Analysis

  • max time kernel
    16s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    17/02/2025, 02:30

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4494

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    368466704cc8cfead01563b2f68da581

    SHA1

    df37295eceba7890bb5ff433cb1237ceda99bf38

    SHA256

    c32161b79a34119284757103a9a7b11da3155e90898f571b4b24f871def8bd4a

    SHA512

    c4db1d5f2c27a1b598e41a44dd1c5ad4dc4be1ef1702ae167c1ed945e7e7436c8df9e7e2186360ed8206854b7b59364204e7e19a2323547d60fd5ddfd1a1a060

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    1fd0af6026905818a949b52bf44dfd9b

    SHA1

    5c46caca8bac481d3ada7bd1382ce98378823989

    SHA256

    d8bd5bff67652c6b4c5a8ec8b0a1d8bacb27bde15ef671aab6ecef508e1aac45

    SHA512

    19713c6fb2dc3dafe29c04cfe70674579ff3e9eaf9f27465264e90cb3336b6c13470c0388cca9b0da99d3412313b977d4547dcad89a524a2920ec1e65236adba

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    45abccc6e6d34ab7b34ec58fb6bb2b3c

    SHA1

    ca9b48c23dd2715bf978baea87d7a09942611390

    SHA256

    118baba9b2c6831f60c8420354fe7da5cba56b0ffb7d4554ebfd920fb751af0d

    SHA512

    f2f6edddef8ff91f43ac9f68ce804ac64c457beabad5a8fa76f7542072395d93894afdd86021d6175d8bfcf8d4d7abcf8ec9e044981ec8975f61cc6872fe7936

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    82804a01d69951b134ee2e121c7afe05

    SHA1

    766852c58043e7fc53764c3c9eb10304e2d8e10e

    SHA256

    efe29903b7d7ce6792467e76e94dc741ea90247659581cbe269e2078c81e7ef6

    SHA512

    421d7ba6ebc2bf4cb3d5c6668a890100f1bbc21eeb7bd0aef2beff7b79c442e7ba181a1a815e9d0eb2ae8d74b366382ecb4e5c335af6f3a276cb217607143731

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    3f5204e431ceefbdc62bc2a662676042

    SHA1

    6dffe291025a44faf670d28f3a5e9647c50a2686

    SHA256

    b24c557b78309a5cd11a84d3132e6125fb4cfa96acb61d7c04d7fc9127420a41

    SHA512

    070c217c9c5a2cb813572b237d5854f16d5d3b7f95f0040b1767e796b9265e037230defb0baf5ecd3b62ce7c2c638ea104286338c1bab60610a83df94fcda685

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    b4893419d3db4701d5a2edda7092bcb8

    SHA1

    7f57a65c790565d0c8b8dffccd1065c54e0e73ba

    SHA256

    3db86a1bf1d1316ac8959fce12901fbc1e266beadf7fb701a64b2e8961fb325d

    SHA512

    19568d2fb8df0720d70faa47e93d3aa2bcc608bbc14d8233f31e80f99c81bb74d466ad373f777d10132b8fc6c5ceeb9de2b2581394bf4204546782d33175786d

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    82bd7de0d3e430049dfa60c3b79feca1

    SHA1

    981003f703b21cfc02eb1a7bb688cadf87834fd3

    SHA256

    457af270576f93bece365c57ece8d265ad29cff67b230eeb5ede8d189d676011

    SHA512

    7ed109193682831611b1d5b15006884bcd4650beae781f17ba5188e15703f6c3710828c83f2d0325aef389e1b3361984495f136a50a24a32be0426965d86ecb9

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    a0f163ea3fcfe6a5b8d6d52f3c2aac89

    SHA1

    23d9426d7e7ec11248f16446b6bb7ef346d96301

    SHA256

    7063cbe241590d861174e7a08c4f40148bea7189f5399020dec32c9f9c27473d

    SHA512

    2d8e640f4958083399ffe1fa1202e05f80057cc622c1bbdaa4e83a44dcf8d781c5052d2ef834f22e4463420d8663aa1f15e2d290506455305af45e7e08dc982c

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2238195eab25764b61f2d26ef6a720af

    SHA1

    d366efd0cc079f0f87d23c630ec8d99f90541731

    SHA256

    599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef

    SHA512

    478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    cbef831d8b44c0921b7b6a7e928b07cc

    SHA1

    8dc7fb0cd289bb5d6092d6357c2afc324f15838e

    SHA256

    7505ce070e847d859f0b1fa6f045df76e3c3b48af2ad7993ea227af5c7b10461

    SHA512

    0a6c339ad36e4d5fef558067ad2bce56a8efbfc9a5775b55b8a51bf0eee4b816f316f35a03caa675c5425f73262ca089ff9bec55beba1d1df15d8b1c7ee5e635

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    cf37e31d8a9a52c0b817139793f735e0

    SHA1

    d1816245dab5d02e9074401382250e07aa233d73

    SHA256

    ffb3758d3a210a26c5dd1e215dd96c06cc1deafb74a353e81d0813255dcaed56

    SHA512

    aa6d3dce806c77e43e80f5e901162a5344e4b60d2f8b8438e6e8cb5d5ba0508eb9586c0db8cf186c728a99929cd88d89347f21ef48fb79ccd279333827f2ff86

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    69d2bec4f0c4d7a71e767a403ed8ab92

    SHA1

    71203cb5c2e1d4d6dbb8ee3bbaeda819724d9e02

    SHA256

    308c994aaac7524635acf20f8ed3d028fb3dadee7ef7bbd351718fbe7945aaba

    SHA512

    087320c41c278728cd4e103708e3ec1a8d43771c16d14250e1a3e23c5ff044bf86776ada078e97044f69fb2af0e6b97373403efaa4a6df63493b12793c3d522a

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    84bfe5502cc0b359236b1aad901819bc

    SHA1

    ddf2e4d21fce44888408dd7b42c5d093869bb832

    SHA256

    cadddc01fc4e2bd161c7e02d3ca6c9abaa63984bea069b5b9f32a381b90b2748

    SHA512

    0229f51b8c77f6a4e9d79286be5126f5ab04114a931e182a80ef428bd315d761081dfd3a6ab170c3c4f83b0973dd0e2a2e2d0481dc38bcd86d73b374509b2d4d

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    32b044f63b1452ba9a49b43642aefaa5

    SHA1

    3a95f1cbdd09425c6211e2b6d01c01b2a50b514e

    SHA256

    b6347a2062282940a6f8ffca8b2ad3eb30e5474a192e9e768e781b3e469e3ce9

    SHA512

    3eb612c450aabe18e6ca50682a64a8c0faec6e6b6c4167d1077d9ee878b48780b4c15a446c9015667652e55c78ca689911f5abe28ea38f95c1d4155fc24299f2

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    7cecb5c401898343381e5610a6e0daf5

    SHA1

    f3c20bcf4deb0faa16fbb65e43aa069a618ad765

    SHA256

    9efe45d455c54563cbe32c7cad208a78994f88cb0024f48e36fbd84e93733fef

    SHA512

    f73a963c42b250c3eab16b6d1bdc4b7efe4c6a313129dbc0a6ff5c3ee0a3019e53509e99257fb12582e6257027e3bf725ac2cdd6e3032887c71092cff7c0d681

  • /data/data/com.systemservice/files/PersistedInstallation6924429010921122833tmp

    Filesize

    90B

    MD5

    afc1e020b052425ef0993ab9b4e47e2e

    SHA1

    231f8b597603ce23cbf3bf9f776fda67192668f3

    SHA256

    10e746a3b74c133383e6f04d85c0b824d8dd85d3fbe2b7cfb85b7ce42f5dbe0a

    SHA512

    d3c2c98e9b48b9a1254a5296f8cc4d31b8d9214cca9d0d9c1a37d59ca02a0e8a6d792da6fbc9821ce0e3e6f35ff81591b2d0ac5d3248529d2319a5499eb55270

  • /data/data/com.systemservice/files/PersistedInstallation9199898392738684920tmp

    Filesize

    556B

    MD5

    475baf431b2b15c737e254480ead924b

    SHA1

    09724452cc816e3c5f7da9af01d87cbdbbd202eb

    SHA256

    09c8a688042a4469fcda1d9a49d2f655e41e9f5b25877b012c9145e64fbb44ed

    SHA512

    338b4f8d88a07e8989e122131328fffa8267e708b41e9011891b449d716b1324596201ef4f7ac319ef715585c14b26a883fb393ad9cfd50a26d57894245b7343

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    6KB

    MD5

    500555c2edde6394ebf08222224f9a07

    SHA1

    f3cac14edad2446b7fe4fdad9f8762b04a491902

    SHA256

    3d4e0f8cf0b226a1e7dbfbad6c59199a71983aa6bffd6621e17849e898c26e58

    SHA512

    2dd2ac53396e9da1d611e705f44bc79878faef65bf29a676aa826c1b415eb850deb5bb3106cc6c81527cd2c8903c996ffe041067f911d7800a23fe235820b581