92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
17s
max time network
156s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
08-01-2025 02:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker discovery persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4963

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
df6754a576d505de8e1e7f69226f3ae1

SHA1
198074e6dd0fa6abdc7d9e0bb04edbca736b3a0d

SHA256
a7b14ba9fce248dbc5e65c2b6115200166e321a2eee1b2d00fc4049419951408

SHA512
e58f6570c4d2b69651b1a62a79ad5ac15567c7d30d8f5a812ace95eedb3dfd115faa0d1247d590e5d932036cf2fbe70196c28152e91bf465f2c6eb5e253ad5de

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
6547dd928dc84769f54ae4f9f2259b1d

SHA1
85bbd8f3697f3d9bec14372b2e2d20b39423c993

SHA256
2742671684991b7042f02a8a189d7519f38d19c68ed45ed95cee7765d79f79c1

SHA512
afda901a9e74f8b1347e8993ec41da99c8ee7f742a09d67cefd2e3103eda6ca816ae87c43135b945fa3f24c1541daea20eabffc21164eb43a39d2134673bc94a

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
966b083a22aa353dc956ab41637280cc

SHA1
88d1c7dddb9b299f02baddd35fc66f979947195f

SHA256
8f0d1ec411a3d63485561bde3899434ca6c9ccba2e82586822cc64206ca26859

SHA512
432e3f849220463d08eaca7971c500d1c03e3ab43d194547015b581a753925a67e90d572384dae6fb4eafef61ba50423b8a81588b801888adb0bba1670f3522d

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
896e85aea99233cd45faaff2d047043c

SHA1
6dd3ec58b0713a93cff47899ee207951a50545e4

SHA256
84cd178355272e45b5dbf4e3e632dd1cbf5c41c6c137a2f4e6908352155f2dc0

SHA512
3cd0e2817d9ce744fad719867a64af4148a0a29018309c410c3169a00087a0e43685f93c4aca7914b8f0b1205a9118d9b1d651ecb2fd3027ab9f299b96e982d5

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f318934290da45784081acc96aa206fd

SHA1
82b7b148e6b00915dc912398e8558a1de58b1b1c

SHA256
a31fd91453ae0b12e8e66ed7b6ebdacfecbac42ba40b9c05cc0c3e99a7811c60

SHA512
c4f93ac2984ff99653fa91a3ea25a584c329459b9873c001c203705c2efcca5f96f1b52b052cc744548d78fe335e22b6e4de7a8abe22baa48dc802d90444ba80

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
81f42e626f06bf511f2f6d734f7baac5

SHA1
a08bc52f2f2246c8904f6c59521f0e2251b1def7

SHA256
d5b3ce2448d093809f11a7110a7f3a4b2e7821796f1497f3ab1ee6145be3319e

SHA512
b7d068526b420d7d6c684e2702834d0380ccda051fa83792b17d7d1956b293543d7ee2314934d43d17e314f396fbff34e8c8dee4d5b01bf1ab39b1c945cd4fe4

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d5369d5c5722320d7a6b2466d3e33853

SHA1
b544daad626eca2b3c4c241a62429e62390ca34d

SHA256
762ff96f3087d36d10e1f7cc9ab8acbf4bff9428239c52e7b108e3e3e01830bb

SHA512
9f945a4f11615d90851a36c6f77710783d22244dd1d1865c64a7a297ed93ac80a0ae4ea7959de527baa7e855fa87e0fcbb24cc6342724e03277c4e667d18a6d8

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7d2ed9607c8c36912f6d5bce9421b31a

SHA1
1529827ac585201d55a914e57e9a5d03865740f4

SHA256
2e742a6373b43e08951281cdce7a40bf18401406751cbbaadca3dd9ec6903555

SHA512
afdc21beb48cbdf77dfab5e3a61d14849614bb79a8887f5614dc3b36349e23d60a5aca41177bdb20a4da061aa2da6d245748547bf38a80a05bf2bfdabd459a63

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f871ff700510a56a54fdd56bc41b7541

SHA1
481548c8bc3254a00f497140278597b915460c48

SHA256
ab18f3bb605f3cbedaffc75b2d5a03fe21ab82179d268331ea907bdcd32c23fa

SHA512
12e3d348199566e137f02b63e4c8b4c722aa086128c0f1cea883d512075b8573d40d889d2b4452d9e3d9c02f523716da9775d93750c242a1a2d9e62f50f60fc5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
b7a43f88abef4458151a3cf865df026e

SHA1
3166197bd73ca98f288d49ddd5a455dae662f3f2

SHA256
3bd309973e3c2e3fd8975f44b797a76005098c984cfbe3875ebfeca1a1ca6bff

SHA512
e5006f0d87a65760d6a9999b6b452b4e382cb287f5fe68c7598125b32e251e9f0dbbf5a58054dcd2a19192c0312ab2c1bef22894db6968960274687ac678581c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
2a16961d2c104d1ebd93051ecd5b4045

SHA1
34185cc31096da71225984d644544bf03e39864a

SHA256
cfa04f87e09085d60229539295c3b6cbb8865892ba1a6dad06eef21adca8f76f

SHA512
ef372c2d473caabefba6ca0df053787932dc9daf674c50683c65ca71879904f2df452fd7d6a2cbf8946486bc0cef668427b259e3c5487ea6bee5e93b1013b064

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
10bb11bcacf13515003784dc23839a67

SHA1
3793a1310f6a67ba1c11189b8347fb6cb301831e

SHA256
580be02d8d1aa21142ce0871ef3c3b4643d979dcff910cd21fdd6b5258c72acf

SHA512
f66f1f6e31d2b3d2bbf1ba4979f3c058071d8338c59c3470989b4a7c593805a02ee286d0ffe0b9b41283942c0dd2f5213d880dfc575ffd200dac4fe4dfa54527

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
6581b33a30a7c13c06390c312e5872ed

SHA1
874e02a7e5c8e94f602eef0850d9814c81509fcd

SHA256
e71da386d4a17e2ff5816ac8d888226436cb27b0d8a52bb48be2e39bf61e60d0

SHA512
475d56be656a63e3659c62da266cb8e3754edf41e637f4dc4d65761b1b1471207abe6a54df69ce8badd2bf8771e19da783490e56e3223baba7d0d3b4d430f92a

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
762d15f9c6fa3f80f2a6397b80492334

SHA1
0d494d117790cc14f1e144cb7ced530c88cf2a6c

SHA256
b876ccc563d65decc368ea114778a04de428465f64d6a63966ca517064d42477

SHA512
7c31f76d0246a2d13271f4066fe1d9fa45982c0b778ef716f4f06ccfaf69dff19d6e7831eadffef1f4cf7efe1717e5fae39581663d6942535e3498817f59753b

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
fded5e72cc82f9b24cd8ef4b72f019c5

SHA1
1a8f5134f8d211eaf52673adc6f8d4cc2687a448

SHA256
df37534f708174e9ce49074ef523a9b9c746f24e7a2a5f1f0968ecd5d230b78c

SHA512
9903037baf740ee3c6b0023018459ceaa48a360213232205e8f20f336c1fee5736521856acd8389ca7507a0226f5a18484e0fd3850326c8869a6960f1a86cac8

Download Submit
/data/data/com.systemservice/files/PersistedInstallation1018542891006439048tmp

Filesize
557B

MD5
b5e904d24e716ab0965bc90ebcbfbeeb

SHA1
dac18840feb3dba68bde4068ae2a1e057b210a43

SHA256
5e079bcafbc232c507724195ac5586eabb48ff759a2decf078855ac0fdb8dfe5

SHA512
548535ea8ec19efaced601e8a6c73738e34e26581a71afef799b3f3a91b0e3eb3385f1d2e3afed41b09c0a6933ad6719cbbe91a2ce6a249af3527a603450c4c9

Download Submit
/data/data/com.systemservice/files/PersistedInstallation1743210675757023982tmp

Filesize
90B

MD5
5339f752589d1fe779212561f04e2aea

SHA1
a7da80d5f25fda21ab7891f4925f1f39715c2533

SHA256
5218d61732a6811525330f06c7ca1d71389b12b1a015ed1485dc38ee7aed965e

SHA512
f4216a11a87153dc3eba19aff7ccece935c2c7ac458be34fd69d0a07fe48a0b7453abb8cacc525ecae0f1fd23aba87d03ccdeb50f2e9bad5697a6ccb25b8b0c1

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
11154873e636e3608a9f8592d19ac9be

SHA1
3d9a68cefe1f56afec1dc35eda59436404345e64

SHA256
95658a2cf81221ac91df5ccd360070e8c29af649ee6ef126bd640a9ad44a8474

SHA512
66a3deb82ab0b4aa0736254b67be1092623154ed3ffd06798e08b120035a753a97c8920fd4df1c9c17de25a0be08535e9aeb42f29d672483d7d8ab2c35f877f4

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads