Analysis
- max time kernel
4s - max time network
136s - platform
android_x64 - resource
android-x64-20240624-en - resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system - submitted
07/01/2025, 02:32
Behavioral task
behavioral1
Sample
92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Resource
android-x86-arm-20240624-en
7 signatures
150 seconds
General
- Target 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
- Size 3.6MB
- Sample250107-c1d29szmax
- SHA256 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
- MD5 0366ae0abf0ada8aed90322bfe07dfd5
- SHA1 2f0779ce64f02944e87674745cb446c5bc620607
- SHA512 52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
- SSDEEP 98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
- Size 12KB
- SHA256 885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
- MD5 ea628e04765adaf4238a5dcdff4bbd51
- SHA1 a801947619ea8c368efe9c006a324dc6339ac60b
- SHA512 c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe
- SSDEEP 6:l9bNFlLdrlOERX4PBX4ogLugMBX4suuKTqiOw2:TLJdTRmBEyPbsOw2
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 4f3f1deb9b7d9626e7a90b692d21c49adaed58b619cd5b6cefa4dfc481b9788e
- MD5 c1fdf08e62ddb1d0d333e3886c7b1b7a
- SHA1 083d0767b8aad37e0513e37e1edf4be0d4292a11
- SHA512 80be8bbe4dddd661c39f458227048f62a47028bb31f4d07a2583c123a32f0183c0a680513c063ec56d0ccecd910a2aa8b3645e127c8c697da74f8f6622dcd1b2
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 63d9585ac11522fb0092c4b61dadc2ffa44213a68cf3b61685dbe095cd73f559
- MD5 1608123c2f98bfe6b8f91641ff2c5520
- SHA1 2b5d1ea5860879e045883644836be5a708b9623b
- SHA512 105d3c3047643c68fcf5eb6714fcd858baaf4c90c58b1ca482710adf2772f52904b2eef69cc63fd885fc5a4956a2ce0cbadfcc6479dc73713f3e5c23d42da222
- SSDEEP 6:7+/l9JX/mHn1R1lkWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKS:7+tvvm9lnqLiuWdwRmBEyPb9
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 ae4a73ca3c643b151922653354e5b252745ca6a78bf4bc2a4744bf4e9896a85a
- MD5 f5c1c4cef262263f01e55ad1b9abdf1a
- SHA1 580c9f25948fc89774c1be28699f96009a14c80e
- SHA512 c1b25e28fcb4c239d8113f3546de49e89ed7ba09551bf5001cb221267f81ed13b5cb9150599070ecf8a171aef8ef106930592efa09c2ad73ac12213319375152
- SSDEEP 6:IGPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK2avM/Q:rqLJdTRmBEyPbHa0Q
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/core.db
- Size 36KB
- SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
- MD5 045489a0639eee27bca52f48828cd93d
- SHA1 436e7966e7c019273c44faa4d8c5709b816dfda3
- SHA512 c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e
- SSDEEP 96:eMzKMilNJzt69l/mwICfPDKOjK0Eg745TN3PafDDKsgZK5AgZWgZK5cf/ShOqLE0:AuldjKiKvI45TNAKfUf4hI2q1UpKorKS
- MD5 SHA1 SHA512 SSDEEP