Overview

overview

10

Static

static

10

sahamedalat.apk

android-9-x86

7

sahamedalat.apk

android-10-x64

7

sahamedalat.apk

android-11-x64

7

Analysis

  • max time kernel
    911803s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20230831-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
  • submitted
    16/10/2023, 02:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    sahamedalat.apk

  • Size

    2.1MB

  • MD5

    241a42fa7cad7aa639662608c6e452ba

  • SHA1

    3ea4f4b6a34003e38a7e826f2bbd7deb115c9b12

  • SHA256

    4650c743be6d5291bbc1354d50baf0c8bc753600382b8afde02f65e981a68b87

  • SHA512

    56fdf118f2e7a186744c3b55541c2dfab7e85e4765d92d0c5b063740030b77b53816add4da5dce4039591d2c4331a034515ec34e4bf257765dd84f1cfa1c0824

  • SSDEEP

    49152:AE0U59OvNCWdis2BcUk3Oz4V/hyw5PNoA8/YWaCZCycnRLpxB:AVNlX2rk3RS/YW3Cdnj

Score
7/10
evasion

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs
    evasion

Processes

  • com.MrXnxVip.global
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4875
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:5089

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.MrXnxVip.global/cache/1
      Filesize

      35B

      MD5

      44b719bb9c12c4671198cdbce629b847

      SHA1

      0f70117ad1176075276d9f8676d77dd73c996ad9

      SHA256

      da9c2142793aa90b1ddbdfb15e4d68bff9c9c7617dc118578627aef68d6226d3

      SHA512

      9d7ffabae8403b322a04d90d12275fad9c00b97abc04ffa9921272bd54ac885eeadf7011868ff13aea719df5b169b36ad821a5f56f34e21e0ee0b67e003eb815

      Download Submit

    • /data/data/com.MrXnxVip.global/cache/2
      Filesize

      690B

      MD5

      bdd89b9d5f598ff13f4d9eaecfe86033

      SHA1

      fc4926068a2c242847710dd623f0a60e3b405e70

      SHA256

      cf40a58b3b009116d3469ebb16808827519f22eb6216aa9dd2740c389199ea79

      SHA512

      f74423fa0d082f4e011c3e60abc2f81825e872e6a78ee30d9c4a7b2b357f4cad0a4921789538554194cbfa4f3a9d99713676cd29f7941bcdcd4cc891455b4b88

      Download Submit

    • /data/data/com.MrXnxVip.global/cache/~test.test
      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      Download Submit

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db
      Filesize

      16KB

      MD5

      6aa6fb720f5d09fc54e9f6e3fd940224

      SHA1

      c1e8e6761ee2eb38cadada44f490273fac532d5c

      SHA256

      275bf3ac38ecd604bfeba89ca62a73caac0e94f2fb40fd62ecfb7e891e66eaf7

      SHA512

      ef4a1723fd8f54b442f4646fa112b453c5ac82db2c25db6b0de24287269551ee68b0c80999529711faa171c36721fd0f60b1dbdda0fc1e2e17bd03f41bb249f7

      Download Submit

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db
      Filesize

      16KB

      MD5

      58381efabcf05dc8f3f6494f2e8ce2bc

      SHA1

      f4d8fce9f5b029249a6c0d455cb5f2769ea3fa28

      SHA256

      f5a7f854c2b1cd482db4ebd6a1cbe9b5ef225f7c3b89e235f2d7b43af3bbee3d

      SHA512

      31a3c023b2a597b0d9f0149ad47366b06bc93cce32c7832e05724e0f31b24a26eb27a5009127c9a5e96305d8d38f7baacbb0e2f018074c4b2cc19d213d323a4f

      Download Submit

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db
      Filesize

      16KB

      MD5

      88bb589966fe2b8eba2acf23e7bcf410

      SHA1

      d3d906765c065817af7667327c93392f459eae9b

      SHA256

      6913c96eec3bfa993f4cfc624620e4cfebe811edacf2985240af0ef8c1fa6739

      SHA512

      99cdb71725e752831e41706e3f5700ae8156a614681fec9cafafd6c994421d8aa59492836f6b971d618abe3e5572aaf56c6761ad5179f658ad19fa011d0407ec

      Download Submit

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db
      Filesize

      16KB

      MD5

      ccf44a19f9d2e25a15fb0c5884bf996d

      SHA1

      f91d11697c83c54dc70a0a0292cb9e6b753ee73a

      SHA256

      a20621d128ed497a59066689ffb01721826e92d3930e1f4375007fc665af14d3

      SHA512

      70243a943e3637da0625798bb4a337ada19fff6a615ed5e300396fbfb43a494fa9d6f238a63920cbcf14aab5ba7b2d5f9911ce9f985daa44888fcfe0d11241e5

      Download Submit

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db
      Filesize

      16KB

      MD5

      adf6082723784327d7d1b34adf974e7d

      SHA1

      b1502f70eb881a1dfe41139cb719fefb877ee37c

      SHA256

      252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

      SHA512

      762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

      Download Submit

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db
      Filesize

      16KB

      MD5

      eb52a90bb70b76e946b62f50b6f7fb85

      SHA1

      42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

      SHA256

      48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

      SHA512

      b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

      Download Submit

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal
      Filesize

      8KB

      MD5

      f4c759ecbcaef05d4679a1087fc46055

      SHA1

      9430ebb92168895b8edab5c3d3a78ee1b827fc3a

      SHA256

      fa703b795e9ccae1fa3138bf2a5f0040e781876262b26b181fc5c581106b8916

      SHA512

      5733517417dae821115eab00380993a21878dac4ed1708522b418ee1272f3950e2fbfd9514386c67c8425f508510b32c8aa8261ebbe251fef74e7c6bccfe9077

      Download Submit

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal
      Filesize

      8KB

      MD5

      296b71f01262e40bdfe7ac4b67270d00

      SHA1

      9f9ead16d966cad24220a99e2ee5ddf22859124e

      SHA256

      0c58236b11124907ed80001fad3deddce91297613b4912693568abeed1e42412

      SHA512

      48d470fc55911b971ca49e602b5ba77a7bf83201a2ce7ec660b721e6a138b257bbf1f55f3d62bc62b2f590d8cb42b5d3619e69853e01ffbc09e886e62ef7602e

      Download Submit

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal
      Filesize

      512B

      MD5

      41655f1a0d981ea03341f2ef6a695e18

      SHA1

      088a5ca15f03ae2ce8c3e048d1b2f45aed493987

      SHA256

      15b62b8639952c761ce80088309c2ff2994291e80460c6f3c449d4a9d72309c5

      SHA512

      41ea3eca6d6d3c8a5ff6443c5cbdbad8b15b37e115f7152af53428830920ef898d4945481dbc4494e999f8b6183f416e7a96c341d67b7de836dc234fb4656448

      Download Submit

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal
      Filesize

      8KB

      MD5

      419a0fbffd0762a7b2835f6c355d4991

      SHA1

      8e3136e04703df69907f0339bcf1b49ccfad3b56

      SHA256

      556179003bae8796a50a86a5053105f7dfa76fb1f3e5093215e2fb0a068edbce

      SHA512

      9852be32e95a33af0b9f2309aae603f75eb2e8cacd06dc2ae543dadd2b7ebb9b75739fdb2db4d6f6370cf1c13f22994e3b3ac7581a94d0f6a7d8dbacb03f7a4e

      Download Submit

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal
      Filesize

      4KB

      MD5

      73c073d5a9748dd75c425fd89a78a40f

      SHA1

      4cd3096f3d6bf6c497d106c17df128edd66343ca

      SHA256

      16e0f4d15870256c4028cdb31a77081be6203c16f6d47fb4a61a2da326a82fe1

      SHA512

      e590bcdca4a0c00dacfc7c77dcbab11cb1b0f3abf2429faec51f3aa3eacab10d1d3a6e460dae1d27e0099388c8fbfac70d2c2b3983a83e2ce71918b976dd4f90

      Download Submit

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal
      Filesize

      8KB

      MD5

      d4a533f0109c2855383261b19e9adaa7

      SHA1

      a18c070df3db6cb58b55ffc5e067eff8f0530033

      SHA256

      4c15c2a15582a5130e754d8851c264166832361e732037c44eec22f631a7b59d

      SHA512

      6cf2b9aab901f8edea7544df1d7de5ed2a07504618f2791fea5ab312a783484be8cf87e9f117da2f8606a7501dc2f26774b2270465218d8d7ecad6fd5c884777

      Download Submit

    • /data/data/com.MrXnxVip.global/files/NULL.txt
      Filesize

      10B

      MD5

      68e109f0f40ca72a15e05cc22786f8e6

      SHA1

      db8ac1c259eb89d4a131b253bacfca5f319d54f2

      SHA256

      872e4e50ce9990d8b041330c47c9ddd11bec6b503ae9386a99da8584e9bb12c4

      SHA512

      8ae6ae71a75d3fb2e0225deeb004faf95d816a0a58093eb4cb5a3aa0f197050d7a4dc0a2d5c6fbae5fb5b0d536a0a9e6b686369fa57a027687c3630321547596

      Download Submit

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation8041114180183014037tmp
      Filesize

      90B

      MD5

      59bfb8444eed884c13243ba9149846c8

      SHA1

      a7f0578480293a5aae9259a188cc8b0a7e58b089

      SHA256

      7869118df1e99903fdc85fec255febc9ba1b2078a8ed22949ccb200527e8ed89

      SHA512

      c152dc3825a5c96d51c63b6b0ba511941bc5496237478754a24fe8db6a144fa6468cd06beeb37e24b5fe39d7e93d2ec4b42cc620dff0ca15c2694d24b47ef6ac

      Download Submit