Analysis

  • max time kernel
    13s
  • max time network
    150s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    15/02/2025, 02:31

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4782

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    d70b773ffa5bbfb9131ef515e66b387d

    SHA1

    876d28ebe869bcede1d8351c5979263b6d8ecf67

    SHA256

    729702c5db61e0b199481188019c444f61de7f1ef1e1123e2651fc0b8ea67ba3

    SHA512

    4a8a98853d238943c78339cff55055e6a5845040ad95198d18aa58ee4c102bea92a8b40cd5f18b5da8e2241c795959c3cd6bf7f0b4b43598f0d63dd4c1e049f3

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    fc7425cdb4aa8c14ae60d22f8e6fbde0

    SHA1

    f2938f696443b451572220e55c2e7629b8225858

    SHA256

    ac3c18b7fb1c471b5cb4b9865abaf5ee4f4cbcc27efe05ad9ab70d91fe75bceb

    SHA512

    1d812bfd2514ae420ac6b4c0058c5c47d85a3eeffb6008b5a40bf58e0901f50d53295de33378b394676483deacaa0d2aa7dbdd0c703c06fb29048d6d48478b50

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    217edbb208b09b0c3efbbd50bde57751

    SHA1

    e5f0ae32c8b2834c3799ba2db528b2b4a8fcac4e

    SHA256

    194156cba3aadb2aed797db3a7db25b24daae0682fdba4e7e03c12d688413912

    SHA512

    064ba6a1d6d84fe31c4dcd53335645e163b41907ad987ccd96f17a6c1b008f4feb9386fcaa61eccd48f47a0732d47e87799519b4736f5509f603d8bbbce0e091

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    a1d1e1d14880ddd18de2b797e0c928c0

    SHA1

    212f205c847eae700cf5afa6f4b3a18a8eb50687

    SHA256

    67247eb6edde285f08f3b6efe2fab903c222bb46b97fdac5a08d024489248b99

    SHA512

    f32953c6573fe2e74c0ffac03ea42075650658386d50042fe768afe349f237a108cc598e31f834255bdc390936f8e3271a28388fa4158ba379bc317a3245bb59

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    379b83771c2d6f1f25e9b95cd7eac192

    SHA1

    d9549203fa930ab50feb891f213d0c93101404ee

    SHA256

    ab30226b1bb5437be6bc730c3e7b0ac88950cc9108e927fa6e4fa6896adf7dff

    SHA512

    0b16f6811df5fba502ad9cb310dc75309b7266d885e9fdb04ad9d7d0ce0af57f15889d330e646c479a085c3ae8aafcfade4389c92c609f26c823ee3813a98126

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    16b47b750d11f13b5d942e26b5ea8957

    SHA1

    a961e3e01c2630f19a8050cec9808bec4b03ba47

    SHA256

    3478a5467f2870988cb5c0367c13aa8ead63182b9ba11e39ffe1844ae4a6d8bf

    SHA512

    08ce209c7442d38ae96d494137d03fa383e0de34467708aac3d29ac5707c39f160afa2654f6e3024854148a69718c4dbae54c0411b1ff0f7876639bbaaee771b

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    eb707050f68186e6745302e7236d171f

    SHA1

    d23173aaff6e7763a82a940590993cde6cb81510

    SHA256

    91f881cd7164e77c7983bb409ee589d0d27652b1a43aad34b177582ce689d4a3

    SHA512

    792b08083fa25668410d37a2d81661ac9cc5cc74a8977007e07403b5c5c4f786f4536dae2f7d11fba591a633d46e146724ed2cdbff0f261d32216e8626a22030

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7d7dcf046517e76d104c1295994c02a8

    SHA1

    6ed7beb8cba0a34b0331382bab952967f169011e

    SHA256

    f00a78ac7cae6e2f3290b1bac379544c3d9609ee9a1b0ffc42278953f736987a

    SHA512

    362ddd3f89aa105af141536d6e74404bbd32d275a876ef8e62ac6ca06ce6bf1a1c6bc1398429770ec163e637bf032e7b645219e7773f85409f3738bbad5a3285

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2238195eab25764b61f2d26ef6a720af

    SHA1

    d366efd0cc079f0f87d23c630ec8d99f90541731

    SHA256

    599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef

    SHA512

    478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    6c47418765e86a060b4467816e3635be

    SHA1

    9939dc35e817d567297a59b7f4c2ad99828a6149

    SHA256

    c1c2de0f835e93462328c7ad3b4616399f06ddceecb8364cd1ed06e1bc5616f8

    SHA512

    5e60ff220308cd8b97053f66ffada9653cce1de1c7021364c49a7cab39d10fda4d64292aecff6ea4fa11b17f5f78a54266f1fc7b9e229741bb6dd6ed1fe768d9

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    22adb05534c250ece735dead245540c1

    SHA1

    a8e608735b321a1f1b6a4bd1ee6b0d6614c48123

    SHA256

    822a02de221d9ec9c910d435b32320c5e6e0fcecfba7ce21c75eb1ad28dcd2a5

    SHA512

    6c7a7ce7683a4fed1058804fd172738480044cb44727c1882f0cf8bc1cc2adce0f3221c1c1e1b6b2d85f32db17ef77e2cf6fe3d2d8eb96a26af465a86b871158

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    97843ebe7ecbbe49f2f5cc871aeacfef

    SHA1

    69020f47aeac3a89a657832688f9315944a4486d

    SHA256

    7f8535004539c571ebb2471a0fd4e5f41513a408eff6c8014360aa564416e074

    SHA512

    bbcc089db69f402bb9a9fab4b63f0b12a1b50740e26f4b4a75d37722d5d5dd616ac05dd15e084f692b9f11a5aeb19d20e78eecc3afaa985adbea6e06d9cea9da

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    8fc31b846dbd46ac066cbba33dc0c124

    SHA1

    01497152b6c00debd285943c159bc294030164e2

    SHA256

    bfe32777be1cb8481b02139425be371cb69b9b4ec14ea250735cc29a5bffe468

    SHA512

    3cae69d708edb9b2dd9792059862fe2ec7343488b8e9fe8c728cd89c6c4624ff9b1a1fa8e7401a10c7f8e155a12579f62094cfc7eef1039247b530715a43431e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    16342b4853e30088810d53ab9bb58b40

    SHA1

    11b754caa8f59a74dde3083c3028dc5acc198a3d

    SHA256

    8aa12c2ad1892bd6e631e5b536041de88576d5be1098831bdb789992855d12f5

    SHA512

    3848f6b32890cb71f38a6f510113607097077f1f6482ac839083ef8721a25e4d47eefd0104a524d1915b041b803c5e8453cc5ef1b0cab319a7cd6690ab94c9de

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    60a81f584d5b95616613a58842f713ca

    SHA1

    278152b84b6d3975ec0e75088c39733521664867

    SHA256

    ee85e81951f1d9ac5032ea7ef419cc77ee0358e3f614bac145308d0d1bf7e669

    SHA512

    4c698dc12878ea879c064833a525cc836c6aee4981ebaa851e10521effb1b0734a2b9c38d7f4f34ef80f100b13b068e8115d74e356278927bc6d356f9327f063

  • /data/data/com.systemservice/files/PersistedInstallation2528170515622950353tmp

    Filesize

    90B

    MD5

    be6e5990d92a7e49af30fe39e25ff0a3

    SHA1

    3119ac39e90404b8e5e625455de3bcd39a209647

    SHA256

    bd49dcf3c278b972d3c2a1dfd9580d8d99a19037106f7ee18fcad8e2c3b76f5f

    SHA512

    f5d5000752ba7a02a5c63f216506e76a04d2cf62125ed930222fda26a6d1f2e6e94ddb55088ec05ed3c11d2a64741a0421d99d15f4f50c561e5511b6aa3b0a5b

  • /data/data/com.systemservice/files/PersistedInstallation8425130958555612338tmp

    Filesize

    557B

    MD5

    72a90d4cd5741d8a97612b883c4ad85c

    SHA1

    05e3762c76637b1da7c57b655d9d5744e4027592

    SHA256

    d54fa1efa4eef19245a8b5752b867c983b76eaf6fd8546a7504e58ae44df8a08

    SHA512

    7197ee54c5228bac79d7d0fd1fbb51819668fa13996735089d94119dda86955a70fd7ccfe4dadaa1d6a2b91db8628f65eb3fe89f9041e898c0ebe101f4042d06

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    6KB

    MD5

    226e09ea30d992ff40d1e319c32ab5f0

    SHA1

    33be21147a7663165b3288bc3312e0d5a08aa879

    SHA256

    5a0cf5cf58b0b374057b580a96b3f2609066d9f77a376f5f206212ff3bdf9b60

    SHA512

    c7c6f2caee9b70817cb7990e301ec693888336a5669585ea884d18f111986210a532177a70601e42df1f054816c1c17f745949ff53ea368de8ad6b42cbac22dc