Resubmissions

22-09-2022 17:09

220922-vpajtafgdj 10

22-09-2022 17:07

220922-vm97nacab9 10

09-09-2022 08:04

220909-jx87kaggc5 7

Analysis

  • max time kernel
    1714276s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    22-09-2022 17:07

General

  • Target

    مشاهده_ابلاغیه.apk

  • Size

    2.1MB

  • MD5

    d69fce686ca353b468ac1b2ed5becea5

  • SHA1

    8bbc66f16edaff7b989d4af6f9be1510012e002b

  • SHA256

    7b71bdbb48e1ad7fb26d112ea9289a951923b4fbf41b983edd0567b8b9f1661e

  • SHA512

    4d8ebe5b1fff7bc59bab1ed8c4a6571df91408f156c690462603641616ba03872e17697d0fa0f1144956c2484615ecf176a58b9f1433c361a68c165148e3d842

  • SSDEEP

    49152:MTiT1hXbMAIEa2kPdeCmyDR2//gZPr3ZC7ow2eR53qv:MmTjIfEaTPkCdRyiYEARW

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.stop.devsalm
    1⤵
    • Acquires the wake lock.
    PID:4395
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4454

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.stop.devsalm/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.stop.devsalm/databases/google_app_measurement_local.db

      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.stop.devsalm/databases/google_app_measurement_local.db-journal

      Filesize

      1KB

      MD5

      69d3aded23f13cc1dcaf50c39e3dda5c

      SHA1

      055caa60ea4b43a7f0a59951553ecb01ae122235

      SHA256

      b6b2d00228778789e541a8403d396c91b75502a8eaff9aaaafb24b9c1fb09bbf

      SHA512

      cf6ae49bfe41f81c8c1e81acd84827d435f2ac728ea4e3c0f83349a250fae2c7eb54fd76cf13f4e90b1501f66588c3a2e8a2454a8a1690b06fe04dea16d865f4

    • /data/user/0/ir.stop.devsalm/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      239B

      MD5

      ff8a74b5823e139b2c2ad7cb3f409266

      SHA1

      b96f3f6a729573f6bb97ee441da8c3d35f3414f9

      SHA256

      7d5357261a8e779bb032c68b39e476ac8187b30cb380bb5aa60308e1d09b5f1a

      SHA512

      5b1060ffbb1248543de628220772c56dcfa6b05b4e0e340a8cecfd84b821e387730e09379efe42088ff672fa7e098ee6c08643900910f8f5b2afac491af1f9d3

    • /data/user/0/ir.stop.devsalm/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      134B

      MD5

      66293b23e73fd99fd619bccab9e35a32

      SHA1

      9da91127b009bfbbb3fe57b11be78ca5ab8c2b5d

      SHA256

      af3bf05611a57e978e5264c7b9afcad1ea2807dc47a776b03b9f523fdeeca9c0

      SHA512

      9c7d24bfd32a1e7755b205a44832e60bf5b49c0c5ad346c997eb606e824bfe6118a51ef61101b1ccc9ac9aacfd59814b027b840e68ae242828b3791f2f38d4fb

    • /data/user/0/ir.stop.devsalm/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      188B

      MD5

      73eb8fae0fa995e12ec02b7119490efc

      SHA1

      2733077cdf3961e5c82d0ae04592f553f5c6f799

      SHA256

      c4e9cd538c68993834f4de4500558b3f2b22f4801b7cbef81bc6e3d2a60c88c8

      SHA512

      2e067a227bdcc0e7a386830081e6617b70abe60d6a1916f85f123c599a2cfa945c07717a01e279ecc76b05fc75ffc2405a69681266c76115daa34404c9b4bf38

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      191B

      MD5

      3ce5f4646670c15ee7343f752538b86c

      SHA1

      cb131c26d83fed1c127444c48f6b755e81a99ee6

      SHA256

      f806bd7854a69442ec16bd47e921aa227021ded0520c774ca23ec9750b8925e6

      SHA512

      a46987ec6d396377ebb626cf83b90a406672eafc138f549fbfccb88ca275ec28f0c67f636bb4bce76047d7bce47abb216fa9f9e052c9f43ac365bad8162e2d8a

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      253B

      MD5

      5d82dfe50d25fbd463d0e3bd79fe8869

      SHA1

      8827314cb2723e956589790d331a4ad2849bab31

      SHA256

      f5ce5a411c489cea3381d032e0f71f8b34becdf768d2dd472664c181034ebf40

      SHA512

      d2fa1dd79985657661e8cd100d38edd1decbe37948b3005b23dd886f27560d94f4cdfe31347e3c1fb2972d86551d0a43f7950fc2fb62dd314659ef33c32c2fc1

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      297B

      MD5

      1dd7e9061dbaa746dda706cc64e6aeef

      SHA1

      d68ebf33cb9d04d18c1cd359aa250c5f095b81f1

      SHA256

      dfef27d553da17fdff0606f6bf00fc8db8509505f113e0fbd755b55cf7302b1d

      SHA512

      5608801e7de4c06c6d825525f801ba1cd4e08feab9ca55a47f2b8b530b477d3c833eafb5dabc4fb09272a44d64f6472471579e8aae25e374294df3ebf87e2ffb

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      611B

      MD5

      922f6229049afb1e27302927508ccbc8

      SHA1

      803a3499442b4e050dd9f09ad6610bb4fb7357e3

      SHA256

      baa4be234faa79c55ed5806037d285c417e3f656b9a14994ca938bc608e3a12d

      SHA512

      7d841618a9509bc3c43f1022904080212a91b1c4f1a4eb2838705c632391579525e5d99298915fb63e12b3d57718b41e67e7d82e46d265cc2459381fa7e51fdf

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      556B

      MD5

      6587e97f35dfc480534ee5acf2f0a611

      SHA1

      da2699ad77cadc35f0b1a933a436ccec46f80aa8

      SHA256

      36d82135229c37421ade18781685bbf6afdb264511f78ba3b4eca20f66856110

      SHA512

      291917532d087fba6e1b6c7adaf276ad5b48f694c94a997e73d182b7abf9a1f957077b554796108fb8222d1602a5e493ea89c150b1ed7cdf8926c2bb7dcebe81

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      606B

      MD5

      0a1b921bddf2c13789c30604b33697d2

      SHA1

      b09e5ed8f6f8b2ec39bf0dd508647e65b64283d0

      SHA256

      9921449c1a6d0a3fd841aab606e203e33c3817c2c353ad6c8cf2d74f6b5c9665

      SHA512

      311d8a0fb22280dd1c6766018f5909ec331a006cfaa383b595529e87354f026ff4e825be788ad0ccc3f4e2579a5a676ec209c1fc9a5a622be07204349f157af4

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      664B

      MD5

      622aae0e0bcb2fef733722984ae97877

      SHA1

      79dd27b7257ce0bd2ee9aff948eb27005c50458d

      SHA256

      6f0912e253e2c150ef01b1d439f43e4593bc515301e8edafc4ef638305b9dbe5

      SHA512

      a9f1f2c959bc242d073c03657a207fd8702f30f63b6d59e2e587bbec806768f96f16f17ccf3f297e21304308e9bf857a79c50e3b129e6e4efd217f348ad80b97

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      718B

      MD5

      8eb4c1e14245b4af85fff08dcafed53d

      SHA1

      69abb606fed92e8c53e39ed5a48854b501a27e4c

      SHA256

      7669b64c102325f0bdbe977ad374354f9cb70ef9ae077e43831aa73c7c839d53

      SHA512

      3a2e25ff0daa59b028865badaeeba741c24c46eba5a520d0c221dc5924694f784ad479c60525661ff0ecf95b0b84d23ae697fc0d06e118cfb3528f331ca44b05

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      795B

      MD5

      1a9ff5ca51ab66ef7982ed41aa2dd1b8

      SHA1

      7faed473d46d08f216bbd744a591a0edc0ee6028

      SHA256

      dc4c1d1baaa3b58abd4aebd119203f32c6ea7317064f50b31ef854136ed887db

      SHA512

      c61baaba8420bc402fbf44dfda6fa1a0f381a8639ff9738ba89dcc964dfd72782ae2e8a9539e622c80f9488aed1dff13d07ff5c4f8680f86c305f5daab270b4f

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      394B

      MD5

      8d472272bf6588e533b77f06e2229dac

      SHA1

      2240d01ccc7ea3bcdb8c22a6cd9c8bbbacb22af9

      SHA256

      4fecaef3b422d5c0067a53607d65ad3e723ba7502a9a70407a81ba5fcb1a6948

      SHA512

      7a9d5890ca8c48eea164ea0864dfb8b274a6e1519aadef7f89afa27e386332ce2d05a1a4e3620cc5feafcbd4bba5ad1dbc2d7e084f87df0cd72146ace0d6722d