Analysis

  • max time kernel
    18s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    24/02/2025, 02:23

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4351

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    f25a70679ff85211d31ef7b0429f7efc

    SHA1

    66f12d81aeb81ce1b2229a326db12e05996d6fab

    SHA256

    86fef98399820c27a3746f54fa38c41b5ac224c9c6dba4bdf16c24a2653500c5

    SHA512

    4d5aba3f1c0431466b06ccdaaa8d2ace77b4610be36f007f4b1f9b5f823ea914c790d4b281ef0900606e191ff3d3ca88304c5f7695e4711560e120e00ba4ae86

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    3e3181c3c920be183a5d98c18918697d

    SHA1

    0f3d53b27a3068f8a00a867527ecdeb0fda0dde6

    SHA256

    1e0244dc50c7c35f47834ba91498eb3ae8ee64deb2c03ec18e8b2d4263d5ea97

    SHA512

    6d2b3365d775e08bd26fd5237b12d7b01fb44e15a401f0c39ebcd55097740a44df923546b1e76b083aea77f0ffe0471e4209ea5fe1ae98872a56a82462c74848

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    f1b7b170e3ebde24e9f1b2691679aade

    SHA1

    9f0094d07a1b0f6680a5aabca653b39e53de2530

    SHA256

    9f984e9f6b7206ed8dfaa2d08aad518c3b42b1d1286935e33e9e16e547814968

    SHA512

    2e9c65b398eb6e209224ee3ddc29226d1acbcd4b9dd68fb5b1ab20fef6ab7eba3b2b92d188ef0a9305a83ce3e8b6d6d753656a00f9f9cd82f1134af158658330

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    71c1e40c8ba100ae706445b928f775f9

    SHA1

    826f3c12065f34c43844dd20d745ffbbdef63a6c

    SHA256

    eef5735736e3413f935c1685f708d03596b6bb24a5a98af013b1f065c36dd594

    SHA512

    50da340f0e15d4b058f4d610ea77760fd782d27b2ee2a08f842667909a033e5b23cde122d3a0618d8bc20638c388107357b525eb0120327b0cb2ff633fc4332e

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    dce1886d5601956ea92f589d3fde3f51

    SHA1

    c67cedbc15224989d0071500d8febfcebe2ee28f

    SHA256

    c83d6c0263c7e5cd3cabdf7355302c2136eb443298ff172683b53291106f4544

    SHA512

    f2f835798da357b872c1dff6090633d4e56b4c644a15a3d55565fd29e7241eadf138b2ba80ac274a981bd9e3ed721484f23fd5dfd0126bd238434ef0aee4f93f

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    f0b2a143576d678eb2e0780940021bc7

    SHA1

    8be9b2b40b097dd538a0ec94de6a470e801d516c

    SHA256

    36cc47aae8e764ef3d5b371993e17e7d04702c74a4851edf5ef3733f68117f45

    SHA512

    2f518d7660b81416af063bd416ce1502ec7e038f411e101c7dafacd1bad9a298654fb44161f6d9a84d10026edb5df8becf25ec4495499c751959ff58b1d899c5

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    ba2b3ee6b529f00ecd67578131dd0340

    SHA1

    8233d63168e73457569bdc93114e98d699b02e65

    SHA256

    e4810d0d07c84d9dee001fb9873222f042fbaa1f967c6f9a21be73dbaf4d8795

    SHA512

    b37a571883370f836d5bdc70f75e6a6df11dddb1c105057b0470464e179fb7d636a8e196bd32fa0fcefb36649a9eea483aba05cdf605f6d25caf4baed3c93def

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    756c0c585cad780bbca8e2d81216a67c

    SHA1

    ef056e10223423e579e3a5512bc55a8786a3528c

    SHA256

    a3a4445afac23aa1e52f9e91522659203ee2aee0f8158f6bc96be258cdced6c8

    SHA512

    6c65db8d6f022d75e7f9815964de9ffe8f2ef002886c11a45829ece93c3e05640b6cbf63b6df2365f3f55f0a6ede578b97a172c83da8b8b212c04cc87ffd3744

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    a94a33d949012a7513c16c5052e9176b

    SHA1

    221083169fa24c645fd556c24e21f274801df96b

    SHA256

    4218f7470e9ffd000dc516356d122aeb3f52c7f3073e8fff341459ad42a0c8f0

    SHA512

    ae68b5db4a29dae7254fc6605407e72029387db3709218773c5b8fa9c4f0845214b2cac7c8ae856abdd5e7b445b77c71e228f67bac87ed6d5c5444f5a92ee711

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    cbf11869e44d2b7cbc3ab1800447a418

    SHA1

    e24edfb418365407e97b73adb7fa952e834346b9

    SHA256

    88eeceb1f75a53e147ca21a5b13fe7ba45abb0b41b8e5738ad4120bb65544fd0

    SHA512

    ff75bf79dd7902a7c2080b0420d5c41723c7de8a6fa30f54a1936f91fed68440571091e1171ee5c1e7fa99f2eed3091cbacddf5221bfd5c22165ef8d838ffab1

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    77f7d2e1f06ecaff56857fc0c1e96392

    SHA1

    c8f8bfedb2256a2ca0d7dd6626aca760e746541b

    SHA256

    76486e7468e8cefae58658252b5547ad3d0c90a59d631be8efdd3c06d2617555

    SHA512

    5dc0b89c9802282eae793fb62e63ce23032ff0b55166f1d4c9c0d5f1a8ed4b5d601f3a138f71956dba34e878f399f8a5aca41f14b072172b4d50c5d95a04644b

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    146de24946c2c5c2a5197544dd369dcd

    SHA1

    3179b0c1be33122b1f04e52fc8aab4466797fe4d

    SHA256

    9f0f6e99c5c246c8a60a7ea617c2a0a873750b50f3d71796a237a90a17b52f5d

    SHA512

    56e1c28ff02919c68cbc92ea99619ec5cf05e9ed4994b2137fb555707a9df315218b2725faca548001ea6f76ed27ce5c14967af001677253cd976017dbd6b657

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    b60420f61dcc8617643c6b881bfbeac7

    SHA1

    92b8c8c28d963c027f527cda944754588ee46631

    SHA256

    e015fe5d16f260bbbeb2f49ccea59451fef48a87660e1ca9d3bb87336c30fcf9

    SHA512

    878b3b0d5a7c361e3449923ae46f8adeaeddf30937dc2931a22fd9562b84111f966823bdb0ba714f2baf2d45c18adf6abfad3539593f0322d0ce9479128bdf45

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    acff58a7a69818af3364d36490a560a0

    SHA1

    76e237058220c1b0347a604377a297bec1aa66e9

    SHA256

    acfa3821731b6ca36d46224654a06aa00a667e2a847dc4bfb89c16bda13cddf1

    SHA512

    b6ff4f09b2b09ccadacd8b3dfca4acb5f7cdee61b68297aae2874f7043a04231e05d8bcf33f3ecbbe1cd6d3742eeba63ec674ef71e02092506b804718a302ed2

  • /data/data/com.systemservice/files/PersistedInstallation3012234294092200259tmp

    Filesize

    90B

    MD5

    1d9349096603f958d273c52d91dbb83c

    SHA1

    a13ad19732f24c9f9105bc83cc570a92307bac41

    SHA256

    a060bb4a1096bf32ba5f83a9f0a144d3ac9c18ff2398a63bfa229fe768a83b1f

    SHA512

    acadd0e2531010d32ef17c7893c81d305afb4ce8ea484265aba572a5eeb08a3a41acfd567acbc57b4d24a6c6db21f29aeddc630ceb6e0570867312df224a21b7

  • /data/data/com.systemservice/files/PersistedInstallation5255398700206420292tmp

    Filesize

    556B

    MD5

    64391e3c10e171a8d975733463f13f45

    SHA1

    92e428511170b47b9d43aaa98f58b1357e99010b

    SHA256

    efcb162747a67966a6bdb35d139f0b47aa08fd4ce0a1ec1a4ff09a1d257a18c9

    SHA512

    2ed5166aaadbba18046c3ec0d5ab14a6de6e260c63dd9cd8bf5645ee164902f211a750e52eac776bec725fc6e7c28ed99901e7a4da5c87a9191d2cb1ab9b5b54

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    322464c42e2506dd1feefb277138282e

    SHA1

    111a958336b39bd45776a86f1f590c7d5b54004f

    SHA256

    2e2c7a35cd5a3342a19740163b87daedaa9da69b2699d09c9cbdff7d8511bd8c

    SHA512

    3f7bc47531f3c9683cf72abc76b009e51246521f7c3391d239c8706a156054418bf2b4611bd906a863a66323c4d5b0e15d01e5b5e2b59cd77f35df132392c653