Resubmissions

22-09-2022 17:09

220922-vpajtafgdj 10

22-09-2022 17:07

220922-vm97nacab9 10

09-09-2022 08:04

220909-jx87kaggc5 7

Analysis

  • max time kernel
    558333s
  • max time network
    37s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • submitted
    09-09-2022 08:04

General

  • Target

    مشاهده_ابلاغیه.apk

  • Size

    2.1MB

  • MD5

    d69fce686ca353b468ac1b2ed5becea5

  • SHA1

    8bbc66f16edaff7b989d4af6f9be1510012e002b

  • SHA256

    7b71bdbb48e1ad7fb26d112ea9289a951923b4fbf41b983edd0567b8b9f1661e

  • SHA512

    4d8ebe5b1fff7bc59bab1ed8c4a6571df91408f156c690462603641616ba03872e17697d0fa0f1144956c2484615ecf176a58b9f1433c361a68c165148e3d842

  • SSDEEP

    49152:MTiT1hXbMAIEa2kPdeCmyDR2//gZPr3ZC7ow2eR53qv:MmTjIfEaTPkCdRyiYEARW

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.stop.devsalm
    1⤵
    • Acquires the wake lock.
    PID:4631
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4692

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.stop.devsalm/cache/1

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.stop.devsalm/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.stop.devsalm/databases/google_app_measurement_local.db

      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.stop.devsalm/databases/google_app_measurement_local.db-journal

      Filesize

      1KB

      MD5

      e7ba153381f83eaf8b263e1376f3142c

      SHA1

      34a66f16aef6dcf693fa0c716c7335b33410852c

      SHA256

      600b84b1c9a204dd26f0178196b281a80478f0526555051754cce23617c8c3b6

      SHA512

      2fb1dd799ccab1c2397d06f6ad76c570e8a87c450eb337eb5918837849f071665604f40da31061ce78b6ef55e102a072bcbb6d8d33fc8341d93cdf61a4fb1c0c

    • /data/user/0/ir.stop.devsalm/files/PersistedInstallation3637601058344145529tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.stop.devsalm/files/PersistedInstallation5283161600112220810tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.stop.devsalm/files/generatefid.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.stop.devsalm/no_backup/com.google.android.gms.appid-no-backup

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.stop.devsalm/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      239B

      MD5

      06b33648b73ccc0658ce066f9abd630e

      SHA1

      d43cf132045ab22a5b4e12084f5518ea989bd426

      SHA256

      6ff738684b22426acd9f8b9161ec497e02533da2b0848f9d05e9dab9ab7213bd

      SHA512

      356a810e5ea8bf7f8870510e9e92e043e614e5aa293bfcd5a6c64e41aac32145d932a3b91f52e24e6605bc4ab80bd46a22bf6ab00b4288d68bdce8974e7196d7

    • /data/user/0/ir.stop.devsalm/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      134B

      MD5

      4bf3b07f986c442035f24e23586b0467

      SHA1

      1c4634e28f66f8022b7feb0913394dec45c68c1b

      SHA256

      f70c1740972ab8ad81d325ad3c03160b29a0bf57def9ac6b045c0e1ffe4d1a52

      SHA512

      ce13180d1445dd05036f43207d5bd7d227666e09376571b7d6793fea10efe8292f894baa77065ae3a7fa9b0b73882b81155dbaee5add1d4987e6f1b54bf52eb7

    • /data/user/0/ir.stop.devsalm/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      188B

      MD5

      2b16d53b2f3ca5254dd72bb6a5e68513

      SHA1

      fa46fdd7bde2b0aed6b7c92d89060a38b083e1f4

      SHA256

      5fbcdaa7a30ea1dcf8ccd0ecb5120fdfd90d00ab063b78b30d9646c4751ba21f

      SHA512

      cee9034eab1c28f688c557c9cfd6a3e296bbb497a6608785f4b2f33e2b7275f4d76c563c931da70e848b845d62e65b0247e115d0a3deea7684d283e28b1d8d34

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      191B

      MD5

      b9b2f50265acd06b5e1b16271a159731

      SHA1

      6d2d05bd9ca1b80c5d37b5d749d165a0690abf15

      SHA256

      c7ad66d3e854952a2b88ed485e6a6014cad83379ef515285f0d74480d1f4668b

      SHA512

      a81f59bbe79b4d54138a2ff5a78a0131d06f46fa1aeb1764b019a72cb75e36f52a2643af1c52af448e89791b8487a2c60f1ff137199733cfb7a53b767a4d4e32

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      253B

      MD5

      e76df715b85c853a74feb7c0123939b4

      SHA1

      caea1ec68fe8e24ba0b738001c326d858b2c035f

      SHA256

      60a4a1cd6becbb54bf2529a1512be15b362c287b7def5633bb01d13e690d81f9

      SHA512

      d36c27b839e315e4cf3c54cde9fc3bf0785fc040429363ea37d86f49cb5c23fff0e35651825fe57094bf0a902cd981902d61cbfbb270aa6b6c69782717769326

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      567B

      MD5

      127151d0b510ee42f82f5c60dfbde6be

      SHA1

      9ad68b3d9186a7288116b58d596ffbda168980cb

      SHA256

      93d95ab07054dc70e248c6fe69294454817074652789d4e6e79b69a002a8b19c

      SHA512

      b2ee592fbf24fab3fbff8addea11ad818db4b4ca6fd57877313bf0587961ea23fab0678ed5441b99a6e01fc2a57639a89e11191a6bdb6956a3d963b7609f8887

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      556B

      MD5

      2bb9446f2301a32c97d37dafbd6a1824

      SHA1

      55c0da5d1db335a0e15308db1f007e1c81db58e2

      SHA256

      736007bf1fb8b847688a27ea207797faf37765f652b019ed117c86380fb4254f

      SHA512

      34d7aed49444e58745aac358820f278274312fa8f271c2ff2fbbc1611f7e71c67abb5d29326655a00c482c42d82ab94396dc3139f7b8474858c6a33745d36f22

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      606B

      MD5

      7cb40a9c01c79365f02b9aab23632afe

      SHA1

      539a741064bd076f2c575ebeaa8e1bd380b0681a

      SHA256

      e17873cc6583ba969b5dc7fd7c1cd0459af5a95880beaf49a24966311db9694b

      SHA512

      25dd60c08d92db6440c157efdab1f8b8931d743bdfdc1f8c356e5255bdfc21f600c941bb2d0532379fed25cc46fc871cb2372ba938bfb722ee1d26cd83b053e5

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      664B

      MD5

      c2da5b4bd435b63cd0f41dbef79b4d57

      SHA1

      78750c3d89066ae9af16f4c41356fbca022da9f6

      SHA256

      ec36b63ebb7545b25ebc567a5786db43887c9b3b78437748ca8dfe6441bac984

      SHA512

      2b1916080c444c97098e8d24aad9301e719bb42087560d70d04787c0585a1b897cfeb02e5435c97697489d91fc2a5fac26b08446f86cf556382464ccd432869b

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      718B

      MD5

      341eb01d3d7ee5af7625ad742f924238

      SHA1

      bc11a530ffce35dfb7acbd3dc9067247acbd5c0d

      SHA256

      135b4b1e59392c76bc7388fb2e7723a27476670e49434fa1030e3f8e7b2801e1

      SHA512

      b05af562bfbc0a87443b1a38d8bb051371703193b3851ed998b81ddb37e19278fb8769e969ba5e178c1ecd9cd3165d69258fa034ea83a868f511938c685d0e63

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      795B

      MD5

      e016d7632be26164565f2f640417bcb8

      SHA1

      91af8b6cd7f8aa1c0c47a6935b9d10f2081c5569

      SHA256

      bb1b7fc0e7a1d8c5275927177a6ae69ac74a7db385bbe5c1ac0459c73f5cb0ae

      SHA512

      4dc5124152f87e2cc1cb655ec9c9c464d17b2b2f3d980626a7a7f6d49665f405b1bb427abee79abe974677c817174c8546a35ca46c02537703b9b6b1f37bf87f

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      394B

      MD5

      e611a763762bbc27c5e5b3af6a8f97e0

      SHA1

      f3dc47d49cec37561e1b92454bbd0f7fb577fec9

      SHA256

      df5183e078e3d07703bb197c102d8079bd598ed372561c6e649adfb59e06f6e0

      SHA512

      4eb3f6e1abc7f0fec8b4446000f83b392edd20b40eb0feb15a2a41c8f052d94cfad70c367ee65b2e7156f18cf929e7b98fe533a754701b33a6b4e9b315dfb844