92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
16s
max time network
156s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
08/02/2025, 02:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker discovery persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4941

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
e4fdfced34174ee951157a2d58ba81e0

SHA1
a43f480434cac385f31589812141047e4837d2d0

SHA256
c22a988861308a2275e099f1a7beb711224f5173c4faad0da1dd2f777344a075

SHA512
31ec6295d0364d6d10b22d96f40fa7b10157275bd9dfd1d5e1f25413915d6489335c90d022795d9c6fb17149e3bedf058202cee43f62b087dc5d369a7989ed55

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
30adce3b6547ab4b2268aeb4a615e3e9

SHA1
f5a8ffb1d7c20e89975d3f4305fb374613c9e4ab

SHA256
7b49de8eeaf6ee9e2071f31e70ec6bd1e58d2d0c62c0807c2545b3a50d938f4b

SHA512
05bb398786509269036d913d92d9da479ee552a111b33770088a26597ef3bfce6a5a313527a127e67cf0078f971a0366c93518bc9ded2878456a15d9af4f94dd

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
b07ab244ecdf37933978e7195eb31ca1

SHA1
34c28b6b3c5fe08794bcfd64c2e0d6a95e8e403d

SHA256
5a1ca1c840d6a6bf016a54e2284ba6923624e65749c7fc4555ab748c9594a36d

SHA512
5a534ae14e8473f317c4fbedfa1109595c947ab5b2f6eadeb69c2c3246a2d4fb0f4cd27498b56ca9bc3956999b22b27a726d8d98ccd968c0d552d7c8016e70eb

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
46f9fe397d1fef8423c61086c05da0ba

SHA1
4998096275253b33d283b49812f8739da98c3fef

SHA256
e08821d11d9fe6ae685ffd0ae2ef2233d435ea85b49699b88bcd081067413e2c

SHA512
04f85d9114704cbcbe4279dcb737ddcb015d3ee89d7f6dc14919a318abedbee891a416f00ce50654c8f8d2c235951db9d613ec5b95c0d662810f42246ef82ce4

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
e4a4196130dad700eda39285d8222472

SHA1
e86919ee0e1e2f22c2924e5d4fe0b4bf49ac50d2

SHA256
67654cf00a75ca01b6194387e3c027fb2e939a4e8ce4aa42886f11fb42ffd401

SHA512
88f1d7ba8ad31e70de3d3b5fcfc474ab58ef432cc14bce76759af561c33aa594363f446194a58d0a8b84938a62899bb8459faf7b2bde6ff3807807ca4d882c0d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
32b373090281624f2f5d4176bab657f5

SHA1
91d9ce744081afc5d81f4b245992699bd8c98a8e

SHA256
c2c53eab9164beb57ab7b2db97ef9a168747b59adb3523908a601658c1245829

SHA512
95e138b9d1b11a8be55113c23733e39a9951ea46c6627cba8e1b930694fc17533d289b58c3ee8809eef890a892132dc2d226e6af5a6e79d00e82eed896cc5624

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
334cabec8ec3cff243029c1eaf19690a

SHA1
1584a88537bcb4dd1cdecd0d95288d4d99d6e93d

SHA256
a192ff8d4cc714622caf02e180b06c4998df1a3bc9c42a430fc60f3526430718

SHA512
da61654439e3b8c116b2348f2e169e4f76de4a3ece8517c4d2f27efc15674aef786c40b3d7768f6633a60c33b36276f24bcaca4f80d3b5f669dc8dac097e4a49

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
bc1f8e70720a200df740cb808da0e0a8

SHA1
167794c827c2ebaa45e927c283106f95d8abd2fe

SHA256
99c0e2f26c3d406d33c0b0f2a01a8726937d99623a8b95bf8c81ec787fbdf954

SHA512
0d64b2f245feb6c89e756ccfee8052def4b1384718fc94594c3c8308ceb4fe2c982f245e666a3a43a39048a2dd35beaf1d09003549e33ed9572871164657e75c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f871ff700510a56a54fdd56bc41b7541

SHA1
481548c8bc3254a00f497140278597b915460c48

SHA256
ab18f3bb605f3cbedaffc75b2d5a03fe21ab82179d268331ea907bdcd32c23fa

SHA512
12e3d348199566e137f02b63e4c8b4c722aa086128c0f1cea883d512075b8573d40d889d2b4452d9e3d9c02f523716da9775d93750c242a1a2d9e62f50f60fc5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
7a7841d32ccb763d102c7ee909c536ec

SHA1
4c2b3073132f98e5dadaeefd113e443ab0aad07f

SHA256
8492d766c9613dd81e439490798a1c5b079c3498a888b9c8be7cdce43cbb7772

SHA512
40d4e5b3ad97ec0a9f9b479ca8360ce743736870623d0ec663960f6be69de8d8bfd09b2b8123ddd6f744f42217bce454a865c3663fcaa34a979b512317944592

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
5c6fc63c6b8822aeb6f9fbaa1d8b8577

SHA1
d4886aa08d95cfe99261dc0510a307bdd343a556

SHA256
0f98772618fa03e61a4d6ff87ebd8ce0695dabf8d5ae0e5763e20857f9af5fb8

SHA512
9d3c513fea7c59a805f7199949135cde6c0bca1c0e0571a9b5372e4e3b3c7ec524c77645332688a4d3f754e5b53d3709c522fe906410ddc1791165543ec350c0

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
3fbb2ffb5e07d5a78ba06aa748dd4d4d

SHA1
ff66306c16a86d71735afa0a27452f8a09cbcd30

SHA256
1756131dfadb4fd1cc7fce5cbe4fe188918c7ef4ab9c466eed8bbe0455fcd454

SHA512
0ee57f64fde6c3a14bed616f7923463494745d6e0a5810c52d876e0c3cdda78648213b0db00291a24aa63c833487bcac6191a34594e6f6eb7bcd03b41161a17f

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
25e59ba7c2f8346d56507df82600f3ca

SHA1
767a9390364b15951b0827911da2e5bea8e07aaa

SHA256
fbf0fa442fb07ef215a3de484b85da0d1e3b4b7a6268bd77c60fd3782a3bc450

SHA512
7968ff27d901bde836f50275542d5c189da15271511f3b56061ab99f6bc3df2fd4b631595abfef29cde893bec8759c90559ca023008e952f83bdb12f139ffb98

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
9d149586154c6bce17b3e8db5bcfe578

SHA1
eeb17c0b29ed8fe2d9840619ec0f4a7b1e0d97d6

SHA256
116de9856d22f032e4db867765af951434f471e7db316b589830596eb0a55973

SHA512
34ca2f5052f9c2f9569bfb15301a0fa0fb4efe2a3a0fb6c8ec5fe09376db2099839959176cd670265653c327b04b1729146e68cad61332565eb3c6146f8696c6

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
9795ed939443da5b20b3efe0c17bbe78

SHA1
caeebe1e02eb2a68150b8d15cc1e1b01d9aaedd0

SHA256
256e63996e5e9e56edd583c862caf5ba14fd5d823532544624aa64cd5c6ed5c2

SHA512
ec06a8ef4d3f8e1e04f1ff2a226ccea60c474ddd662478f304ebbb2fbe59b42250644bbbfbaed242846c7bf819005edbcd46f69595cb8e5c2d4bb721d2072002

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2043823687927753tmp

Filesize
90B

MD5
d40d5da58b478e4858cd988fbc287999

SHA1
f1116a8e98763472aeff10469275cc31204433ac

SHA256
605359bcec2d40dd0d9453024f23c51bb90a1f1f35a56bdb67a3744f54740345

SHA512
16c7a03e5e945c9b772a49dc78561cd7a2ad8f1061144e35c7406e20e195e9a3925d536705fb995b4d003ffdff61f70f2c21c8604b322745d7d8d657d23ea947

Download Submit
/data/data/com.systemservice/files/PersistedInstallation2061792521559143135tmp

Filesize
554B

MD5
912f16fe71d9247991a1ef7b86ab20d2

SHA1
2074456213d3e29d7cabe06af805f24bb391c5fb

SHA256
de1646ffc225f4c706c83aee92116cec97953bb7b2f9e86cf44adfe17cf23a50

SHA512
e49c4bbed453c74bc1168996a4879fa19e0632ba02a650b13c901a7e1bcebe1976365b35ed030f8f8d41a0257c861c5ea970b69cc086d89ae3cf27c225b25089

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
08d08e84f21c7fbb4447dddb20a20b8c

SHA1
ecec3356d18dc1b3f4d336ccf2067118b816c9ff

SHA256
9d9312a75a978b600178e1ecf7ebdc2ec6199574a968274ff19fda728fd3e807

SHA512
0c2450134e39573700a230bc0a465b0451ffa79972dc70aa4a92da11ad1343cf522c6b77fc06837d11850b00e54184970753d9ac15bbeca1c05ff55993998586

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads