Resubmissions

22-09-2022 17:09

220922-vpajtafgdj 10

22-09-2022 17:07

220922-vm97nacab9 10

09-09-2022 08:04

220909-jx87kaggc5 7

Analysis

  • max time kernel
    558458s
  • max time network
    127s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • submitted
    09-09-2022 08:04

General

  • Target

    مشاهده_ابلاغیه.apk

  • Size

    2.1MB

  • MD5

    d69fce686ca353b468ac1b2ed5becea5

  • SHA1

    8bbc66f16edaff7b989d4af6f9be1510012e002b

  • SHA256

    7b71bdbb48e1ad7fb26d112ea9289a951923b4fbf41b983edd0567b8b9f1661e

  • SHA512

    4d8ebe5b1fff7bc59bab1ed8c4a6571df91408f156c690462603641616ba03872e17697d0fa0f1144956c2484615ecf176a58b9f1433c361a68c165148e3d842

  • SSDEEP

    49152:MTiT1hXbMAIEa2kPdeCmyDR2//gZPr3ZC7ow2eR53qv:MmTjIfEaTPkCdRyiYEARW

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • ir.stop.devsalm
    1⤵
      PID:4868
      • ping -c 2 -W 10 -v google.com
        2⤵
          PID:5007

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/ir.stop.devsalm/cache/1

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.stop.devsalm/cache/~test.test

        Filesize

        4B

        MD5

        098f6bcd4621d373cade4e832627b4f6

        SHA1

        a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

        SHA256

        9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

        SHA512

        ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      • /data/user/0/ir.stop.devsalm/databases/google_app_measurement_local.db

        Filesize

        88KB

        MD5

        7bd7e08b7c157fb7a04f9701b6965b65

        SHA1

        19ed78cffffd879509071b091ba60776c18e8d97

        SHA256

        c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

        SHA512

        a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

      • /data/user/0/ir.stop.devsalm/databases/google_app_measurement_local.db-journal

        Filesize

        1KB

        MD5

        a67be962a1740c73f478cfb0c0efe0c4

        SHA1

        4e4fa35844bdd60e57376d83002c5201bb3c81c0

        SHA256

        d2ac55061531fb928d30ea331293b19b7e9337b34c8ec167958d4e4bb0d13b39

        SHA512

        e4aeea73137207e786440055dbc99cd5ec2de02e1af8a9306974408a5995180e5d511e291f8b3c224bd2d37b7439f323b567bd43be13714a511efa6541d9bd35

      • /data/user/0/ir.stop.devsalm/files/PersistedInstallation3772937758653076240tmp

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.stop.devsalm/files/PersistedInstallation8095414218939083481tmp

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.stop.devsalm/files/generatefid.lock

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.stop.devsalm/no_backup/com.google.android.gms.appid-no-backup

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.stop.devsalm/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        239B

        MD5

        a9feea18e5efa725024e462e461e38f7

        SHA1

        847e9080115f954b14467a1de6c972764cb1a64d

        SHA256

        a950b750b0dc132bed2c9e83e94b3ef0f1f8c5904a2f8fc2fe533683ecfd09d1

        SHA512

        a6665f80679aa19e7622cbe3eab28676774816cb62627a6ada3101d5ad1f069c3e072e7484556b657e26bd2ecdad02f26e409206fe0be6778c681357417e063e

      • /data/user/0/ir.stop.devsalm/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        134B

        MD5

        a5ed5d2a07c5cf03eae4f313b1ba368b

        SHA1

        64a4cc3b2f9deec2e4523f4425fd27d182873901

        SHA256

        1e72517445db10c4ea1e7fe72247d3f247b6cf20a16c1b6d78e6903cbc73f82c

        SHA512

        9c9f0293a0e684027ef78d065a69d1184ef52f07c6bc2d11c91d3e3741de0bcddc91bcea9ef1417df38142f49e8dada1ff4dab98cb52e3a641cad6719f721907

      • /data/user/0/ir.stop.devsalm/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        188B

        MD5

        f2507bc2ea4c1ae97bbb9558cd489566

        SHA1

        52c7de891f07fd060d3757425b981855fed3c6ee

        SHA256

        d2376037966f9a9f382f958e02106de6db796625dc200204ecc7de5571205e84

        SHA512

        7fed9da4241d0e7b8845ebff4f3f4f227e307f8983b234693921e14a7d6329f0427c35a7d16afc478967333c4edb1ebac0b8115c9659060fabcb96ff5d8e54f4

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        191B

        MD5

        9eaaff34824899372fbd0e939d5b5a17

        SHA1

        7819530b3c03e30180fc23d4977b784ac4d3a641

        SHA256

        9f86c7cdd9b77c55900c639bbfae3365fa30528aab733fe26f1b4f446d9b6a5c

        SHA512

        818c66a7ec99400a42549c39170025df949c88e82dd55005bec5dd60ab5c307a595967f4679c67ef6365cc8ceda34e7c5a8c50aa09649350780029af4c32fbbb

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        505B

        MD5

        f48088d58156ea16f53f8a3383b5fc87

        SHA1

        74c2c68e59983231174d88723fe9b4dd63878a58

        SHA256

        a2263a5316220b5136df98aaef4ba58a8a6735430b3651c8cd7795e9dccdda3b

        SHA512

        6d84f58f0ed1102b44d09041fd36a59e5e4567de2f59144ae7c509387fd247df755c60ff5384a7f0e7c474f524acf689591fc9fcc3ebfd3555a5ca17ca95f42b

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        567B

        MD5

        e15e85ea68b70f1d058df90640564c91

        SHA1

        0924e16a97b3e8df03f03fcb4442a482258b9613

        SHA256

        a9a212c44398c11b78943ff9b44cdeb222e59dec2a02567271341e49864a0b96

        SHA512

        d5842b0620ad5444cc46e1594ef96d6bb3d4b3d78d4f779e8e8b6856da9b63b10652b1c408034684fa16df30b9339bc8dee093e01c38cfa5838ee0c040025680

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        556B

        MD5

        23e244163804d1137b65f572a904021f

        SHA1

        c68d61b96ed2cb4f0fa6e38413bdf490dd620100

        SHA256

        238e7bff146f8778e0ed3c209839025c5903134221416913518fda1067ef4a45

        SHA512

        420b1b3a24013e6e9669fe3c435e27ae4ae9c36113e9b0621eefcb1d5612f22c6e01ee0499c4c7a44f78835af1ae99f48d94241ca8c98626f9ea05a9173f71fe

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        442B

        MD5

        ec3f44223d660ca9dc65c116a59632e5

        SHA1

        a11ed8f3f1a62d989dd6217b1e61752d86abf290

        SHA256

        ba424ace1e02e4347479d8be17014eb1a54766c437e37250c21760ad94a4926f

        SHA512

        3fc1ef48dca8443f5b9dcd05b15314ffc1ba655a1b1c5811f23e88ad96d370943bba1e7e036a91a9aa2ae0409a35698d5f55bfec1ad2f0bdd4b1584c08b60f9d

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        605B

        MD5

        a4b2993e800be2dc97627124fa44dceb

        SHA1

        e3ed8c65c4969e7072629dd8693b2bd62d7c233b

        SHA256

        91291c5ab43d20da2b057fe8477d2c15fd21790985477b0e8ae1acf7d4138907

        SHA512

        95bb620f8cf006fa543895211c837cec498f5adcd1f2d0d718760048339ebee7164d41d3e385a883568dde018987c5b33572f82e64740113978243ed6f46ece5

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        718B

        MD5

        749dde5fc799fe02bf9331e7d86f38e8

        SHA1

        719b35afd90e1082e9f4bf79f909917f97cda59c

        SHA256

        457ef80fbe6421c4ce3234c8cc9bbbd5a24f1a800137ce6ac2021a64617f864e

        SHA512

        38e21949d21896c80e93bab213cbc89bce056e951b008b31a610ec9005dbc88a2143e736c8154d4bcd3d1348537f86c74ae8d6f81f1e6922da8514223684f7e0

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        795B

        MD5

        27c60f8b45321a4806f1a994d0682db3

        SHA1

        7c2cb6d57fdf77cfd7d4bbe5e409fffa9c92cef4

        SHA256

        505ff6f74eb7f92651baca0bd7a3beabcd42fb24e12d672ced5f178fafa77d91

        SHA512

        85402f41f5787a4da3a876bbb95d3714a8abe77b67437c00bf5504e311e7af2ee9c96367cc28979da8ba7059f7ceb0abe2b851dd4b7f034aea3bc93787e2d6c3

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        122B

        MD5

        250b4caeba60ddf53228405750ba66ca

        SHA1

        422ab714feb34e9f3b4f1cbe669887bcd581ddb1

        SHA256

        2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

        SHA512

        373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        394B

        MD5

        9158a62475922b250eefb15722abbed0

        SHA1

        8c4e7314991c38ea0c0ebbbfacc7bb3554e40263

        SHA256

        fae7b29bf69f9a20ae1a81aa1d1e8f20504b65fa31731423733390fc84d57df7

        SHA512

        e4ca08d18239b8851cad34c3705c3bc95233272d70cca1a96338d44ee2b9a1565b56d2153dc9f7b54c87260737e8f2fa3ff4f1d6a2bd037e4132dfb884d9bf43