Analysis

  • max time kernel
    17s
  • max time network
    157s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    05/03/2025, 02:35

General

  • Target

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c.apk

  • Size

    3.6MB

  • MD5

    0366ae0abf0ada8aed90322bfe07dfd5

  • SHA1

    2f0779ce64f02944e87674745cb446c5bc620607

  • SHA256

    92c3337b3d74f2aab8f0ca3a6f045719a3301519810d535856ff11dd743b523c

  • SHA512

    52f50f2f847628b1fb498784660050a6f189d8c7cc520c0d3a06ca28cc35ee4961d0a3daca71a540e263ab930ab629b884c3ff187d4abcd8f58549fdf87f9677

  • SSDEEP

    98304:mD/SWbGiowrvH6Odp/9hBbW+te6lXhAyHtu:mWWbGjuvl9jS+oSc

Score
7/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.systemservice
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4761

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    120a68fa8861338d9ee1f34a6d453d32

    SHA1

    82f920753f5c8151e492268b895ec63d173a1958

    SHA256

    2f94c400a66b118a8d0be61fc212b27f9071cab2d6f4f420ed4116c18c65f7b8

    SHA512

    012f32e9046ab032c9f1f3d74d15002a0603ddcdabb07ea9a4ccfff743648768711e7e8db69275760145a3a2cc009498e7bcdd03a09c1ddb9aa8eba69d6070ad

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    c2234f93c85cfb6eebd34db513758d0f

    SHA1

    145802581acde8bfe3aff952a88f3de37d38bfd0

    SHA256

    280a33a8045410d67d727604da65933186188c099de825bd4fd9394ef2e9f28a

    SHA512

    869cd9f8657bfc8d0cee22dec3b0ea661697e3addd90aa45a7616953ff124cf8a87c1b412a75fdb4e5cdda088756f0649816779e2acef2d517e579caa9400b6a

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    b0a698b7098a9fc3df81e06b8ebcf6f6

    SHA1

    c491bc2fcda0798fab07f3fbca9262c86b7a52a0

    SHA256

    2fc381453fbe63c36d01d09f41b8d816757a29fc42947fb49bc1829c656892ab

    SHA512

    1a5d23b8acd1f5cf0cb0f1ac173fdf378c733c9b9dad89a6d17dc3bf916ec837816a1d109e6752ba342d2d3528daa06c30bbe8e1fa7cd20dcd5c7c8f81ef07e1

  • /data/data/com.systemservice/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    ea253f2eeae4e3fa49145abea3cb74ea

    SHA1

    bdf5604ce3d23f8842c1fb963cf9c6f766723c31

    SHA256

    5311e012229dd73f1635298bd92fdacdf93154e94c419be0b07f9351b92a1602

    SHA512

    6be2144b31660f18d60b6aeaec643ff800b01e3b158b3fe9c1fd6c81d543bda2c00fcaaed7579133e687bf03a97e7a6e60ef1eb6551a23b9ef97a8ec94c737f4

  • /data/data/com.systemservice/databases/core.db

    Filesize

    36KB

    MD5

    045489a0639eee27bca52f48828cd93d

    SHA1

    436e7966e7c019273c44faa4d8c5709b816dfda3

    SHA256

    0151eae0eec786abb19ab59d7361b3291ae98411fae12cbbdfecd1612e16996e

    SHA512

    c8739a723a8648b0e380b946a97fb6cd83d6c4769ec3679bf4bc003ad0049ff5cccfc8f75a6ea272feced0020b13d3129f792f0f22cf442f0d0127f399eba22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    260d3794e96e12eb8042f7a8b0b4d646

    SHA1

    a1ce933e195807e5b97d57b28b6c1bf92e8ece48

    SHA256

    8a6ebaaa420810c143ee7fb76c885a9c25b5f17059bb8278c51d3badfde6498e

    SHA512

    f2a7629ba77b70153f66837a50b7ecc99201cfb39edd6bf5ba9e48df077a11a9c8c8743f6d0bc88484f80d4439b94f3d8b49a07ceeba99bde0a606db248566fb

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    c32e0330e26d9862393229d6a97486af

    SHA1

    320578f0d3fe1c3ce93139cd591fa021e71c650b

    SHA256

    1cef7446113f7256c25bed7ea4e4beee0200595ea428cc9ec30493c7c0fcc8e2

    SHA512

    850434849778d5dfb3c127b27c0b2c728aa64c177247cba518caa2651cf8d0c735fcdcc7cc60d7c01b497e8ef934058740ebaef6ab3e559001c5bccfdff577a2

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    9b821da917fca2e8714622fdb6002292

    SHA1

    d0857c64e779de1db16e9a18a5c6848537cc1d7d

    SHA256

    83312900b469629da3032ab164cb834191a85c829eaf169be12c8f38851055c6

    SHA512

    cbd5fa8123bd507f99024e7d53ac7ff2f8ef4ddb4d36574dd82a706a535cdaf7395deaa81693395449db2cdeb26ac0e26d0d9fbff0738ba82725696aca54b3da

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    1308e6cb5ddaaed92694d09d9595ce39

    SHA1

    3382adbcc70ea0a7b548c7e54ad406dbac445f3f

    SHA256

    5687eaf5b400d4ef50fdda3d08ffc96e0e333ac2da78159d474e0836ac4620db

    SHA512

    ec952b0e725945b9fcca31a7c48dcd3cebb33c83187df01726d749c3e07261d0fd4dc030eb8f9258321d47f71d32e67a2df84814373217e12b319a187559e923

  • /data/data/com.systemservice/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2238195eab25764b61f2d26ef6a720af

    SHA1

    d366efd0cc079f0f87d23c630ec8d99f90541731

    SHA256

    599d63ed390f7e8e81d82b379c9a733ffbf454bfa5843bd0c909737c8d40dfef

    SHA512

    478111185428119bc92f0ffa3b6d88a7c644108c4b1d9b14a53bea1d74278bc78e67752e41d464dd81e3d600de8b7a723d0c7fa0ce920250ffd26977f9fa3470

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    fcd0e3619b4a553eee18285912a05155

    SHA1

    3e64b01bfcad3b742070c5dfe60319694a483f40

    SHA256

    dcadbda589cfdd605734c6eefe2b270886f210b9c8ddd605039632ecaf60b9e3

    SHA512

    e8589b5b508b1cf8332ba6b9549fb2fa01ad5340b6ab20096fadc2e1f34390a748ea302431611fdbc1cbcb7895bb7f73f9416f80253c27e29bd0e85253574423

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    501a180611b5c275985ba0f5ffc6abc8

    SHA1

    b7ac4382dd1644063b733470aeb91fc8f029d216

    SHA256

    fe66f6e9882c1cb75fc38e45f3364c01660da30ee97f9f071189d1c161d5416c

    SHA512

    e3f3b566549c213e61666e82207159c978b5f3dfbe21470127f6d9183ac33fe4184d9302407915e0c622f9a1ea799e2ca6f78c62240c49e41af495618cafe22e

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    30cbe10a560245a1e6dd20cde7cc1e5e

    SHA1

    746b8e82b5ef53a07408b8b7d430b83e0f64595e

    SHA256

    2344ccdd292b69dbadab2330991cdcaa226e5250b2034b7b3da7420b37dfaa4a

    SHA512

    d5fa365354ef96a4560e094fedc09197df2ce6ceeafe4f7c2b813fc99fe59c3168861ee72c226d358e9a1079cbadeaea3e8cb5729766488d74df9ff7b668f944

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    0b6e12113e4d82f967405455eac73dfd

    SHA1

    1e27388597f25268f3510040840b61fed11ea2f5

    SHA256

    c50fe5c76856b02684e8a1c8ad4c5bd721951323fdb979ae80df036184046833

    SHA512

    0d2457e717d0274fbbb80753f32c44f004e8e8440a20d5c19531d1e74baa5e15298fef57abc0b4a2c8c516626df60e7eeb8d8987e77abedc1ab2c33969b5ca8c

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    abdb0c5ab7e85a93c91f2acd661661ef

    SHA1

    dbf0ba812e1f6d143e5f2a809500e5c0903917b4

    SHA256

    319437f7096c65589d57ca0a0122ef04d9f73090ba5b76e569c21dbf38fe250d

    SHA512

    6f01757899a357cd90baae7b2bb3072332dec93d7fa0c5a8c8291f462870f16a0c962b7db2db2a29bb04ecf737201433a85ecdb3548e783740986b4b4bdcbafa

  • /data/data/com.systemservice/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    f1ff9bf7424cab7ba47885f4a5408408

    SHA1

    4c82c27f4b1a845ed4d44eeb05f5954fead78e01

    SHA256

    a1f5b4e870315265b93efe945d329d2162eecefe733270a6a8529f2f1b7c84ca

    SHA512

    0f513d26895f8c2758ef0802d1c905c6ef5868f368769e4902b53cf5d263ea2021b2624f7201ffe0ce3adf896080bd52372cc6d285e9ad4558e68d5c2d66d883

  • /data/data/com.systemservice/files/PersistedInstallation216865646618106300tmp

    Filesize

    557B

    MD5

    49bb30deeddec00b587e6a541654fba2

    SHA1

    8c2ab85b76cae986181af1fac4195ff53d42b579

    SHA256

    fc82dad33fc8c1731a59430b9ed21dd1379dcb8165a2cbb594bd7c7cc4e04e84

    SHA512

    f9580dc99309989f2f3b2b1bcd2ac17faf75486057f48e6844bdd8bdb16ea4caf962d93f0ff8de9c0c5db5035781bdf4211aca24442ca9a55cd4ecf3eeba8746

  • /data/data/com.systemservice/files/PersistedInstallation3777919470306517591tmp

    Filesize

    90B

    MD5

    b73053afd47e2fef6aff5d916205e165

    SHA1

    342fb673227219b61f43e870e99880784eed8d88

    SHA256

    091b15f7d377074cd61d676a174c6ede9e810dd96ebab60b7aa154be6e158e90

    SHA512

    9c673a3a5e29ff0fb221d62c85d51d083385cf1bbbb317b6240aacdcc1d3a30c1ac967032484162b0643b0f95c15066c2b1c641034e916d20e4ab1acbee87215

  • /data/data/com.systemservice/log/log4j.txt

    Filesize

    6KB

    MD5

    7bb4b79e3f92a5180263ec4dc372e94e

    SHA1

    d901e6aaaa637446849b34263aeb521cb31ddd47

    SHA256

    78f639955ee0fec0e12f017bdb6d1d94a224c2e845e36d23b6cbe6c30f2f231f

    SHA512

    e7c6d1aa3655be850b85aca24f00a4a66a7d938ff35ec4332fd7ed841d39d6f99e08026240e7749f71ea412587086f0935d6c537dbc4a45aca00b9fbb2efdf59