92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

Analysis

max time kernel
13s
max time network
153s
platform
android-10_x64
resource
android-x64-20240910-en
resource tags

arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
submitted
03/03/2025, 02:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk
Size

3.6MB
MD5

0366ae0abf0ada8aed90322bfe07dfd5
SHA1

2f0779ce64f02944e87674745cb446c5bc620607
SHA256

92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c
SHA512

52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677
SSDEEP

98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score

7^/10

banker discovery persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.systemservice

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.systemservice

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.systemservice

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.systemservice

com.systemservice
1⤵
- Acquires the wake lock
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5100

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.systemservice/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
de323901042bd14ebb6b48b4d79bee50

SHA1
13a83c8f9738ecd268e9395ca0d98c8a48ad9f21

SHA256
5aebc36ff0ab148d94e6392ce1fe21cf1dc075ede7e2b41d69c34bc1ead6afd9

SHA512
f8b45f9948758fad69817dff6bd0a7bfd7c8d5bc4b4bba55896e9ee8fae674b044aa23f98183c5f8e24abe1751aca5f5a36080e6b8e7714e27bd75db8d4b7312

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
7a7776070341fd122ba0d1b53c224b70

SHA1
2cf233a1a0f315beafc2c264111b48c9930e3ae4

SHA256
7bad98076c10af91020f91ddbbf015bd7cf6a2cbcc86a88cac291ae4f0464bf6

SHA512
90657dece993838eff21535d485ffcad17f98ceefb6cd86d2836dbd8c7ef4d57a474a663511fa4c89e66b799093bacfe7b1cb931ce50e88cd2257833864bad07

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
17ee1bafda4394363ff6e5d64107ac4b

SHA1
355e38c48da34695252fc7c107ffda266979b848

SHA256
aaa23b06de50fef82feeababcb7ccb008a4847160ecd3e7db5addb518436e67c

SHA512
03721399603eb7fa8ef885fd9447fba3a60fe1a9c85aa35099148cfebd3b508cc0a17286cd1c38621c466c7f5b69471095d39a127b0319ce7764c8d36111993c

Download Submit
/data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
716e4a9b3043bff28432c8de4ca919ee

SHA1
575d5dd727341849740a40d60f58793ec0787871

SHA256
e1b6e7dbe7b4b9fa2946f372c04eb7e8842c5c03f2cb471d2735cf11a007f545

SHA512
cbb09b2888947ac005670f72474e5f6f698ed012987889e5d88d65700675b41eb67e58904ae67ea0d09c6d1b13ea7118dbb54a7083f58df5a53ec1a9fd0fb95b

Download Submit
/data/data/com.systemservice/databases/core.db

Filesize
36KB

MD5
045489a0639eee27bca52f48828cd93d

SHA1
436e7966e7c019273c44faa4d8c5709b816dfda3

SHA256
0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

SHA512
c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
97ce2ccd2ccacdc9bc98e3ac3f9840f0

SHA1
2c09071e8463f8e680f67ea243d9585f4c77eaa6

SHA256
8cc5d256f910caa42f535ec521c983cf6a9d9dc03604e7037649660261399ef0

SHA512
e3cf67764f00429d49207ddb91ad24f1772a669ce652260770adada01fad95c7580e32bd0a62be3c497d51f43f7052ec2258526649ee01d57aa83579f953f648

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2b2fa7c4061736da07508204a8fbb0d2

SHA1
2b911ef2b80fa9b102f027017d30aa1135cfcd83

SHA256
f1d0e1e14e0f33e7e0b7a381bf40db7aa9b83630ed33a91aeb0150bb8d2ac7eb

SHA512
0d7dded4240d2545dd1575601a0682146df638c339b0676b8c3af5e86e3b20b26081ed4f0c060848d4b7a75a7ac826386d37645e2042e7ff02cbea5456f70543

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
36e62d87233f7e764d5ead29fea3d9b5

SHA1
7e6f8b6649700f346e4b27b817536a2404e6da01

SHA256
89a19912591a11831ad7b5789320cf321cd46ea6d92783b1a861fe6050c5d04d

SHA512
2617815af5e64cea795def0de7c4e0a4db35623455af10f291151b6e17136dffc910a547880f0069dcd1e512e858a11b877f99da6919915c957d0877b1beae09

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f2025a17b0f7c59f361ecc3f09a1b680

SHA1
91fa6007b37b9e6cd93ac651212a4d28df225872

SHA256
17295c629468ab718d437691cbaf6f078399dc2ebbe2a5ad18e7472cbd9626c0

SHA512
0b58203d17f5ee5815d2d8a732a1cb835e511ceafddfcfde8653cbc14020068bbba515f5ff2485033d71535f52eaf1665b2b52005c264a015dd251ba139ae6d7

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f871ff700510a56a54fdd56bc41b7541

SHA1
481548c8bc3254a00f497140278597b915460c48

SHA256
ab18f3bb605f3cbedaffc75b2d5a03fe21ab82179d268331ea907bdcd32c23fa

SHA512
12e3d348199566e137f02b63e4c8b4c722aa086128c0f1cea883d512075b8573d40d889d2b4452d9e3d9c02f523716da9775d93750c242a1a2d9e62f50f60fc5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
c65771df83a54ed5642fbe1ccb8d4b8b

SHA1
1b1478f3d7372a64f5513732fd0c6504117eacd0

SHA256
aa6f7d77089dace025d9d9875f81d6db109417e8020ac86300a71f7a7660d77d

SHA512
c4e3c3bcf239bc81d62c765b67f01c9da0dce3fb83c03d63e223094f928df73b0a4b37eb12a57ffcbacaa73ff2ca9177b3dd53a3b9fd8b81e6e2447cc172a540

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
68cd0821f5051b1c67a31bf9479d6e00

SHA1
d8bcbdcff0147a10e060394d7b038b9ce13e8905

SHA256
d1b30d320802e9d546702e121ab11c2385c67d6b3e2ef67d0fae424cd3f84851

SHA512
43e07fa59c1d6cfd5e7a2c092f8876802234b8313f3cb0cd3e77c866a1dd4d46b1835a0b6c13161572f22a1b53cb76baf440fa082ca0e21624cdab7ed7dc7722

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
aafe770b07b5516f63cb82c84bf5fa19

SHA1
c94cdfde71d9dcc9f8021c359937fe9df0a6c2cc

SHA256
8dafb3e17adf9a3c58827e8db78d0e969a0211082f997720247d8b70f2b2282c

SHA512
bac09dd883aec1c685a324ec6d70ba96d142e9a241f779fbd6b6f664e7a95b70178305979b96165d6cfdec95479602012c8465af6dac78149cdf8dd51e7b1c69

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
9e00cf6b3d6d29ae8b444832bab2ebc3

SHA1
dee18480aca44d11d6734007f23e7c89f833f36d

SHA256
66d10aa301681fe68d97cb5d36ee0fa638654d94fc3eda660dd1f9ce1bcdb033

SHA512
8c0a8779c867a354f4da6bc67a0bc60b3b289f9d9f6c453dc4629efe2c40423918fdaf07a24ebbd266d1bbf3e7cce629d5005bb98c28037406277949903412d5

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
449e9c91591986c472f1fb993933f95f

SHA1
2542016b77c9bc19c75723432bc2e80faa335b9b

SHA256
b9fb7f22b03a715469b24adc3396cf2e885df28d8f988d418bcb9d602edebde4

SHA512
3ac57e783ae8c42b295199e680db935c428f5cc1c3da207d2d3ee0761f0433aa2b9de4c6a24f6caf96b4ad3704fcaae67c53495a58eee07e9e1f472edc9a194d

Download Submit
/data/data/com.systemservice/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
ac166532fa5a6d73a2387f4bc3b2f602

SHA1
90d756928f13145bb673e4d730515f9c7df104df

SHA256
98acf9ebb5ba8ce5ab6fd93c7e3749263403369fc962597e8f38d9193b631d23

SHA512
8fa5b9dccc5aed13cdf8371267d23d033ae89bb5e7554596b0a82d88b6d73d5f7bd10b73d868d49949875e868107b34b7d956ff6b4cdce9edcf892666978e212

Download Submit
/data/data/com.systemservice/files/PersistedInstallation1948038731181696118tmp

Filesize
90B

MD5
a9e1d1cdd4470d47df64d767e34ba8db

SHA1
05fcea66c29f83f7d8e3322bad55e493073fb23d

SHA256
692f81a8101d0a626225b997ea60fc3cf851433c89bdbf22e631d7c59d49478d

SHA512
fd01f1e5f810e3c1e5a4264f9827ac5660f37de5cdb7029dbac85fa7fda615d9a8428fd2d6f2045d38088d08568e7ed54d46e678e04c882c43e5aa9164c01a78

Download Submit
/data/data/com.systemservice/files/PersistedInstallation5753011936250215303tmp

Filesize
557B

MD5
0cf50c88be3daaec2528c8af5d5e221e

SHA1
1583fd70bce67a45bd051121b4bf92dfe20db578

SHA256
a438f8b93456f0ba1152761dbecd110a97cc08d848fd58b7880fdece0ec20b13

SHA512
eec7171d26e85b0ea8717d41408bb4aad2f1a508a74508819de4bc9a67032d759481f347a76603c906c81606580e81e7aafa8a802e857cae54afdf24a0b53dfd

Download Submit
/data/data/com.systemservice/log/log4j.txt

Filesize
6KB

MD5
2176590025854f442e8dcb07d83e0536

SHA1
5dd902791c372c975120325e4712caf42ad82a83

SHA256
f7f29093964985583c119085c4101ef8cf9c55293b34573f809d23e5047695f7

SHA512
2cf8d69dd78d81b536ac76f6dc4ae2b4cac0ab5dd398c31a6f6c609eb3acf5b0163358564da35d210bbed4f981da339d68e9ff51d628d75e78851424ea9bda7c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads