Analysis

  • max time kernel
    16s
  • max time network
    140s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    10-02-2025 02:35

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4501

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    0f3fe53bd91c6f7d270d7b10130115a8

    SHA1

    a3eb4cb7b81ca6c73f2822808af505895f3446e8

    SHA256

    42a31fdd3961b0885e65903446dd1272104da8eb5ac9dc91655ac0118389cca2

    SHA512

    5d84ea81ae83881b0859c6d6e434a8a426030329913482cb4f6c022adf47a7f7a26c29d3794fa4e2a2f28d6c64c24b3f1f10b0e751e5923ef553b07ec0c08585

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    399281526248d2ed7ffc284fe35632d8

    SHA1

    3fe62d0cede040303bc1faafe74579c27d5a940b

    SHA256

    a22258a0b4e6fbada160aebab2247273b48e0e68e6e001feac4d8a528322bdfa

    SHA512

    4fafa902b394235dbfa16cffaf990acd19389e843ba0d64bd620bee7a9f4c3874ee1ab481aeae309af4b2125b5c0021168fb70672a2dd6658e7098b1401a2c61

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    0ce68524a05d2babd2b1a2bb01710c08

    SHA1

    450a00f62b7ec51d7ac7dccbeded8f73b7457ab8

    SHA256

    ffe5a31892a8c17e4c4636c89c9f8d0ef6f841dab52f5fead02d351ae6e74f36

    SHA512

    a10925b06f432252139ff2e00ddcc06362656f8a468c8f1e0095a01a270ea1020af5e4c2dcd63dc4a4f5b91ecb083e8c23bbb392e479b8418ddb5c223e30eb3f

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    479f91cf89523e6ae7cd1412a05a6ce9

    SHA1

    9aca0ee8fa2ce368204b121ce18da5b55b1b35e7

    SHA256

    b010e7f7947a9be6594570916152f151ac3152b43054e257e7bbc70cc31894af

    SHA512

    7096e54ba22edd6416e382528d334167d87c9b56aeb34a11ada20751155b4334ec5310ee603d5e6899d4e8045e91fdc2fbc82714676b95a62d9c0b27084e16a5

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7d3e185d84ad23d0fdba32d174896757

    SHA1

    16779f7ee2b263a8c6596716028178e29adaa35e

    SHA256

    64143a1d445947bac96f7300b3ce3251335d73d53e63c89463f4e831a4e4f30f

    SHA512

    64e7c11f3077dde4d8bbca285886aa7fb1a13fd06a753aec8beebb062be153ef3fb3e6052d0d62871a05f496623d930f42b64f01a462b0abb8d347df00795181

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    99418a7f9b46a2508f80c417f80a4444

    SHA1

    56143a6ad822f8a0a5cfe41d2708f930f980fc10

    SHA256

    8e4af97d37798fa45e333c4c08cf0de016511a0f003ebedf2a40414bd94e77cc

    SHA512

    84f938405152f05ddfcf9c5ce6153a4863126e5f084633b444efec66b6b352eaa36756fbd3df94cf89ce571893b6507ca89d1401aa3431a3291caa7359c583fe

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e23edef4ba52fd7d2cdf73529990b254

    SHA1

    60a9dd76a8b79f28c5f0b8f17ad91c4ccd0caf19

    SHA256

    a7e161c08166dcbb289073a157c6dca9008f688a5aadc5dde6515ee581c62982

    SHA512

    294db74fba28176981f897f8b1f06747bd29d1c28b2ec3eaf1e5786700e0ed1b7141f95f3f9bd4e0ba68b3c05445546639f83fabf8c36a3ff49fb9cd5ab1d23c

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    f8fc326a801c0d411e33ac4805987767

    SHA1

    68514325a32a1b03b126e5b6161ecab258244526

    SHA256

    a9485e586c4ca39f048bd753447566083a5c951cfec02afc11da74a150dc5a5a

    SHA512

    1b01002601bbd336914937fe15ca2aaffd4c2343e4510ff024c26716af450f75b6d4225c647bf341181f8b09a229a204599f1d6e66600fcb943fc5658306422d

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2238195eab25764b61f2d26ef6a720af

    SHA1

    d366efd0cc079f0f87d23c630ec8d99f90541731

    SHA256

    599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef

    SHA512

    478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    0fd470e1502263149a97dda4d19894ea

    SHA1

    fe1ffe72e292dff367ca52725246cf82e39d6866

    SHA256

    a776eec6b970a3834753b8bcb3eb1118256bdfa5c8064ab7cba7c472fd412879

    SHA512

    e827d40e74d2a7b5b884017eeb934bd2d5e641cb97cfef7c0b901baceb30bb0fecf85f87cb724781fdd68e7ce787491b918457025257b963834c2f6602b5e673

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    ed49d0491f2d60111b46228f93891165

    SHA1

    9d2c793982caf63e8210c5c11ee07af7108c3baf

    SHA256

    d82c22c036781748f0f160b3f500eaec7fbdc4812d353ac1cf41603c5dd2ec3f

    SHA512

    6df08837361ce74a0fe4229e0fa1d6fe1f90b26f9b74ed2ff6ddd5cbb8694058fed2a770cc2250420879ce103c634a92fd2f501e3813381969584a8df3208231

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    47c66263f0528b83afc2cdc75e3061ba

    SHA1

    d8f78365c19577c32eea9606cc3a892083581fb1

    SHA256

    acff973cc5d242422c1f51ca098be8fd3dac8cf694f3af853ed46c14acd00101

    SHA512

    c8d814705b735ed96dc324f9950d4933a9a6dd4887fa00e16e5272aff470a013ba86f3865541a79159f55b7e85e58c44f65cb7ac581a1a806fd3d93a9f902107

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    491bec1ff5c243d0f46151af75ffb8d2

    SHA1

    fd02a2ed88a70c13d92b853a2f3afbead838fc7c

    SHA256

    30f616d0b49993dbc06e0bd15909a5725efb49fe87c81c2b944db41e8e249a27

    SHA512

    60acc46d6a0701b744c05c1cc848863992404670b417af8aeab48d7f8fbec89d3df9393dae2db896b04e9732527758a34943d3bc0403380e0f0ee98fa9390125

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    6ffb6208f35b441082654582db4e2ab1

    SHA1

    908d41d0231a147d0de3941f559850d33e328252

    SHA256

    b41254d1c01cb6b01bb7c92e3c99269e76bed9734b31abfb9178b3ab32014a72

    SHA512

    828650c12cfbe3bdd17431eb4c86823361e548631fe0678c01d59ddfa70296ee60e6f89fc5e2f3790c41cdf26a588c07cd42553b494834629dd77f5b4816d1c9

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    38cb87f7a8d37cc82652040cefab6b8a

    SHA1

    eb2edf435761da82578d7565f4f2198372f8ca9a

    SHA256

    0c06f500622185ceb11d9e610596a247fd126c8b9d1cbba67d453aaa9415b071

    SHA512

    91239c75da8a412a131ed28d1d7bc4aab8dc444536fc3180166cf18f593f2e5ad6164e37629b4103d62f178b79852b83445ed4a04c9349dad27ca28f6f1e6431

  • /data/data/com.systemservice/files/PersistedInstallation1706374793115665370tmp

    Filesize

    557B

    MD5

    b5cf3ed0c888493572e2da9de04c5430

    SHA1

    e16ff8e6932f64f707e1b99737f9b160c68bfedb

    SHA256

    7a0dbd542cd658549eda1a119997a6ed5e4024d6d695fc1b9efabce320d70b21

    SHA512

    96aca3e70e809662fb1a44a925d9d127f229fe3d1c535cc8ddaf584e324a1366de57ec6f2dd219a0c310411bba96a83c54239cd58b7baf63de1218f648a54311

  • /data/data/com.systemservice/files/PersistedInstallation380965633934015553tmp

    Filesize

    90B

    MD5

    17b74bc1067173d28937231d437ecfd8

    SHA1

    aafd929e83156c09459be5188bc5ab694bb652b2

    SHA256

    4c4c3978c570cc058da5807d94b132e030b167db94c68428519cd4873430ac26

    SHA512

    c4d90cceedb3d1018e02530d9ba3de4e3929068f636be16d205e67a332433aec5de0008cdb54989b34b138d58284dad65fac8452c7c8f34dd7dae43fbee9ea0d

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    6KB

    MD5

    0f2bd15bbe554bc02bd2d6db7f863a91

    SHA1

    fa7056d774dceee7b1aebae66915a36d761372fe

    SHA256

    5883517575f5748d60b5506e7a3619d4c2eb240de859dbf32f1c28e7c51e0d8a

    SHA512

    b0fe612865e56293ad266d00574136e1c22ce08b3b8bd812263013a3f97179df7082ac31dac356df47efeedce436f2e3546954849378b205c0746d54d7145771