Analysis

  • max time kernel
    21s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    02-02-2025 02:41

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4346

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    3c7571f159b8132aa4b1000125243d2d

    SHA1

    f3f7726f5a038c9afd54df18de0fe40e3da9e541

    SHA256

    2dcd308a5f69b7718c2b90a374541040102b0be62641ef46fffa1c47e9db1124

    SHA512

    3b7345dcccbe691df66bcec851605690d50b1e3ae385a8a347088725c3fa4a27342160aaa0c65b0e5f94f1c2b755c092b8266344fe2a962ca15bf4158e655890

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    c9e4bf0ef86251f978ba99d82fd671d0

    SHA1

    017586668ee5578fffe7192f3516625d1fc962bf

    SHA256

    4f7a3777e489f7fe4adc7da857bb607bde042bedbc5d779ca428ebeb0ba02f49

    SHA512

    c962f0a44c7d5d09f310ce3e84ee42c0f257248a0acf3cf9ebf2eafb0526b333e4850c982bac3c10f3d8a74625cf11c2d72ea0643dcfc87dd5bb3f7cf743a40e

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    9078d87d7ced9d410f2999ada93786d1

    SHA1

    64d35fc41144bc0a15b7e71e8afa980ab9660886

    SHA256

    cebdfb983957c3e96b6419f9670c942fb9d1dfa972d27e65ff1605149166c49c

    SHA512

    7173658cc024df4f1da0ca6a4c9f945c1b9e56c656c898a45ac807d836fde697c629e1719e48b1768329cc894c231bfc2b8084d9f48b154426b2fd8de9e34f5a

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    fecde73b15dfa9a1924740598aca94fc

    SHA1

    52fe41b0e204550085ed3ef3dbb27ca822fa6a03

    SHA256

    18e42b84aa9bc010f634446ee612e70c9080198e9e4a9f66d1733183015dd4ef

    SHA512

    7a168da67d79cde6594fc5f5455b714aa41e9003c993ddc689f928340b5c9083a77e4f3129ca69a3d3dc2fccc082d235c4a7a4a422e6fb0fbc30b39d4241ecd7

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    38b66fa721fbb69219be93a5798ae62d

    SHA1

    1ccbd541d372111c8f2481b3295b433cbc34f5e7

    SHA256

    454147764596188d58cc388dccd380bb734ba8145f63f9937a0b3101271d0443

    SHA512

    f4c980526d8c91594905ce18c2f40841d3bd717724a9ff5a7583d21bba504fe51f70d70c1019f7ba0ceda64ca0095172c4c1d74f336b700d2e3d485a55f007f0

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    4ca6ee952791069246bfeae6eb5cf80e

    SHA1

    b99ccdbb5d813f2d398b0c20fccc4e6af9a72223

    SHA256

    2e205a422f55129c7ae7747da8f26dfe727b72e7b36151999d613c72e5d9b5ec

    SHA512

    e71722dd6fba8924b83a358cf72fd6cad77a09b4bd0544fb182a1d57d74307fe9edfe040e33d60b2712544955a2da049058a189d6f94b1a682fec4ca6412bcc6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    b7d31c985286d4556c324a22fb063db1

    SHA1

    b740db88fd34308315b6ca0fad0f31ebe0548354

    SHA256

    0b370ea5908c5ff963f55548953a3cab6c6daf9fc95946fc9b5e64a88d794353

    SHA512

    7bab8e4a076a6bc6a4ad9db1362738e613994cf82dac779cab1bbce70013222ab17644b129cc565577829b203e01187b2418590f843f5c2f78f56d2e773fe59a

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    a2eaba9c85e30a614864d3e03dd089a8

    SHA1

    ef0e4d72996af734ca0c6c6aac299556c29fc6f8

    SHA256

    fb8b3f52e8397d4adcda1ee1852388ca6d3d7f6c371f8c1e8e70e8db6a8115f9

    SHA512

    ef005d01d8fa082d70ca68357c68c98af8b8e08262d5028d051a5dd3aaed4b4b8c8b1ee9869adc401c5c72514e60bdb5d62dcceadccf70b4639ed14479303153

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    0e4af810e70ac2e80e74b5b2d88a44fd

    SHA1

    1d63600e2e4b407ab054aab2320662ad5bebedbd

    SHA256

    ad2de9afd61269010cc2b4b79e344a98fe1854b727531a5a35cec2bed2161de8

    SHA512

    7539f845cdf17e915887b36760bc72f6f75e2ca7a5eaa668707edbcc85521a14473ec52ebb8e92c45e4cef2e674dd6186a7ce0084e75a7bbb6625c6e5c35bc3e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    4714aa4e9109cca4b0851ab0691b966e

    SHA1

    054b430737ea2b9ef7e82f0d30caba1d5df6f241

    SHA256

    248adb9f8e7d8187e4e605f84142af375d1126afa6ced2725d86495b5176945f

    SHA512

    2ee3bc5f84364abedee38b1e5548203da83a27610c442c2d0b08ec52c4dbd592c9e3fe8be14bb72eefd694b00e5cb5dc3db6bdff2232ae1543099b5fb657b8f1

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    2e75db933e8af399e8160442755dd917

    SHA1

    dcb3f25f60d425e51b7f13d256cbb6be8e3c7256

    SHA256

    f343239488c05bb042b3c3783f2057c22084d477ba9af3a61a0bfde351a48167

    SHA512

    6e6d43516478d1806b98a0e5d02d0c7546fd189b2241e0ee6afcdc541b5f4f60a45618f25fa0595379e9aba192bd1b0a87ce983b92790ffeaa4ebb5c0440d640

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    bd1c5b0986bf8642e60e5131f80358b9

    SHA1

    010e0447587363fa157453dcb8801406b5e56861

    SHA256

    0d49f57b408de999a1a85a3c4e3b3c10d747393ebc8c74dc9dd8262c39b2833f

    SHA512

    72c6fc2ed7487e4587bcbc47f555055e6401aa5dbbed67f05ab05af260cf46587d0f90fe6a745e3fe79c0b18668709fa67a781e76ec5520698a62e6dab77ff79

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    d603c3bf42cfde17c57d12411bd9e80d

    SHA1

    ee71207c49ca70cd5570f023a3a6fe9b502b71ef

    SHA256

    386a620bd636f39cb43b5a6a520fc3479d5b179f263955b7bd989233634eba17

    SHA512

    d447b21d83f111b13bbe7b267d2dbecf1f2afacc4a743f3c840e8b053e903baf7e25fa8d80718d70f2ee5cba2d08cd7882d5c10d3641356c69003cf3479660d1

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    c7ce69bdbac1856855c73d7f4d63351f

    SHA1

    baf5953f80c957b935ffa9a47c2b1b783497be36

    SHA256

    dcb2f678c116601eb90e831e30f2c8d5c514292c4838dbe7c06721d0e3256060

    SHA512

    c7123e570b84788f85980bb2965fe79c57d5cff99bd2e9775ea419a1e69dae64aea70802e6fb1feec21dee8029e3bbfe88097b3cd261f6490eecfb470185994b

  • /data/data/com.systemservice/files/PersistedInstallation1690061314831430091tmp

    Filesize

    554B

    MD5

    63c75632f0948da8b81c778a390c6530

    SHA1

    94f21c53952fa63bab361d5b50281b2c1c4d5a4f

    SHA256

    330fcf6def25077fb9843f88a0baee5b7a6f5078c5a99ae4f89a47741e7dfd7c

    SHA512

    370d6a10e9dc31f413f41b47a127029a39865faf1fc7ab2bbfaf69c4c426b26662a8a4f415bc841b7b6281fecf8a13e5299dc4984ad9c82412d7e20c5422d624

  • /data/data/com.systemservice/files/PersistedInstallation3378856348306328383tmp

    Filesize

    90B

    MD5

    30f50ed69c9c6e8525feb541e696e6a5

    SHA1

    7ce474437352be5e46a0c51b0acefa445337d285

    SHA256

    0caaa1655ad8e20ea1a3f4f41b3136bdd82c589f07eacbcbd9aeaa8d0857c5cf

    SHA512

    3fb7c0f9d46107ff58748b40e1573aa8d578e3e353cfda83dfd4b0fb23a954dbf0af54fd62995f813b4255da99581f9584bd877affb46bd8ced8bc06953db2cb

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    78888e6115f19a1a6957443a821ae5ef

    SHA1

    c11bd6115b5316088bf6cb4ca7744c373b13c4cc

    SHA256

    4d8bdcd23d59b5b27607712c046c52f4168116f62c98d1be98893b7318fabf15

    SHA512

    bed7cae9763c4e069d4b0bde90bd47e8b9a533743f5aa3628120dafb22f643906670b8edde6ac21d25314172c1cde51f280bef4f408d94572e6b5e13d2398593