSDEEP 6:7+/l9zX/gn17ng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKot:7+tRXqqLiuWdYRmBEyPb/
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 9eca446b76381a2093f5b458df5f5d1c3e37bf0d9ced475e141a8e8cefdf8830
- MD5 bd50d3008d4b8712ec3c742d4bf6a30c
- SHA1 fafe14b2684ed2422437365abf0cf117ba48d3ce
- SHA512 b4deb62515ef7ae1f1cdfa5700e2ce0fa90e24f46a79bc0617eb5e7afb4bb793a54f860f8346209f857ef6fa4836dececfc99fdd472dde8d1d008a30840c2080
- SSDEEP 6:7+/l94PPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKj/f:7+tIqLJdeWRmBEyPb0f
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/core.db
- Size 36KB
- SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
- MD5 045489a0639eee27bca52f48828cd93d
- SHA1 436e7966e7c019273c44faa4d8c5709b816dfda3
- SHA512 c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e
- SSDEEP 96:eMzKMilNJzt69l/mwICfPDKOjK0Eg745TN3PafDDKsgZK5AgZWgZK5cf/ShOqLE0:AuldjKiKvI45TNAKfUf4hI2q1UpKorKS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
- MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
- SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
- SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
- SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 14d6f7774d9ebcd995ad8ad7b000ba6b4fa5da8390886deb1b8cecb9d058083d
- MD5 286aa86286fcd613686be6045a7836f3
- SHA1 124ffb3c4ac81fe2e8349110f60e737f5e6759fd
- SHA512 7e4e2815467f036b3d7a6be3a8befcf278df4d4e63664b260657709071640e88bfa48940c429389d09f155c86099cecb987e54e33042522da11f92b66d90dacb
- SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6D:TLiEq9zmzrfRmBEyPbP/P+/0Fl6ei7
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 e51d3842ea82fcd1622531b1922964c83e1ae2c570e5e189dc8bda6d3c92533a
- MD5 06fb64a3a6d5a998eba780b8595a83e9
- SHA1 8dd9d1a9f146fc604bde6ef8723cf09659c3e1e9
- SHA512 b41446cad7769b0d18f6aef17d774bcfebe3d6a211de39e17d16757c8bb8089bd59d0309de596a251b2c55f15da48420e7a4046df42b10ae956add6362800b48
- SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFllmo+/0Fl6ei7:TLopmzr0GSP/h1499F7lF7K
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 d47b57aac1cec8f2bebf42608de09e57f23040f89fc4bc653e4f7a6b4cb1006c
- MD5 70d2819de761b6e2be40acb89bf6078d
- SHA1 42db178459e0a94b6a16a6c9896e96733326147c
- SHA512 3f454060f0f8aac267bb6a526541f8e19ef6b9b07e3c18d90d829598ca66508dc1b29c55e93f0877ad08e78e1e10cd6eb898b62c1c3ca44958c1df50484f180a
- SSDEEP 12:TLIEU9zmzrfRmBEyPbP/qFiOLaOS/yAUbYUyWloiMtoS49blqYFllmo+/0Fl6ei7:TLYpmzr0GSP/qsKaT6lm7td499F7lF7K
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 1164f4a29878ba4521294a8480e915ac262d8c8e64d1cf16a04a81d47d8bbdde
- MD5 dc7a676cc313bf80d29890d496f8fa29
- SHA1 c5a95c34a364765f704af31a72fb9104d9b7c69a
- SHA512 7ba978f71ea39efd5aa31218540a56bfd4c4fe1050203a15e1017e6deb0e307305221227b77afaea91ee5d6d9d8d7a7eb63dfab594c46b54db7d44a698981223
- SSDEEP 24:TL6vpmzr0GSP/RsKaT6lm7td499F7lF7+:T2vArSP/Rpa+lm7ta5T7+
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef
- MD5 2238195eab25764b61f2d26ef6a720af
- SHA1 d366efd0cc079f0f87d23c630ec8d99f90541731
- SHA512 478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470
- SSDEEP 6:l9bNFlgls1WnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WS//:TLuEe9zmzrfRmBEyPbP/Wy
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 6b19f2c8cda5054e86fb1d6d60e6eb5799dd925d36f5e601c27dec3369bb1b0e
- MD5 a304eac5b4a367eeac1e8aebafee5f51
- SHA1 58054c79eb78a5cfb837f4753e2b621917cbd053
- SHA512 1a7d45d69b9f6dedbb088ce9a5e1653d7bdaa90e4ec836de5bfca633965f2eea671624265a8076aaa44414d3bf157f537de75bacf0e8d818fdd4ecaf50efba94
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 b52418950fa08d82a0b64c34b83363d0c87c4c15f44a2df4a22928d745fabeec
- MD5 5ab11fcf3fab51d63b686b9c6edb9883
- SHA1 997baaf4070d219569460ffdb0a8485bcaff575c
- SHA512 d67d92cca4b1169292aee3a710ba5effa6d3633eaf4fcca9bd9eb64157e9ca08e2524a4390c7a2fc307595ce82e6d86f4174fc96b70b9b6161d98d08f7ee53e5
- SSDEEP 6:7+/l9QqFn1Ag9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKV:7+tmqcqLiuWdYRmBEyPb6
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 4464dcbdf5cdf622191a5a8045cf0a0f0c461dc4c8c863a6c335dc2b374839d4
- MD5 9990575bba3679e0014b9e7bdbb5e4a3
- SHA1 deb85f0fd90410d9f1fc41bb8e7b0254ee230e81
- SHA512 25b57793f07431c3e1e1dda27f610dbd569f1787a72b956a072326a584b0aa0417b08fd61817f2cec248c85c6b75163d56eabdad2b3263432af32552efb96078
- SSDEEP 6:7+/l13Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKvC:7+t1fqLJdeWRmBEyPbt
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 0a6d59a3199d8f0a48bb37c27e6c930ef6d1229e5b39f1efbbd8c94bee20cb80
- MD5 4b4b4a6588909df7a4231713a57d9e2c
- SHA1 23b064cbbb8414b353148b6123cd5e612f0ec640
- SHA512 f4509162bb337cf107cd1bc682c10d5a1072146c16a2a94fcad05bda99c00862963382d837eaea0d9a874877b77234dbc3da47b214c12d25793f7968d3e03b7d
- SSDEEP 6:7+/l9fqGPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKculC/q:7+t9q6qLmqKRmBEyPbk0q
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 6b5be48d7549214485ecb3d2eafc3c0927643e10a44448caccb2ef3d78239aa7
- MD5 88a09ff1094a3864c30390e3ef3746d1
- SHA1 9d9d9dc2782c39ec670b5d19c413c653249465a9
- SHA512 da343c96adc82c6770dc7216c489b990507862750719fff161370e96f19be65ff37dbff7973bb1da591e95da9ab47ebd735b65ab2b6ef563efc0a6220b6f7a66
- SSDEEP 6:7+/l9FXUpg9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKz:7+t7UpqL8EA9zmzrfRmBEyPbw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 ef03231c4ff7eea3025f9442e6d4b5740fc0587f785bad2a665b07203285b941
- MD5 d0efb4e6fad4acea5dcbd170f3bd3046
- SHA1 3ddbf8020b773ca330cbf527696eb96a6e1e6f05
- SHA512 870ed2e2b42f87506f6d295fdba9d164f893bf3b3c25795661ef98ea1808d9d05389fc0c40dc98a54b4622bee1546c4b2aabc7a9630616a31f5b5e13dedd025c
- SSDEEP 24:7+tUsKaT6lm7td499F7lF7BqL6vpmzr0GSK:7MUpa+lm7ta5T7Bq2vArSK
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/files/PersistedInstallation1999014894599976872tmp
- Size 90B
- SHA256 29dcd3e16fef2a778c621e4b38c36bd21a4beb524fc1a775c4e3fdaa01ab3d50
- MD5 0b94f2c6a5729876497475011db1665a
- SHA1 0474d18c6f7c9ff46fb7f8f1a2cc22d056cfd511
- SHA512 011107bf99794cd9cd5855ac18c181871c30fbbcf76af1d8f04a246cbf69c13350cd34150abb3986ee031228003438d2bda01bab05333a5ffc6f1ac8b5731501
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/files/PersistedInstallation2880005955211561796tmp
- Size 556B
- SHA256 6eb7472fcc783afd937ff501541b4e5033d0f34f0bf5878a2d925e9421bf54d2
- MD5 ff6e2ec7f793ee3655bc6226c09af55d
- SHA1 295ae4a3638c5906a6cc4afe6126ba291e6765b9
- SHA512 a78dae3f1d26894fc83cbc3bd35757238735acb6e309375f11c25a8e5835f66ad842248b481715677f5fc7376cc715aa5abd5c80b1262c366fd66385092d13ad
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/log/log4j.txt
- Size 6KB
- SHA256 e891770e3a6f94e129f198bb6caeffe004104995c830db68e2b34f995dce9c41
- MD5 ccbe24d472b9ff7f8acf14f61a74a6f4
- SHA1 834323453c6414e3ef79c693f30f87f8cb7b9983
- SHA512 3a744adcc5dce301797d26c4cd1f940d280922e35998cbc12e62c61b85e477da082dae451619037103668f9c3d90a98fd0157779a5b9c0e40229ff2fc3898222
- SSDEEP 96:OKFLRcBKXygFh7deM64lygFh7deMUcuZKFd5icygFh7deMy9lygFh7deMUHt:OSRkK/h7i41h78cuZy5iYh7a91h78Ht
- MD5 SHA1 SHA512 SSDEEP