Analysis

  • max time kernel
    3760664s
  • max time network
    159s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • submitted
    27-08-2022 16:33

General

  • Target

    eblgh.apk

  • Size

    2.1MB

  • MD5

    7fdb3b28ca96d3dc85fa6a5938621364

  • SHA1

    bb02b382f6ed2f9972125aca33a371f718e81b56

  • SHA256

    81ccf768306083c01093f976cf0582c30bb4e6007fde84c3cfff11c4724537c6

  • SHA512

    e5832a79fe1c226b62533d128168e3385861fad342b71467fc27612373f2b2aead10f0bc429274e7df80162e1edeb844cc821041b7cc35a03c09b4ba40fce442

  • SSDEEP

    49152:w/3JZuaGc3uotdsRyWqupG+7kzcbWnIuht2HAUI/Npd:e50+3jdsRyW9V4zcbIIJSpd

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • ir.joorj.tel
    1⤵
      PID:4985
      • ping -c 2 -W 10 -v google.com
        2⤵
          PID:5203

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/ir.joorj.tel/cache/1

        Filesize

        1B

        MD5

        7215ee9c7d9dc229d2921a40e899ec5f

        SHA1

        b858cb282617fb0956d960215c8e84d1ccf909c6

        SHA256

        36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068

        SHA512

        f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768

      • /data/user/0/ir.joorj.tel/cache/~test.test

        Filesize

        4B

        MD5

        098f6bcd4621d373cade4e832627b4f6

        SHA1

        a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

        SHA256

        9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

        SHA512

        ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      • /data/user/0/ir.joorj.tel/databases/google_app_measurement_local.db

        Filesize

        88KB

        MD5

        7bd7e08b7c157fb7a04f9701b6965b65

        SHA1

        19ed78cffffd879509071b091ba60776c18e8d97

        SHA256

        c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

        SHA512

        a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

      • /data/user/0/ir.joorj.tel/databases/google_app_measurement_local.db-journal

        Filesize

        1KB

        MD5

        8e9c8420facbd1a370d154372ad0964d

        SHA1

        6a878896075dfc541faf1747d2dfa388637cd351

        SHA256

        adee628da4481f6da71c8ca623cb9555fa5edf4a66d3ac777c39939098b89664

        SHA512

        fc845e3db2ebca7564cab9544007e9aa419bc5b989d80e5764dad856579af21633f2be0e750afc1c5ef842a62b133ca044652b040343ea66312f6f969d21a5e9

      • /data/user/0/ir.joorj.tel/files/PersistedInstallation3499042734163995897tmp

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.joorj.tel/files/PersistedInstallation980100238456551112tmp

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.joorj.tel/files/generatefid.lock

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.joorj.tel/no_backup/com.google.android.gms.appid-no-backup

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.joorj.tel/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        239B

        MD5

        f34541bd7ae56f1465b52d14ab8db3aa

        SHA1

        bed38ebd3457f6fd4a917db5e4f18070f1086083

        SHA256

        9c3ce1325b4431d27b463aab9b288ffbb6bf51066c852081654d7e55c22fd079

        SHA512

        8ec5c50dae0e25b1b2c58cb88370d89e3345f1642e49a46449398048ceb7cb6d6690d49b921d662a84db0f7606bb3a14b5eb5c2382b8bc5e42227e9f7ac7cc61

      • /data/user/0/ir.joorj.tel/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        134B

        MD5

        f6ed8315bf70a92f8db5992f74640480

        SHA1

        81dcd236dcd07f3c4ea37fbd677296a79250488f

        SHA256

        8c185a2ffeca7bfc4170ad95dee96241a496bbebc18c9b8bb137ed19136a554e

        SHA512

        265a82ececfe4e8710b00837e780c584a85a023d9b0098caf4c568ae53822ca299464579000ab001f092511d41e46979b50f43d4954d8262a4f6803be0546734

      • /data/user/0/ir.joorj.tel/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        188B

        MD5

        f9daf71305c2d3d5398b84043b4726e3

        SHA1

        29e04b2475f57c647f0016ecd4cfa2bae5bbf06b

        SHA256

        de53f3c42f67af3ec12343709e5065883c91b35724179d64bbf9429dd9aa1d3f

        SHA512

        b13c215086258d2b38c5abd76ed8aefe9b7a2e7b600a69c38d75ca0fd36505a95e56152088080b082ca6bdf8f0d7fbc8e6c93fab89d43cac0cd449871ed3c1cb

      • /data/user/0/ir.joorj.tel/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        192B

        MD5

        86989c850c6829194f895306e939fac2

        SHA1

        e26bef7b30e75c966313c1837210afe0dc8f42e1

        SHA256

        0d3d7afe65406a69489372093c7f7e520c0f864944157a590c89b0350dbf2e86

        SHA512

        0fe91e328141e0e1cbd979a22bad142b21677bbc7b88c45c0ef86633f4d018bc7593fd5761627b445c1d3af27ba5e38f3f0b3ae535e828f30c2c77669616dd3e

      • /data/user/0/ir.joorj.tel/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        251B

        MD5

        a5dbe264bd8d844bb77a8668b7c6b483

        SHA1

        de1f0a1575c1efbeec084d22617cd858373c4361

        SHA256

        0fe2009966abaa6f22654fb63ae9d1a3b13b34ae19af78a236f4e5cabbf51eba

        SHA512

        fbd884a95729b21fad9c842d4609a15e247e2df42ed171a1f9e7f313f7830e46086cc3695a96d1345f44bd10553b791058c99f5eda962841f2039b6df940bb5c

      • /data/user/0/ir.joorj.tel/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        566B

        MD5

        ef88113fe7fcda62938e973cc0110f2d

        SHA1

        78a3306c39dcf8d797e70697fbfffe9d1a156e31

        SHA256

        c88ccb83830bf8ec6d721e56579dfd752b4ba5f8be8cd5a1e1110b01b9691035

        SHA512

        8258c8535fc42791d6abaf6e078a2e7a982aa125b5356df56b23f744866eca065b0066cdf02e7a0b0901701903374a5d71f29ef7f7e24572b350529c1be3b48a

      • /data/user/0/ir.joorj.tel/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        558B

        MD5

        836dbc320dcc46262aaf2849a3010d06

        SHA1

        eea686f5efef86948f45e44794fa9b83a4366e42

        SHA256

        d2e10ea162f2011f5ae44d062d932bb548d59f2b6f291f7c6d970a3f3a1bb2c0

        SHA512

        befe8f73a86133775a7e8f140f7165b3f6a4d48deb30d40aa0c50eee1881fc8e389f39498f370f3d0ad6029f05ece4279ddb3205654a72cf6d803e1d81eb3add

      • /data/user/0/ir.joorj.tel/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        606B

        MD5

        1c43e864f8e5de3b1612582169274e6e

        SHA1

        847b14d630aebd36a12b8b71a3f4b5aebad13aae

        SHA256

        c4cd48c30158a191a643652e0897bfa4e9f767f564b0bd8eaf183758df1b288b

        SHA512

        2dffea6ae48641ae5d086954995b9d19e9f79e653eea423f1167edf4877c51892a23025fc38c45b9118a3bad26b3b0bc5eaa3e3c8fa3f9d8aba3789bb3f4c69b

      • /data/user/0/ir.joorj.tel/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        607B

        MD5

        027ad21bfabf35ac8c05a78ef3bb3c3e

        SHA1

        22a0e60e9d1ef2c8511f98c34e8c1e31a599d229

        SHA256

        7764cefda728855ea7c4640922a3ff500b716ec90a7d4df7984598c09fb91ec1

        SHA512

        4598667554b284205aa1ad5b06af24f47c70d5059218d489810d445877908af46f944da2af093115e4f248ffd60944b85d94d9f41a635aa454c3d4f0affd9169

      • /data/user/0/ir.joorj.tel/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        719B

        MD5

        582647ce5266de13f6a0d0e9389b26fc

        SHA1

        12ffe98b7e085584ce3f7178741888e78613699f

        SHA256

        e67ac71ad67f85712326ff0bc89836fcf4a4d7ac42e4a3bfc611f008b9f5d766

        SHA512

        e58d60285c203537ee59eefba2526267e1a7ba562d7ac14099064edf07b5c06188c78d20c0a49af2bb4febcde6f5e0b063bc458e09e9528d26d759924833e645

      • /data/user/0/ir.joorj.tel/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        796B

        MD5

        c53540ba8a9bb6cc0f89a20bf179538f

        SHA1

        35e4aa05c1d81edfc978fb419e77619332e8fbc9

        SHA256

        5016cbcee3c1b05151cfeacda960a7c0a681082e54d6ce7e861b39f258abbf00

        SHA512

        b6f5d698d8476f9d172dd6abe29fdb3e835b7b3af2748e606d4f62d3d35224f53c7c74d604aaa2107f6900bca38f95a67ed4960de8aa0724061089c74e8f7185

      • /data/user/0/ir.joorj.tel/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        122B

        MD5

        250b4caeba60ddf53228405750ba66ca

        SHA1

        422ab714feb34e9f3b4f1cbe669887bcd581ddb1

        SHA256

        2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

        SHA512

        373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      • /data/user/0/ir.joorj.tel/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        395B

        MD5

        b23ca5c9d60d79c6678111d5a124d57d

        SHA1

        2c46eab69cb30630861967b65c4fe3dc7a1828d8

        SHA256

        395f969fc81512573241463e4505856b12a174dce45bcce9b73f78548132bc13

        SHA512

        c9e118687c194d0fd365f7b1cdfa5567526d685a7f24999c60d6dbdd08810130dec74fcdeeac7b91e63515139dc287019df02e42ccff6eccb20f9efaec057fc8