Analysis

  • max time kernel
    16s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    21/02/2025, 02:18

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4487

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    1e6bf3db8b90ab7fe28bef87e770007c

    SHA1

    10beaf8b9ef77d491e2667df3881dd16f9ee850b

    SHA256

    b6e0e83b249dff6cc0f36df2663a5f0122afe4e2b75fb099abd513160c1204dc

    SHA512

    b08d62f83b92ed13a005aef30890eb873ad3c7bcd8645ec7adac74504ee95a559a4cc4f6ad2a6308b2332c0562d2185caac007f1118be7b75e7cb6d6de7c79f1

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    80f297e770e8cf51064e2f6b41926f5b

    SHA1

    fb454b2e6c9a1af0fafa2854f99c5b2172887165

    SHA256

    8baa84a7df7cda50e25e59a05c34b76204c5345a0014ccca0270f9827c2bc126

    SHA512

    13e02aa68acd923af769c5f1b4337b70725b167a96ec3de08d66766a651bea9582c720847586fedb4dc2605ffb49a6bc4c291f8dcdf5c15c09ab55edac34b6b2

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    5e15ae2ad4ca3c3190ad2e25c8b4b7be

    SHA1

    57c05f7150a334b8d7da713d61b4800c2e906e35

    SHA256

    6fd62a93eaae7cd53a3f04656cf0fed749aa186d8ef46fba56a6573c47954750

    SHA512

    52b9f3ea08546e013192e7165d19b656c9bddb897482b3e24f12dc2e443d89484df63180506c45cc890802dd8687d90ac89bd0889d40d27b5ecb2f1031eda632

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    7813606380d494f9e42b007d1b3aa5dc

    SHA1

    9a2a5e9a68ba5867fa524849cff76477d300ada5

    SHA256

    186b069e7bc6e150e441e735299893306d40c2ce3347581cfcecd26dc9fdc50a

    SHA512

    98b49c950e525c75685476ff0229971ce85fe0cb5cbc6d9488597a4c21533605ea4d9bfc2eb5ef351d796ace783b9fbe2a3bd2db661144ab55e3791d0d7f96b3

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    f29488b050fbaf2c8ae82682e2ba7b23

    SHA1

    3bca2734a305066bb460077f0dd781fec6ea7b8a

    SHA256

    32f0ca5a965a66bbe1222f48f51c499e79ffe188b6cc14d60d3e8a717330e1d9

    SHA512

    9fa8c9183cc94533e74978acd5e004f3fec19923c48848f4a1e3df3b62d374a74ad836446a40b0990708f6c125940602f49aa6479bbd90bcc5f02732d6e43398

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    3c17c6467f8494b1c27260e985e75a92

    SHA1

    46a96a9f8e181a2511c5505d373c49e37bda9c4f

    SHA256

    47a54dc5bfb5504740f1323b298bced09f060ffb6eecdeb2778ce95930ac58d0

    SHA512

    5170200f6e2dcce1eeb4a03f7d7fd9ca0e17fe65791bd208c9c2ed2e65663b545ddc3aaa46a49b168ec863b4cdb92db62d0156b6b6958f66632472f5f54bedc4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    4314b2f138594bee488f97ef3943fc53

    SHA1

    c088b5b7f2a37056c7fe267efbc5b0754362f6c2

    SHA256

    6ba440ee5738d171fefff3f89416e23cddb2c9cf002c3b09b94f049da3755ea1

    SHA512

    e821a8c1d06cac9b79159de29d2707be1a2fbc860879465171ff64914e514ba260b14caf7bcb678007ad5417792fa3a0f5685d17ba609a182e133d3605975ce4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    8e96c98063eb0b9218d57a6fdbec43a7

    SHA1

    87cc4d40513670e68ae3b402862206cf3a71c290

    SHA256

    64962189e0c8ae8836ac1207ac3835c875bdd556b68feaa5121fbf39669b09d6

    SHA512

    8b77f1bf552b95e9bc0397d090984e40e76347d2448bdeb4c722388785956f472b3ee473d7b6fd38bbf6fef1a2554dc42ab1d7e3ca82de9b493c2e3b16d52b9f

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2238195eab25764b61f2d26ef6a720af

    SHA1

    d366efd0cc079f0f87d23c630ec8d99f90541731

    SHA256

    599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef

    SHA512

    478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    bb4115fb56ffd8dbd3d53bf14c06c6b6

    SHA1

    2dfc3ffd9e0ffad8ca1c6738097e3d0eb1d49c22

    SHA256

    ce5c8c96e610f09c87c524459160b972cdb2f667605f606afcfe82c3eb740e45

    SHA512

    16682b2f0e95f01273e068604f7348840c3b99434248cfe9c895f1a128118ad3091ae6f05254e2a7f8a4f54db7cf0a0096b86d74ef7bbf50bf1e06b7e9447cb9

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    74b777e148441d43462cd79111676499

    SHA1

    e752314b1ab4dae4d725ece35b0f14b35cc35dc0

    SHA256

    5d21e1f0317c1f98546b1eab5adcb3fb08b1990dc4e3acb1cb074f482ed1f485

    SHA512

    b069fe5c181199129e325da0a8921eb4d2eac3d4dc6c21e5570cf94ffc1ba0924891cdab8ab08b5bfcc57d142dba29c7b0455388b70654855e1bd8f65414de9a

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    6e22ee676a58572a10963fcb70877a87

    SHA1

    2b0e8e5bb6c22b869bcaba1a8601a045c0a4cd43

    SHA256

    df44fb5d225ce21bcb8ab6b1572d6be1fccce0e62a636885064203aee9798cbe

    SHA512

    a36b2a26decc90c8a2a6f7ba528f57339d7183e13dfcc06a740fa346c3d7494872645833a51afabb07e63190044105381d526983e74e498d05a5fd9982910069

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    829d501f1401bc24c31481e38dc2f238

    SHA1

    c8e8175ac0d5e5cc00ad29e76f9f707790dd7405

    SHA256

    7929199eaf450d21c48e1357ddd6c98594acab711f8869138a66444749c9d7dc

    SHA512

    5b9c67ea28636012346fc7f3b11ad80e35256ccb973b0a0a913287b69a24cb1bde7dc2fa56797a7ac58adeb9650729ecf23d782eddbfc0bf9596bd67acf13b9f

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    84e76582cd2b55e539748df1daad25cf

    SHA1

    cdfccb159bdf964df8a22f3dc2635eb756ebaebe

    SHA256

    8370aebb6b164de165e0318655c74c8b12c87f1b407dc0a8ed911c0ceb8fc6e8

    SHA512

    8e934d599f515303a0d9ad38a877096fe62859961c74b87a6e243fb364bda045df17ca77a510b0d0d40b177e4244d66c501ec005ee96b7f3b8d5d7ba01e6154f

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    8b74e0e0e2d6db5b6a8f4740aa580c45

    SHA1

    a0b43726592f39f63757e3c6f2aa1231581f84e2

    SHA256

    85bd1dcdf51d993f2711520bba4eab4981828349d06c74dde1c17a043f940591

    SHA512

    0a24fddfd15ea4435a362b2041136bb3ad9e47c7b378eb35df0df5a7d7a79a56b1a9edbd5fed37cda648137fa217f2172cb7f75f0897cd8981955d580442d541

  • /data/data/com.systemservice/files/PersistedInstallation5184226605817384921tmp

    Filesize

    554B

    MD5

    2538743a9651e0814c4440a8521f29a3

    SHA1

    6545c0579ce104169e2458883e93ce2463e2c3f3

    SHA256

    ea5e2bd63634ef24a259be91b82d03e5ba49d1f70c1579e0472eb337d335152f

    SHA512

    ac1150754e39995ef0cacd2b218ef1d45b9b6864f4e18df8d0c4db5a38c9c1b3d9c17b7b8c273dbe1b164137b209b2e6829cb5b9ef1edd22e716f2a6be38c539

  • /data/data/com.systemservice/files/PersistedInstallation9172227652314091016tmp

    Filesize

    90B

    MD5

    110a804f1b9ee6b847b1bb4295350d8e

    SHA1

    c6bc9a94ba2a9e9e7af54e45d6051c17d839e8d5

    SHA256

    aa70319b6af1832eed4a8ef8239b1c07184d49f153ea942a82580aacdc61d270

    SHA512

    d95c8c0c4f82cd39e054730f4bac9dd2c1591f0999ee614eec9c852379057bdd153eaa24a400e15a901f81c209b438c832abcd14c6b363c77e302d76f881f23b

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    4a4d524818adafbb3b896ba98f4391a0

    SHA1

    6d9d1e3bbfe84f936a1b3e477140073339b7ee2b

    SHA256

    385f83ff4cc1f11f1d3a685be2cdec641578d2219ca964a19d1ef5aa85865966

    SHA512

    1bafc416c99155de2e3ca85ad68958558ac1b7019f8f85ccc5cf8353f7787c54767a3004d1891c813bd49513329269ae26c386956b7a3a6ec6b3f4169155aebf