Analysis

  • max time kernel
    2195016s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    19/12/2023, 12:11

General

  • Target

    1c3ff29324eddfd6a956fb7e0038ac27.apk

  • Size

    6.7MB

  • MD5

    1c3ff29324eddfd6a956fb7e0038ac27

  • SHA1

    938b4e4d8dc7cfeca9ce70d378832f8583652af6

  • SHA256

    62fa23ee9a51671e3b861e16c958956df884d25034b556b7d9ef1902566c817d

  • SHA512

    78638aaed6f1b18c8a5a4fa3126f5824865dcfb383e7fa85f23714862d8b9bcebb3f57ca9584ae4f088025ebad47facb9cb0911e7739a50842dd550615549f7c

  • SSDEEP

    196608:5XO4nZdzHoIqU5Fvbi9wUtYYK4N5oYpSg2K:VO4LzHYU3vbi9DtY4fS6

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Checks the presence of a debugger

Processes

  • ir.rashin.mototel
    1⤵
    • Acquires the wake lock
    PID:4613

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ir.rashin.mototel/cache/image_manager_disk_cache/0078a676748a1434b10a1734f2f31355bfe664fd03287b1b9bb369500255b1e1.0.tmp

    Filesize

    33KB

    MD5

    f61ff4a0131b95a9c43c718bd2fbed86

    SHA1

    e3c13f403ae1c7b85767d8725d35850e608ac902

    SHA256

    124de0f119464c69b14b48294538a7b8831c78ca1d68750609e920c25c14e3f6

    SHA512

    90d212043c979a115efb5a60f8cdba01eb0fcafe4fce199d1264088ce4de1c6ac090b3e6b58cd16c28ab8866134d875a9ae20d4da25fd65afcf8bce3211b6a83

  • /data/user/0/ir.rashin.mototel/cache/image_manager_disk_cache/342712739ac5afb446e193575e9bf6cb3fc9954795de216f89b37e63b3dd0137.0.tmp

    Filesize

    41KB

    MD5

    a0876ab179c7615680fcf671f889c101

    SHA1

    d97ef4302df54e140d9b2e60dbceec26c3d5f0e9

    SHA256

    e6cc8002cb19bfdf6d9ae2099b0ab8d284fe3fe6878e3231c5d62ca591193d0e

    SHA512

    8c386ec785a392d66f6f9cd40d68af59895939ebb661fcd2aebfd81cb179ecbf52644c2e6c248706d4e004694818ba346155e3d5934a16a926a5dc7a11fc5e82

  • /data/user/0/ir.rashin.mototel/cache/image_manager_disk_cache/f26768e459cb71231f4ec0fcb1efaa61a1c286b7463fdfbcf82025f74c41b61b.0.tmp

    Filesize

    39KB

    MD5

    3c4402d839644724af628325d13bcf73

    SHA1

    48572b7a3689ae30f0ab610cf2bebdcfe60d7547

    SHA256

    690de7dc5db937822ba173a60d63a4b77d804aad413efc991f3e9a65173492da

    SHA512

    549af1d1ba10c987269a524974b5d952769589580129ba91e2427170566b0c179af6311e5a75ac7d35aae45702a40d9b68fb4cdc3745bec84bcc6e742f0bae70

  • /data/user/0/ir.rashin.mototel/cache/image_manager_disk_cache/f3f51126d39c6e7db0ce22dd504c2bbb7d34656bcc2d25f602415d4e656b922c.0.tmp

    Filesize

    31KB

    MD5

    91e7a86fca21a56f6bcce0cd705e92dc

    SHA1

    7ff425d3a1a5db876c441d8fb4c4b27d71cccca4

    SHA256

    1e395b824d51c1774572bb8ded9b38869a299379f9186bd0724bb64911614bfc

    SHA512

    aa36c518d3cbc4fcc1f17e2ce2872d296db4d9ca1690cc640dde675582e5056f3b4d612a7b1c15207ebb0744f9b89b2f6a9b19dbeabe0e9ad14b8ed7b60b17b8

  • /data/user/0/ir.rashin.mototel/cache/image_manager_disk_cache/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/user/0/ir.rashin.mototel/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d58a21dd780cee548cbdef81d20d793b

    SHA1

    fb37e340ad370858604de5cafb0d7885aa9d691f

    SHA256

    9ddd6448554e05f109bcab74eb63c20ebd9612a1b88f701563419c914cee2298

    SHA512

    8fcdbca20211f084c65214eea093bd8e5ffa24577193c030468f27064df1b035312fb79b36e344b3592ff845ab3f343b080e5fbec27e46f553fc368ba4091baa

  • /data/user/0/ir.rashin.mototel/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    9fa9c8da1484abc26ae92790c11d3d1c

    SHA1

    7220c9f030251ec83709d01c25752aae58f97811

    SHA256

    9c181fb45475235d193dbcac4aa9728bc6c959542e03978d3abae1d401ceb175

    SHA512

    37221f38fe4ebe25fea2e39611ff0d85b0a9ac0355d61ab3a4e3bbb9f32adc192d66c22b66f1717b30db93558e18dcc356b0c90aa842a2c613b657766d5b3c7e

  • /data/user/0/ir.rashin.mototel/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    f481668c493326f04c986c1cfab248ff

    SHA1

    f5c9c802971bb1b900e3319b2a329448ae4722dd

    SHA256

    8219abc6866a8b5e0718c308a91c6629ca5d534b5daba02ee5eda393b3594ee2

    SHA512

    7cea8dfd923f4b0d993d859e4e525001e7b3364f3d1d4aed32228c7aa6ed8436066fc6ea3f350dcc2cc0ab4311d89ed0d81e1275d7f36f00d6c0c6456ee2207d

  • /data/user/0/ir.rashin.mototel/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    6c3c00ddb4a709dd64ac1a32d8eed1ad

    SHA1

    d50861d0036fe78a457519d3770e1847fbae146a

    SHA256

    ceb305d3aec5a750ad15b2c936da240d09b151a36ef8fcef611e7728ce4fa281

    SHA512

    5fe8068d850620c9c51736b86fd2044bea7a526146da52e7e6a34b940dcb52271469b144bf018b4e62e234560da972a90b996f9584716c5e8e76e66fead7281e

  • /data/user/0/ir.rashin.mototel/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d4a5645149fea1298f564e0d6ba0f6b9

    SHA1

    81e4ffa84d2b68c3a00b22505cda3338739fd968

    SHA256

    ca472f3593df20a4672d71d541d5dd8055d0c1775e10f8a2898ffd774ac991cd

    SHA512

    ed813ddc157b902f450fc7f06c6ac812fe45f755012a43e574476c69ada4d751e6f5d8b2706ef05ac0f1b8ef3cc2b872193897e04903ac3e6c2a83ab8873cb83

  • /data/user/0/ir.rashin.mototel/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    9e9f383e527c795a8ab41a2f45812863

    SHA1

    eda70ac1f07616d9217cc0bac8c04d8d45d47cd8

    SHA256

    cb2f1deaf901479a0e171638961e619200cf689f114e6e839e3aed43a19a3419

    SHA512

    674e8fa9ea1cf21efebad7fc72e0f37c40bb47787eaadbba0e7e30f0c7623be8b5febd360f7da22523112df08def7a8eaad33dfa20f2fac89faa49b01af7d422

  • /data/user/0/ir.rashin.mototel/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    62459e2d73f4788189fb517eb58ecbcb

    SHA1

    a5b14b2953776cebdf17e7684ac7bdbaaee4cb3d

    SHA256

    49c63f745923f19a0e5a45c093dbd6c71d61be49cbac578c44ae9cd04ef099ec

    SHA512

    caa22f5a54285f48b7df4aa87557767ffc9a1ff28575bfc2862f62b745d02ccc4885eddbe35d288b25a0d157a8f075234e3db27bf3805c15f41ae28107018f5d

  • /data/user/0/ir.rashin.mototel/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    3cf59d24689cbad72ecfe88520893eba

    SHA1

    1c8a8dc621850b0e17cb8d6c9ea0ca714992e6d3

    SHA256

    2fa93070f8dcafa3c34347a8baed4a1adfc02894ce12105d47b35fb60a3e8293

    SHA512

    4f0646ba4398e53f5fa24f56856e93b1e8f2433a83a56411e187a07b43234ba2952ef3f71fe620d2ddc543a442c01dd49fa38fcf7b45f607a28eb88ea7a1bb64

  • /data/user/0/ir.rashin.mototel/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    9def0473965458eacca27de41668eb7b

    SHA1

    d9cb77927fe3674398433e5e78808babf6a70892

    SHA256

    b59e64fc71aa9afd54305cd02b95d34f37854b315e7345582ca79ee77c8b471c

    SHA512

    b7c32792aa51553e1a4547d875a38ad77dadcfb9424cc53ecaf274349fca20ef6b7fa9cf8448c502f6b9bcdf0a4999c38232adc0681748d29dd5706d23c1970d

  • /data/user/0/ir.rashin.mototel/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    1efeb847a7e0b252c317a69f1541ede1

    SHA1

    f9791031d762511e89dd8b13a601d868fff2dbf8

    SHA256

    bc9662b6d9f5fa8f0358852b792754ded71c4e07c37c791a1cda7ea07be020a1

    SHA512

    14a0f8db45e2737587e4b4362abc2dafd17ea73a6932ed8f79758eaaaf283cb1f0ee3fdf1e9ad2ed89ff467e239c00c349f6490da6ceb2399eaa3e180ab4f168

  • /data/user/0/ir.rashin.mototel/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    192f4438cb34fe7d99d28a4c33ec827f

    SHA1

    15cb4489cbfe64baee4e0f5521f059d5d2a1e92d

    SHA256

    27f2cba72d2d41899281698e8631ace45ae11e7e847579bbef809e0b0a1aa334

    SHA512

    20e039d3b14f34d913bc0584cfb9bc4ca13e30258ebd28db1aaa00b53c8a8e8b8d7f9821a1e9ffc10f627826f7030a4d0a2692eac32f75a459c04e40df03bd0d

  • /data/user/0/ir.rashin.mototel/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    7419053ef6b172a35a31cb3e62141c27

    SHA1

    742f88da1e94ea1dd51978c40077d9a5048ea4db

    SHA256

    4d1360bb0722edb250f6afac5f1d34ce6918aa05936f1cb9c00fff2cb6b898ea

    SHA512

    a546d5f47db5ab145d752abf4253c3e9cef6df8866fcb10531e424ef314ac649dc451cf237d73f24c7806b35d4ab16399d8486ed7c901e51ed55663341c71ddb

  • /data/user/0/ir.rashin.mototel/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6581BFA50203-0001-1205-80BABB71A1A5BeginSession.cls_temp

    Filesize

    79B

    MD5

    b414c980ca434534980a77621ab40b51

    SHA1

    67cf3941a5218046147d6ff9f8dab415df0b54c3

    SHA256

    d531e5613636e771fcffb87772a4bb3933d9c33b30f8b9d73b578b3aff4164b7

    SHA512

    8866d2b626522d7c3584a6763d5826e560c8fd33f652f5901a6316876d779da283fe98b4daa28f7eb9b847a820cd58bfdcae6ddd411b579807b36117435bd829

  • /data/user/0/ir.rashin.mototel/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6581BFA50203-0001-1205-80BABB71A1A5SessionApp.cls_temp

    Filesize

    114B

    MD5

    2a97708bac3b0c683b1f399287c576c1

    SHA1

    d461621366129bc67b4dc6850aef0db3bf45d4de

    SHA256

    43f69907f1a60a5a80cd85de8754da5babefdbeb9ba1af380c9774e9a1912882

    SHA512

    bcff15317077fa641e0f56d8434241def7cccef7113f6111dc4484e9b0a53b4c9c5e68437db81ed3d5238b88f6a56c8781bbad60d9a8a17339095b06485e62f5

  • /data/user/0/ir.rashin.mototel/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6581BFA50203-0001-1205-80BABB71A1A5SessionDevice.cls_temp

    Filesize

    131B

    MD5

    f2c23de07a3b3772ee472ce93832ccb9

    SHA1

    bb866b0642c09075e79cac0561944ce1906de198

    SHA256

    c88b0dbabc902ffbc9002bc3c8ee7b1fc238ce25423b139f14b386c7606301f4

    SHA512

    460e6dae5ec90b48b5175a830c2ba00d2ccd44cbac730165a1d1c922e1460579cd0d58e6c26b3b00ec473f10c602096022e1cfc04022610f3aba361684344d7d

  • /data/user/0/ir.rashin.mototel/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6581BFA50203-0001-1205-80BABB71A1A5SessionOS.cls_temp

    Filesize

    15B

    MD5

    b3d9541cc92a9153d14e5160f8d8c008

    SHA1

    2e1ac80eb381dd82a03795b682f92020348c0113

    SHA256

    1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d

    SHA512

    78074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f

  • /data/user/0/ir.rashin.mototel/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    518B

    MD5

    b53feb7bab9e971ca1213b725201f69a

    SHA1

    94c8a3ae413777a1373c7293aad355a520599e6c

    SHA256

    6928f35b1ac3883b8a7feba43c2a883028a19eb59e80566f38fe38934aa5241a

    SHA512

    2074f73292bb7bcc6348914df8fb79486c967204e51b2dc0b8d746257a4cff07a726f124d2b9604bf08b0a456c6e40977996aef2bdc67857d79e169c339dcfea

  • /data/user/0/ir.rashin.mototel/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    1KB

    MD5

    64f9b161ee753d415c1119f9eeb39cff

    SHA1

    e3d4edffa844a43c05ce902036b6b7aa6ddff8da

    SHA256

    408c4b4aa4632d14cdb07546c205649c5e03b4726d09d8bae68ce7a808244eda

    SHA512

    e42064cf469195db3acd00a1b9b30ed8ed6c0fda952ff58baa67d7b35bdc68546e1ac5c019d3e6b04df3f26ec29ed8385973544bac785cda17344e55a00389d8

  • /data/user/0/ir.rashin.mototel/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/user/0/ir.rashin.mototel/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_54f11e31-082a-4931-bb7a-647e10f994cb_1703002024714.tap

    Filesize

    401B

    MD5

    486f156dc983d3c3b6cc4c04cb2fbf67

    SHA1

    1dbcc4409b59c2e8ea3eb20690e44901ed53fe1c

    SHA256

    f731d9464a4f2f8d3543b9e54a28799518b31d1b5ac09954d59cc9672506184b

    SHA512

    41bae8c8f4b6b027416637f5efab5fccd06e2f805a53765786266a3dd1ebc7d6e5f0b4d4e6aeed365484c8ebf4b6c1607a14dfafaf74b92a8c579dbef5eaafa4

  • /data/user/0/ir.rashin.mototel/no_backup/com.google.InstanceId.properties

    Filesize

    2KB

    MD5

    6c1402e4aea4a03fc5505bf327c2a389

    SHA1

    726d116ebe63b91a7efc2b6a9ea2d701af48aec7

    SHA256

    04ad0d8233698a51aeafd5d0d688f32a6782c569e6e6d96b96334cae0a379b13

    SHA512

    bffb39ee11a86c9a57ba23fb3fdc737b2889308cc09702d81b9b59603b266960ab3fdc390ba72b3ef7ef4c1b1131632267a529c83fa63caa65dbb5cd25fa45a3