Analysis

  • max time kernel
    16s
  • max time network
    133s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    22/02/2025, 02:26

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4502

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    63fb594ee53a8780f50175d5d772477c

    SHA1

    630a532a9132c58ae0b8e74d3cb6d47a2129daf1

    SHA256

    11fe2aec853ee32d75bf7c6d158327193bba8bb929fcfa3be5a63435aedb3acf

    SHA512

    4d120885121d3ca0dae241b3daf4f7016c0e6b81439bb8c17e5369b5d1c8c9b882e2c61e821669d2820d0beecded73e857a6fdadbb530cf8cfb6c19db9a8f152

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    555e90d557bde02b29c8f9e0c92b34a7

    SHA1

    ae28399f9d89d8d31a0469cf40cda853db20e008

    SHA256

    d66ffb407f3fe61753e1abbfe7b24589d3f2c6494855993c337fe7f05cb85502

    SHA512

    6b4f58bad09732f8b4a035a23264b394c3ceaaef63239a60c1150cd48e7043013146ce51efdaac742fc8fb0aa105911426485fadf201e2879b5b75643355d902

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    19cca8cccc4b1c76eafbea75482170d1

    SHA1

    c1571d43c48e914f7a11b9dd1b8f1d2bcd387ff0

    SHA256

    02e11369d3ed58fb2f8b441217e32525387c592ee3437c048d708e284b4016a1

    SHA512

    2e7660851b8ea58a63e4868f18768b23a21944a7c4b8ddc91d638dabb5513dd60cad8ab0725581632298421334b48c8096d5f5584409d6128c679ab560b877ad

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    3c8a3dce54b447cdc050b41bd9a44d15

    SHA1

    2ac3a6d4a76d782a1bbca69316179527f89a016f

    SHA256

    931722df53d93ef8b176ca9cd9973dc35ff4907a319987f56787087baee83dd2

    SHA512

    169bb845252710a8c263bb746df5446d6a36922860da9b6938279dce4dbea68d886375f7f94abcc54fc3afbd5952afa7259c0b9c24da1ef46fa94c86f445fe4d

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    4a3e2080546e1f773c9c19c1093a8a43

    SHA1

    b766967238a91b3c55b1f8a36a6241158c621822

    SHA256

    6c76b18161a4daee5440de0819ab5ba7cb639f803b40e9826c8cbe88fcc3ba09

    SHA512

    01c40c4da93512d2ddaeef3f4299584c166225e947a51fdc58064686434827ca6f49632241f231ab3b0957a8bf5e18d194c4a76843e1026fe6a45c8ec13d39e3

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62991cc580fd1b505edfa827e0152087

    SHA1

    627cbec1b84dc815a5a3b37386d851d74e78edf8

    SHA256

    e4c8b3aceb51cd4490a4712c5668fb8092195a47737f0852b404bc3abbc087c7

    SHA512

    60c457d32629c3bec14863ef4c6e2be6fbe335cb44c39c4cf733f7875715aa8d03f00cf5dcd00e21e0640bbe38275027624948cc9d9f18950d99c49221bbf508

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    509a636692f5031f63bc2cf95c711664

    SHA1

    09abe07b986a740d7ed851788ae1c6d1344a2d57

    SHA256

    a57b706dde5f3275ca717c3a83df89259e9d8e0351a0e045272a9745390e8bd3

    SHA512

    403511cfa63ef972bc1420be67952237302943810a2c5db221eba7e0f4f415177b7a1a0e5d9abf92f3dc1786cf665198e0c6caf80944f252ad4cbbe3f14ece18

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    6cbef0a975817e5a6edc130408f290a1

    SHA1

    11de86adba745db3c8a9013dfb0387fa852c2ebe

    SHA256

    d28035e13fb21d52797ce41b6d913eca3aae59fc8dfabd0b774bec333db585ab

    SHA512

    d9d8664642352bf9eaee73d0b73ace585aedf3de5f118c683f7efd4c892192aca042ec7cb1b6b1d0821c0f3f7a87b224513b8636c49c14ce1c7986609de62aab

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2238195eab25764b61f2d26ef6a720af

    SHA1

    d366efd0cc079f0f87d23c630ec8d99f90541731

    SHA256

    599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef

    SHA512

    478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    a01e8c9698d74b23ef579dfa5822e33c

    SHA1

    8a6819c3373ca3e6e7b0a8fe36de62d4a7192928

    SHA256

    6e2e915b7e1850080a6376d80ffe131b996430662137471b385de96bd46442d7

    SHA512

    38d8455de17b4b4433606dee1597b5242b426becbcafbd87f9cba8fafd885def2985fd9ff9f971b5c13936524313dcafc45cfdca83ccc6bed1fe6f39a6c61a81

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    5fda5eea90212298ea0aaaf29cda2d1b

    SHA1

    31ef63d0e76af2b6759c7bd06f066ed709a8b885

    SHA256

    7a52fb73596c0c668c90026d5e60d1f206c515ead564edddb1da241df7cfdf53

    SHA512

    a09530d430d502c3dc43782dffc7828b768191fc22fd7970981623ab92ec059e992c7f7e25d25e24530e5cb8762ef0d7f3fb91c311c539cc58ff317e9f94157e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    2069740c49a6703786a0eed494c5eb1b

    SHA1

    9dea71264fb646321d2714c497a74d5e638c303e

    SHA256

    23008f60f63fc37c3358586fab3a744d071efcc9c2c13a826aecb3ba507361d2

    SHA512

    f5fed0105270fbb0b5dd25866eb34aeb66f7ffdeee4c9b653cc855fdfe5bcb5028f1f5f7645cf4b96cb4807d8e558b836ff796cb6599d73cd85c48d9392373ec

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    a04e1d43a1195f0b53d06a66d1ed1ac7

    SHA1

    abd5bbf44a54825d4ed97621157af7024de1580f

    SHA256

    44bea8bb28c8b779d403fb38f129189ec56ef625fb88f93d174d52d6df7b7a67

    SHA512

    2798ff5a179af5d3533f5679e19f2fef1388d88e8c91beed3c53d6491e964c4326db30afb4f6c5dac539fee477c803bc89ab57f99c8c0ebc9d22f70aa098f0cc

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    e827bd0d1077ac3d82d8dbbdd10a8ebd

    SHA1

    5c619dbccec752a57b786ea69ea4242cfb283401

    SHA256

    d49b6612fbc3278a9a925a3d2ba9aa9871a5fe933debb0eca8360dddab6173dd

    SHA512

    f83e7d03acacc34a7c884413c0514b62f8306526c6dd61d34a409d44784f72ed6f65e832a31b6f79167d6d4a8176e086cbcea728dc50c063838a7a6bcda4d939

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    6b03644a377bf071837460fe38015cf0

    SHA1

    4299602e7b48e50380fe2aaf18335011c0be7664

    SHA256

    853175777cc6f40ad3ccd913f5577acb960a8af90f4c6ccf999a718afa860a46

    SHA512

    bb0089cece679670bc7a57e7f7c21d7e01a5c8057dfd1940c62750f64a21204766d553784684616fbe053fc77986aa015db844ac449476a15718f5365f67acb0

  • /data/data/com.systemservice/files/PersistedInstallation2512230112841135926tmp

    Filesize

    555B

    MD5

    e738fd4e0e2b8041ec9b33933dca26cb

    SHA1

    eeefeb4c64a35713702904b83bf1807210104d0f

    SHA256

    aebba9ac2dd1ea13220fca06d009dcd09efdaef0bcbefcaed35c8d0764236826

    SHA512

    a76bf172ec82a6518c82a236c76bdf766c18e9c83813717e5264bf835385a788f11b19f5c2e391015a65aadc1fc661fbaa0b0dade5b046811938ce459e390681

  • /data/data/com.systemservice/files/PersistedInstallation2999543315052306392tmp

    Filesize

    90B

    MD5

    0dc8efa9a8caacfdd92d171ec3d98de9

    SHA1

    5a81c144c36ec0c4ebb99771d0ed9e0e33a9e418

    SHA256

    02de08cd176cb64ee80481bb9a9b4640a88bd838e7555a0af4445a404186d228

    SHA512

    c33c1c89a516b588a6acb74b19552d9f9e3cc7ef27772058745412fa1cc45905ef06cb568bc740e09a688c302ed542c27ca08d930206274be5c1b80ccb380a5b

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    ddc472dcd34922d7b74c3165689c368d

    SHA1

    3ba6660f7ac889a14ab77e89ca2486ac5dd65973

    SHA256

    c35f7a0425c6e34a39cf4cdcd8d3bce4cd0179c23736ed4077ffa68c85016c71

    SHA512

    018cded4a3551d85c5c9353c3e0a2114ec9d2b2a23c4863dc75ed191e6aa2ca330c5f1e03fbda3fdbc594aa58cac565d1ee11b84bff2c93b627dfa8485b523c3