Analysis

  • max time kernel
    2950005s
  • max time network
    117s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    10-05-2022 21:15

General

  • Target

    Tabestane.apk

  • Size

    2.3MB

  • MD5

    5eb3cb08f601caa62cffec3d2defba76

  • SHA1

    a9e6466d1d083e884ca2b1fecd43bae2faa73a13

  • SHA256

    10fff3d8edaec12aaeee6e765b04b34a08f8d274dd8be40d0a8c203071640ed4

  • SHA512

    a4211c11a94469411bd657c768cb4a18c608d931502b3a206db74b796d91dfbe04250fdb77691cd7dfa3d610c04ea94e01d962484e3d93bbd223f9c0f578986b

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.Netw.dev
    1⤵
    • Acquires the wake lock.
    PID:5114

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ir.Netw.dev/databases/google_app_measurement_local.db

    Filesize

    20KB

    MD5

    89cd606d433241b0e400ec6e41988cef

    SHA1

    89b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3

    SHA256

    fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253

    SHA512

    f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1

  • /data/user/0/ir.Netw.dev/databases/google_app_measurement_local.db-journal

    Filesize

    524B

    MD5

    d766e2a75551341d65b176afd99e8615

    SHA1

    a0a52c185ef243c4419a1a6290c1f71de816de1b

    SHA256

    85d365ac4310393656e7ab9636df749db637fdec163e89d373d971c4a8a93d73

    SHA512

    e358cacc67cd27796af8d864d477ba5cbb6b3673247927962ba91bdb9b9b12d15ebd583e63451cb31686ff41438e5cd211da4578d350f549ad95d66f2534b698

  • /data/user/0/ir.Netw.dev/databases/google_app_measurement_local.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.Netw.dev/databases/google_app_measurement_local.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.Netw.dev/databases/google_app_measurement_local.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.Netw.dev/databases/google_app_measurement_local.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.Netw.dev/databases/google_app_measurement_local.db-wal

    Filesize

    36KB

    MD5

    13c7200ebc38f7ee2486037c63f861c3

    SHA1

    a988393cbb7cf736223a429c42baf544efe6b18c

    SHA256

    226f6d82065dca56950aa8ab59d9ccd914cfcc41efdf362453c6a711bd226638

    SHA512

    830261a50b0aefc778fbc3f2aaaff632f0e02c7de91c43f31cf1717874a22a813751de1e740f080c1a5f40461b916c776866da047a8ea80163e3ea511bbbb87c

  • /data/user/0/ir.Netw.dev/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    d9adab8568bf8f72db1899fa66fc2519

    SHA1

    02475a838b8b62bbdcf05d24e0f43a42bc9788fc

    SHA256

    ccf47cc397b9c00d59ba03a14e60c2e4ff11f80b68c59e7c69043e524b6de4c0

    SHA512

    2573715e45c93cc9fefefd93b23c1cc02467a47fd30860f4631162a1729d68554474bf6a8a9646541e847a997a0f2d33caf185aae1d1159c5451e35358a61145

  • /data/user/0/ir.Netw.dev/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    04ea8839d8ca9c29c1bf75273f9c56d0

    SHA1

    6534d33dee2530fe0f2688d4bd4bb93cfcdfbf06

    SHA256

    b798efc2351b08a4c883bc3fcf481fd0dc0f7f9e3e886c7ece638aee31e093cf

    SHA512

    6cdff519ffdd89ef7f1b2287596410d946d322b48d130ec32120aabed0ffae0e461be990a03f9860c0c21c6b913744643b39a0f5510f6e7c5806c77a3bc6e17b

  • /data/user/0/ir.Netw.dev/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    15ea647c6ea4b71e94149a12d9877958

    SHA1

    8a6e45a1cb84741bb11cf0ac55e3ec9afbc4a9e8

    SHA256

    90eac7b3b41ccea3d29809d979e719829c039e0cad9e154b4926bd3db2cee9e1

    SHA512

    86fd856973140c460d922c3f7d8b4b501e931d45850cc17de0df7542733a252f0c3059f0e2d8d09253766aeb7f15c50f8992bf08bf15e5b53c1e786f8b6a33d2

  • /data/user/0/ir.Netw.dev/shared_prefs/FirebaseAppHeartBeat.xml

    Filesize

    134B

    MD5

    2f401933e04277da4689d562475fdff4

    SHA1

    810476c63431a85f9985b51dd604bd6f3479a96b

    SHA256

    7bdb326ff7f756cc7762e750c2fd4dff0d89f1222a4f2a5e65d91b13bd6026fe

    SHA512

    a09a3503ca802397897f4b458acfbeff08c8c9edc8530a42a74e7f2a9755232fe629243148a1dcafe8e89310935d34e1e1ec70854d2b9ae3cba2205e5f8c6ba3

  • /data/user/0/ir.Netw.dev/shared_prefs/FirebaseAppHeartBeat.xml

    Filesize

    188B

    MD5

    f9d543e377aa442a7820c69622ca3c6b

    SHA1

    3c6d2b6f1474b2afa2132a5ff153f55038231940

    SHA256

    71b2bfb6556a0ec02217b5f333995cf2f1057ceb6494b295b964197a3707a8ff

    SHA512

    5ea0f09e9e95ab8893c4c52aa4c12a61602eb546ef1769269bc1c7916d8b120dda2177937e73926f2991ae33a97f27ceb90c7cbaa140f05299799f16466f29e5

  • /data/user/0/ir.Netw.dev/shared_prefs/FirebaseAppHeartBeat.xml

    Filesize

    239B

    MD5

    ca6e05833adbae2ac46b2bddee12d1ec

    SHA1

    089d02ff6f027e34b383d43fecde64d255217044

    SHA256

    ab6c45d7cdd7a158eaa7a95b1318212f2bfcf52bbb2217aea239e2bec2c5bec0

    SHA512

    2a668811130260ce2874af165aa4d01ba808e53a049854dd07a39ea0ac4501a5f009bb0dc8cc56cac6c8ae2fe619191098fc1b6f98dc9f6301191219b4cbdb4a

  • /data/user/0/ir.Netw.dev/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    192B

    MD5

    c3fd678847dfc312a560e7891e6a6a60

    SHA1

    d090c6bd677d213272d5b3d835caf722bc72fb79

    SHA256

    85ed40e364ac0f23ddb76ac40e1e9a4d446d2cca539b4cbc8d98281cb8a073de

    SHA512

    580a267b9d4421b91f66529083fc70d1e4e0f48589b871e2047f39736a3047a9116743abfcd12cdf9ac2dd5d5bf24882851d53c6fb4c17155bc53b256f917297

  • /data/user/0/ir.Netw.dev/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    332B

    MD5

    bc410558b1cd1cb4d19915a7d9ea106d

    SHA1

    13b20ff399ee711bfc0c49e4d33167aab18a17d9

    SHA256

    515bc9ee9475ee746461eb1e9239ba57cdcfb96c67e8296889813c7bf30cd657

    SHA512

    604cbb2773b9d8943021a9cb2e1966078c81d55da7635f049b2eb65e61511ed268c8e1dbac4a6836a9d665497e30db14382e2726b134769b868a01547e159043

  • /data/user/0/ir.Netw.dev/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    395B

    MD5

    cc49c1ed43f3ffdbc3da7e5acf49d026

    SHA1

    341b53d719073978f7530b48fe060c94272c101c

    SHA256

    43754a196597d976054bcba0c1b05c2e75eda783f14e5979c3b1dbfdb9d8fa7b

    SHA512

    c409eae78880f8cf7439f61cb8c57dddabeee3744528c6fa5f1ff9a7289e60e7dc8c84d782a23f38025249488f90bf44304a1040ee0ffc955279d7c593a441a5

  • /data/user/0/ir.Netw.dev/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    605B

    MD5

    def3ca96dc1245ff73eaa17131e1cbbc

    SHA1

    40f6250b3bfefbe769cd9f3ec1d00c6a1fa92610

    SHA256

    b9e4196527fa64645b266f7b48d5fa3641e9ae197704ca437ec0631c1f13d13e

    SHA512

    be472beb6098a18b772acbf60a2cd16888be35c5c28af99ee5598bdf9e24027103cadc3747061410a4c89307c8ff877d4fa844ec6bec72b0a86b89a2abc6612a

  • /data/user/0/ir.Netw.dev/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    606B

    MD5

    5d465de149147774df1575a95c13759a

    SHA1

    758efa26493c7f72c2d34084b329abdf652ab706

    SHA256

    cd9dbd5980232aa50a819d1a7ce4790c80dcf6e1d254ce09067b35de19b7c359

    SHA512

    eb422bb69ccfdaea1462b41cb842ef74d30e0025ddeff5e28c4aa099dfa4c6e7facddf32d4d86f330e81ea7be08b441aa569293485ce17771c8e48ef0bd24a25

  • /data/user/0/ir.Netw.dev/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    718B

    MD5

    d0958fcbd875058d56a84eb188ae02ba

    SHA1

    a2d2e00f41063c2db7cdcc6a41713e47160f6044

    SHA256

    b1d2df74e51ce857a9f6df81ab0975fae478ed8dfa8787a1208b6d15b2e472b9

    SHA512

    a3f8b0b8a61ec70008d3d94e81eba5dd9e6914d619e2e471f3f5fc50c0727621cf948965cfe57909a5ef2f8784c4f3881c1b088c0e049e566923da8b2bcbc60a

  • /data/user/0/ir.Netw.dev/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

  • /data/user/0/ir.Netw.dev/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    180B

    MD5

    90ae3cddb076195dee342dcea09dacbf

    SHA1

    a1c9962f664b33f45dd559e8278fb7b7ecb64f98

    SHA256

    46d369ed030bc7966a3e9575344c06b1372d18f36c62b1f92ab9239b9eddcf7e

    SHA512

    bdc7bd97d118b8534b613c6f6c3e40a167eb308edda60d34bac940186c66a742fbaf09177d75ee2718e9fd4cd22fb3aed3c82a99fd282a9d4fe7d3ce7751f830