Analysis
- max time kernel
17s - max time network
134s - platform
android_x64 - resource
android-x64-arm64-20240624-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system - submitted
25/12/2024, 02:39
Behavioral task
behavioral1
Sample
92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Resource
android-x86-arm-20240624-en
10 signatures
150 seconds
General
- Target 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
- Size 3.6MB
- Sample241225-c5evcsvpfr
- SHA256 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
- MD5 0366ae0abf0ada8aed90322bfe07dfd5
- SHA1 2f0779ce64f02944e87674745cb446c5bc620607
- SHA512 52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
- SSDEEP 98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 1a60c41c7bd648e73c6bcef148545c1fca7ed688d90028f346da8487154bd813
- MD5 0c72e87646164a6df5508c00c8d825d7
- SHA1 c976d5c46c0b321ac0812d46feebace30e1d8869
- SHA512 265ff918bcdad6d82cdceac369ef0d390ab280b38d9f72c885aa208ce42234493488ef82a93ff9938b1f94fa8a33bb0cf43967a03411a02388856722231cfeb3
- SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSU:rAMEX0wIyNjaU
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 c2b7bc3b97c3404ce4affc2993aa52d9d979d312989ea903e1ea1a1af16de84a
- MD5 bd512fa29d151b12f30217a55b63dfb6
- SHA1 2d167066de189057a4090e0cb60c9834ac99ebf0
- SHA512 3de5b0e5378e1dfdd29c742ba5593cb98e192c6306295bbdf2d55d70717d330890e08d21e953406d4ef448585aa94fba594be3e6ed60d7f14dca8f751361849b
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 705d3c9375c86daa206af7d4bbdf8857d328f1b9cde821947888250d53a45323
- MD5 5d3a28fc079ef451081187624d7e41c9
- SHA1 e03667e89eb998af86003100144589309b813d90
- SHA512 3aecfca7317f8591c85e9bd570edfdbac3fa444315de70c98e84c71f90fcfaa3a7ac015cda98c22f75da230a0114d9b4903f0922e11382db41cb8f513d1164d9
- SSDEEP 6:7+/l95n1qg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKzn:7+tEqLiuWdYRmBEyPbs
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 6a7570cf876d91a2b0962812098b8216fff23891dd78580cf16003837f596678
- MD5 a7f0f4f74363b1e378b77eca648af325
- SHA1 fc7fc5cf4c5819db25701be1a45be0f347a00e36
- SHA512 949a7d973983bf99d7727bc7a4e0be5c64af2edf6f9633b613ecb8f88872b6a7995c4a4877a50bd3681c580d95016613c3d042c3780e4910909c1488ebd6aed6
- SSDEEP 6:7+/l9JPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKma/C/S:7+tnqLJdeWRmBEyPbUqS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/core.db
- Size 36KB
- SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
- MD5 045489a0639eee27bca52f48828cd93d
- SHA1 436e7966e7c019273c44faa4d8c5709b816dfda3
- SHA512 c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e
- SSDEEP 96:eMzKMilNJzt69l/mwICfPDKOjK0Eg745TN3PafDDKsgZK5AgZWgZK5cf/ShOqLE0:AuldjKiKvI45TNAKfUf4hI2q1UpKorKS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
- MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
- SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
- SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
- SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 9be4ff6b938087088abe72d9a672a970daa07850b42a3d28e99b81f042e06a77
- MD5 1552c518add4e944ee14912d79c68f91
- SHA1 4280bcf7fe2aa686f237be0a37108d7f20a16bd0
- SHA512 ab3545640f07cf2e1894f34da79cc6be964be030691b63243ef6fcff97b354ea831d3d542b25414f8260e7e6b684b17b2d01271118c0cd503f9e2d56c53997dc
- SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6a:TLiEq9zmzrfRmBEyPbP/P+/0Fl6zLi7
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 526c12bb7a89c40eb7d165f37eed54b33f7bc01d2adc15776e4d6aa1cad3a804
- MD5 c209f333faa58f9ce9b880b18261d147
- SHA1 127ca042665da03e42d47d657e771b4b65801d32
- SHA512 00d401b90be5f232ba7a55cc1c085b7ca0c2f89affd733a260a8a07272e97bda2b4962c2ad7225c94899eafbf157ffcce14923d6199a4d32de912ccb82e9235c
- SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFl1Ny+/0Fl6zLi7:TLopmzr0GSP/h1499F1ylF2LK
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 97815383458daed899d891710e32a19d4932cbcd4b2b1d26c5b8ee7289ece3a8
- MD5 d4bb09cbfbb7f61cc062939780d65f35
- SHA1 f42a061713e93e14830b76a4e25fc6fea79a3f6c
- SHA512 0bf12276ed2eee8a8dd187893a3e9e1c00bbfe4e1ab50e20decd8812dde0e0fd55eeacc24dabef37a5b934cb598acaf77fa3ec5a3d84742db9d7a4fc0f519bcd
- SSDEEP 12:TLIEU9zmzrfRmBEyPbP/qFiOLaOS/yAUbYUyWllV49blqYFl1Ny+/0Fl6zLi7:TLYpmzr0GSP/qsKaT6lt499F1ylF2LK
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 ee2fdfd2bf72772e9b9c018c40d8b090be7660f69ad24231764df007b237cec3
- MD5 5ac8a37f3d7a04dd0421baf8c9c1e776
- SHA1 41c71ed34dbfd2b765d4a9a6eb87cf00668d1744
- SHA512 f4ec16dcc93b9e125eb525c823a69d9de08f3d264bd76d06bfd4e0255c6154a2cee65c78b13f36d7c9b609f6aef747189ce60b25fec34770c9d87e3799548e6c
- SSDEEP 12:TL6uER9zmzrfRmBEyPbP/RFiOLaOS/yAUbYUyWllV49blqYFl1Ny+/0Fl6zLiv:TL6vpmzr0GSP/RsKaT6lt499F1ylF2L+
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef
- MD5 2238195eab25764b61f2d26ef6a720af
- SHA1 d366efd0cc079f0f87d23c630ec8d99f90541731
- SHA512 478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470
- SSDEEP 6:l9bNFlgls1WnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WS//:TLuEe9zmzrfRmBEyPbP/Wy
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 7bd11ac01c2a1a33c4c58a0efd7316da62cc57e6b36a959cd1a4e14b5591b970
- MD5 56ab9090bdddf8bf500dc1331f3813ec
- SHA1 b12b0310c7df296445d5ffda97a6bcda353b379d
- SHA512 af27800d1d7ab0a14c98f61882a0f5d6b3142e49a722a0df1eda884e90aaef4d56b4a78fc24713b52fa261588da736ee4f012d66b160136632704279a79aa1a8
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 b40057315f7c49d7aa7171740f36176aac6c6c7600b1ef5e29b0ab6e7d8789a0
- MD5 435ba87daa5cc9c2abdde35f4cbc322f
- SHA1 fc8a7828a5d5ed3a7cfcb1d646c0c083b5456b1e
- SHA512 636070af02a8733363cac459b8826b2077ca6facfbb1c8cf7aed511a225b25792ff11305f706bbdbd6781a6a0154b81b4fe845bab647f09a71680a42a7bfa294
- SSDEEP 6:7+/l9FAn1Rg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKS:7+t0qLiuWdYRmBEyPb9
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 349562b29b7e93091be85d7ac77de15f467b4a68dcc780b5045494369e7bf7e2
- MD5 2bfdf293f6d83909656364645c034a6c
- SHA1 b611f466914bd5c54a17dff8004781b7afc45d2b
- SHA512 a7c552df27a2b0817422500b6e75094841405fd1fe7a1602e749125cc879364189a1748a5ce4f3fd7a7cc3f126924b6c60355ae902357c8cae13ef6c5c41709d
- SSDEEP 6:7+/lGPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKz:7+t6qLJdeWRmBEyPb8
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 36c548a55d226bc2278d255a6a69d5f227bd33f9814332594e395b9f79e733b3
- MD5 fd1a37431fe8b22cc456d8c970145697
- SHA1 770d7931e0b598a98ce20b4a41e1e46e7a1ab774
- SHA512 77c7843d7e8d81218f7bbe453a1bec79938aaf93cf9961f392a35b3b8b20d1b8578ce33c1e8bce59ad5bf59d0c83fcb9f1d6df1f4d9faaae7f4e0c2953ac70d0
- SSDEEP 6:7+/l9s0FPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuK/8t/E:7+tbBqLmqKRmBEyPbTE
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 4088ca0f7531daf03db4abf2a11f75afb799b255d0da7da96c13f4279a09a2cd
- MD5 e62fe2f1f51cb2c2b374b7089e09c10b
- SHA1 a541af060997bf523cdfeed87d76aec804f9ab45
- SHA512 6963b999f501f8cefad2658e406eb090dfe34c35df5fbf93c4cd68f4e26960c42243b83b23f94dfe5b31747311ce2d37923d383c3ce4368c9089a716d9cca0c8
- SSDEEP 6:7+/l9ARdng9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK8o:7+t8qL8EA9zmzrfRmBEyPbq
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 668ddb52f2fc7ce4d6fa41f459a78c3cef0bfddb7f22e7fd2893d6b94e637561
- MD5 d6630c4aa995368a32df40c503d4e3c8
- SHA1 6d850e8c2f8e5e0645666d2e640b7f3023ee3559
- SHA512 c918aeef95426998ffa6c657481a67bdbb910fbe69acf14081a879384035c4d058650d92ded8f0e875a30d3ecfa78f79dc65e859f72a788609f518903c9f19a4
- SSDEEP 24:7+t15sKaT6lt499F1ylF2LwqL6vpmzr0GSF:7MDpa+lK51C2Lwq2vArSF
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/files/PersistedInstallation3257085954882351573tmp
- Size 557B
- SHA256 b78a06bce9d7dc57254e3fe77e5fe56c52f54fa996111b7b2f1e884ade2feec9
- MD5 dd4c627f85b546f66f4cef81366bee05
- SHA1 9057e298881842e92de205e9768ebc489d1f571d
- SHA512 c429ed5e0a8e388ec4e2cc11fc3bfda4d055690fba880ce404d069bb0a3890bab5baa24e97f2aff4c893eef34178f02d877a15e05e9ae90afe6038dbdfde8e78
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/files/PersistedInstallation7508328599195446905tmp
- Size 90B
- SHA256 0d1d4ee6cfdf125ffa6a7a0fa0d9de26e6f770cb00252e9712b35c77fee3ffc2
- MD5 ba958a82ad6f0252af9cafd3629637fc
- SHA1 4d314e00e8d7408ebb95874ae629b799275547a4
- SHA512 4cceae2f97ed4055f96efb72d94a6400e1242740df88ed85a95632c0d4bb8a45db01c36dd4cfef9979cc14d7fc5d650797646b081ccad8abbac43d526c605f91
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/log/log4j.txt
- Size 3KB
- SHA256 d652f15bd9528e896846cd9dd9d73a006d315ee43ba7289c8e7ed1d2e6539f25
- MD5 6d2dbdecab9cb6d6206f36d6100c69f8
- SHA1 089b80ad5a028b550a2e7b3c3e7042d8a37ca191
- SHA512 e9aea6370e2a1ab9911cc007aa72db84f637ad5c384907e41a411fab194a279b92dfbd12c834cf3e555315583f0f50ccf595fc3c36609d22479ba4ffc82bb612
- MD5 SHA1 SHA512