Analysis

  • max time kernel
    16s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    22/01/2025, 02:27

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4610

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    66503b12e85a43f2bf76168f9fdd8841

    SHA1

    fb79e11f876bab687852a15485e8a63013929f1c

    SHA256

    f1b8b2c212d0ad376cb12e5314dde4d0923c3d8c42aea85bb16572a436de3e26

    SHA512

    cb495f124b44878ffeeb3357c3dad9c0d03ff2b4c3d6c52a62cf0dc9a3eed56ff6f4ba1980ce63e82a9a7590c26ff793a546884553eee470253947960bb6021a

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    e369b51addcad3abc98ad89042a0478c

    SHA1

    3e0f5b5fc4cb92945890cf62dc7f3968c57ac5a3

    SHA256

    1326d79e4a2195d5dd8155c0e3c57e885a2ba0e59719a5a70d04acea8ee2597d

    SHA512

    9ce63ea7fa6d30d55203b680275b3a1b3bda78263501a5974f8a2f5e72fa237d8e5023b2fe8a3c6d687ca48478bd2fa91390bee9d8423eb839cc8d0a9598b0c1

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    cadfba0dd7bf229694303af978fd3821

    SHA1

    d58da6cee8be69cc1293df5788d402565023ec45

    SHA256

    1ced8ed5935bb9930f25785b3b2030c42ce062caade99a8fa1949d6c4156c044

    SHA512

    464f168df2a1bd479c9f62d3f5af4e0b85475f3a24a8f9b8687fcabdebe91d3fbb341975b181bd0407b2eaf8b80613326c525e6ca2d359599e289c7deab57556

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    2382e3842085a6fb9432ebb57f6aa9f5

    SHA1

    b02a9e92ecb28717a82c6648219e5c34794d4bbc

    SHA256

    96e8fac5c9df8f2b54aa4c2a50af5acbe75df6a4139b2cf5195bd7e96f248fbb

    SHA512

    d776145a2793ee68b07f5b3947b694e2bd3e9d7f75df1bd5c17b639b2193b439523cb4f77688e0cf4cf857d9c11e4dc5a019ae7da496ac978d4e665f7b1c0237

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    6a849f74d174b26b0bbb5ffdc83e9519

    SHA1

    12d2e7f16ef846c41e450714484582023410196b

    SHA256

    995a676fe27aa222cf53cb6fa7f42ab937687d61fd20f39665c5e744a438231e

    SHA512

    e8836a5eb8728e6ea2a23f14657e684a22e491b7884be84fbadce440b76dba76d9b1c9b8af31b9a83a49b09bc69705aadb10413b80c937a51c9c9eafa268276a

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    ff7fa1c36f47702a572621fec1b6af11

    SHA1

    57d84a26e62bd463433ce67696c28a8c78f75f5e

    SHA256

    e2246379c7f99fe84da35d954ca1813c782e6f62155376c2db64a5c2a97c6ff6

    SHA512

    6a27963ea7f030dcf2766cb491b9f9d67374a06a7fe412e50f47bdbc0a0ae16e05046372a99d13272c75c52c144fc1ca2b8168e0a1be275aeaac3e52b32ea14e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    aab701ddc13367fee43c0014dcaf2dcc

    SHA1

    f67f8bb73efb094859035894f4c8d6b808745310

    SHA256

    eb03d6f9f4c0d8c6c4ccf1b97b927531784d2dca9439a8193a376106aa6e02e0

    SHA512

    9215eabef9c776440183d450ac4ea351b457fa474fa17f389c9a3a054a991bbf127c444059e92c7681f4f47201bde3d0945d8a49fb1b0142accc62f74da5b1ad

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    a527e77e95d50fb98c9e09461f6767cc

    SHA1

    6f18f2e566d02aefaa8165b016fdfbb6d067d81c

    SHA256

    e99a1415bf52f1d0bf4f1f5f691227cbd38abde1c2533a7a0e9dca31baad122d

    SHA512

    50da7095f0cceb4414eb049e4a20e8cdaa51df9cb66874e55dfab97dbcb20f0497dd63e0c15761c44acd0a011d55bd0964661192788729356bed8c7bbe63cb36

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2238195eab25764b61f2d26ef6a720af

    SHA1

    d366efd0cc079f0f87d23c630ec8d99f90541731

    SHA256

    599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef

    SHA512

    478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    e2c50fe18c6b4e537934b9a2ad8761e0

    SHA1

    08ed722b35d8fbda598e999639dcd8cab1a4a0e7

    SHA256

    ed7fb84fbf81f4f66fbcc5ff0080b186a87bfda95821ec45ba44918c82778921

    SHA512

    3f082368dfaefd7570d0761c678551c5bc3b15e3d79a769117074b10e15d28f2fab319fd50cc60e0f237f3d4ff148e1c86d499c05208ca2f3ff8237bd3398c7b

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    ab36d6c43cb32bb31cd949cfd859400a

    SHA1

    aa66b772ff015ff7e4316f74133e4f887a1a3619

    SHA256

    82f6053a5b8aa82297c414420b8518849547f1f9765c8e584143bdeb6c36ee0d

    SHA512

    4b099b925da80705d07f5048303cc5b2ff9e838f7ae6d7b42256b5267a1623d15608da1986f919228bbdf4bce9f36dfe61ef5b73d4bafacbb1cc01fa4c462fdb

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    6671ce7f848333e2f9c77a8458a46c8b

    SHA1

    c622672dfd690b047d7a09f4b4a0be6d69f3459b

    SHA256

    6614423383282d4208b41dbd32a774a558841b9943493dea8928389395fd72ce

    SHA512

    a26f4a8438cbada90d926cda29e3a0a40cdcb25f93ba994825f1be987de48a33b0a51ac007c7d0b2ce64c5f63d1dc1ade0ab09fb67055fc9409e55aca98434b4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    96af73ae8cd307f4c1ded4a13f5b6e9b

    SHA1

    c682dedfc6b876daa09cca5931d4892eeb7fffcc

    SHA256

    4c963088be3b28710b644eec226c7eb1ffa1661539bfcc1f177875f2e563b7fd

    SHA512

    99d4b6a1307bdd5b4d49de58d0bf0365c891f8f8566c92b6859811ce588cfd738519d47bd0c2105e891ed6dd99b8c40053bbf3693cf79836dde481c42a543f04

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    ae6d1fdf50afe9a00d2819744fc13853

    SHA1

    4fd0aebf57eaeed3f4db79991d99560acd56b418

    SHA256

    3d91ca7b6c1c84ee23ef0e75be48cbd1542165e35673c65a38ac8dfd97def26a

    SHA512

    805cf1b00e92d9a15e2090f29ab84549bca74170d8975fcb521d3a8837f692b6a476a80a8add44d1745b2c7c25405bb68db107ada6d1d1b932836dbc2f216618

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    c6576a7ddcb95bfc0511b661ccd4fc65

    SHA1

    7260df594a6bae1d26996301faba789178c27698

    SHA256

    ae29641a3c04ce019f98818cc12734a0b4a5c6eae9cd42f4f831d10f069246b9

    SHA512

    d9ce9fdff3385463fe4311bc00403f3088c162ed32badf82d84e5c547068ead4b35c8c378e31eb2c162261b2be9814275267abdec459ef6e410feb7777745f9f

  • /data/data/com.systemservice/files/PersistedInstallation1655618716278060400tmp

    Filesize

    556B

    MD5

    c0d23ac303bafe4ad723a4d7537871fc

    SHA1

    76de747bcd696724ec1bca11ee784288289824f2

    SHA256

    2bca3bf2e9f0404c322398e38310891f84e000e7c4ce22344c32c5751bc25ed1

    SHA512

    140ecfa5e4bfb3e2a4cdd6edbcdbd6020d51015e8dcb63589be9874cca7f1941860392b3a6fe39007b4b879ed3bd14603e810b192fee634f0bb20f1e7e3c2001

  • /data/data/com.systemservice/files/PersistedInstallation4294874579358064660tmp

    Filesize

    90B

    MD5

    8f94e8e1d400e159276249e5da619941

    SHA1

    2e5ac45e5150b0e28e3f11a8be7383516e3b991b

    SHA256

    4f855d9fd1b2b15c25985a901d15f6e994b02127cf240fb480a33da4e4ed35a3

    SHA512

    a7e226f28d69e61939bd254ea4bee92ea5a38c44579c4d7c9988e0de97a666e208c19d78351c0c2045055b04cbcf8c268963a04054866c0ac22468c90043e995

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    6KB

    MD5

    41c5647ace0993845472812478d90370

    SHA1

    4cd1b1aa0aace9a12223b94742a91d301de772b8

    SHA256

    8c16bd18aaaac268805e93023223f31ed1ca47ce9d3b4c2a4b6cad03a0192440

    SHA512

    cee0302dbe00b83b8d6a49c59279eaa716f6789a272427c486b08904d003bd8be3502a10372488e8d9ecf3408b8e6a06d016e990067ab79d8e1aa36cba7fbd2f