Resubmissions

22-09-2022 17:09

220922-vpajtafgdj 10

22-09-2022 17:07

220922-vm97nacab9 10

09-09-2022 08:04

220909-jx87kaggc5 7

Analysis

  • max time kernel
    1714275s
  • max time network
    142s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    22-09-2022 17:07

General

  • Target

    مشاهده_ابلاغیه.apk

  • Size

    2.1MB

  • MD5

    d69fce686ca353b468ac1b2ed5becea5

  • SHA1

    8bbc66f16edaff7b989d4af6f9be1510012e002b

  • SHA256

    7b71bdbb48e1ad7fb26d112ea9289a951923b4fbf41b983edd0567b8b9f1661e

  • SHA512

    4d8ebe5b1fff7bc59bab1ed8c4a6571df91408f156c690462603641616ba03872e17697d0fa0f1144956c2484615ecf176a58b9f1433c361a68c165148e3d842

  • SSDEEP

    49152:MTiT1hXbMAIEa2kPdeCmyDR2//gZPr3ZC7ow2eR53qv:MmTjIfEaTPkCdRyiYEARW

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • ir.stop.devsalm
    1⤵
      PID:4716
      • ping -c 2 -W 10 -v google.com
        2⤵
          PID:4864

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/ir.stop.devsalm/cache/~test.test

        Filesize

        4B

        MD5

        098f6bcd4621d373cade4e832627b4f6

        SHA1

        a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

        SHA256

        9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

        SHA512

        ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      • /data/user/0/ir.stop.devsalm/databases/google_app_measurement_local.db

        Filesize

        88KB

        MD5

        7bd7e08b7c157fb7a04f9701b6965b65

        SHA1

        19ed78cffffd879509071b091ba60776c18e8d97

        SHA256

        c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

        SHA512

        a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

      • /data/user/0/ir.stop.devsalm/databases/google_app_measurement_local.db-journal

        Filesize

        1KB

        MD5

        1021ed3dd9f1d1194602b27ff2c434c1

        SHA1

        6c77978589bb72173154bd1ecf4f9b2afd13500b

        SHA256

        a48f82c8da260aa08ffbabd62e44e865223e50517e212f6ea371d91f668ddd4c

        SHA512

        495843071cce980845edd14fbece32e506177e09c12aa07c85ece1e2861b7cf1110dc0c6f756d0820605292d87b13e7f441181c923c028c734949842c28b7e44

      • /data/user/0/ir.stop.devsalm/files/PersistedInstallation1245180988827132338tmp

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.stop.devsalm/files/PersistedInstallation6897177942625700694tmp

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.stop.devsalm/files/generatefid.lock

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.stop.devsalm/no_backup/com.google.android.gms.appid-no-backup

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.stop.devsalm/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        239B

        MD5

        5dbf0aff1e0c32121986eaa79aa5efc7

        SHA1

        e82e881cf51599e63daf9400d737aec803d300a8

        SHA256

        d883099d6c56c7b7ed9f3eac73de3974730ec7d92044705b10b56eb0110f9fb4

        SHA512

        d19c018e84a1a2f2323866eae34f714bd0ee46af87d01c0b2f90c1e19f675b3808a5cdaa33669d2ff8c7d208e950527a0a60d9fe70211bb9dde48782637f7767

      • /data/user/0/ir.stop.devsalm/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        134B

        MD5

        034f1c8a50294934506608a9f22de8de

        SHA1

        8aa0a132d383fdc661c98484e5cb96d2d4346a50

        SHA256

        4fd2e7a89b76e1cc6184eabece7ca8e2f5ab31a3a61d227128734a2e504a7ff7

        SHA512

        6f57cc9059176abb3bb16862de6ba03944ae38101368c54f013856ff02a6dcfcd6e6c982ae488a0a0fdcfa5fd6430633a3dbc43f9222902b567daef2d9f0b8a8

      • /data/user/0/ir.stop.devsalm/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        188B

        MD5

        534391c76a4fbeb9ceb5bad27eb85821

        SHA1

        bddb892b96b4099c411753bfdb0199cb532172e1

        SHA256

        1502ca75fce4daabb7b59fd934e04946f242e3f3fbd1fde8dca48b90c74d50c9

        SHA512

        691dbda2484ae1e300289221cc6b8c3cf1eeb0f2f2f01c795f957a66e7f503acb47210f87077efc03c7877616a97ba191b266abf9b24baf8202c263d7472a298

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        191B

        MD5

        c690d53b859deada272fb8dd28509308

        SHA1

        20fcbae2a73859f34696eb823da9a7186fdfac81

        SHA256

        9836a3a1af76ed3b74c5e2833c1661a16ed7627a5089921273fd85d06cf376d4

        SHA512

        da7c29287403630be90e0bac69faf6c0319dffea2d6d725344b67aded675c52cd8a83ef26023bfc5770cd2d06ee21ebcb6aa2cbde92c19d6be17aef988d32e13

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        253B

        MD5

        ef294afb788b4ba72e6ef690f0fdb1aa

        SHA1

        7f7c1d5f94d7523f915dbad87e8b91fd320f0dbc

        SHA256

        b5217879d0a3753be115f4383609624b000731a775458c3eed1950fb4e660db4

        SHA512

        dc05e36199eda5c5ed24ed4c8edb5849ca9ddce0eada4a7b6041c1dfd2fad17d4d08e5228e2b2df5f7b5e3831d0cbe243102f921310f4bccff8c49854808cd4d

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        567B

        MD5

        9baa75c6479d4efdd36847e932e6c5d3

        SHA1

        2234132b7cdf762b4478f53f936d768702070630

        SHA256

        baeec961071e80fab4d35cdce37af94eacbfc636e1f38770ac6c92452af15d47

        SHA512

        be270c7c819bf115214d7d008433477320f3753981b28abf9423e6a1a6bb193ffadff7092c8ad9ecb6964609e0fed1ace2a27fb43100007cae08eaf141a6d424

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        556B

        MD5

        61a280ae584a4520d2c2576489fb7400

        SHA1

        501b92ed4fe02189edf601adc137e77a17380f01

        SHA256

        ad4707a68598629b6a150d15180c255b2217c6cd8a63091b829c90835fc1b506

        SHA512

        76c626eda4f51011f4148c214d0c650c1fcdb8f72b236b6afb0c5727c3c7c0aa47867ba2ea2348c4c3536996d45c9dc7506110797eb1c64dc82f64ca0fc5ccbd

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        605B

        MD5

        ef6bae95e47fdeb4bca9c53f7cdc5191

        SHA1

        d92e1e4bef6ac21bf3da98dd50316d0cdd623da9

        SHA256

        f7291012c66716ebbc0f520aba0bd40122cc870fddff2aafada729eb7a685041

        SHA512

        116cc73887dcca4bcf705417c7bb76fd4c46cd860ebe66260cdbf0184b49d229ac7d96364a7bf34e629e017b305e135a7378f0f9d079913ce1ebf023c9099412

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        606B

        MD5

        3e20abe14e485cad4b1ab6fb24b60497

        SHA1

        9d21297a24089705f0912aa1b2e0e52593d7f685

        SHA256

        f58352ff5d8e9df525c1e35c9e4205cb53d2bf92cb73c320bdbf99cacdc3913a

        SHA512

        8765fc4e8ded82b867755badcc81af45bdadb4a9be69f3c28cad6dd51f065064d6548385bbadcf496337e74aa4aed8b42875f8666571b475123faf882f6c4540

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        664B

        MD5

        8490b8507493738cb0066e48f07fa289

        SHA1

        c1c02364bf1b85937aaaedfdf887598b26f41f34

        SHA256

        572b6ca81107585c82b3783897beab8d8f8f07d5574865d8551c259513f79ff9

        SHA512

        8cc5eab067bf78c3a8a5012480b50bc142e1f45063329fc6f847a97033812c9ca340ddbe917b293e6c48de50c7eabc145e0729268e5af106bf4803e6372d7e72

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        718B

        MD5

        494c82ea862a27cc51bf0819d3693299

        SHA1

        0bee06671cf850b9fae2130dc0a1923162500760

        SHA256

        897bdbd30b6837e1788447c19a49b467f6a0b59857015ba8c305144fb412723d

        SHA512

        6a26f3236476d1f23223657dbf54b44e181ddf5f8ea0cfcada4fdabb84ff655923a475aa31aa7c00e69b1e35c8649a06ee9211c830d7cf69df36c210a099d9af

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        795B

        MD5

        08aff08a3a43bc38d194d9612d370805

        SHA1

        f86da28fe2986564e4189be557db34130025c0b8

        SHA256

        41c5b163033e83abc6e9c54864e4dd8e82d2d82a2bf7fc39f9be21e7a08d7778

        SHA512

        78c72badff0ea65475d697e099cb614ba30badf66352796cc6fe528256ad6256a53a819c3e9e57d424e220b2f6678b7b01122cd2421f619c4dc8749aa1d2775e

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        122B

        MD5

        250b4caeba60ddf53228405750ba66ca

        SHA1

        422ab714feb34e9f3b4f1cbe669887bcd581ddb1

        SHA256

        2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

        SHA512

        373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        394B

        MD5

        ed533314a670e5d611f21d101010b3fb

        SHA1

        8ddf3d461f0e8bf85ce69057c15346c028753fa2

        SHA256

        27fba38e67e8d64c67f5dde6983a4f5b981ff3a2e69a24fb66d4eac4e8408577

        SHA512

        4ace88b312421025c1dde2edd7666656876bdaad0bcbb8593e58a609e8e38f0635e3e9f9653423f10261456243327e2cc4463f0573581c27343830937817e22e