Analysis

  • max time kernel
    2592725s
  • max time network
    143s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231023-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
  • submitted
    04/11/2023, 13:33

General

  • Target

    saham.apk

  • Size

    2.6MB

  • MD5

    fa95bfbdcd4a196c01e01799a79c0fa7

  • SHA1

    9a350f56d951284983a414e8bc3af9006ead6ef0

  • SHA256

    1129892f02171256465594ad31d3ab7ae84a6f7d708d826aabb37cc38c1459c6

  • SHA512

    5e2fbf3729cbec9ed57595f15db2256696a5e8ac50fd34cc652623d8e3ea8f3b6a3de55f10806b1c7e688094b34096749a36113538b85c551b589c22d47afa4c

  • SSDEEP

    49152:HYFOp/cBT2DN3cycC7mhVlvZXukxOQgpWk9L53yJdT9cOuKo2qwUVmyds:4Qp/cBT2B3pcC7mRmdzL5CJdTWr8T

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • diwix.gorbah.com
    1⤵
    • Acquires the wake lock.
    PID:4513
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4575

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/user/0/diwix.gorbah.com/cache/~test.test

            Filesize

            4B

            MD5

            098f6bcd4621d373cade4e832627b4f6

            SHA1

            a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

            SHA256

            9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

            SHA512

            ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

          • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            0886b0264d70c87fa0e06aed6a7af7a0

            SHA1

            3c100621240bf89b25f27e4d1ac2e7ef835d62c8

            SHA256

            fbaf6978424de67064b917d2a73c9a63e600d8768bcb610652163843459ecc17

            SHA512

            be5c6de860fec8478912cd76197957f889ffe045f80e6aff22e729a5caebb7da37a56dda381482fd6818649af228f6dd49ea0d13fcaeb19312a4910e60829790

          • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            c50fe00f348b7b781eb7b51abd1bbe9f

            SHA1

            366ec52979764b72ef3cfdaf21f25b961a9519bb

            SHA256

            c65815c2b1b9007068450ef62ff39ea675b254e920c39dd8c7ece5a1d4c95ea9

            SHA512

            4a3cda213ea4b529a82e0ebfe2030e3294ff090b15575d33366d992477520c2dfa4acfae55fc7ac76f655b0e8ec99c2abd2cb53ad955e6612c5abde82bffef36

          • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            c7f24e4daf976a5c197202e449268a9f

            SHA1

            826930ca43f27c5e17458047a596dc35342dd5c1

            SHA256

            158619b1c884066b2292b3a7735e5deedabb961c39a99d6487c42de026ffbb95

            SHA512

            401e263246140d22833c8bcde617574237257be40820907f8afbb07b1f53ccab13ccc8ef0628dfd3682d386a7a5f0e74ee9338aa01bbcffdacf6676adc0c0e22

          • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            e956906f8cc92b9b2a6ced01256a639e

            SHA1

            8571c9537adedb96033911a06b669912270ee15e

            SHA256

            dddfe7f525ea6321e07ca50ac56c9e651f33c3e9e419ed965f5471a27129c6a0

            SHA512

            37e501d6c58a9acc7b78a768c5bbb84d640fc4601d93cda5edb877e4bedd6ffdbde5b63971ab3c08f3777f52bbea6f070eee71382b29cbf9f1d70c88e340015f

          • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            de82e2c94d2718988804b035a46d17b1

            SHA1

            705f5ff19093ad209f2a666085d6ccaed3bf58a4

            SHA256

            29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39

            SHA512

            68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e

          • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            d9cf75fdd1c2292d986f6c3d5d60f2c8

            SHA1

            07ecb1d3a26d952ae5fecf54f36699ab498510b1

            SHA256

            2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

            SHA512

            442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

          • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

            Filesize

            4KB

            MD5

            d2c5f6e5ae4399085afe88eaee67060f

            SHA1

            eb49b2c399281b453e74c5a343ccb2fd920e15bc

            SHA256

            04de7ad19771eb3ee6c51111a52c8b6bd8259ad57aa84ad7a27b714a0693d910

            SHA512

            033afc8e9f7b7b7e3ef7a7c35481a963196f36cd6be4b574a84943014b073e809512ff37b5883d46b3d7adc2d2ec9f20671e2a1c9c94de09c86d8dc092e4fd2e

          • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            0a83f8eb99f57586c857940a126a0bd6

            SHA1

            cbf982a8fd3dd0340324086ba7d1ad9692b80025

            SHA256

            015d448fe422ebd01e9e2f948346554247a68b4e40bff322ccfc645922595abb

            SHA512

            51921ea0fa7d6b728cf300018223728cd179c8ee2257b26a9b42b1f140ab0726454b0a10e3d52b051cf6f46a3657c659a954e61f7c74e8a1954f0ee8eb1b5b35

          • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            e37be79d796d3ecb84c06e3dcfcace6f

            SHA1

            9b1405986c3713ca90460e8185122dbf6efc8e5b

            SHA256

            93474b48ab386a426fe921f689d972b01370e8575b71104b101f12416f23e1e6

            SHA512

            b132f5deec942ca41ced19e3dd101258b982360a601bdd1016990855fa298eacbd3ab1db641c8255f818ce701c30733d44169918943dad88d0772b833d57d3dc

          • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            b9c84af6ee03bb5c6081bea2c3cf1993

            SHA1

            21f4b02fb94cfc6fa641e9837dab434df83e1b37

            SHA256

            cac2694fb84df27f4ae5b575cd39d478b935b69e1199c29b9c3f56fd306fa146

            SHA512

            03a53b8fa52a3d5a6bece6e13a3a8c82d02773f90ae99f308ca2b2ad7c5028029836d091f087285827d54931416b83e8cf83c197265cb2eecb9f263c30a5e660

          • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

            Filesize

            512B

            MD5

            b4897ded23597912da8f6e2985327989

            SHA1

            37ea4854e5a39b36c2676585df78a0b656104585

            SHA256

            5350a0f80a220e8b7da514ca992b65c627bde2e5ab93ce051ee1721c0d80637a

            SHA512

            23e44faa9afd204b7ab81d09c2ff3499d1b82d65ba651de372efe74be7470eecfbf25e04655389f136f3a0c2c9493e300726205460d93c0891e9285885867cbb

          • /data/user/0/diwix.gorbah.com/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            5b888abc8d7e8de560ba9ca7db0125c1

            SHA1

            9a5f89113470d28edde7cae7cb434c9adca5b46a

            SHA256

            36bb9adacd8a5e7b7a2575b741b6c1f95d1a8b96168c10588897d0acf15241c5

            SHA512

            60164619a5a68493b7058245a9378834ba17d2312ce787ed86ee240e14bd9fdfd296336cb32d63e43d315506ffd3138464f6ec07b1988ab291f250e68f43a369

          • /data/user/0/diwix.gorbah.com/files/PersistedInstallation7599348436326201798tmp

            Filesize

            569B

            MD5

            4dab5f794a884484fb3ae537efa559b5

            SHA1

            87d7ff48a062b94244085f9efe030d0e66234578

            SHA256

            0027770e3aa5f533d2a5d3f204aa680a3d93b3dc194d85580992f6197193e266

            SHA512

            58ec659d7a5561d868b7833a2346d827193ac3ae5c867cf65827b2a4e3d0e29ff35887e7948bcd02611d7760df8a4df8f1a04b42e5f9de9ea515175ffa489042

          • /data/user/0/diwix.gorbah.com/files/PersistedInstallation7609924605910791466tmp

            Filesize

            90B

            MD5

            8d329f5401d2a963ba7ac7f47d24f9ab

            SHA1

            942443ca12bb58d7ebcaa132ec15fb3a0dc16f33

            SHA256

            f68bf1c89aad1d3ece2e7cca6f5f93a2178164717a94749420d187c1b97e41e8

            SHA512

            6358d3674dbff26b76116c34fec4f8f40a2a1e9eac903c16698e47079926ebb49c66988ca79e353a78b9b5c526c01d12701015640fb01528aaafb806b96002ce