Analysis

  • max time kernel
    2593927s
  • max time network
    148s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231023-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
  • submitted
    04-11-2023 13:53

General

  • Target

    app.apk

  • Size

    2.6MB

  • MD5

    2d8956849f150a296f576b501b30e2e0

  • SHA1

    0da3b66ef05351791d3869d92e21e21e121faa60

  • SHA256

    8f3ad03ab795885ba9653d7137ef6578e4af76f88143bedb57b07f3dd5b5f775

  • SHA512

    61ab9e829cbae2cf5219f5673919527230144f676c3939718f390307f3fc5280d256fba3f65ccf28c1a2b26a106c9b4d2f6fab8b1fb4ef64f3c0b47351b7a13a

  • SSDEEP

    49152:a8qTFOp/cBT2DN3cycC7mhVlvZXukxOQgpWk9L53yJdT9cOuKo2qwUVmy4N:a8WQp/cBT2B3pcC7mRmdzL5CJdTWr87N

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • diwix.gorbah.com
    1⤵
    • Acquires the wake lock.
    PID:4575
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4633

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/diwix.gorbah.com/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      c945b537916c66fa65242f709dff35f1

      SHA1

      bb7cf8e38deefe395e2811d8287941a0fe985637

      SHA256

      82bb6ecfacdefe2abfce6583db1df751692b214ba5f6bcbe3c3e586011c81f51

      SHA512

      2cd55eaa3f37fab1a16e201cae43dca31ada3b2cc69790f9d386cbb70e22a21c16df5eba2e1729cf3567ea9856df58385b77a7534a260da0688de6d5488555f3

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      6e0948e2b754d8190e02583192a5771e

      SHA1

      ba0690345120cf4396b3e6f86a5b44c8e1454b22

      SHA256

      bf3c97b2ddba0795bbd4e611efdcf31a231caa4e2320b802792f6be6b4611d22

      SHA512

      b24a2125c7c45bac6928dd1ee1bd87ec075afd47ddfd4dc7a73dcc61fa0e6c5fbd80187d13793b5b54ebc4d053b71bdc28b8a64d75b550edace94055fdfe2285

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      951e43f2117b47503c454a4b2e51c1c1

      SHA1

      34ee1793b88fcb44e1117361958eafd348c25001

      SHA256

      e0b76da97b450e9e87524aa39531cf97951595c3debccf12c836db0aad7ec9f7

      SHA512

      ad0722b37b2496b14527900eb3ceeae2526c259fe1418e3b6798e0156ddd6b33febf0f1f49fae1f7c3f426236abec205760415eaff1f9bba1a418696314f5b3d

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      1f6a8fe80ed4906accbafc59fe174057

      SHA1

      89d52d30248caf4d30635f18749da6c02e769346

      SHA256

      e973ec3f487e01c5191a5140457caef20c6d3c3bfb5ba873df8806fe3bff2f30

      SHA512

      e247eefcc8141ee18e581c645a3a7d64d966b2214bb9457f5049fb4f6df079f1ef1fd735a1975b1af18cf073d5a54043bbbedd5fa1876c6c313a7e6017c2b9cc

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      de82e2c94d2718988804b035a46d17b1

      SHA1

      705f5ff19093ad209f2a666085d6ccaed3bf58a4

      SHA256

      29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39

      SHA512

      68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      d9cf75fdd1c2292d986f6c3d5d60f2c8

      SHA1

      07ecb1d3a26d952ae5fecf54f36699ab498510b1

      SHA256

      2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

      SHA512

      442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      39ddae5de01f661191dcec15599e21b2

      SHA1

      8ddbdc6606545efb212c9ee8a55ec3df822d1484

      SHA256

      d94ebf09f0ffab8ad432a0e2407f2529e3713b29a79b1d1574e8ae032045bfb1

      SHA512

      437f7189db54d1c19e3e39a28552b936cc79c09c4d9dae3480c204dcf12d6f582465ac1784fe6eaace6fa9431b5c6fa04ef977166cef6f629b21563acf04da25

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      cf39c2fa92aee050617d42227f0b3102

      SHA1

      e345f459ed8d69f5ce8c02626972fb6435f1edd1

      SHA256

      b6c63195809bf41e85db1b0d5b8f382ece20299ee2452fdde236fc9ba290b94d

      SHA512

      50dfe8bd12f696fff61c2ebae75326193d66296ac9b7e1e833d56fd3beada7c6b1ff2d521f29d3e5c8e226cd5ba88aa615aa54a0c8660806767ef39af64b077f

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      0d067daf6b4e724a63769a9fec443d91

      SHA1

      dfd799f16ea3165fade07fb45b5f04e73b3aacdc

      SHA256

      816220bb1cd9fb4b056e4db4a89ac792343159ff77ef3ed2e7efd91fd44576ec

      SHA512

      d4471f7b32cb7bf9d73af5528ebacb141ed0e1f3981f7622ee6815a3be50b1464ce22831a1f3974bcccaa46b42de712d4b969bc72f984f4d4b871769df75ba9a

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      9da2d4ac7ee7b645a6db509d53e58e0a

      SHA1

      c1d8984a8ef27406565d46fe080cfa6d404cc0f3

      SHA256

      0c85a219d0d0e3f319b6ccdd71e8529e6e37dabfb5dfa8c158e8f09fd92e46fd

      SHA512

      a3d7da4a9ce54501c7f870629fadcb355befb109ec65d0250739d1779e01180a00a2b1077c2d0c25ff14ad7ea76c3026929e03f4f77e1cbe78e2e894e4e4ac56

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      f27e38a71251ec1a91fe99e6a83db5ba

      SHA1

      0635d74c3894fd0249b567416041f794b7ceb43c

      SHA256

      b0439f3de9e5dbffef4a26cb740f3837086e727de1b044c605da16a6d13927a3

      SHA512

      ff9b4c457148dcbeb985ad77f35074340f0993019a8a05156479b64ce1151c56e0129504964a9e8f8bfd78e22007a51dda3bb8c9d8f6eefe9b4fb8222a81e2ad

    • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      b52e7da9b606e1041f7b1b9b4913b716

      SHA1

      16b3bda9670252d46451223c8adbdc3bcdd6138c

      SHA256

      ba247f146188bd9ac6d0d527708da3974205538b4f57655a3b30239b44ae747b

      SHA512

      97a7902caa8332c0700190fd74eeecb9f5760db91b6e21b81cd795c32b6d0c2486b53023708e3287a15a718f934bd003476b38652e52df5d26af9ecd0cdd94f6

    • /data/user/0/diwix.gorbah.com/files/PersistedInstallation8506562089682828027tmp

      Filesize

      568B

      MD5

      f45ba83aea5f0316b0f0c6ab659b5b72

      SHA1

      d8b393dc153ce0b3bb7cc2795e423d05681e6b18

      SHA256

      99f200fb00480296cc07bbce91d245d443dcfab0c09d993dacae4fe83e0ccf81

      SHA512

      85385da35c483ae926cc1cc868a981cfa5ded113207dccfe45271487714a85e1d3d8151347027629f1f755a7bd359e3d6dfe272d861d1ff9fc0b06a0a603eb74

    • /data/user/0/diwix.gorbah.com/files/PersistedInstallation9092503531239332575tmp

      Filesize

      90B

      MD5

      a2c55aa9145858834dad4f8e438ea5c4

      SHA1

      c3685bf319f738e40733aa90bbd957ab2cdd05bf

      SHA256

      1480643b405964f9fa9728e689daf04884d8bc0bd04f8e9980ac1cdd02895d9d

      SHA512

      32e616a46309d0fbac927ff54371b925773f6a710dec986bff97429a0d3d7746b9520fb8ed97e867df429175b127c71acd3713fb0abba8f2294468d0789677cb