Analysis
- max time kernel
6s - max time network
146s - platform
android_x64 - resource
android-x64-20240624-en - resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system - submitted
16/01/2025, 02:28
Behavioral task
behavioral1
Sample
92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Resource
android-x86-arm-20240624-en
7 signatures
150 seconds
General
- Target 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
- Size 3.6MB
- Sample250116-cybjcsxkas
- SHA256 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
- MD5 0366ae0abf0ada8aed90322bfe07dfd5
- SHA1 2f0779ce64f02944e87674745cb446c5bc620607
- SHA512 52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
- SSDEEP 98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
- Size 12KB
- SHA256 cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36
- MD5 163b0e3f017becbc89b9d7f330b78f09
- SHA1 1ef9cd8ac8655190468d0ccece0a4738634ab0f9
- SHA512 6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd
- SSDEEP 6:l9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKG:TLiuWdwRmBEyPbZ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 6e5f750e4363aa2ad332bf830574287389586d0c7a8c7ca7085d3ce49f125949
- MD5 6e7bb2476e7526382c8aa323cb6fcb53
- SHA1 5fe953666c04630f8e530ccf3f672a2beddf7fee
- SHA512 f90c56c4a5a6a2abd4d63942f8760ffc7bd9048fe75d3ecabc42bfdb71bccf850d365f3837b15ecb04d0c50ad44344dbf122252990b8daa4555091b7201ddbcb
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 4KB
- SHA256 b289656f187d02f05c4836c46f18c8155992bff2045cc81e347fdb3de6631930
- MD5 da4a7b36f007448ec713cd7fd640bc29
- SHA1 4ba63dcbd9d4a563d58df4b96ee7f7bef6173884
- SHA512 60e3da00635bb4b591f461aeb7dfcf597123351b8fc0fe648d571b559c539632b2303ae3353a5fdb966545ef16b39ae0d2f2c875ddafed49836e74ca8ce40641
- SSDEEP 3:mFlFllX1Xll:0n1
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/core.db
- Size 36KB
- SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
- MD5 045489a0639eee27bca52f48828cd93d
- SHA1 436e7966e7c019273c44faa4d8c5709b816dfda3
- SHA512 c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e
- SSDEEP 96:eMzKMilNJzt69l/mwICfPDKOjK0Eg745TN3PafDDKsgZK5AgZWgZK5cf/ShOqLE0:AuldjKiKvI45TNAKfUf4hI2q1UpKorKS
- MD5 SHA1 SHA512 SSDEEP