Analysis
- max time kernel
16s - max time network
134s - platform
android_x64 - resource
android-x64-arm64-20240624-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system - submitted
21/02/2025, 02:18
Behavioral task
behavioral1
Sample
92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Resource
android-x86-arm-20240624-en
7 signatures
150 seconds
General
- Target 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
- Size 3.6MB
- Sample250221-crrxrssnw9
- SHA256 92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
- MD5 0366ae0abf0ada8aed90322bfe07dfd5
- SHA1 2f0779ce64f02944e87674745cb446c5bc620607
- SHA512 52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
- SSDEEP 98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.systemservice - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.systemservice
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 b6e0e83b249dff6cc0f36df2663a5f0122afe4e2b75fb099abd513160c1204dc
- MD5 1e6bf3db8b90ab7fe28bef87e770007c
- SHA1 10beaf8b9ef77d491e2667df3881dd16f9ee850b
- SHA512 b08d62f83b92ed13a005aef30890eb873ad3c7bcd8645ec7adac74504ee95a559a4cc4f6ad2a6308b2332c0562d2185caac007f1118be7b75e7cb6d6de7c79f1
- SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPS4:rAMEX0wIyNja4
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 8baa84a7df7cda50e25e59a05c34b76204c5345a0014ccca0270f9827c2bc126
- MD5 80f297e770e8cf51064e2f6b41926f5b
- SHA1 fb454b2e6c9a1af0fafa2854f99c5b2172887165
- SHA512 13e02aa68acd923af769c5f1b4337b70725b167a96ec3de08d66766a651bea9582c720847586fedb4dc2605ffb49a6bc4c291f8dcdf5c15c09ab55edac34b6b2
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 6fd62a93eaae7cd53a3f04656cf0fed749aa186d8ef46fba56a6573c47954750
- MD5 5e15ae2ad4ca3c3190ad2e25c8b4b7be
- SHA1 57c05f7150a334b8d7da713d61b4800c2e906e35
- SHA512 52b9f3ea08546e013192e7165d19b656c9bddb897482b3e24f12dc2e443d89484df63180506c45cc890802dd8687d90ac89bd0889d40d27b5ecb2f1031eda632
- SSDEEP 6:7+/l9+9n1GSlJvg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKod:7+ts9pqLiuWdYRmBEyPb/
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 186b069e7bc6e150e441e735299893306d40c2ce3347581cfcecd26dc9fdc50a
- MD5 7813606380d494f9e42b007d1b3aa5dc
- SHA1 9a2a5e9a68ba5867fa524849cff76477d300ada5
- SHA512 98b49c950e525c75685476ff0229971ce85fe0cb5cbc6d9488597a4c21533605ea4d9bfc2eb5ef351d796ace783b9fbe2a3bd2db661144ab55e3791d0d7f96b3
- SSDEEP 6:7+/l9VYgPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKuvSM/6n:7+tI4qLJdeWRmBEyPbgs6
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/core.db
- Size 36KB
- SHA256 0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e
- MD5 045489a0639eee27bca52f48828cd93d
- SHA1 436e7966e7c019273c44faa4d8c5709b816dfda3
- SHA512 c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e
- SSDEEP 96:eMzKMilNJzt69l/mwICfPDKOjK0Eg745TN3PafDDKsgZK5AgZWgZK5cf/ShOqLE0:AuldjKiKvI45TNAKfUf4hI2q1UpKorKS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
- MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
- SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
- SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
- SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 32f0ca5a965a66bbe1222f48f51c499e79ffe188b6cc14d60d3e8a717330e1d9
- MD5 f29488b050fbaf2c8ae82682e2ba7b23
- SHA1 3bca2734a305066bb460077f0dd781fec6ea7b8a
- SHA512 9fa8c9183cc94533e74978acd5e004f3fec19923c48848f4a1e3df3b62d374a74ad836446a40b0990708f6c125940602f49aa6479bbd90bcc5f02732d6e43398
- SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6l:TLiEq9zmzrfRmBEyPbP/P+/0Fl6Zai7
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 47a54dc5bfb5504740f1323b298bced09f060ffb6eecdeb2778ce95930ac58d0
- MD5 3c17c6467f8494b1c27260e985e75a92
- SHA1 46a96a9f8e181a2511c5505d373c49e37bda9c4f
- SHA512 5170200f6e2dcce1eeb4a03f7d7fd9ca0e17fe65791bd208c9c2ed2e65663b545ddc3aaa46a49b168ec863b4cdb92db62d0156b6b6958f66632472f5f54bedc4
- SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFl7oC+/0Fl6Zai7:TLopmzr0GSP/h1499FdvlFpK
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 6ba440ee5738d171fefff3f89416e23cddb2c9cf002c3b09b94f049da3755ea1
- MD5 4314b2f138594bee488f97ef3943fc53
- SHA1 c088b5b7f2a37056c7fe267efbc5b0754362f6c2
- SHA512 e821a8c1d06cac9b79159de29d2707be1a2fbc860879465171ff64914e514ba260b14caf7bcb678007ad5417792fa3a0f5685d17ba609a182e133d3605975ce4
- SSDEEP 12:TLIEU9zmzrfRmBEyPbP/qFiOLaOS/yAUbYUyWlW/Q4i49blqYFl7oC+/0Fl6Zai7:TLYpmzr0GSP/qsKaT6lj499FdvlFpK
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 64962189e0c8ae8836ac1207ac3835c875bdd556b68feaa5121fbf39669b09d6
- MD5 8e96c98063eb0b9218d57a6fdbec43a7
- SHA1 87cc4d40513670e68ae3b402862206cf3a71c290
- SHA512 8b77f1bf552b95e9bc0397d090984e40e76347d2448bdeb4c722388785956f472b3ee473d7b6fd38bbf6fef1a2554dc42ab1d7e3ca82de9b493c2e3b16d52b9f
- SSDEEP 12:TL6uER9zmzrfRmBEyPbP/RFiOLaOS/yAUbYUyWlW/Q4i49blqYFl7oC+/0Fl6Za+:TL6vpmzr0GSP/RsKaT6lj499FdvlFp+
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef
- MD5 2238195eab25764b61f2d26ef6a720af
- SHA1 d366efd0cc079f0f87d23c630ec8d99f90541731
- SHA512 478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470
- SSDEEP 6:l9bNFlgls1WnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WS//:TLuEe9zmzrfRmBEyPbP/Wy
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 ce5c8c96e610f09c87c524459160b972cdb2f667605f606afcfe82c3eb740e45
- MD5 bb4115fb56ffd8dbd3d53bf14c06c6b6
- SHA1 2dfc3ffd9e0ffad8ca1c6738097e3d0eb1d49c22
- SHA512 16682b2f0e95f01273e068604f7348840c3b99434248cfe9c895f1a128118ad3091ae6f05254e2a7f8a4f54db7cf0a0096b86d74ef7bbf50bf1e06b7e9447cb9
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 5d21e1f0317c1f98546b1eab5adcb3fb08b1990dc4e3acb1cb074f482ed1f485
- MD5 74b777e148441d43462cd79111676499
- SHA1 e752314b1ab4dae4d725ece35b0f14b35cc35dc0
- SHA512 b069fe5c181199129e325da0a8921eb4d2eac3d4dc6c21e5570cf94ffc1ba0924891cdab8ab08b5bfcc57d142dba29c7b0455388b70654855e1bd8f65414de9a
- SSDEEP 6:7+/l96n1TRg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKO/:7+twRqLiuWdYRmBEyPbt/
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 df44fb5d225ce21bcb8ab6b1572d6be1fccce0e62a636885064203aee9798cbe
- MD5 6e22ee676a58572a10963fcb70877a87
- SHA1 2b0e8e5bb6c22b869bcaba1a8601a045c0a4cd43
- SHA512 a36b2a26decc90c8a2a6f7ba528f57339d7183e13dfcc06a740fa346c3d7494872645833a51afabb07e63190044105381d526983e74e498d05a5fd9982910069
- SSDEEP 6:7+/l18UHPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK2Z:7+t1/vqLJdeWRmBEyPbHZ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 7929199eaf450d21c48e1357ddd6c98594acab711f8869138a66444749c9d7dc
- MD5 829d501f1401bc24c31481e38dc2f238
- SHA1 c8e8175ac0d5e5cc00ad29e76f9f707790dd7405
- SHA512 5b9c67ea28636012346fc7f3b11ad80e35256ccb973b0a0a913287b69a24cb1bde7dc2fa56797a7ac58adeb9650729ecf23d782eddbfc0bf9596bd67acf13b9f
- SSDEEP 6:7+/l9cRF/gPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKgyM/IH:7+tjqLmqKRmBEyPb9IH
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 8370aebb6b164de165e0318655c74c8b12c87f1b407dc0a8ed911c0ceb8fc6e8
- MD5 84e76582cd2b55e539748df1daad25cf
- SHA1 cdfccb159bdf964df8a22f3dc2635eb756ebaebe
- SHA512 8e934d599f515303a0d9ad38a877096fe62859961c74b87a6e243fb364bda045df17ca77a510b0d0d40b177e4244d66c501ec005ee96b7f3b8d5d7ba01e6154f
- SSDEEP 6:7+/l9afg9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKk0n:7+tIqL8EA9zmzrfRmBEyPbD0n
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 85bd1dcdf51d993f2711520bba4eab4981828349d06c74dde1c17a043f940591
- MD5 8b74e0e0e2d6db5b6a8f4740aa580c45
- SHA1 a0b43726592f39f63757e3c6f2aa1231581f84e2
- SHA512 0a24fddfd15ea4435a362b2041136bb3ad9e47c7b378eb35df0df5a7d7a79a56b1a9edbd5fed37cda648137fa217f2172cb7f75f0897cd8981955d580442d541
- SSDEEP 24:7+tksKaT6lj499FdvlFpyWqL6vpmzr0GSa:7Mkpa+lk5ZpyWq2vArSa
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.systemservice/files/PersistedInstallation5184226605817384921tmp
- Size 554B
- SHA256 ea5e2bd63634ef24a259be91b82d03e5ba49d1f70c1579e0472eb337d335152f
- MD5 2538743a9651e0814c4440a8521f29a3
- SHA1 6545c0579ce104169e2458883e93ce2463e2c3f3
- SHA512 ac1150754e39995ef0cacd2b218ef1d45b9b6864f4e18df8d0c4db5a38c9c1b3d9c17b7b8c273dbe1b164137b209b2e6829cb5b9ef1edd22e716f2a6be38c539
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/files/PersistedInstallation9172227652314091016tmp
- Size 90B
- SHA256 aa70319b6af1832eed4a8ef8239b1c07184d49f153ea942a82580aacdc61d270
- MD5 110a804f1b9ee6b847b1bb4295350d8e
- SHA1 c6bc9a94ba2a9e9e7af54e45d6051c17d839e8d5
- SHA512 d95c8c0c4f82cd39e054730f4bac9dd2c1591f0999ee614eec9c852379057bdd153eaa24a400e15a901f81c209b438c832abcd14c6b363c77e302d76f881f23b
- MD5 SHA1 SHA512
- Path /data/data/com.systemservice/log/log4j.txt
- Size 3KB
- SHA256 385f83ff4cc1f11f1d3a685be2cdec641578d2219ca964a19d1ef5aa85865966
- MD5 4a4d524818adafbb3b896ba98f4391a0
- SHA1 6d9d1e3bbfe84f936a1b3e477140073339b7ee2b
- SHA512 1bafc416c99155de2e3ca85ad68958558ac1b7019f8f85ccc5cf8353f7787c54767a3004d1891c813bd49513329269ae26c386956b7a3a6ec6b3f4169155aebf
- MD5 SHA1 SHA512