Analysis

  • max time kernel
    2497103s
  • max time network
    164s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20-12-2023 10:28

General

  • Target

    a3797856766fef6651f8c679febd12378fc3196c5cc74923d90377045107700d.apk

  • Size

    2.5MB

  • MD5

    6129cc4392d2e10ffdb80db67ca2534b

  • SHA1

    444f8a87f7c6c07be063b3d0b62f4c6dba0773e9

  • SHA256

    a3797856766fef6651f8c679febd12378fc3196c5cc74923d90377045107700d

  • SHA512

    4dc459c898655ba3d9cd78bc429ce08efa3a5744c731a7cc2f07f34033f71e9509a009256611a5138e7c058283b1f525eab264baf23c2984d128f8be96db9130

  • SSDEEP

    49152:GYhyQc1ry4hxvXxZoPeNk+JyUE0GLNMLi6NER+JwyniEWWoXf4i:G6dWrnPQeNxETbN6i6NSLEToQi

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.kabood.koroshkabir
    1⤵
    • Acquires the wake lock
    PID:4983

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.kabood.koroshkabir/databases/__pushe_base_lib_db

    Filesize

    12KB

    MD5

    ea628e04765adaf4238a5dcdff4bbd51

    SHA1

    a801947619ea8c368efe9c006a324dc6339ac60b

    SHA256

    885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

    SHA512

    c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

  • /data/data/com.kabood.koroshkabir/databases/__pushe_base_lib_db-journal

    Filesize

    512B

    MD5

    01ce759d51ab9078c4634181fc43acac

    SHA1

    415e8084a49c46854607a3de67a37a7a956dd9f7

    SHA256

    1b2dfd7c239d51008d51a612ad6dfa63bf94832cddfa4c0647c51281beb42819

    SHA512

    f8554e34bf07bf500d43159dbb921a69ca837e0fa0918a6eb5e295c5d4e324c1da808fac0a965732fb6b4d0a4236e15bf1b4234ee1e89a5f21e6b8f0bc5c76cc

  • /data/data/com.kabood.koroshkabir/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    7525c27ea8fb8bb31947fa3bd9f7ce87

    SHA1

    57186ce6094cfe36850ef3d500f4d78267f14e0a

    SHA256

    624fba8c907a970d4932125865c738a0a2952cce74b3b98ee9627ca03ea1ad8d

    SHA512

    a4edf99dedd7420e9c998a317db08f9b62f20338ee85113410480397a6c639d47f729f487b8b011233685a328ac3e8299e960c60b55e29f1b36fe0617dbd301e

  • /data/data/com.kabood.koroshkabir/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    420583df3b9609a32ca7c44332a76433

    SHA1

    2e8398f8a1bf357261db4b965bf77a2d4c2ab1b6

    SHA256

    891e74950c18324a360f75191fb26142d1550db184fd833b96bde746fe07141f

    SHA512

    2f9f759b5f62d2793fc9cf28966d09166117ce444a6158483c7eab96b8ac720c942ff468fb6bcbf553456f3f8f5165f7a6e401a39f0546f72ae322812322db10

  • /data/data/com.kabood.koroshkabir/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    7c32749cfcc1826183a321dca143a4aa

    SHA1

    eff006c22e946df9d91b6a7b71fbfa27daad0c05

    SHA256

    9c85c9ec8ed840fd13ee7f502a48d6abe2936046c341cf74a8a5818ce71c72f5

    SHA512

    5d7773000f051421b40ef87dface5fd3d28f7222cc9e5966b80a215f46a42928515febd03f266c66109d19b74002a27695ff65d06256b1e1f3b29c53381fa25a

  • /data/data/com.kabood.koroshkabir/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    152470b68d9a53ed80ca9a58bbd89c7a

    SHA1

    9e6a8b0595558336b030e75a09ca86597e82d50f

    SHA256

    ce3f7e2a29b521afbf9ed170ca5f05d09061a8881c9fb5d2652d43b4f44ad29b

    SHA512

    738bc0896aaf5ab68f204a51ff76e83f05bd9302fc2d0f2f4ded41a7d69d9aa2f19e62d3661433f0e093c4af35a4cda10788aca4f267765b075c746ce09196af

  • /data/data/com.kabood.koroshkabir/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    6e960d15c39d8db582c651e1fa4fbe33

    SHA1

    e4701ab64021d7515e12e358a2303d6d22cb1a55

    SHA256

    3ab657ce5e44e80595488e5f1d0304c2a9d4a84919c756bbe8d776c816566b42

    SHA512

    022905bccc1a73caa16f4c563f11ed66723388a4b56333328fc22edd990f8e2a7c0b84f49428840e6cc9df55357da49186281043faf702668f89e540be9cb60a

  • /data/data/com.kabood.koroshkabir/files/230bdacd069832bc_231223_040009172.zip

    Filesize

    364B

    MD5

    fa2a749097f13b0144da25042abfd078

    SHA1

    a9dbe41fa265490d93b338162552a0fbf9b1cb75

    SHA256

    41cf27c0cc2e85a6ca05a3a77620864ce2cdeed46260ee0367a01584e2808c95

    SHA512

    8a8bedb5528151264226347787a7b9ff32a4f581c9c039fbe2cb684460225220882cbe14c1f1a7eda4566571268b2af3de388ff69985e58607e88184562ec24a

  • /data/data/com.kabood.koroshkabir/files/230bdacd069832bc_231223_040009339.log

    Filesize

    256B

    MD5

    7997a1b4f8e7f3609cc14bec9f183861

    SHA1

    7506040476bd09b77c6c3529a3981a233114f2b0

    SHA256

    dd959b74bf27443d8eb4ce08d51ad5fbaf5e7b1caa25d4a7a524f147b36a875c

    SHA512

    6433f42148f078f19885d853b8fea4bad9d34791a6aac92c4c484eecc728b2c31eb3d85d43b7aabccc70d2061d8d5c97a31689a70ee7ab3c9c83918c2353867d

  • /data/data/com.kabood.koroshkabir/files/230bdacd069832bc_231223_040009339.zip

    Filesize

    241B

    MD5

    aae6a03d2c9f1bd75328d8add74a6987

    SHA1

    a2260e7f3d85655744999021dc7a29fe91e65eff

    SHA256

    690588f5ec113c1fa685c7162e943d4107e545fdefc8d9eb547d750b549e66f2

    SHA512

    b848d48464020b61b6415e1299b651068b6c85c42c483e75e4dc415e95fea0bcd153bdb2868401a800b04a5d4cd129357490c4061e09e517edf84d852709ddeb

  • /data/data/com.kabood.koroshkabir/files/230bdacd069832bc_231223_040009383.log

    Filesize

    256B

    MD5

    c429fb1aab213590f23a5cfde40ba800

    SHA1

    7f450f9156e3e112560dbd2e55b91e4a78dbd044

    SHA256

    b108c5efc080be806ce065e62459997146574d2a8b0653d3847c2908f5350631

    SHA512

    a76af3f282f9c5c7882a515e3d593451eda9dc4639459a2e7464bdbe465350a197f55abb93386af3d941fdeb3ee6d2706ade44a3b8da04366034c869169c9c72

  • /data/data/com.kabood.koroshkabir/files/230bdacd069832bc_231223_040009383.zip

    Filesize

    241B

    MD5

    e34718da1bc6a72b11b33a83d0e316ee

    SHA1

    0e0519b8b2bb8e09e62cf00b74b92d5c7a2cd11e

    SHA256

    aea25a15e07a626f623049f782bdcc1b55612460cd1a03066fb9abe3e3b86cc7

    SHA512

    6752c96bb96f8ac93d9039f5014937efa3608d6a70fc9a99a113ddc45614bdb39b0fc310b23563367808c4020000ab8899c0a03d76153a2c43a1c4a8b0c5593d

  • /data/data/com.kabood.koroshkabir/files/230bdacd069832bc_231223_040009430.log

    Filesize

    256B

    MD5

    92b2fdfe2e9a30554c4a82a5bb705105

    SHA1

    00ad6e2f483e1cfc0422b45693ec55ce058efc95

    SHA256

    0f12b258b619a61ae0305386e011fabb284f98afefd0ec1cab9cfc07957f1b4e

    SHA512

    f4ecdcefa0c90b95dbfd0ce1ba86cfa91e1b0464a090bb79cdb97093849ceff07e738e0019a9126e1652d90e160bff10e1ff72f6a6b3c810ce9f4057d1f46b4d

  • /data/data/com.kabood.koroshkabir/files/230bdacd069832bc_231223_040009430.zip

    Filesize

    241B

    MD5

    7e0e4f0e19022c5d75a1b29715b14812

    SHA1

    69fc21afc4fac0f37b76d89c5bd638c975f2f6b3

    SHA256

    a249454056670788025b70205a1264af5917cf472f20201421d8c3a38ecfa1d2

    SHA512

    b06e67443ae078fa3c7c715bfe921ad94528686c4bbb5c1d38f49737b2aa8f970ae7b98b97c425df95498271e8ca83831f052b3595a0c5ab5a08fb0adee8b5a2

  • /data/data/com.kabood.koroshkabir/files/230bdacd069832bc_231223_040009464.log

    Filesize

    256B

    MD5

    05e02b75b8221a1ce837f70bdd3b5fb4

    SHA1

    1c7562cccd10c2b2317f27c0838658986cdd20db

    SHA256

    45b58ad599ee831dbe5ceffa88d5f83e1b7328d09ca4b923cf4f90ca058c406b

    SHA512

    623765f6920e084e0bdbefe9e7911ca19fd5008e24ba251453b0c3dfa51f3684f373c9d22de884bd30370ac53a6f2b8f2e90bdd6ad7033461dfd6dbf288857c0

  • /data/data/com.kabood.koroshkabir/files/230bdacd069832bc_231223_040009464.zip

    Filesize

    241B

    MD5

    ddf6ee640e028a7f47d80092dd9ad497

    SHA1

    330df2a758db7ce03081d41f83a1e292a8e4f57f

    SHA256

    55cdcf241eb1768f633c173f4479d3f4a8ea8ee5f8d42161fffe73625e09e33a

    SHA512

    a30d457be26ea3476068455dfb663f31cf0c3c3fd1356455e5830ff2861bacf66c11001762f3176e056b566488c5b4a9f20e6ce6389380abe5c394477ed54d35

  • /data/data/com.kabood.koroshkabir/files/230bdacd069832bc_231223_040009486.log

    Filesize

    256B

    MD5

    b4b630f0ba585b3c98fc66fe232ce939

    SHA1

    ae1c39c8cb42624931395e035ce64935582b81d8

    SHA256

    0713a241dfb0e409215cca70fc08f8f224748eeb1d9e08f59b634c5643566f81

    SHA512

    95b2588e4f74956a58afbc4f557c12f598d88752a8ecafea061dc2970466913e5ceb3ec8ed82d70184b1fb8f3ae1a8b404414d8b33c3e7d062a26893c52fc330

  • /data/data/com.kabood.koroshkabir/files/230bdacd069832bc_231223_040009486.zip

    Filesize

    241B

    MD5

    4925a1ab4d07375fd6f4f7a42318555c

    SHA1

    50b97ab27fca033e983b144c75f68d801b98b41a

    SHA256

    de07ad28fc14a5a36aff7a24ef27188c6f8cd1fb25073bb10b87e934e0f2f8e3

    SHA512

    0dab5eefb50c7d0c0a891f72d7d3c6eb445ac1d242ad57c561bf3c9c4ed20134431e9865a129a1ddc4a6bd4475b99ab9774594325582bbd2f04d5d7198446beb

  • /data/data/com.kabood.koroshkabir/files/231223_040009060.get

    Filesize

    210B

    MD5

    e8cb931b2d7a17c5919423f58acf8153

    SHA1

    97c575e2d28e18ebc067cc76a7ffdd654c1529b2

    SHA256

    7a64988b44443351ac7d068f3afac13b4e42a9fec10e01021992814c2cb59f34

    SHA512

    821e9a754a1e6b5bbfc20c6034d3994fa1a1207264696bc6ded2bbdeaf192b584304737c06331374e1a4f1ef0f28a733b952db0538b09e7961e1b8cb25dc79bb

  • /data/data/com.kabood.koroshkabir/files/231223_040009335.get

    Filesize

    51B

    MD5

    e24b0bec698bbeac08f79137658ad204

    SHA1

    1eeed41fab8ea87698976a165073f797f582b852

    SHA256

    989c199842cd9a7f23f72d9bf7baed49961652a011ccc80b441ab1a7ea32dd61

    SHA512

    6174c21a14caab2c95ec00622ea9d4b8483b321a78fdd21bafd72fb1cfa2d3e33f179d6a0d8c58d7975536b0ab43b8c4e0bf38fe973141b3b950e934e04e6545

  • /data/data/com.kabood.koroshkabir/files/231223_040009378.get

    Filesize

    51B

    MD5

    ed93eedc27ec1b2aaf379bbdf9976787

    SHA1

    92d4d184a935ae1eb977e3f8b923663563d25cd4

    SHA256

    c4f598f15d18223e4913700e9bab4be4c42d438f0b564114cfbc1bf9cf285b65

    SHA512

    c443f6ff8293003c94fb30864784569ff7513823f031e0c86b56fe9413bb575637c477cf5d87ab57155412808163509158caa5edb248c5dd04025360325021dd

  • /data/data/com.kabood.koroshkabir/files/231223_040009423.get

    Filesize

    51B

    MD5

    c16f9f86e5e351c83f18d5459be19eaa

    SHA1

    cd6b36f46f3b8e314b16bdd0976ab25c2589d29c

    SHA256

    141382c7e8b715e7f8af7eea9be3865fd44f4bf38ece8f93fdbb121c6f489502

    SHA512

    7c51c6b0daf35180f9d3572f47701f75f2c9d96a435aa99c8e686e1c0afb27c8f599115818fc6975af5afaa228dc128d02160e0c0bfd53784a8bb4a0ab3b52bf

  • /data/data/com.kabood.koroshkabir/files/231223_040009459.get

    Filesize

    51B

    MD5

    6e131f1470c984cb2aeabf7ad9329171

    SHA1

    8c81a8e2947683f0f0c79cecce9d31a71639350d

    SHA256

    dd3da8f868f2185331c1b16f731a5882d9be730e34e4c75b0d42bb7e6e721fa7

    SHA512

    0aab2be29135028157481f713ce54d7e27de115731a77c6459a67aafa41f1b252e5c34a8ee96e107f1073c832b07a8d0149f1058ce59c68246ea1d841e83721a

  • /data/data/com.kabood.koroshkabir/files/231223_040009482.get

    Filesize

    51B

    MD5

    5b6436d31da1f5bf870951b5ed9b7b44

    SHA1

    850b76903187c79f89664f9b6526fbda5802cfcb

    SHA256

    d6165aa14684130493afac5eb5bb02e31068237ce9d26ce559e4d787aa6ad9cd

    SHA512

    7b591560565009fd25d3f122f11aa316b5e0b905d60cd044c299b64ebe5b774585a2c44885baf1e089ace11b759c424a44bc4814c8acbe3614383207a24e5b9a