Analysis

  • max time kernel
    2592293s
  • max time network
    168s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231023-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
  • submitted
    04/11/2023, 13:24

General

  • Target

    saham.apk

  • Size

    2.6MB

  • MD5

    a7f9d384266259c935f2bf4d4e563778

  • SHA1

    48b3a508774052c62ec950f13c2ffc9cedaf26fc

  • SHA256

    ea080bd1e3b0e32b98a5774adcb61f7751959bc5b6d3281a22943c74d15fd1ad

  • SHA512

    32f78096033180351b7d3a50fb87a67879c3cb6ea3d944948bea589f5ca36462347217adb8243d78d79e09110cc684899dfddd375b71e1e6930ae783fb89d089

  • SSDEEP

    49152:eB/6JtBjp0t60A2GYItRZoZzp/lsTOOPMTstbwd7dWhAcxGsgdN8w269Qn22GY0g:el61d0bY1mzDkLMwwRdWhAfZt9S2tydJ

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • ahora.arsam.com
    1⤵
    • Acquires the wake lock.
    PID:4381

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ahora.arsam.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    686acfb8095073a0571fb7d53a03230c

    SHA1

    29a40139720edb0ba3b1ea741c059521076b5ce4

    SHA256

    7a20653a1b0998daa7cfa4cb8fe375da902cff563756edebb81377d8aa1f5af7

    SHA512

    54441fb99732813448457d70b62c374bffd712748c28aa35a8f99d8458be81087adae37177901eb7cf3ad4b43bb959cac068c2fc850f6f119e5a87c24bdbd84d

  • /data/user/0/ahora.arsam.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    b34ce32655a4b6a4ad8d51c1f2a7dc7b

    SHA1

    8c84df376f1dc65380aebef60b0ecd1e826abeee

    SHA256

    f2e8327d216e4a80fb49a8ba98fdfe79a281b57f30ce15d6538428fa3aa82783

    SHA512

    d1490d2f39bf90f77e36741a1373b6ce62b395272ad55f3658b2258e6d97b7c1f0bd55a78499953df2c87f0d1a71a59f5fbc61c47c1cb75a12d6b8c18eae1a6c

  • /data/user/0/ahora.arsam.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    8c1571bf258cf69088616c01cf3397a1

    SHA1

    8b0e01b195c98b7f57f4639c97dc8a91044272ad

    SHA256

    cb7d3683f2dd3abcc18ac03696051d2659b49954a85343654bc5808e09ce67bd

    SHA512

    601df2bfe7e386f18dabed463e37e61f59af4005f9a5e0176668cbb3d61aa155f092504461883891ab24f04d1a04e62da4725165d7376f83e80925ba11e8f2aa

  • /data/user/0/ahora.arsam.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/user/0/ahora.arsam.com/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    986fb31ab0c1d68c949ef0fc46d962c2

    SHA1

    8d46e7e7ab7db1c77fa4be6c629efe0a2211fcc1

    SHA256

    24c0badfad30677150d407136134ae0820f48ef434ae7accfeeb9ddbfd663664

    SHA512

    bb1f0ddcbb3de817ec18500ece449ad1b58efc9b6dba1c8fd66209e5579dc7d9878226420a72c1d3621e45fca153fbebfe547fbce81b7809ac7e8b1dd44fb514

  • /data/user/0/ahora.arsam.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    f52a921a9a075071b8386c67591ec853

    SHA1

    9c854cd5b2efaba6e97d411b0960d09188eacee2

    SHA256

    a75b1ab6b3f2e41cdb1d71a6fffc8118750795214b474a2c674df4564d9622b2

    SHA512

    6c7446cfc601a8293ada823ebf43ab9c33ebc50419756053c213593797de2116c03adbee0adc2e92c14abfb1bb9fcf3322d072e553fbcf0c4fed78697f2c348b

  • /data/user/0/ahora.arsam.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    2762a7ee15d58c97bdfc7a5493b33818

    SHA1

    c985bea7a6f069335788ff0cad468d860ea9e8f7

    SHA256

    a71c9472beb49135bd2c4e0647beb529aa23e3b783edbaabf669f2819ffc0d9e

    SHA512

    073cff5d497cb8af4eb21a89a9c28a78676fb8e92168dd6b39c547014345a03fd2b73b5ae0bec985ff15dd1c4943bf4dce0ff9b8336b8404122df12bf89197bf

  • /data/user/0/ahora.arsam.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    33b96c586d7f0aace41573bc6f866de6

    SHA1

    f76b8f5fb0aa55e650b90c58037a3a102ff89bd6

    SHA256

    e43ed29354e83afedcbcf169913bd02e578ae07be6b1648ff127326f63a0c3f4

    SHA512

    6b9aa4a82308bc466357722143dce153f0d7abd7f1f1bed288f2bc8f355ff789484bff337dc029b9557701c289765e650612a22310ac7a9e1b1832b9f725f281

  • /data/user/0/ahora.arsam.com/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    499d9e235c0c2037faf71f79807db86a

    SHA1

    c052dcc1aeb3cbecdc1a76ec760ab83645535e40

    SHA256

    8b8420f384742c7bb1bd27266b40fe0a21aaf376be087aa43a5419ad2eb35839

    SHA512

    78e23e92eb08c4ca14c10cdaec64c1c7c5291925b1d0601f15bcf92fccb41e54e42c523fb55a80e4a714577adb457c0dc3a5c2baab6391454e43113a10383662

  • /data/user/0/ahora.arsam.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    9a30633e32ce6a33828aef6c06a799ad

    SHA1

    4c54f10b509dcc3d62251f32ac1b1b23e736ca25

    SHA256

    44e873976783a4dc2fc92d27f9e3a2726f7a8a58c97323d6cde71608c96c68ab

    SHA512

    38a49391f9a65ae54e954456f6769b6f081443f7ba64ef8d7d1744016318fc633ef70e9f74f18f125eeef5ce1b7bd83c02594bff939717a053bcb5583ab6f1ce

  • /data/user/0/ahora.arsam.com/files/PersistedInstallation1652393660164991351tmp

    Filesize

    90B

    MD5

    610d6bf4aa12acadb74946ffb6457f65

    SHA1

    2e906cc8025ab4034e7c1b10b9cab9e60adc884c

    SHA256

    dbfd2b90f19a8ef3b723978b3bbb5a92bb3d9feab57772065ab86d93135dc1e0

    SHA512

    1da9b9e9de9a9ab14e3c28b4bd602f9d36ce9d3a6ee1bb5dcdf66614c7abcb2154a95e2d17e3548e7ee433fb099a4d297aa1b805d1de967e539a6c81760e03df

  • /data/user/0/ahora.arsam.com/files/PersistedInstallation73462092238705900tmp

    Filesize

    570B

    MD5

    5d567fc7f200bb7cc27f09246b9a429b

    SHA1

    89639feea29d2434edf6fe6bc4341695a06b605b

    SHA256

    be3ead1993ecec236ae0629df96100c279196121194d125b5132179cb3b6ca6d

    SHA512

    ff9d04740605c29db29341ea7d4ce6fbf1754eb610815d84659660de18e6553516b9fa50d82c271888b5bf9ff42cba587f7c9af087621312aeb38ff6cde47331