Analysis

  • max time kernel
    17s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    22/12/2024, 02:32

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4984

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.systemservice/databases/com.google.android.datatransport.events

          Filesize

          56KB

          MD5

          fc88c990ffdb3a692ec63a38b467a731

          SHA1

          e2824f707e067bdd7b1e03414f0abd2463e711f8

          SHA256

          edf5df9d282e01a59a21207cc5db6ada9a0ed3d8bf58f3065db2dd05991035bc

          SHA512

          40665578c8fc78352ed43040944323eb8829128e9fdf42dac8733fde02c2aeaf77da105c33359440c653ef60f493005c278614c851019842df0d5e793b8c41df

        • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

          Filesize

          512B

          MD5

          dd3be05243a48eb97ae45f83c46572bb

          SHA1

          b2660591a27c4ef46962f18fe16600222fad6799

          SHA256

          753f2fd44eb67d964fb48137a7e85aa90e33c4386e41665b7d52c6cf9f555b07

          SHA512

          379a26d62b1e346cbfbcf9eeb72650b1375095df5448f7d9a08b910895c6fbc1a47fcc8a4ce43a2c91fd6ab6597388271372a63ddb95305623a22f37a89053e6

        • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

          Filesize

          8KB

          MD5

          93f93caa59a43431c170e6c721fd0e42

          SHA1

          41503400446a0b3f8c8a4655b677636a4bcd07e2

          SHA256

          9341eee0d0c348ca470c728ded9490216b2012f04b0e9362cc32785bbb5ef993

          SHA512

          785706a62e189cb5dcc8e5d497b8882b4f02484f16febde6d18739f771d5b966ace67c354e8ffc2cfa7d496c4af7d79df6fba0cda78ac509d71c59236adfca05

        • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

          Filesize

          8KB

          MD5

          a3d78c37f498f6831adb04e9fcf043f4

          SHA1

          a6a735e62b489db5795ee9572e1120da00036cd1

          SHA256

          8a399c9bb7c8f8190fb6fba909a84fbbfc1e111e611e0a436e1323ad4cfb2d9b

          SHA512

          5e4405efb3ae9cb2601c2c55ea799f30d552428fcfd22fd098f2a6b155cd0e1836bb7703f038e1f76263af7c52e42bc33562671ef366016cd2b53938157bee69

        • /data/data/com.systemservice/databases/core.db

          Filesize

          36KB

          MD5

          045489a0639eee27bca52f48828cd93d

          SHA1

          436e7966e7c019273c44faa4d8c5709b816dfda3

          SHA256

          0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

          SHA512

          c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

        • /data/data/com.systemservice/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          eb52a90bb70b76e946b62f50b6f7fb85

          SHA1

          42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

          SHA256

          48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

          SHA512

          b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

        • /data/data/com.systemservice/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          03deffb10eb200027527a27881347e79

          SHA1

          69e8ef811a0f7d4e7c1a9bb2b7218e5c74328d9e

          SHA256

          6dec7d19bd82bce1062a8b4bce495806ec57f9436b007d1b09efdaa117819be8

          SHA512

          ca66adb36b68bac34a90601395cb9b61cfa6ca6360117c4bcc168e31d16375c6e7addc0b20e5c928cce58b341d4e6df5c2210ba1585d675ab729b5d26a636625

        • /data/data/com.systemservice/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          000011899b23c694b551c0fa51f49b1d

          SHA1

          4f3a84787e25e52fe83f71487286fb67ff23531c

          SHA256

          45a5d9923b3f8c56b39245a13282c66fab51b98c60b637778220b66fcbe29a8c

          SHA512

          f860a258634e5be99de82360781e02bfd5de8eab2203b21b3bfe6a9bb48ff64d8d156445566e5f7fa33c29ec8553a4037cc7518089fbbdee697921f0a6178a8f

        • /data/data/com.systemservice/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          dd605c142d4e6de1dca3740db08ae4dd

          SHA1

          d389f2cd1b0ce5f3f38a280b0246d03e7eeac3b7

          SHA256

          1e917f4771f21a79ebd929f3eff2c4018020a65b7c7968ba1cfa3fef1e9d9de9

          SHA512

          a702c89b4fd3ee352187a1c22cf4e863d3515e0390b4acf25969f16a54dc995caf38f3d4932c0629652b30f9f642d468a2915a7e59adbe9e18c0555e325eebcc

        • /data/data/com.systemservice/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          4d9b955bdd20d7a0fc20700a47b1bde7

          SHA1

          fa5df65c4214757fc99147f9ba58b6858eee02d1

          SHA256

          f3452c7861d424c1ad23f4631f9d656bdd6b32f1f0efd0d8f9bd95e50845d5f7

          SHA512

          458c16a51c0e683be4d7a08e20d65ccbd444409486cbae3cddddc4e689d4bf8912571c5367db8951fcdcd6f1052b858d77cf7527eb58ea2f02206be56b02bb97

        • /data/data/com.systemservice/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          f871ff700510a56a54fdd56bc41b7541

          SHA1

          481548c8bc3254a00f497140278597b915460c48

          SHA256

          ab18f3bb605f3cbedaffc75b2d5a03fe21ab82179d268331ea907bdcd32c23fa

          SHA512

          12e3d348199566e137f02b63e4c8b4c722aa086128c0f1cea883d512075b8573d40d889d2b4452d9e3d9c02f523716da9775d93750c242a1a2d9e62f50f60fc5

        • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

          Filesize

          512B

          MD5

          04e6957af2b312fc4ca7160c185fcb37

          SHA1

          11fd3781444a2c67e1d3a2fb59a9a7bef88936ba

          SHA256

          6f1e62aef0e34e1b426c35ead41d8bfbe44f16a8102eb764e7e93842d99f4950

          SHA512

          c55ac342023c8a695d52cb9ebc7d62a4419a37d31fcf6bf10d9ffec5b158981260c590ba06081bdd8e77f28fa0673745042bee5c2d20b2ea836d58479ffe10b2

        • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          6c2c0f876ee9283c204230fd6c975e88

          SHA1

          368c4ee4401c1f98b108e7c0801d9e4790606945

          SHA256

          aeef338b610662c2abfca13d8e0b86525e4faa8f3302212d8aa09cd4bff61b7a

          SHA512

          c3c5c7d315e06c45492b9d65e82a6c38164fd4b8defc80bfac8c6c24b9011971564f5d6647b71a115e1e2bc87458a73b992b8b1dcf11a2de99acb934fcd52a88

        • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

          Filesize

          4KB

          MD5

          3ccf42bfabce18bee057a304fab53b39

          SHA1

          f444f9ff4bbae18f1012303ca32482bee3167b14

          SHA256

          b6a53671e8624db21d9a89e833ec9afddc99ed8cb59597ca7b683f3aabb56ece

          SHA512

          9fee94f5c1f22a3b5ddd54dfec10cf346ca92dfa858e7c08095bdf7977014f88e04fdd92b581d31568c3847ba15e8645eddd12236902c8c2b1192bbc6d4b131c

        • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          9248b072259ddc35d0a8f313cd6ed8a9

          SHA1

          af6d482e768a090fa864d793f1e41b0603487802

          SHA256

          1043cbcf662863a42ab875a807a356b13008b0c2824a9bb7c04119d9e0d97101

          SHA512

          47ff700208ece5d5734bc0bff7cd8a97ced88d4b16265d715302f926f048c45719520ea1ba5b019ff1d83c78d7b254e6015f1e50c357d0486c1c79eae7862a51

        • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          47d810dce9bae62e02876226f0c14ba0

          SHA1

          444037215103e872ce2f327afb356619b5945ee9

          SHA256

          2678721452766a8d18f1b365bf979c2cab98e41e649a59be925518c4ffb6a8d8

          SHA512

          4991e24fb0b214ee32045d7ec15311a688e5279c7b80a1c09ca09f165443b6c1cd2f7ddc1542ce8f536812e75197545176f115e99e3abd7df6cb70d11aa603b7

        • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          6a388f4b63a017aa12ae36a1a9ce7812

          SHA1

          78c5b9a687bd3f5573f2d2f0d2189afe41ea783a

          SHA256

          5ff724bf58e4b193be771e477d83d83f957e9ba18ac823a9501ed34340188462

          SHA512

          b486109a4f2a326797b98c916c94823faf833d7317da8c86e38cbb5a68dca5e521ac7d1bc3f40dddbe685d4f53c243ad24b8e29d78179ff250e139fef9ca6f11

        • /data/data/com.systemservice/files/PersistedInstallation5676629110219728062tmp

          Filesize

          90B

          MD5

          5b565b927bcd4229c18b1e7dd37472e7

          SHA1

          07f9874ffa317ab2b92e405fcbafc9fa8b8944a1

          SHA256

          91cce8160270f8c1cd4d8ffe90b433ef0d7fbdd8a80a507319468fc0511b7563

          SHA512

          9a071726e99b1674b096b91820693fcbbf2e59cf972acbd1b38bca0bef876bf85574cc345ed179bded99d641b1c70dffa113af5e84d6ff24ada6ab829b86550e

        • /data/data/com.systemservice/files/PersistedInstallation8585220789045444822tmp

          Filesize

          555B

          MD5

          6bd711464315e0565790c7e4f746b121

          SHA1

          3dd7a2cf37fa4fc0d40de7f4907aeffcba60b7d0

          SHA256

          e48fa2d1e1cd124ed924813300ceb0dd52896cba891e3079a35c705ab58bd23a

          SHA512

          e21f09a35bb37c6bd8342c9167efcb4b020b3abdfb784e736390c89bc5b96304822f14a153b1ef67643288695caf6a0627eeaa90963110343bfe99df1ebbe509

        • /data/data/com.systemservice/log/log4j.txt

          Filesize

          6KB

          MD5

          da141450eef0a83e87e3d7d1ab6c66ca

          SHA1

          f3db10d9591e85b7a852b5fbcb7f05ffd348594e

          SHA256

          cc1d0add6afb993107e5fe0f37d6b235ee438f5470209f378560423ca2fac088

          SHA512

          481cd8b569639c11da5677484c2f6c24270c75ce0c1062801704a2ac3a5fa492efb72a191799e30e69e8518b22b0a6d7ea1d749f2d0d05e2912fe1df375fa13d