Analysis

  • max time kernel
    18s
  • max time network
    154s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    04/02/2025, 02:28

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4349

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    8cc100579c8561d209393b449784b9ca

    SHA1

    89928264d2c6a60966cf24f85ea29081e9374135

    SHA256

    a375b680d440109f2db006baad76f6899dac8b48e4cacffe264f6dd8612e0edb

    SHA512

    7abc91a9ec1eec76709f392c2d1f0a27e2a6b2d7ce7a5d264c88dd40791ed6489720c4f88009defb1b688b465cb81134e66cf59b378b9ba075ec63cbea55093f

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    c3a67b4424d8d3fef9f46a7836b9261f

    SHA1

    fd00775a2d64704660155f55f40c7060f3554bda

    SHA256

    9194479ad3cdc364878d6fdc01e11bcef2a9dd0d18f5e01a218656fcaed3c2ec

    SHA512

    3111a62ef2181340398b0aa163db44a222c09c7a41039a5117941c255fcfb56e45e8c860e3993badf64b6913f8a61ccc33ade6098f87d221d0c978c9f0d52a3d

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    e4c11cd7f29aad99e67fbd8e7400a414

    SHA1

    78c39201e1d959111d6580dcc090e5f7168df68c

    SHA256

    8da7471c0dab333d4bf0f081258cffa1bb847b6591b4b873c2eb176ecb806f61

    SHA512

    783c9922e0c669a21bd316ee842c17b16612bcbc5b50fed9d2dccd7c2cedfa7280813acda4e2c2fc9e54c944d4dc24294a8a4157a01f118e98190d784faa7276

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    4cfc222d7f1d65a04d135e1a387795a4

    SHA1

    ded264d0b641eb29501518c8a530e4bd106543f8

    SHA256

    bc7bbc7fdfeb6e194d47e0669d2ad03fdfc76c2370bc4c499fb6a902d083fbab

    SHA512

    1e5a93a1b8783d7819fbcb1447c87d21deb3c2b26021f997e76f96b2559fdde478c10db0a4cbd25bee6caf59b4f0446b7645c439960cf4eadecaa8148c2db581

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    de46497871dc0aa0cf8511d736a915e8

    SHA1

    b7baa6b34c7dafdbe953b2a2c6360af935c58280

    SHA256

    0ec23debeae5a5ccba4802c2415816a6c02cfc222bdf990c8a044b54d59510b1

    SHA512

    436a96dd44d3066018245f34243f42e282eb981f6d861b1c0f44ad540bf7d853b4327b2e0d3b4ca3bfa4b50a4d88df72ab205010263b5cd700372d25b22336d6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    4d6424163f379871f92a9732aa790b25

    SHA1

    d400779430466bb89f6e73d221dff9435b4cf29e

    SHA256

    8cc38e137393b07f90fb709fc5217a30a98ec55edd9cc2284e87715f305b9045

    SHA512

    9f4af38f0714a44db2f7da410ef1b5ea3c1a71eebed37e83dcc66f12254879961177a1e375d609966ad5a0fa601dc3ecf8d30e74b287e40bfb4092280606ee8b

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    01c092bcb2038af80076cd8c21db8fb1

    SHA1

    df5a732b0e67b6fdea44224ae89e7f75591b5dfd

    SHA256

    e65ea3dd866205db6d2893b481c14afac6ed7aab50f6f10e928840938cea0d22

    SHA512

    e4fbdfddf0657a3966eaa7678434e7a0a381a887108636beae51c065c4085e2a825b7d84fedd575a8759f19392c5f1dfeabcab5953a362931b25159f654cdd9e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    094708400c2b70518deb4fa775402cd6

    SHA1

    6e6e24682da83c320c00da5bddcdc499b22fa654

    SHA256

    c0a9ac15600c65cb6f9c07174be8691d5d559b75576f26062221ec86b395ccfd

    SHA512

    6a0567bec15829cc32797ac6405d2000ec788bf51757b05db385dac67cd78db3234e86008ba9c369d29376ac167e576c7067dc29fe6c9180af1137899855eaf6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    eb335607ee551ddcfee2a4abc747a828

    SHA1

    82ff226d82217cd8f52bc4adb80d2a69f44913cc

    SHA256

    ed11e1dd26b33b96db82d1960e19e47b80cd729a7dc6e7ea65075f532e379f4f

    SHA512

    bf539c44130a863f1b93dca2b49b260e7a6ee9a30342ce7616aca110158079919f054f96065e2fc3b1e321a806b8c4e5d12bda9e97d3fd09a029bee15f04e2cb

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    a213712e9c78dcf5772b803bbdd6fc1c

    SHA1

    c8e4ba6b7489adce5e510401e1b8547cc9e4c24b

    SHA256

    589244ca879a5dd17e0363621db0bfd951af55ee026e749fb957490613c44436

    SHA512

    5099063acd7c7c81606f503c2458c10b5413cc4fd70f9b581c8b2546e5f4849285568e9124d3f152e3b148c927c39ae22ed5de63321a6182db7b125a859387fa

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    99ba3a31558504f3e7cddd2f38914410

    SHA1

    df8916603d2e8cea28c1dc656702a12bb479e419

    SHA256

    e607a846bcc05390f7566ecc30d9f5e8038d0f905fbb6b09bbbaf1ae9b506cc7

    SHA512

    520a6b3820e123bfcb7fecdc6e8f64ae3c46e659673a8b17930224c827a29c118351ea31d93ee5d0b6493db05687f7aa467c74ffb3991af5e173da9e30d220bb

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    25eadc9a7fdc87a51ce3a1350395522a

    SHA1

    4565ab3d1a60916f5bf7acbad1c2e31b210adafc

    SHA256

    1548895a56004308edb6ea5bc8d26fcd7546f3a456e775ce7cac932f23e8b55e

    SHA512

    c567e7e169980bdbe91e8fd75e6f58fb47e935d973ef5ba5da1aaca7528a96cf8d801e86a9799ca62e273f12ab071bc4d9d5f0d608be4baecf91dddfbc474294

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    83f2321f0c27c894af68292438f19c32

    SHA1

    339b32599d88d0a8b6cc9eabd99a2ccf93af35f6

    SHA256

    4eb8777c5500ab892ccf2a7cd08a681cdc14cafbb9ed18bef1b97171bdeb81e7

    SHA512

    28dc4c6672859f76a43249b81cd5990b9fb8589eb4f1694738c102255795b75cae1db38729758bdccf86a70d0c1a3b70c013465d0463de3558e7daa82e613e84

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    116225f8a7cd438a5f9fc66dc434f491

    SHA1

    63facb23ec3fe26c6a92351968fcf5e7f591fd44

    SHA256

    44bedae093e902052a1dc5c16239e4b43f35d0176676ac29a6c661eede0174a4

    SHA512

    1035b23bf1683c8257d6bac9a67e3a6473fad3ed439748c796ae9173db53a4111125858e8cae1749393a1d4be7d5ab56edaddc4fd40c424922430b895b8fe399

  • /data/data/com.systemservice/files/PersistedInstallation6967983856887198178tmp

    Filesize

    555B

    MD5

    080cae37e0b78143bfbaaafab96b258b

    SHA1

    a812f7b31a42f824f30d1f652e66d670723b22eb

    SHA256

    ec45dc082ceac96f251b02b799f6d8205d1649acfffc30e2f7592d8295fa5500

    SHA512

    962dd13a878d7c798ec75f2b7c9535d35bf20fe6d319b0a405e2783f335150a067148e5b0826134d461cbffbb4be787101ce5dc60134d6780bb9e862c3708977

  • /data/data/com.systemservice/files/PersistedInstallation8227671504186950150tmp

    Filesize

    90B

    MD5

    917e10a935640e44943534e5b103078c

    SHA1

    63d35f683272dfd4be628689b10816bdffa80e15

    SHA256

    d488228570dd309c5422f395701464f47b2d9cb86150251e159854b11628cd8c

    SHA512

    96480d8a8c08e411b7fc4563a36e0d9c2424b6d4a54c5267dcc73e77698fa5cfda79dc8cf2e391915a796ef0ba76a3075a2ec4ab8154069c13f0b04b797980a9

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    10e4055c369f3f1b529552bb8459190b

    SHA1

    583143efa6182f46d99a7ce98fe073c3e5b88877

    SHA256

    72fb38d3e1d8fb30cd6c4e4f8f007c36f2b475d0073934f38b2c80edde7e66a2

    SHA512

    b8f26951312fa49be644a33696f8bf0d201a76bf2596f642ffcb5823c687e1dd722761cd872808a06a809d812e4c4015869be884ee65ec511ae0a7f592ff95fd