Analysis

  • max time kernel
    19s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    25/02/2025, 02:21

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4315

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    413b5b6615a71dda1c81df684a4ec409

    SHA1

    5bb752e8b2c0ec847ee96b0126b771f553a9bcbc

    SHA256

    a36cf36fae41678e9ee150004dc4cac5acaec152df07831546e9ab688239ab9b

    SHA512

    871c4d557dea11ceda68ecfd53a962798a9fa0364444ef9c8966752fd11ebc37dafcb4315f83f5d96ed436a356d1ff9cd078a0745d053ff798c07be6b1d3c648

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    fb1a061a5dd190f3508cdb6c73045858

    SHA1

    9b1ccba59bc20aed9be2226a8f1cbf0f680f8f43

    SHA256

    c4e271d9bd237591d31dfa054a93e8e14d73ac5401addc1a3e774118d6492974

    SHA512

    43efb0cf90ae755a81e2e7f8ed0bc72721ea361fcf64d2e82b36e8f50e5758658ac8a206b6d11b7bb0eee05e2aff18823c123b352511d72c5ef7f572edcebf41

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    43814c8c1a9ce7bb999045dc355c1015

    SHA1

    fa0db380319c2caaf5dfef87959f8a8168f31ef6

    SHA256

    14b34b97940588a6cdaedb0deeed5491caeab8ce9ac294da0b93dcd660954034

    SHA512

    4b8e82ca063bc9ef1b5bb54e705cb728fd5e952e95f6eb4bdc6b0f78d0d5a6da078dba22616f136093909a88ad00db89f1e960ec834667c2ebe19b13c6f366c1

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    fd9bf81b5226af341a067d7823d7c063

    SHA1

    7025118a2a501a67de6cc0d42178ef6944d5e2b5

    SHA256

    265da95b8187a3f3b83e7d022b21d40824e39d915ffd7da5ac52872d48f7e974

    SHA512

    7996b5110731287829b92246856464bd785d6bd2bcf586eb8ef90948d7059073fdbf17760b810ca230a79a921c4b2245f63250013d7a252b431908aaa72fd6c1

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    09b65671ef49604785659f3e2b7e8f26

    SHA1

    f7d220c33f706a923cf35da32d35be444443baed

    SHA256

    a5cdd95c4cca38712d5d8ca32facf211cbf1adc14edf86a2540070c7aeffc517

    SHA512

    e12b3de7a73f2b0b008675ce514902241524c14fdd66c5429b14c827f7729796bd169230eaf1cdaecd2f7af240aef39051ea2ff92e0a0e546891f33945b93ac0

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    bbaaf04f863e14dad1ebccfbce811c46

    SHA1

    35c2586eef598ee123ecceaaf8b0781a42bb6b1c

    SHA256

    0f72b13e8dc7e6cfdf1ff6d9a366f9721f8c375c3c4f0e6e0aa86c58d3c12939

    SHA512

    ce07e76ad172af67e318a13bf1c627d0be6f8bfdc69aee942d70bed09e8ab8bfd2c193d864ae8bf17a90d42992cf24d6bfe7708d0e7811885a7ee53a7ebebd87

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    03a405ed00d7903f331dfabac63de7dd

    SHA1

    2c685c0dc561f924fa83f7c1b051970c1eba10c9

    SHA256

    33ee046577e9799818b5c39cd03106623dd97581cc5ff87ff280ae6999ba9dc5

    SHA512

    00d90b8165b02582f070b559e3f31a922b3024c8915552d99b25df54733e3a5d51428f737f1c5f8d99ea42b5fedbba3d70d55a91e0d329b2cc648c643b1987d8

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    b2e052e4b34f59070981b2d3ac9d0066

    SHA1

    c33bb7c8560741f98c8f0842bee2e81702012e18

    SHA256

    41cf81283c659e86646b721e4f62a6ca1f0edc5c2dd80937f22b202f8227b9e4

    SHA512

    f7cc235d790c3708698efca5cf56f813ff793955945f8ac5ec025fc68cd365aa2692a710692ada1ca80f30d5a99fa9fbbb5b41b3b2ae5cda8beacdc7e5823397

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    7f9d766c98dc5f49a4d5e2d4bf497e46

    SHA1

    6fa13dded176a6b8a4b0f5df1bc9334698a2d746

    SHA256

    be9eabe5301eaad3ffe21850fdd8b71f548aaefd112f1c88a6899ecb8d637582

    SHA512

    e84b4ef39a285494f7132eda24298a43989e3b7f0610a90dd648beee593a1257b5b359b5852b6e956181c546978fcdcb20da7d4f9b6f7bf10325fb0fe7a8a103

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    128145ac54643ac66dc3c0d151cc9692

    SHA1

    5ed520f7f8c5e4a810211c21384aa376ee05a3a4

    SHA256

    bb214b37801ab514811c6f4621fcfd747e3976e12db00230a22fe54ec422e6a8

    SHA512

    94f0a73b8168ef896b2df9ee11574d058cce600966b7b055da281150e22995090eb1f5758eb3526ebb7b561f70098a8e4587e24063a099d75dd8aa32df10bb99

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    b371a58ea8b85bfd2b87933c46b911f9

    SHA1

    5127ff8ef1980179b45e45f7d3c2e45781bb2071

    SHA256

    f883153418a6f2e1c0205a4c2d1153042dc2606accb32f80f4277b0ab33a121a

    SHA512

    e0806d54e278a806f65b845e2646b852c6ec7ccaf74723d91ce945731ff950423ff8e58f7dabd10fda9481c156d76e257908bccab22778993d828332cc5cbff8

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    926e5a68621f278c08f4a263eccdb3aa

    SHA1

    3083acd07a0e59e2f5779f27b34d60acde51af17

    SHA256

    b883cb9278ba8cae78bfd2d50a94e030d31f5e20412c928f6ea77384726a1892

    SHA512

    58f392b82b186c9a40bbe897b2bf56c1dd61bc7214f5eceaaec132c9c5c91cf5cd4361fc5eef8eac2bb1238e531814934b6cfc578ce3847eb353d3cf525280bf

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    21940f4f94b54af226090219166eefd7

    SHA1

    5ae72cb303baf623a1400ef456bee41db206d022

    SHA256

    39aa46b41fb0998783ca7a005c30a4419a7777417ed6284f9089ff565dab33d7

    SHA512

    5ad9b02416db03cc3fdad4635ba8ba06daa48753b84a920328a9925531a3736f3b2a8e0cfb94cc0936adb22d8f2b5fff61dcb3e203feaff3fc7573e25002f79d

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    79ea5e49225ec0c39c1bf6c2e51a1736

    SHA1

    d8b93fd28338ff110173d0b06648262310f68b4d

    SHA256

    adbc15ac09d7f7e6fc8a5a451de2666e4ca0d16d4b656930964dceaaa62ac15c

    SHA512

    f7ad1605dea2670202abe97de681822997f2bcff51c98f41b50b9a78d89ed92fb04da787c10c69742dcbbaa5dfb95aef187f69de7800e418731abd3eb02c3aea

  • /data/data/com.systemservice/files/PersistedInstallation6192310347417001948tmp

    Filesize

    90B

    MD5

    1c640fa41f86a1a02907a3fa6a8ab34b

    SHA1

    8c080effb88d1b5f23cb45e8aeece45e6fb2f350

    SHA256

    9ebcfa3ba20d45a0d60636e91a53850e77af1bed045f938148eb64857347cee3

    SHA512

    67390f903ab376c825e01ede8dd45560a06b3a800b8391015119c2fbe95eff6f834a949c398e4e2a77d5d3c6a573f1f37be0d00b1f20e5b945a28ca237c9e40a

  • /data/data/com.systemservice/files/PersistedInstallation8301582543410904307tmp

    Filesize

    553B

    MD5

    9491d3ebc2143fd6b8d8e7a76ef6b010

    SHA1

    a3602a7f9fba586f6445cfd60706ebd97323461e

    SHA256

    f2bd7bb61c8c3f18f10d3f89ffbd65b088c04bd0d52ea76d72a7af3bf22bf0a2

    SHA512

    2da4a69e954d12db37d8961352a4781461a6d1a77edddd159be0d95c8db890534771a580b9b357a0225817fdc7f7b308e40cb740f6ff038c4b8ac73e84e733b4

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    f579158aca9c7dce2a0ea5ecf7258df2

    SHA1

    3d5876cb28449ff41784addfc23ebd44b2858318

    SHA256

    8890c65b71099d4575d015891b3499a574188a161d5c02a910dfaf2c79f3abc5

    SHA512

    373b26fe95a1956c0bc90ff9c5beec30b98ab20180cc3fc1b9d694c2a5814c694b5937d8e7064452ae43a7ce8a590c4a17eaad4fd650cb4245bb0ac4ea8d82bd