Analysis

  • max time kernel
    17s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    25-12-2024 02:39

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4508

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    0c72e87646164a6df5508c00c8d825d7

    SHA1

    c976d5c46c0b321ac0812d46feebace30e1d8869

    SHA256

    1a60c41c7bd648e73c6bcef148545c1fca7ed688d90028f346da8487154bd813

    SHA512

    265ff918bcdad6d82cdceac369ef0d390ab280b38d9f72c885aa208ce42234493488ef82a93ff9938b1f94fa8a33bb0cf43967a03411a02388856722231cfeb3

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    bd512fa29d151b12f30217a55b63dfb6

    SHA1

    2d167066de189057a4090e0cb60c9834ac99ebf0

    SHA256

    c2b7bc3b97c3404ce4affc2993aa52d9d979d312989ea903e1ea1a1af16de84a

    SHA512

    3de5b0e5378e1dfdd29c742ba5593cb98e192c6306295bbdf2d55d70717d330890e08d21e953406d4ef448585aa94fba594be3e6ed60d7f14dca8f751361849b

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    5d3a28fc079ef451081187624d7e41c9

    SHA1

    e03667e89eb998af86003100144589309b813d90

    SHA256

    705d3c9375c86daa206af7d4bbdf8857d328f1b9cde821947888250d53a45323

    SHA512

    3aecfca7317f8591c85e9bd570edfdbac3fa444315de70c98e84c71f90fcfaa3a7ac015cda98c22f75da230a0114d9b4903f0922e11382db41cb8f513d1164d9

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    a7f0f4f74363b1e378b77eca648af325

    SHA1

    fc7fc5cf4c5819db25701be1a45be0f347a00e36

    SHA256

    6a7570cf876d91a2b0962812098b8216fff23891dd78580cf16003837f596678

    SHA512

    949a7d973983bf99d7727bc7a4e0be5c64af2edf6f9633b613ecb8f88872b6a7995c4a4877a50bd3681c580d95016613c3d042c3780e4910909c1488ebd6aed6

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    1552c518add4e944ee14912d79c68f91

    SHA1

    4280bcf7fe2aa686f237be0a37108d7f20a16bd0

    SHA256

    9be4ff6b938087088abe72d9a672a970daa07850b42a3d28e99b81f042e06a77

    SHA512

    ab3545640f07cf2e1894f34da79cc6be964be030691b63243ef6fcff97b354ea831d3d542b25414f8260e7e6b684b17b2d01271118c0cd503f9e2d56c53997dc

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    c209f333faa58f9ce9b880b18261d147

    SHA1

    127ca042665da03e42d47d657e771b4b65801d32

    SHA256

    526c12bb7a89c40eb7d165f37eed54b33f7bc01d2adc15776e4d6aa1cad3a804

    SHA512

    00d401b90be5f232ba7a55cc1c085b7ca0c2f89affd733a260a8a07272e97bda2b4962c2ad7225c94899eafbf157ffcce14923d6199a4d32de912ccb82e9235c

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d4bb09cbfbb7f61cc062939780d65f35

    SHA1

    f42a061713e93e14830b76a4e25fc6fea79a3f6c

    SHA256

    97815383458daed899d891710e32a19d4932cbcd4b2b1d26c5b8ee7289ece3a8

    SHA512

    0bf12276ed2eee8a8dd187893a3e9e1c00bbfe4e1ab50e20decd8812dde0e0fd55eeacc24dabef37a5b934cb598acaf77fa3ec5a3d84742db9d7a4fc0f519bcd

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    5ac8a37f3d7a04dd0421baf8c9c1e776

    SHA1

    41c71ed34dbfd2b765d4a9a6eb87cf00668d1744

    SHA256

    ee2fdfd2bf72772e9b9c018c40d8b090be7660f69ad24231764df007b237cec3

    SHA512

    f4ec16dcc93b9e125eb525c823a69d9de08f3d264bd76d06bfd4e0255c6154a2cee65c78b13f36d7c9b609f6aef747189ce60b25fec34770c9d87e3799548e6c

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2238195eab25764b61f2d26ef6a720af

    SHA1

    d366efd0cc079f0f87d23c630ec8d99f90541731

    SHA256

    599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef

    SHA512

    478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    56ab9090bdddf8bf500dc1331f3813ec

    SHA1

    b12b0310c7df296445d5ffda97a6bcda353b379d

    SHA256

    7bd11ac01c2a1a33c4c58a0efd7316da62cc57e6b36a959cd1a4e14b5591b970

    SHA512

    af27800d1d7ab0a14c98f61882a0f5d6b3142e49a722a0df1eda884e90aaef4d56b4a78fc24713b52fa261588da736ee4f012d66b160136632704279a79aa1a8

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    435ba87daa5cc9c2abdde35f4cbc322f

    SHA1

    fc8a7828a5d5ed3a7cfcb1d646c0c083b5456b1e

    SHA256

    b40057315f7c49d7aa7171740f36176aac6c6c7600b1ef5e29b0ab6e7d8789a0

    SHA512

    636070af02a8733363cac459b8826b2077ca6facfbb1c8cf7aed511a225b25792ff11305f706bbdbd6781a6a0154b81b4fe845bab647f09a71680a42a7bfa294

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    2bfdf293f6d83909656364645c034a6c

    SHA1

    b611f466914bd5c54a17dff8004781b7afc45d2b

    SHA256

    349562b29b7e93091be85d7ac77de15f467b4a68dcc780b5045494369e7bf7e2

    SHA512

    a7c552df27a2b0817422500b6e75094841405fd1fe7a1602e749125cc879364189a1748a5ce4f3fd7a7cc3f126924b6c60355ae902357c8cae13ef6c5c41709d

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    fd1a37431fe8b22cc456d8c970145697

    SHA1

    770d7931e0b598a98ce20b4a41e1e46e7a1ab774

    SHA256

    36c548a55d226bc2278d255a6a69d5f227bd33f9814332594e395b9f79e733b3

    SHA512

    77c7843d7e8d81218f7bbe453a1bec79938aaf93cf9961f392a35b3b8b20d1b8578ce33c1e8bce59ad5bf59d0c83fcb9f1d6df1f4d9faaae7f4e0c2953ac70d0

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    e62fe2f1f51cb2c2b374b7089e09c10b

    SHA1

    a541af060997bf523cdfeed87d76aec804f9ab45

    SHA256

    4088ca0f7531daf03db4abf2a11f75afb799b255d0da7da96c13f4279a09a2cd

    SHA512

    6963b999f501f8cefad2658e406eb090dfe34c35df5fbf93c4cd68f4e26960c42243b83b23f94dfe5b31747311ce2d37923d383c3ce4368c9089a716d9cca0c8

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    d6630c4aa995368a32df40c503d4e3c8

    SHA1

    6d850e8c2f8e5e0645666d2e640b7f3023ee3559

    SHA256

    668ddb52f2fc7ce4d6fa41f459a78c3cef0bfddb7f22e7fd2893d6b94e637561

    SHA512

    c918aeef95426998ffa6c657481a67bdbb910fbe69acf14081a879384035c4d058650d92ded8f0e875a30d3ecfa78f79dc65e859f72a788609f518903c9f19a4

  • /data/data/com.systemservice/files/PersistedInstallation3257085954882351573tmp

    Filesize

    557B

    MD5

    dd4c627f85b546f66f4cef81366bee05

    SHA1

    9057e298881842e92de205e9768ebc489d1f571d

    SHA256

    b78a06bce9d7dc57254e3fe77e5fe56c52f54fa996111b7b2f1e884ade2feec9

    SHA512

    c429ed5e0a8e388ec4e2cc11fc3bfda4d055690fba880ce404d069bb0a3890bab5baa24e97f2aff4c893eef34178f02d877a15e05e9ae90afe6038dbdfde8e78

  • /data/data/com.systemservice/files/PersistedInstallation7508328599195446905tmp

    Filesize

    90B

    MD5

    ba958a82ad6f0252af9cafd3629637fc

    SHA1

    4d314e00e8d7408ebb95874ae629b799275547a4

    SHA256

    0d1d4ee6cfdf125ffa6a7a0fa0d9de26e6f770cb00252e9712b35c77fee3ffc2

    SHA512

    4cceae2f97ed4055f96efb72d94a6400e1242740df88ed85a95632c0d4bb8a45db01c36dd4cfef9979cc14d7fc5d650797646b081ccad8abbac43d526c605f91

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    6d2dbdecab9cb6d6206f36d6100c69f8

    SHA1

    089b80ad5a028b550a2e7b3c3e7042d8a37ca191

    SHA256

    d652f15bd9528e896846cd9dd9d73a006d315ee43ba7289c8e7ed1d2e6539f25

    SHA512

    e9aea6370e2a1ab9911cc007aa72db84f637ad5c384907e41a411fab194a279b92dfbd12c834cf3e555315583f0f50ccf595fc3c36609d22479ba4ffc82bb612