Analysis

  • max time kernel
    17s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    27/02/2025, 02:30

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4348

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    440f301b346f2b03f00d17547fd83721

    SHA1

    baceb8e3d508e7e82e01137d22018ac25de601cc

    SHA256

    1150bac1e19e2d52947d2a866f5f03593c301445aec89209be9eb4beb6a2bd62

    SHA512

    dc071d33b56f51b9d3ab2cbe835ff9c1ddc1eabaa22f60d5a8847f16f9609999af121310c858a91d343b2d03ffed45b8a1d804f772bcb625e9f633c29ee39117

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    398aa839ce28035e2abce64d7b4a5ec7

    SHA1

    5776b3efb0d9f13e981fcd72244b34b294d3ff3e

    SHA256

    46eb1ea1f969435c381011edf08167ea17a4bea589da58aca3373f18dfad23cb

    SHA512

    8ff9f800ab0a0fb09ce278c79651027bfba6c8a1fe945e27e4af2ed00c3fb21171c5b9f1c5cd4844a2cae0df7bb5304ecc167449ccae364e1e0ce01af723654c

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    ce6918a97b2efaf064506f9b9db798ac

    SHA1

    631b30b45a422da3330c2c73fe87906c27aa834a

    SHA256

    16e1f44ff364f7382fbe6f57e86f69d4e12199bb19cccad3a8643f4117607e84

    SHA512

    6eedfdaa6eba6486d3b2b935d6b2586bce8455a09fe52c23a2a0afa143fcb9a2b8ebd802e1b92780892046092200a214867b4ed81481910ab0552b69eeb17d66

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    916e86f1950090e49a489730cfbcaaba

    SHA1

    9f9122c6ff979b73414ecfbc3cbcf4244f423c19

    SHA256

    ae4abb7689c189c60e65da1af659fba34683f9dc82f73cf3a0d726ddbb09ea3a

    SHA512

    6d51fee7e1a19c035e54133b18cd60a0cb90cc631f6e3169ab7dd530ca16c353ada7b4816f892ea7b3e719aff2688b1e600df258f18709b40f546cc4d9aeecbf

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    590d4bb18cd93601cbc6eb4130de1c76

    SHA1

    a54b5f08e1d57c219d190f39c88ebc6a2e20278d

    SHA256

    6b222483d42c0bca3d3e9b4962ab4193272bc8102a1834fe2f80ac70f46d60db

    SHA512

    aad5ef4cc6dc7828f36929402759ef2bd3bae405a4d26d827c4fe38c92e60c2b86f30cb5ca750d802f5b8f704a0bdc0fd4b60de05f65882eb163e44ed4bcd38b

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    69a82d6828f184f8e23f4875cf3a6800

    SHA1

    731d6c2f171188effd9b1fccfefc1253c797ab92

    SHA256

    051d5ad09c5bc6b04a152b3b13eb8d3050da224cb182b44c08f2186ea3b4bfdd

    SHA512

    3d7e163d2146706e8c70fa27f03ef1746ae9f3c8474e7703821d38c1ef40b3908dc9c8a8b0d5f65fa1dc4b2d1a1f843ced8ac80f225d99b860309860002678bd

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    4b62bcbd4a84600780141012c904f540

    SHA1

    7a230951b0fd07f4793dadcba339c7df7c764904

    SHA256

    d418c84c77e949a45f12a28913bfe79a7cf1ff1e6eec607d435f95419f551e27

    SHA512

    d96f4493084ff096ec971b30b9883d4eb94a590874b2f1707b9badc9d39e8c775b7a9a7d87707d632e8d6d1f01fb4d6bc20b2d37ad0358593e79db463a588392

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    63791652e3ef7963bf060381031f1873

    SHA1

    8fe0540a4f516b2481c45a61c42dd2983f4eada1

    SHA256

    987199a1fc3a449e84e9041131b5e367f9497a9a18d59dd6a8aef25898370de5

    SHA512

    3d62d2c671bfe7952e82e87d00e897c4c1293732ffefd9fbd2d7fe35d01740ad48c429775ae5bad3650feab4378b119d08c3f074d84c4c1d016ead149b1f497b

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e3f13c7d7678604e5b293f6672bc0ed1

    SHA1

    b16c998ac7ca1db79cd4983b207a292ac1d96e21

    SHA256

    486eb5bec4ec277ea7b334a0d0e431e5e62881d3462903e8294640edbe96b2e3

    SHA512

    b63bab85a373912587e78dfc9daf8b4168a223c7af08fb87de8140d66b9f35042052d2d25694e4ea7c9f2064107e5471318b6dcec39c4e3dc0aa352627fa09f4

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    aa44b959f53026c34b75034a7c812607

    SHA1

    cff17bf3e0b09ae741fb43ae69c01086793fc198

    SHA256

    7f1386c7791108e697021127d937b58dc1c8eabf3f9a0732a8664b1fc4dfb9cc

    SHA512

    b5c386ed3ac4540ad367293102283f113b7d34c04fe69bbd20190c81e01c9aef292d1b12a1ea59474e9169b675eb66ba7019bd7319304e6f409977638b9ba318

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    b25ba23d9e1eda6b31edd872bc194431

    SHA1

    f56cb04cd79d4aa9c377a7370223db66419fe540

    SHA256

    f15315dbff3a63c72e97e95dfc900d0ea5c2a713bd01222c4b786ca47507defc

    SHA512

    12a028da61f4e206aeb82f7286c11681e2f00e70afa1de6c61ee7e3a16b6e03a9779e6d3ef2bb65331f80bdd6bb8385cb7d1439de3cc2bcf638c2cd0f72b6820

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    f82464c35a35c1c9a5d4f6c0a49090b6

    SHA1

    ea6666e8a0ba9412f45a563e324771fc0e72380d

    SHA256

    49548cd9ac2f8e4176bd290331af600c817498b89fb9ecd598d2a99ce35ec1df

    SHA512

    2f72232950ee992e8763b28a24a8e3edca5663e4fae7b58a3a6581891c90d0b269650e63e6f42eaa7b6223c27bd54afdb14a88966336fbefd55cfdce885f24d3

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    0f43c553072ba3cb31e1fa85c2441fbd

    SHA1

    c8f12738c454930223bedef4a892a5a6a5a477a6

    SHA256

    ecbb84364226c02888d36e530b36caa88db04ddf71a98578d44e9ff1f817064f

    SHA512

    a8cb85544f3ff6e5a1e1749254c1693120abe05a56b7d9f87a3901d47d2245d933919eb7d9ded648cbf18158fa69bc41355bfa159dac1ded27f0d908da36dc9f

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    96e0da65716c461b285760b366e7b3eb

    SHA1

    889943b3ec8c47922832a9fa63702adccd9f944c

    SHA256

    cac97575686d559860e1c0cc994ff6c7951a9c692fb51bafff305b60f091051a

    SHA512

    077a06328bb00f224162321b7dc313a831fe8c3edacc51919683151b648d2e9cfd456b139318160f154ec58494f78e22608b9c1e592283fb1684b470f12c2c0f

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    2d1123f90bba8b101370c744327a1199

    SHA1

    b33dbb1ae6d867be3b6c0d1451985d7929b89efc

    SHA256

    743a8ca6b264562a93b51b518a10a5c4f987abc40d517696e4c8d550bed485f2

    SHA512

    c97cce2bd637828ccba4b0f1da3222e9f83ecaee8b6846d87c0f0cf2f932e881d497517c3d78e2562f1b7ec3acbbba6749a0388407b154ee995fca448457092f

  • /data/data/com.systemservice/files/PersistedInstallation3170474376525895363tmp

    Filesize

    556B

    MD5

    8e9981ce695fb4346d33ffed6b8b6895

    SHA1

    b72045299021cb0aaa5f6485ff564cb563c4b471

    SHA256

    2f21d8dd5ae3c2c4478c2e9546d51ff326fda1a34523304bb22b06df958683de

    SHA512

    6741d0a306b6dcb628a97ed9b331133ba2378440d9081b7b6c2f25bf9217bdc0e5f7db2a87472ce67811bfc8e58e2d137c8ce3e57133f8b123328d9fad5ecb3e

  • /data/data/com.systemservice/files/PersistedInstallation7398372672187011681tmp

    Filesize

    90B

    MD5

    3a70b28cad9c3fb15ee78efdffe94e6b

    SHA1

    79df7c15f31c7e74738618940bca969f5c208996

    SHA256

    f9022c76dc2f61c6c08ee8998c0ffbd55a50175cafb4919cfe84da8b67c2649b

    SHA512

    44550051e35b6a7ebfc4f0f3301843ea1646f6f324662975d8385de81f2742fbed56a02b6b0b05a2fa8eba7afe4fa563ac64195615a2c44b404e298a8df42d66

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    3KB

    MD5

    6e4bb535eeaa29c2febf9bb5ebab3881

    SHA1

    445b1ba04da1c27327fa69df973b1f23a115af35

    SHA256

    22d4483ae416d8212738bdf5e8a26aa577842fe1da140d0abb7c7eb8d5c3e7a1

    SHA512

    cf1a817ebbd3edbe385a9fde67fcdba4b3eb8ad381e18ee6701f568a4081d7f8b92e23cd5e6fe25dc67c25b3a1db29d0600139c49ec7225ecb9587ee554a03fe