Analysis

  • max time kernel
    2592727s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-20231023.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231023.1-enlocale:en-usos:android-10-x64system
  • submitted
    04/11/2023, 13:33

General

  • Target

    saham.apk

  • Size

    2.6MB

  • MD5

    fa95bfbdcd4a196c01e01799a79c0fa7

  • SHA1

    9a350f56d951284983a414e8bc3af9006ead6ef0

  • SHA256

    1129892f02171256465594ad31d3ab7ae84a6f7d708d826aabb37cc38c1459c6

  • SHA512

    5e2fbf3729cbec9ed57595f15db2256696a5e8ac50fd34cc652623d8e3ea8f3b6a3de55f10806b1c7e688094b34096749a36113538b85c551b589c22d47afa4c

  • SSDEEP

    49152:HYFOp/cBT2DN3cycC7mhVlvZXukxOQgpWk9L53yJdT9cOuKo2qwUVmyds:4Qp/cBT2B3pcC7mRmdzL5CJdTWr8T

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • diwix.gorbah.com
    1⤵
    • Acquires the wake lock.
    PID:5044
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:5145

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/diwix.gorbah.com/cache/~test.test

            Filesize

            4B

            MD5

            098f6bcd4621d373cade4e832627b4f6

            SHA1

            a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

            SHA256

            9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

            SHA512

            ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

          • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            4564a822aad291e08acc4fdf2387039a

            SHA1

            90279bb1a30ed63ad884f4d6a7a17974a1108269

            SHA256

            cc0b86bc5946e01164d1df83f1e7dd73f94bfce6e1a32bb9ad089d1a414b08af

            SHA512

            9a2cd9d5545fe5ad2299a2eb1aa73afc9f64dd5cbc3651aef901e15b2a0950b5a32de546539a413379ae674d71d2beb76195a877c673dd271e35e0c6dc187a66

          • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            850f17b7f43ce3280a4902172239f1ec

            SHA1

            248debfc9bb5a2cc347b62e7518292a76de1ab57

            SHA256

            c06c3a2e7941d5fcd293069cdea1455bb891b5232d3af7251d1496b4bea2b563

            SHA512

            38e9f332fb59593cd88e9f50dac0248d56ab0642c7c6298534b16bcfbc4c00fe90983702da7c74ec29e09ec8d91b253ed76464f9a652a0e1424d04aa282c4bed

          • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            d06b066ec89c0235006172650420f50c

            SHA1

            a7c0f316c2f7c8f33c9e962704d8ddc137d5dcaa

            SHA256

            bc19f530678818f6a5f20ed022223993f0b51aa95b73b064c80ffc99957f0b79

            SHA512

            0ba351368dff14b95799c7c29c30c5f7549ca5c7aec04f6c16e0897ffb837cf9551cc6d0bdf84811756d95fc53fb4b57d8fefeb7d61b76c5a015f635c4f35c7d

          • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            070e5eb1614fa4863f62b27e4e234a5b

            SHA1

            19c683e10f97a07c4f556c75e69fadb39208626c

            SHA256

            04c959f3c4327d76bb3b6b470dd2366c92eaa05ab88d74c3e27a361e7a9f2037

            SHA512

            694f55737030dbfcf3025fad719407e173d38cd21a78acbfab87379f70ab4173cb02847451873a85a6d03e412fb33c3f8b7b35cc022149769706a4dbb6a5aa07

          • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            adf6082723784327d7d1b34adf974e7d

            SHA1

            b1502f70eb881a1dfe41139cb719fefb877ee37c

            SHA256

            252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

            SHA512

            762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

          • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            eb52a90bb70b76e946b62f50b6f7fb85

            SHA1

            42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

            SHA256

            48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

            SHA512

            b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

          • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            3d818ed61a151ac16d2592c4c027265b

            SHA1

            532c28a06b849e5f7be2c80eaa1fb1d182952440

            SHA256

            c1880eb3a46fd51961a9e547afc4a90ece0fec919442ee498bfd0606b1466b09

            SHA512

            12704b56ba1592080b2fc6f9686ed3a0ac4859af385b3cb959a644ef34f5b5548143a9c9f4c6212d41f6b292ea8436622091f51fdc359fee77e655eaf01c2a1b

          • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            11928c97a092e48667dab6f1e28d68a2

            SHA1

            b34f7a10cee4e76b91086398ceebeee52c0ce35d

            SHA256

            d699fde48c27076285a9f896be2ae0dcb92eafa946fb669358614adaad9e4f5a

            SHA512

            42f03d6ac9d04644cc03bc890f55fc793f38a6eeb1151fad31be8af748a1656ed5c4ea463fd0867bd37c01912e7f03622a835c8380f82e279fdab6098a2c53ef

          • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

            Filesize

            512B

            MD5

            24d02693792b02ccfefccfe34d16c8d4

            SHA1

            d8ef0e1b9ad7eeaac1b190399af6ede8d518f23f

            SHA256

            c434a99a70639e2cfe67840b4f3285b9b18f1fde50f1aebdb64fa29ea4919053

            SHA512

            c9b8db1ad2926deaeb0b44b9b1742c3e6b72a4f860865205d078a8d3a6c3e1cced2734a3881965e66ad9c5a24b56ba0ba49a1a817e6c133749f45b227de61d20

          • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            0722372fcdebf9166125e15fc977be3e

            SHA1

            a677b7588e3481dd92d78752d7d32174efc83c0b

            SHA256

            96be175641a43fe78462f75d90289c7ee7914cc619fecd4fbcc312578a1b2223

            SHA512

            a8ca7729196b600cad2cafdf2f968b4202593ea9a7fc09e89b43170f8f045f7bd796a27bd18b41bee4724aed7900f03241fb3b0f99a57ab710963a8233b9e543

          • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

            Filesize

            4KB

            MD5

            9ee0f28ce8b94e331b8bfc79f9669cce

            SHA1

            9406782055b034c2ddbf21089fb8b1d2741a52e5

            SHA256

            4c750ddc5b5ba177bcf738f1b1ff7b846ee304c754f8628cd514d9a1677db2e9

            SHA512

            707ba55c92402622bce04b9a4807c2c766c22d1dfc4245c633ce250f875c6827f477815c010f31b6f40a7ab1e2c66039addc0e48f9080cfb05be67eafe5f2346

          • /data/data/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            c44108ef0f70e1a529ac5c3854bc0fff

            SHA1

            aee0f9c7dc7bba6c9cdd8a49c6523283302ec5fc

            SHA256

            22f61ca935692ade3467b8a4f04254e6cc2cc8112ac8d9a2ddcbe74912958d1f

            SHA512

            13c85453f5e0fbb6e4d4a10fc209d07866dabf25c3e48436c32db432695bc0a306ffbb4f58f05271a825a4d82eed0c92f250e0d4a3b12c00e5386a2d7e69c273

          • /data/data/diwix.gorbah.com/files/PersistedInstallation2122025425236214595tmp

            Filesize

            90B

            MD5

            be4cdf87dd6fb37dbcb402eb0da3e882

            SHA1

            11ed350ea0e25e4659f63edecb6cff3ec30a2799

            SHA256

            1f7c96e8fe5dd822d113164669349355d28ad90aa4b5335143f661e57c6e82e5

            SHA512

            665f4da1fb9dc42234d4695bbb8e0897f8d780e90a4bbf14ba1dbaa716bf5f6f705777dcab2e0529ee1dfce4877e1386f59904e7cc7f6841f8064aeb5b1fe528

          • /data/data/diwix.gorbah.com/files/PersistedInstallation8649706733658684201tmp

            Filesize

            569B

            MD5

            e0079cc74e783ed8e72550de31c6acd4

            SHA1

            dca394d2777379ecfffce272bbe0fc105f73e9c4

            SHA256

            6bf8df2bb9d1a6894d3d08d501c103f56fcdbd8ce3b53bb7f903bec3171237eb

            SHA512

            f7ebc1079d839e2daf1199c819ed7a702a8f0dfdd4efaf47f355a5dfa6e86183ba81c5e1847a1fd032cb10a2139ca90b553e820fc6467eaeaa69e55995828f67