Resubmissions

22-09-2022 17:09

220922-vpajtafgdj 10

22-09-2022 17:07

220922-vm97nacab9 10

09-09-2022 08:04

220909-jx87kaggc5 7

Analysis

  • max time kernel
    1714234s
  • max time network
    17s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    22-09-2022 17:09

General

  • Target

    مشاهده_ابلاغیه.apk

  • Size

    2.1MB

  • MD5

    d69fce686ca353b468ac1b2ed5becea5

  • SHA1

    8bbc66f16edaff7b989d4af6f9be1510012e002b

  • SHA256

    7b71bdbb48e1ad7fb26d112ea9289a951923b4fbf41b983edd0567b8b9f1661e

  • SHA512

    4d8ebe5b1fff7bc59bab1ed8c4a6571df91408f156c690462603641616ba03872e17697d0fa0f1144956c2484615ecf176a58b9f1433c361a68c165148e3d842

  • SSDEEP

    49152:MTiT1hXbMAIEa2kPdeCmyDR2//gZPr3ZC7ow2eR53qv:MmTjIfEaTPkCdRyiYEARW

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • ir.stop.devsalm
    1⤵
      PID:4842
      • ping -c 2 -W 10 -v google.com
        2⤵
          PID:4897

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/ir.stop.devsalm/app_webview/Web Data
        Filesize

        112KB

        MD5

        b663831f8cc130493476d94f2d7a5330

        SHA1

        043a1956ab8e40821d67043f8a9110a8eb36fb93

        SHA256

        c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

        SHA512

        e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

      • /data/user/0/ir.stop.devsalm/app_webview/Web Data-journal
        Filesize

        1KB

        MD5

        3c76c1818b70c247ecf5b388a4bc7571

        SHA1

        ce2eeaecef15182c092563995e7e0cd0a7843983

        SHA256

        cb3959d5071ad47bc4cf1c1316579072437f8bc20590ed40343c8d9f00a20990

        SHA512

        032f604cbed62126841055dcb60497876edc640211d2fbfacecb685cd5aa47e63798500d968cd6ba69da8b9d0866496311ec9fd05c595ca00d49ef60c212a6de

      • /data/user/0/ir.stop.devsalm/app_webview/metrics_guid
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.stop.devsalm/app_webview/metrics_guid
        Filesize

        36B

        MD5

        08eff4b8dc7c054dd189a7fe89e3c7f4

        SHA1

        1a52961f00b707b22b94f261b99a730773376f46

        SHA256

        204bb96f16661663fca338f5c7faed8218d7aaafb61ea7dd1452f7189d01b7e2

        SHA512

        dc1b82602ff5b8641ad33eea91e22162dee38432a0f7ad252512fdc21764c7c21cda03082f3848ac5dda7f7b1f714e54fd55b0c79ac353006e286283699e4366

      • /data/user/0/ir.stop.devsalm/app_webview/variations_seed_new
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.stop.devsalm/app_webview/variations_stamp
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.stop.devsalm/app_webview/webview_data.lock
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.stop.devsalm/cache/WebView/Crashpad/settings.dat
        Filesize

        40B

        MD5

        313fff012c8313f4afe7f79248a32c6d

        SHA1

        238abbdedbf85b67b15d2dbdf1db4ac656228d20

        SHA256

        eae4635fdf40b729ec536dd4319089fea66d4c62b60a448d2e688f1de7d45d18

        SHA512

        71cf925586d239e1bdfe4943d7c7571feb004f7f4e00423445dc49917a5fea6b65afae30c66ebbf5e5173cec22c9340b69c1b085097b5446cb61a036a7e6ea6e

      • /data/user/0/ir.stop.devsalm/cache/org.chromium.android_webview/Code Cache/js/index
        Filesize

        48B

        MD5

        6d7d499960179766cd4261d12dacc411

        SHA1

        e6f8553b0015e12b23cc551afe98763f3b1c9bed

        SHA256

        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

        SHA512

        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

      • /data/user/0/ir.stop.devsalm/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
        Filesize

        96B

        MD5

        18b5a82ba3e2a9502f3a0f34f1e9d0f7

        SHA1

        8044fd9d3b12d828a296c3bc7497ddf5a0bf8daf

        SHA256

        1a622e1c9ee9a258867a75a1af109e604735bf6fa00827516083b8760d3b58a9

        SHA512

        5605fc17c880bd55c5af59b211a6d3cc0ac232742c1d483a0443ef1a32b36e4ddc03e5b2696d561a7ae6b1c0a45776be5e9a0e8f70061c225973d21a8aa6c6c2

      • /data/user/0/ir.stop.devsalm/cache/~test.test
        Filesize

        4B

        MD5

        098f6bcd4621d373cade4e832627b4f6

        SHA1

        a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

        SHA256

        9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

        SHA512

        ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      • /data/user/0/ir.stop.devsalm/databases/google_app_measurement_local.db
        Filesize

        88KB

        MD5

        7bd7e08b7c157fb7a04f9701b6965b65

        SHA1

        19ed78cffffd879509071b091ba60776c18e8d97

        SHA256

        c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

        SHA512

        a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

      • /data/user/0/ir.stop.devsalm/databases/google_app_measurement_local.db-journal
        Filesize

        1KB

        MD5

        ff6cd647f733f4763a7f5b62ac3227f1

        SHA1

        2fcf38aecc11307853cc8886cae2c52d9b4fce45

        SHA256

        ae9ccdd32374d7084be76e864aefe7c50eae1a5eb8421b22d9c041b8d9f48883

        SHA512

        37a9d74986aa5012df6688933f166f99bd7a33130cdf9a8ca198c05a60fc97f05824f537c2e8e93d9e4a19120e6fae6da57be9352a870caef2f3f5d7a06e6393

      • /data/user/0/ir.stop.devsalm/files/PersistedInstallation5081660558616463310tmp
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.stop.devsalm/files/generatefid.lock
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.stop.devsalm/no_backup/com.google.android.gms.appid-no-backup
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.stop.devsalm/shared_prefs/FirebaseAppHeartBeat.xml
        Filesize

        134B

        MD5

        bd6f8ca8faed3a18e0bbc24248be4bea

        SHA1

        e2ebb227925daa92ec472ea577a37a57fc697ef3

        SHA256

        ebc695eb0e450140f5ac87dc4b6e9f0544f60db137d8434e8e98fe0d896f86e5

        SHA512

        398e99be8c584a47ad0d2943669fa9344d093b1088701c4e64f24bf94ea6710839b0513541717c84acb396fb9409c5a8089918957cb7c086a1f8776996d895e2

      • /data/user/0/ir.stop.devsalm/shared_prefs/FirebaseAppHeartBeat.xml
        Filesize

        188B

        MD5

        6dc135e021e3babd8e2e40416dd01d73

        SHA1

        9d78a770015b27dce32032626d74f3eb606febe4

        SHA256

        ef425dc26e811458d35750f884c35f93e28707d032704b6f1d2abf194bad9653

        SHA512

        ecdfb63d4a39c0ef0e9c05768706f0583266a53270fff66c81362e987f8fa18f134c74195a281db3c010746405951cbf00b403f42479f910bf709457957bbf1e

      • /data/user/0/ir.stop.devsalm/shared_prefs/WebViewChromiumPrefs.xml
        Filesize

        127B

        MD5

        6ef709b8536878951e87c29a1518fc2b

        SHA1

        24376c70b00152501b3d98df61fa7db435339172

        SHA256

        10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

        SHA512

        96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        191B

        MD5

        d37e958e87db82e6a99aba3897e7ffe7

        SHA1

        2f29c28f08f6b635964b0bee16eb037d51fa95e0

        SHA256

        5711acdc6655f9a49cfc2214dd7db68d9eb8515b0222eb318ce541ee795a20a7

        SHA512

        edf2a7c96654c4a50251a185548dc23603dc8a62afcfc634d27f7c4d98bbb589d1c27a32283bb2966b19b52ae92a310da7e015eebbb6facacfdf3d351baec645

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        253B

        MD5

        ab5753d005f4e222ddda2ea70a9fccec

        SHA1

        761786ea409aacf3a6bee03af5b24060b0b6e793

        SHA256

        6776624aae6d73487028a67758bb78ca09ce31c66b2db4969f4131ab8e6b63dd

        SHA512

        8c26b108c096c74cd3db6299bd1e246cf25c017e0a9eb1b1023958d056d6e81de04b3ae8cbaf9939e0160a22b114b7e6e6fe157079a2fcab4fdcbe2f6f443243

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        605B

        MD5

        86730f6079e5bd233db858a63832425e

        SHA1

        3577cc950a00933a5c9f3b9ef4669f6d11c7d37c

        SHA256

        135a33ab8208fa4f5343c545392e2db5c655b002968fad070756173e1bc74617

        SHA512

        00b7d792647548a36f607128a15abcdf8208b7b1a0038903b59c6abf8577d1177f3ca13e96e67d5285ef232924910e5bf5cdc418fcc94bccc5597c4ee8b8a8a8

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        606B

        MD5

        ed2802f0c8adb6a86d7c9998ae0b31b9

        SHA1

        6689c8769b0a3e4e24fc9777e50a582a58d59cfc

        SHA256

        025155f06cf2f3cc7fe187dcddf27c1a35c48682293aade7ea8a14be3b544119

        SHA512

        dea78590eac93d37b820d81aff670051805dd53c395b0c5fd153a2ae032dd407d35019789e324abc930bcf97689a3930a0963177fc0d42fe6cc01362297db8f5

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        718B

        MD5

        b3bc43b855a13822f88286d04be29920

        SHA1

        9836338b20025de7f8e8896306da9de70cc465a0

        SHA256

        2c36e8907b645285356efabb779e82ecb80344732f5d4a7be00b22dcf5efd44f

        SHA512

        536399c475845df269779093734ee93b6259ea04b0f9d0f1ca883e5a6ebcfe3902aa89dcf921edc59234e5d3384174dbd7257fa70a7a71465e0ae58a26953143

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        122B

        MD5

        250b4caeba60ddf53228405750ba66ca

        SHA1

        422ab714feb34e9f3b4f1cbe669887bcd581ddb1

        SHA256

        2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

        SHA512

        373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      • /data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        394B

        MD5

        f6a9ecae28acf3d73b644bc6fdef555b

        SHA1

        565154e0ceee036c24e69295e801786bed706de6

        SHA256

        9d047eb460055f737efec91180d46c0b44c68e583c52dc88d9963b0882a642b8

        SHA512

        27229e793388c9ec3ef327314ee78a7406fe1bddb2410ee24fe0c365effb3d4bc0de579842b4d74abe1ba15980c7607662450e2853326bf316e40dbc82377136