7b71bdbb48e1ad7fb26d112ea9289a951923b4fbf41b983edd0567b8b9f1661e

Resubmissions

22-09-2022 17:09

220922-vpajtafgdj 10

22-09-2022 17:07

220922-vm97nacab9 10

09-09-2022 08:04

220909-jx87kaggc5 7

Analysis

max time kernel
1714236s
max time network
18s
platform
android_x64
resource
android-x64-arm64-20220823-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
submitted
22-09-2022 17:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

مشاهده_ابلاغیه.apk
Size

2.1MB
MD5

d69fce686ca353b468ac1b2ed5becea5
SHA1

8bbc66f16edaff7b989d4af6f9be1510012e002b
SHA256

7b71bdbb48e1ad7fb26d112ea9289a951923b4fbf41b983edd0567b8b9f1661e
SHA512

4d8ebe5b1fff7bc59bab1ed8c4a6571df91408f156c690462603641616ba03872e17697d0fa0f1144956c2484615ecf176a58b9f1433c361a68c165148e3d842
SSDEEP

49152:MTiT1hXbMAIEa2kPdeCmyDR2//gZPr3ZC7ow2eR53qv:MmTjIfEaTPkCdRyiYEARW

Score

7^/10

Malware Config

Signatures

Acquires the wake lock. 1 IoCs

Processes:

ir.stop.devsalm

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock ir.stop.devsalm
Reads information about phone network operator.

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	ir.stop.devsalm

ir.stop.devsalm
1⤵
- Acquires the wake lock.
PID:4325
- ping -c 2 -W 10 -v google.com
  2⤵
  PID:4385

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/ir.stop.devsalm/app_webview/Default/Web Data

Filesize
120KB

MD5
a48cd9324b1f8754b07f00d863b840f3

SHA1
11c6614775b35a58f440971dfc87c8aaac6d6173

SHA256
8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

SHA512
35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

Download Submit
/data/user/0/ir.stop.devsalm/app_webview/Default/Web Data-journal

Filesize
2KB

MD5
b5721fc70ad183c35afadf4d3150b83f

SHA1
639be71d2d472890417dec454765b71b85b24f19

SHA256
8152bf6939b2966c0f1302167808730ea3607a25cf9167cea32bc077fccc5d1e

SHA512
e452cb380ce19cb1bbabe3aa5ef927841685672453a2324dc34da87c2e238dc37c6b6eb5ce5a911d19abe701cb49a961f54cbb93d7303a47773726a46f7030bd

Download Submit
/data/user/0/ir.stop.devsalm/app_webview/variations_seed_new

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/ir.stop.devsalm/app_webview/variations_stamp

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/ir.stop.devsalm/app_webview/webview_data.lock

Filesize
21B

MD5
8e41d0905bb25e76517a75cabc998d22

SHA1
5bfaadb7d12041f2a3084fec338301adece735db

SHA256
4f590e0961c48ed7a46b1e19c6489f16fc92a28b1cbdddfd944a84df12a9392f

SHA512
02f1eb080fecf2f9eacb398158d284eeddfd62c6eb8135bae3c743d27b7b6de095a1fa3bada6c5a0de55c05dfeee60e687d58127f297fcd2236fcb9522a3458a

Download Submit
/data/user/0/ir.stop.devsalm/cache/WebView/Crashpad/settings.dat

Filesize
40B

MD5
51bdb1426217551fe2e0e51c2864f975

SHA1
c188d51f074e208636434d3ca377de4c4b8d1768

SHA256
f93ad20745f009488d23ea16bb1fe108c12ced45484c3c4e770ccd3e4d70a185

SHA512
cd726f3879e3a1851f7ba8a7f2dbf957ee2762099f2e06fb0d20ebce4eb696d7439267bc206e0402612afb9d0789128ed8030a64334cbd6d031dd7ffa36bd408

Download Submit
/data/user/0/ir.stop.devsalm/cache/WebView/Default/HTTP Cache/Code Cache/js/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/ir.stop.devsalm/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

Filesize
96B

MD5
a5a2e3d095619a1a8f9c9ba06877f989

SHA1
dff05721a67158fb4581d65d16bd922e7609a12d

SHA256
d6e4c0f36bb15a0c3f636286174c395a9e8c2735ef1f5e9c65610f08929f734c

SHA512
53ea059ec344250826a712b2ee2daa2c8fe199aea034016cecec5a56b86d317e79b41530efb8ea2104a33bc12803e2d106cc69741fec949efbfaeb3898ac9962

Download Submit
/data/user/0/ir.stop.devsalm/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/ir.stop.devsalm/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

Filesize
96B

MD5
234cfeb56a35ceb304b9738a81f4fab3

SHA1
1e1a184e5f7996d6afa0052969e28148cd503981

SHA256
9166ebeaa43b74241a0a35d9fcc250647e91597906f8b12685b3e0e98381ffd1

SHA512
d030e6065c5f61a3fd55ac1f660ed13da02b079837e6f15186bc355cf5808c6e24cb715a9a89f7063caec21e992e07da80df976be0a9b880106780e22af7f8f5

Download Submit
/data/user/0/ir.stop.devsalm/cache/WebView/font_unique_name_table.pb

Filesize
57KB

MD5
f080fa2a56ab5479d58063e5ea871447

SHA1
4b3fd57a98916fa5784305b76ba30af26b5253d9

SHA256
0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

SHA512
8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

Download Submit
/data/user/0/ir.stop.devsalm/cache/~test.test

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/data/user/0/ir.stop.devsalm/databases/google_app_measurement_local.db

Filesize
88KB

MD5
8dfcfdcef5a9793fb83bda404ec3f42b

SHA1
dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

SHA256
a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

SHA512
e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

Download Submit
/data/user/0/ir.stop.devsalm/databases/google_app_measurement_local.db-journal

Filesize
1KB

MD5
b15d66a30b301c2f09995e5c4c919b40

SHA1
670cd91e0340080d195aebdc041607dea89e6f0a

SHA256
06083404b65cd043c52695dff07c2d9662ba36a8681372db3762fd5a4a8ca858

SHA512
847ebd6b3033aee355b926a567e19a501ce4a44c91292428d186948281b00e01a20e1d35994bb5af15b3a75c88026f20ac0106873e05d317c774815d34e86fc1

Download Submit
/data/user/0/ir.stop.devsalm/files/PersistedInstallation1065579704687954890tmp

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/ir.stop.devsalm/files/PersistedInstallation7029378306899771454tmp

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/ir.stop.devsalm/files/generatefid.lock

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/ir.stop.devsalm/no_backup/com.google.android.gms.appid-no-backup

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/ir.stop.devsalm/shared_prefs/FirebaseAppHeartBeat.xml

Filesize
239B

MD5
5f1e4e70222292efc31e9d6630dee2e9

SHA1
ac7fdd5a753d319dbdf2fe41c91cd481e76cdf62

SHA256
eafe4fc9c6dd4723e4b817ad98f44be471d327a0bacbf10b3d3db99ce9295dde

SHA512
0ed023681d6a41652abd3e76c784c715c0fd4471e6f3b20f020e3341e4c43b96bff0c020331236d8be36aeb309ee026876e7a5203106febb4598c2b6fb33f47d

Download Submit
/data/user/0/ir.stop.devsalm/shared_prefs/FirebaseAppHeartBeat.xml

Filesize
134B

MD5
5d7e4892ddd637acad6af5d1c17f7fc3

SHA1
778b1e1d9ee61fc55fddb0f687c09e9c73562006

SHA256
ccb36ff75e79d58b931417cf7279d58d51ff41c09b59e5fd200be6f0f3cb3176

SHA512
d1be8295dab43d12962243e95ad3aedc0764402c75ff3f20f78b22c34a35224240493895bf070d8984ac5bb7cd1711eff1700dccd985ea73631f3b25e113dd16

Download Submit
/data/user/0/ir.stop.devsalm/shared_prefs/FirebaseAppHeartBeat.xml

Filesize
188B

MD5
0cb077924347bfb7bbdeb938e4a7f185

SHA1
6724c4b9fee015d3c797a434ca82515b80ac53f9

SHA256
824a9834d1679df2bc42915064fa1fa68cef9a8f135f0bd5b1d6ec54e727a50b

SHA512
d53b55be89743dc16cf19ea22ff684f47192f30b3d2f81ca8a8eb251535a704a4f6d22cca36cad4ee363f8544aad91ac29b11419ef4897f75f5c651fa6aa6b5b

Download Submit
/data/user/0/ir.stop.devsalm/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
97ccd9a2b2063143df56b6937f961ca4

SHA1
5e78a91ae5df289ce83443cb7d5589dd3504fb5d

SHA256
248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

SHA512
86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

Download Submit
/data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

Filesize
191B

MD5
b485455eafcf9802bc28cf4a150bcc27

SHA1
bbd6692d5e92ef36b6598d9e97a5c6429cfb3519

SHA256
63b7dbd2952f6034a8e9d6eb751665165598544e771464b8db681002f0c34828

SHA512
af5f6ce169417adffa30b949fd22f99cc82c4e2e37e7f06991cf751a0c350299da015bb47b22f3334b6d65e0f6e6d28d8ff1abbab8fecc3b60237c087dbbea06

Download Submit
/data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

Filesize
253B

MD5
6bf3afb2724ae8b5653be5c7e564ea8b

SHA1
02444df91744b8950fb82c9d87400dff74129014

SHA256
156567cf6a36a8d6756e6b85c6ec1bd3cdf54590516a0487dc68f97d639419d3

SHA512
857e8676e41e588297f35c0c246d58ca0fb5b447f3c891c98de7346735d1e709ad2bae4111fb914cf283cf36ad46ed795fefea02678818b1730a20ffd834d336

Download Submit
/data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.appid.xml

Filesize
567B

MD5
a3535e55c3c1ad3ae606ce4bc6b500dd

SHA1
6ec4b3aea411954d23837fc806120bbeb64daa92

SHA256
2bfd2d9fcfe42088224e6aa4b203fd89972a45e3bce98d9b8683695a98cc7ab1

SHA512
42a4bec1b7752c31395949717c0831e6af100adf8b8be37c8d46a7e911dfc936be1b0455be88da128917381e88eb4f270c3b2fb5421f6e98b360146911fd8149

Download Submit
/data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

Filesize
606B

MD5
7fa5acdf79a79cab402bfe870fa43a10

SHA1
05e2d82407f8968d2200c2e4b1693cc636901d44

SHA256
2e3e7b4243286138b99adf5f88b068b4429a80ea62ac42b690afe1ebfebc66ec

SHA512
2be12cc5d32dacfb6773f850ed249f1180d76006041060c09cff83281eedd731ec5d0ec224dfa08cbe3d08b9ff56aceb792aee8f96e49ce5ce298ef303ee7af6

Download Submit
/data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

Filesize
664B

MD5
03d0a56038660821d2da22715aea5ceb

SHA1
7a378fc899e573a1f7522936ec45ae9a4b067096

SHA256
5900db466d1b41159188b2e16bdd699fc36d3e9fbd71b7801c429344253c2ef2

SHA512
ccb6f3628b843fed18ce21318fe01ceff021d49e3054e022324bb13b96f7785d5e4cb37e0ade5b020031e74626f364d52f535b28843eb1188fb4b4bef41403a4

Download Submit
/data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

Filesize
718B

MD5
dc3cc54465442b81af06176ff70fcf15

SHA1
5ba4a30c5fe53368416fa946e54393936e30fe66

SHA256
683afa401126a5ef51e43b6d742c7d38141c2ce7b5d8d9e9286734c62d72d86e

SHA512
917079d2bd64411c2c12e437c1ed8d27e13126fe42755230567ad1856c4d855e74a8bb7dc4b31e654e57b9f7e876f3c1d7064d366d703623c8b2a6d16ae335db

Download Submit
/data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

Filesize
795B

MD5
c77375fe1691e9dfa513e4966586e325

SHA1
e5e6fedfc268f3c4074fddabf751cad6b2f04eaf

SHA256
2295b7570233f66970ec538d77623c8bb295f4a8af1cc8e452a4cedc4013eb64

SHA512
1b549930ddf1be8bc9ff27f88810279e712389838bb1d9235be2ca4ea15bb40e1ac2a6688388ebdb487adbb4cf24197404c6cf80ada59c25eeb9c0193b54c089

Download Submit
/data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

Filesize
122B

MD5
250b4caeba60ddf53228405750ba66ca

SHA1
422ab714feb34e9f3b4f1cbe669887bcd581ddb1

SHA256
2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

SHA512
373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

Download Submit
/data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

Filesize
264B

MD5
24c5290d688e07c41e4d570276355088

SHA1
36f8d4dab2e510b3c8382ab6bc6a1ddbc17506a2

SHA256
9ec5459898120338f65fe7b2fb1576af662e108c5844557d2b419c4ef6300e5a

SHA512
320efdfdaf5e9741227d21dd3a4b09e60e0a130d2eeb805003242d83cc9dde3608e0bf53a4fd404bd5e284dd95eabd80bba50c7960e0f09c5e717e26f9512eb7

Download Submit
/data/user/0/ir.stop.devsalm/shared_prefs/com.google.android.gms.measurement.prefs.xml

Filesize
394B

MD5
a9663599f1ceb9a6b623952160ffce2f

SHA1
56c84d8a4dd2e1fac8ed00f2a54358006ed75151

SHA256
3390303f950b6113c3f6fedc457a249aba79d95d5aad80a8e94a726b9bff6c39

SHA512
6d15806b83b771d12e4129c15428142fe49404157ad3878c1b7f8af8e5ff72a1f09e2023feec33aaa01eca14c8e94ffd85aa9c9f1bffa01d555dc91589fe4901

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads