Analysis

  • max time kernel
    89s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    14/02/2025, 02:34

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4627

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    b863f4de71b5fda0e7391b00d0d56aa2

    SHA1

    95caf56a03ce3869f55581f2a9f482b7541c6591

    SHA256

    eafa0b9ff787122f06aeb30a6a4ec4056487627e5ab56e6345ef5ff1e003e4b8

    SHA512

    208cb3e7bccd88571e0a4e07891ca90908c5a33a3636b314de5fdaa454dfe65b2e0d37e15ee4e18e1363d962226d25fcfa0de1962b7887eda50b1a79dede1724

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    34d5c8751788452f4bb5742edd6716b8

    SHA1

    9bb6cbb796dccac1ffc60dba254ab6890fda1267

    SHA256

    8ab198c1ab49a87e2afaca2de6711acad2ed1c18288c62fcc40f0ee7ca45837b

    SHA512

    af25041d1ae5baef57dc509b9627cbaa2a1f99450024fbaa8fd0fb45c8c99049e6188b66b08319679af8a494216d42758ea7634d7c1bcd2b166a752d547ab35d

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    97f0a35a2f99b57d2e3642478d1caf2d

    SHA1

    62b4a5007d89b64c49c5c630b3b469c39a7ba2c0

    SHA256

    0f4fceaec061245e228103b352344825a63b3d346b9b201b8cc43783fb4b8fe3

    SHA512

    a1503ac154cbcd628b86979ffd0d1b6baf82de8421309e3fe5c998001b190291ba72bbd05da5ea42fd03273e1dab423ef4b4e11efcf0ce28727865bf333e146b

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    4c777142bc3cd20e02dc4537565d6dd3

    SHA1

    7f9bbac7c62c9e6d886e34e1404ba9685a3d0d4d

    SHA256

    4e6c5d568e9b238793726fad617bb054a10d25fa64ceb38bce0a8642c6cf6792

    SHA512

    e33c07669df40b420b30e51cb06e677037598680765100280cf75f8e1cfc38758234bc2b03a9858a407583f88cecd797e69b52002e789aa6175eca017a138093

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    ddd537a071df9433814314ec3a78d3cf

    SHA1

    b382a0b0e2da72451b275bda14afed7991270e47

    SHA256

    20620cc798dbdc18fdadf8b829fee0a17f8e184e28a74840271aff5fecff365d

    SHA512

    f6b021738fe480851a7006c9fca3879672ced2ed667e470ac316bb1387a687c07446bd2139ed3652dad9acfa50d316d5acbb4ab0e9a453f88be6c225b019c781

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    3077dc638f752825ea13b5d1d7f7cf02

    SHA1

    43a3c2bef03630ef66ebaf63dcc4f4f789822296

    SHA256

    d24b108e6d570226059a7cbfae216b60aec45915e85fa49f3617450c2eb74497

    SHA512

    42b000795ea86ce5634fc4d5db64575bd8c2c0406f9ee6b87a6d32508e610939f39405f00a96cdeaed8a0b083a6357b2c8dd9efc0c58b8d63e63586b04a0e65e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    08d71b418d07030d823003ec16d56583

    SHA1

    407077c210729472c69dc1b1a7882b6420a5e576

    SHA256

    cf5a03f06ccb7d78332c45905f0a6f609e7a638c9be8747771db1c759b17c6ef

    SHA512

    de64d7972ee29fe4ffc7b5cc14f6696e7d71288ba6588b81e9d7c932fdb2c5f3cf1b3218eb11cda9d067c8d8d02b0bdeb6ba87bce60ba1b578d8810fc1f2a075

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    5720b128d8b9a7d61b7f055f717561c4

    SHA1

    9adb78eab690dc5017a5eb524f757179b394ec63

    SHA256

    652fd332255b592ccce831ada6bbcd57140af54326757319d5383fcc25135944

    SHA512

    b5f59c7448e74bbbd355aa5a14632bc002de7af5a2eb9f1f53d639145c9db8f91398ffdbb77c0ebce99f4fea8178d399f701f8acbbc26c00b6882ff81351cfd0

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2238195eab25764b61f2d26ef6a720af

    SHA1

    d366efd0cc079f0f87d23c630ec8d99f90541731

    SHA256

    599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef

    SHA512

    478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    ab1b973b14e37958dbc137df49c774cf

    SHA1

    f7021e49476da884d1438f8c593c1a722ae69034

    SHA256

    8a7e3634585fb2cf04a747d0c3b62cffe0d715215ad7d6827355ad32ba8c77e4

    SHA512

    e9bdea2091a45316b360df986cb2049c43f76557ab363361de643e444fc1732a93739786d510101252541d8e53ad198ad1706bcb5754addb8c19e84506277360

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    97033256991078a99f2accfbed0833e6

    SHA1

    63c6f276f46a1626b1656b581024ec2304a6c7c3

    SHA256

    1f2637e8c40d468e3794d42bb18c6469c77d1662e8d65956305127a33d32cce3

    SHA512

    e029a9d27a6d5b3b6eedfdbc94b143f82469bb010f0857527cfe218cfab5a684286d227922e0f3a0dc062b25a48725604a32a72a3ea7f2f889c38c4da273d1dc

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    259683e7b76807318b82f3697d3b0f7d

    SHA1

    0e586f2a118b3628bcd9bbc24d7305943dfb2950

    SHA256

    70f62ef7493d9c4571ec4c444eefcb0454ef98795daeb2ca8e2f7c139e412a48

    SHA512

    4ac72316037f5f2aa73ce4f00afe96b2881b1f97eaca8413759052f97053ee241fb6fd446ff319fe965e474644346701007a9588405eab246d7c1e93e950bc0d

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    d5af015e54d24ddbf9b10da63c44e108

    SHA1

    0f820f3188d6fdf49061aa094eaafed9d825335c

    SHA256

    923c890e504f2636d0a90eb51bf60d834384743ae82513b964727ff7aaaffd81

    SHA512

    1392b09a8fd4ea1344eee5d67b25e21b1822ff3845412ff92349ad789ada14c8de6172cf2c8d00acf04006f45e1c4c8c1da8a72610cb49f824c27d8fc5f8ec15

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    4b288006889e59e875e3307044e3e1b9

    SHA1

    dcbe41c732db531ac4560b0e60a1497a26abcf78

    SHA256

    c90f8045e59569ce905f40b44ec114c897d8801f097128ce040c2eff15a5aa33

    SHA512

    ff989694a45ef664be10aa242406e8f342d1ed547187b721341b0fac9d60c1cb551dea679b027afb959675d9e48fdfaed8bcfeb4dfaa8456c1545b4bf3b77e2e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    025a7ecdd1d88e4209a1968656e9b00f

    SHA1

    823ffea088c4507a838605b3faa6b76ac9543dae

    SHA256

    d6ca59631782c5e2c45beac5492971ecb1c15d402fde50ca3111a82f0e6900fb

    SHA512

    ea3afbdd94496ea8b576d66883f7a7914ba664f05d0c04cacf9d9b22838c0ecf85e1d1e0f184c497b7e49601c241ed3ee570370ff6b268255084657bf4af92aa

  • /data/data/com.systemservice/files/PersistedInstallation2693523354123868526tmp

    Filesize

    554B

    MD5

    dd65d4a6dcb60e5225d9cd538d9d81f9

    SHA1

    ebf228c6de0609b0406deb6b8cace3ece30e4fb3

    SHA256

    0178a7fbe30d33251f0df5391d8e8782e7978ecf9aecea41514e0e6a79ba3479

    SHA512

    9b754adaad28278abdd008d40e40dff611cd6cd2134594244839ab3638764f1366dbce443caa5dd7663f2e966ab2826e47ab2332000dca475ba640ab24706f94

  • /data/data/com.systemservice/files/PersistedInstallation8895094000145096144tmp

    Filesize

    90B

    MD5

    6e5a77791c0611e8952e35b3b4656ab4

    SHA1

    32ff65a979384c2971d1be81c847ab6691081bf8

    SHA256

    e0627e06745098d7949de2dde9e9d7252ef5c4e2142fb233c106642cdc6c6e72

    SHA512

    ba72ceb3492113287bd27f40a7df4b1e941c0e883af7ba8685574ea6c68b1a3c863474d6548f7273a8aafc2ce1c21ea058e3700908ccc81f7267bece77acbdd6

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    1KB

    MD5

    b0a538ea734b4fbf285ccd0d2c290a41

    SHA1

    97b985fd23ff3e0c25ff1346a3ce29a2bee12ab3

    SHA256

    b1224ffaca8312a714163ae50275cef33a6d5c39340024d10c2ad163dab76d26

    SHA512

    54d3b9e4c9ce44f1c636dec3c24782ffd7a9fd0647cc7e0facd7d40789aad58a6a5b017dbbb17a4816440d878274898ef95419cda57ef8009fd23f6057df994e