Analysis
- max time kernel
18s - max time network
132s - platform
android_x64 - resource
android-33-x64-arm64-20240624-en - resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system - submitted
09/01/2025, 03:04
Behavioral task
behavioral1
Sample
92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Resource
android-x86-arm-20240624-en
10 signatures
150 seconds
General
- Target 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
- Size 3.6MB
- Sample250109-dksfdsyjam
- SHA256 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
- MD5 0366ae0abf0ada8aed90322bfe07dfd5
- SHA1 2f0779ce64f02944e87674745cb446c5bc620607
- SHA512 52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
- SSDEEP 98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 19fe02503e18a3875650de8bc60f37dc1283ca620791b33cd8ad368da37d3c88
- MD5 42de8b62744403760713b88343e29b24
- SHA1 cde4bcd7f14beb194c4a42c9103a2eea73d31901
- SHA512 28d79f8946dccb967b1def12204a05cd55073a8682a77ebba04a33346a17617c93b6a1c43c8f7c5b7ae1c4b5bf5cb53619a22ec26a5a0eddc9ff43e6a3ffdbe2
- SSDEEP 48:TIg59MENZBdUdndVd/729IvdldHlq8/Jq4qPSI:RMEX0wIyNjaI
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 3cae9ceaace00566d6a69fa27a6dcf2693912beb08c2bcaa9b430da855479c96
- MD5 f1b4a1371a9b887bb6a87aa41b86b9dd
- SHA1 21917e03bdc01977020299d442a1bcb60dcb8c94
- SHA512 3104bea2c0e54be760a8b6499bd5ec228367bd5a19856d186a8daed0eece017adccccea5d42657e9ffbfa61aa205fad013391f486606285b0443ffb9f4c2a5ff
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 94c15020e7926f50ddee5ab7014c8346cd6948d9d5ba2a51fe1707094ddd6f6a
- MD5 63b4f2de363a5522fb64aaa9c7bbc859
- SHA1 68dcac5329a3aa29601220b5b5dc47381fcbc06c
- SHA512 fc563b707ab8085becf1cbd5b3a360bbbd69cfb835fb8d5fb03088cd996b5b36df2451ff09075b044ebd40e8c7cefd1d4c443917a12afafeb606a47d725b7d13
- SSDEEP 6:7+/l9Qn1/g9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKTA:7+twqLiuWd7RmBEyPbaA
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 b773a66ab3ded971eeb169695465a0c89ba835520353c029936803b5a10aa38a
- MD5 5f9038725879de5482b35adb4fa02f44
- SHA1 52011ce8e6a93e3c3f8881b0b34824aac49581e2
- SHA512 d6ef3b099c2fb0f00d5201154681b78879e9cf4d9e55193838884fed5c4dfab3d30c27f5c945d81fd0e50030f2b911fd6d4079f87480152ae5a712d7673b17ce
- SSDEEP 6:7+/l9tqSFPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuK2qkt/8:7+tvBqLJdKBRmBEyPbH/8
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/core.db
- Size 36KB
- SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
- MD5 045489a0639eee27bca52f48828cd93d
- SHA1 436e7966e7c019273c44faa4d8c5709b816dfda3
- SHA512 c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e
- SSDEEP 96:eMzKMilNJzt69l/mwICfPDKOjK0Eg745TN3PafDDKsgZK5AgZWgZK5cf/ShOqLE0:AuldjKiKvI45TNAKfUf4hI2q1UpKorKS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
- MD5 62ad4a05cbdca7f47b3206b7dbda487f
- SHA1 4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3
- SHA512 0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6
- SSDEEP 6:l9bNFl4/Sls1BElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEBE9zmzrfRmBEyPbBvOwk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 273e64b3dc24524fa9d4e9c4d508cf9a40f0695ba8fd9acdd6b3b315bb5a5b5f
- MD5 4a585e6fc80839447a55cab3e90fabca
- SHA1 3a8e10e417beff69d4ad4e0e24294e530031f5f3
- SHA512 f689117fd7e51b9b3fc6a76732aeb42677ac6428c7f63e05464d3ad272dba8dbe5d4fc283532ccfe4c9f26697a8a74338bba795d19fb94fae97117b0bfd27e33
- SSDEEP 6:l9bNFlsls1XhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6R2:TLiEx9zmzrfRmBEyPbP/P+/0Fl6RTi7
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 a64e60883649b19dcdd235539f546f240824f966586cc4a081247238f5711c56
- MD5 2a054fa15a30b6f4ede5887e99566074
- SHA1 7a0c6f8fdbfa6f0c15fdb42df8e9bf672accee74
- SHA512 5a5b4ed440b3608ca7a824a607c4860b12c6948135b2c0cbe4e01ea92a82c53a9511e0c263100122ee9a4aa9d667c65294cb388233fa553dfd46f0255eeb1aa5
- SSDEEP 12:TL1Es9zmzrfRmBEyPbP/hr/gW49blqYFl4Jlkg+/0Fl6RTi7:TLvpmzr0GSP/h1499F4blFQK
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 f026bfe81964f592f6e0963a5ac777532003c13261923d23ab47eace1f6885b0
- MD5 17cd0023db5f465f6137b4912cb1f093
- SHA1 a8c2bc8134df95638a749199942d099abbb2d9d0
- SHA512 7752226952b6ee7648aeb492e53f225fbbee974670fef2489bfb6251af629c4cb17843ef6d50a3a99bdadbfc324e0efaa0ad4e44b1a028d32fa442615fc3f08e
- SSDEEP 12:TLIEsE9zmzrfRmBEyPbP/qFiOLaOS/yAUbYUyWldYy49blqYFl4Jlkg+/0Fl6RTK:TL/pmzr0GSP/qsKaT6lXt499F4blFQK
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 987de6e2763cbd200b9b3635971fce9839aff554b0e8a2f6de95157379b695fc
- MD5 7ed71c57cb03f7a2c1bb483bd7dddc31
- SHA1 b8cb981cf80ee54b62346a291631166fea6b58d1
- SHA512 83a93447f6a4016b847e440ca1919745a165cb9a90d222ca9cb7da32b808dabeeea5d9547542102662fc90b50bb102a030c260a97ab664e080bd004b651242b3
- SSDEEP 12:TL6uEO9zmzrfRmBEyPbP/RFiOLaOS/yAUbYUyWldYy49blqYFl4Jlkg+/0Fl6RT+:TL6kpmzr0GSP/RsKaT6lXt499F4blFQ+
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3
- MD5 e3f13c7d7678604e5b293f6672bc0ed1
- SHA1 b16c998ac7ca1db79cd4983b207a292ac1d96e21
- SHA512 b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4
- SSDEEP 6:l9bNFlgls1gElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WS//:TLuEgE9zmzrfRmBEyPbP/Wy
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 7e03a96da4399f4cfca92490766fe3d3585e4d862d6550bf787ad27ae1ee5df1
- MD5 8f19200e5899925227590c342f28cb2e
- SHA1 edbaaaf5468bcaa187aeb447042679363c785a8c
- SHA512 760370206d3dce8110cc5c84e5d52061d358410d4f7f0f5a48894536c59cbc34a7f3d54b48d64300b72dd84edd7e86dc3e41cd5368262b2946f37263322e8c4a
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 07afe069f35e503bf31a7d7ae7c98fbd2c86f60afa272d76a7ea4a2cb6307c9a
- MD5 b46318a0f8bcf1c1142f446988211ebe
- SHA1 97acb768e4d546b5be5bfeb203f51d47a84667ed
- SHA512 fb36d4010bd784de2f8f95b8a82adf073b2015a552d152776de3ec96ce3fc3d9d303730feca3ecea7f8f4ab20abf38dbe1e4d876439c53fe9ad3f9faf1739179
- SSDEEP 6:7+/l9sOn1kRg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKl:7+tcqLiuWd7RmBEyPb6
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 8364c68624f8a4b06718113492abdf842dd2316e979c86e6134d1b217176d312
- MD5 78628d0b57992b7538daf0a71147a0c7
- SHA1 b3fbfb32375efaa253e2b0bf01e3488d21590cbf
- SHA512 c2925424909f8e8e59a1efee2bff717cd69fa305769a18cd4fa2faefabf639bee0502d5ed1ae02bc672581b4e335260bf6f02b7fd48655ffb85fdc7c8329cf4f
- SSDEEP 6:7+/l4Pg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuK5:7+twqLJdKBRmBEyPb2
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 8b258b917a796ffe6418b304193e7a77feb7789a565c843a93f9faceeaae2ae6
- MD5 e51f5e47e7cf9b8856a5b6c0d781681a
- SHA1 f9166ce459399b80940519af37bea6cb497ed144
- SHA512 a96900383d6b004e53f43c17bd4d92e2dd17eca72b3d8429977b29ed26c3792b998a7e7028ed98e1e679faefa5b1d0414938e13c2ebfddab993e657060422b6b
- SSDEEP 6:7+/l9GFPg9bNFlqhO1oAlOERX4PBX4ogLugMBX4suuKqul//J:7+t4BqLmq9RmBEyPbrqXJ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 f49202b25be616e25bc0f33763b25ce5911d260ce091649faf4c225690b5b978
- MD5 2382b6f533d54ae6201baa6c7237f825
- SHA1 a5a7e65f9c5091ba5a1f734c743a543c4efcfde7
- SHA512 f78bdbaab083394284f3e255bff940e812f90c2b9fa7a3024f082ee58da077d43554c015023a380f755d4e88b86685b1e0612ed7ce251699945504336b5aa3b2
- SSDEEP 6:7+/l9GRthTGy/ng9bNFluls1OElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKF:7+tARDfqL8En9zmzrfRmBEyPbSn
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 2a7ab82da8e1ce29770c95461759fa45c420d7444453da207dd5ceca86953ed9
- MD5 2d394355f03e6b18aec89d07b4d2899c
- SHA1 638648b0a11e04e41c180ddb13975dd3007a9295
- SHA512 3044b3e26b5e40a3b9491e3db5e2ff0b031fc5be2513093ca153c3df58cd26b2595b0468dd6e830564168817adc9a5b7ff5da3040691b8cbb091cb07901d88eb
- SSDEEP 24:7+tGsKaT6lXt499F4blFQ3nqL6kpmzr0GSw:7MGpa+l654zQ3nq2kArSw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/files/PersistedInstallation5367304395983204107tmp
- Size 90B
- SHA256 7b13f03eb6ff9dac4d337f0d976ab90bb00af2b3bf671d79c93b64f195a646b8
- MD5 eb733ae52fe805d2e1d70a16d5698a52
- SHA1 3b52fdbe3735adfc3221ac816b45ae7474da588f
- SHA512 17f162a200fd4d7554bd62b7620b6c7e580cee031b2134b3bff56b66eeb4857f3f50cb5a9514767a13e23d6f0da1ad85c17a83e98edd8c0fac2a3170c9bb9553
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/files/PersistedInstallation9004155737707639290tmp
- Size 554B
- SHA256 03c32efd1191b31d7b326825a169eeecfacca57e1a42f65d403ca2f545dcccb0
- MD5 2f9b7d5cfef28a1147e6464f8c0b2b50
- SHA1 45b049ae361b54908a9b1e8d6bf107e40e863307
- SHA512 1cfd75971c05c4666c1c2d5876624c70cd9fa722f8c583db60dc036b97d7a7e8cecbae668afb7e63b8fb05e583eda11fd4448c5ad133e376aac2d0568b01ce3a
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/log/log4j.txt
- Size 3KB
- SHA256 97f79aea5cecbc911db70b53d100660520a3058c5e6d89730514a9642a2372b3
- MD5 15f0e64cc99ef396b3bbe4253369cabe
- SHA1 e95d7a3777452c380c7bedbd162c99902728a444
- SHA512 12a00cd70961de6e7aa11420cfb52c4155a9d20e5126a6bd7417ee6ce706cb8a6d7e9255a901156d07cd7f03e32e63139b0062af87cbe46982845fdfaf82b2d4
- MD5 SHA1 SHA512