Analysis

  • max time kernel
    2497142s
  • max time network
    165s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20-12-2023 10:28

General

  • Target

    a3797856766fef6651f8c679febd12378fc3196c5cc74923d90377045107700d.apk

  • Size

    2.5MB

  • MD5

    6129cc4392d2e10ffdb80db67ca2534b

  • SHA1

    444f8a87f7c6c07be063b3d0b62f4c6dba0773e9

  • SHA256

    a3797856766fef6651f8c679febd12378fc3196c5cc74923d90377045107700d

  • SHA512

    4dc459c898655ba3d9cd78bc429ce08efa3a5744c731a7cc2f07f34033f71e9509a009256611a5138e7c058283b1f525eab264baf23c2984d128f8be96db9130

  • SSDEEP

    49152:GYhyQc1ry4hxvXxZoPeNk+JyUE0GLNMLi6NER+JwyniEWWoXf4i:G6dWrnPQeNxETbN6i6NSLEToQi

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.kabood.koroshkabir
    1⤵
    • Acquires the wake lock
    PID:4633

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.kabood.koroshkabir/databases/__pushe_base_lib_db

    Filesize

    20KB

    MD5

    2ba45a2eef64fef920e8ffc387313460

    SHA1

    61e577730a56f204175523c673bbb1aa602fbb2a

    SHA256

    13ebc81c465ee927a8ce257b6c5633a9aa9889488bbe0c7aa4c829a31ecf57a1

    SHA512

    eaad0db4d8b4166f0507f0975b468da2c14d39c0bf4bc91f4f98c73156ed6e14bbd3ed60cd2069996d290d69a67815791734b16bbeeed7823bedad2363296c2b

  • /data/user/0/com.kabood.koroshkabir/databases/__pushe_base_lib_db-journal

    Filesize

    512B

    MD5

    81927dcc34f147cb211c9a6bb5c8fcc4

    SHA1

    130b50df6e72426152d711ee89efe72fd1d072aa

    SHA256

    331bdcb489e613ec99064d4ff2402f08f6b6b97041c0c1275646a1ec68541109

    SHA512

    310eaa2811386e9fad40ccfd86dee594729547c8aa68e54f0dd641fe0030ade600c2a5ee33870582a91ca979a074766d546f5808f7c6d25a192bc187301d70ac

  • /data/user/0/com.kabood.koroshkabir/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    bcd518a9e7a21473e8b1cdbba17a5602

    SHA1

    1c7504deb539170a21a292999eb3117b4fa363ad

    SHA256

    0c1fe1946fe76579e5b12a381cfeb27ca9d1af9d93c082ed335f23b70ec2fdc0

    SHA512

    d7a51d8b4c38d38be16eb1a429d82b122b3eecdd13313299f9c7e6f7893b7200612ef4a498c748e09f9816d31f1b880063b908646521431f48bae9e8afd3fd6f

  • /data/user/0/com.kabood.koroshkabir/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    77f2ae19be5057d9255769c2b8f9e18f

    SHA1

    ab85ec0a4b55462776202cd83ba90879bcfbbbd0

    SHA256

    acd3e93a85c1254ac3dcec1ee6dee2cd92ef2129c27051642a609207644515ed

    SHA512

    5f00c2d6080a475777179d55fd8f6bf1cf5e74681102194aee31e2edb539ed2205516add936e91223d16bfdec8eaecbaa51b8853cdd1006bd44d1fafc03304b4

  • /data/user/0/com.kabood.koroshkabir/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    bd4a72f7fd2d1e10bb88761225b3ea7c

    SHA1

    7bde9e31bc5cc49dd78b0cc7ed8fecc964179a3b

    SHA256

    9e8179447a5d6edae5acf2b8ff57ee30b37bef10e28d28f4cc8d74f09a3cacf6

    SHA512

    f94a3d443504933d6029cc14c666ed352574fba1e18aa5711cdc5326ee123443f0c36995c208f8ab12859ca524e851dad7ad7d996c8243b2252bc083ae93518d

  • /data/user/0/com.kabood.koroshkabir/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    82652b158b77a0321d474500d75c1bf3

    SHA1

    c329ab6da98fd8eb41b2b4c664fe52090bbef432

    SHA256

    d89d74175e23857da780733b4b28629ae34d5a568f31e37461acea6339bfa85c

    SHA512

    abd2dbd0490de751a44fa0887b6bbb45b07f9f7c0c002122734316fc1d022e46de0d459a96fa60fd99a099346c4ff260c4ed804e5b39dfa292adc40e57eaf2b7

  • /data/user/0/com.kabood.koroshkabir/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    5187647d0e1bf274a496f3aa4f358b2c

    SHA1

    a8f52c64b43498971d1c57790e2c1aa872f10b2f

    SHA256

    448da59ed875b57d853c051a90bc59aea37e45f2875e2d892fda9ddf9e1775e9

    SHA512

    383ced788f446a5835b34ba656cb89375936acebd7aa4498e6546444f823fe042c1bf615f42fd7671c1d3db50a8d03c98cb97899c47c7cdab2ab1368056f0821

  • /data/user/0/com.kabood.koroshkabir/files/231223_040043254.get

    Filesize

    210B

    MD5

    39c006a2b2e9e8ed5c0b9cad62caeed8

    SHA1

    7538fb9f536864b1a26d6bfb06df7079f12327cf

    SHA256

    de5764e873af5ab6c22a76ae59f4e16e17bf7d79bffc4e03b77d117f7f99073b

    SHA512

    9ceeb840edce937da2eaa47e2817a7ac897462a5891dc940504b65c2260a000819c72d32a5f7bb5e237f2be3e1f621a08c3b54f04177568a4f162e56200a39bb

  • /data/user/0/com.kabood.koroshkabir/files/231223_040043421.get

    Filesize

    51B

    MD5

    7fd6ac8119691e97b02c7c435d6c29bf

    SHA1

    0b143ab04406cc77972b056a424f379d041a9bb0

    SHA256

    ce04910929f5bfad1307fd5b9deef0d97a4c6d8751337c1427e5e96bd6632b8f

    SHA512

    2781c852383c7ac5c2ed344d1b8f770ea38188168793f7cbb789bc53e63882bade7ee245d967534a51e615d79180e3632752e0b50994f754ea7219c11a7d457e

  • /data/user/0/com.kabood.koroshkabir/files/231223_040043493.get

    Filesize

    51B

    MD5

    10d2a2bfb46f5612766a6ea009843762

    SHA1

    7eb3a2545a4a57fb628178a48859143a7b11a3d8

    SHA256

    53e2e33d83531ddc523abde9e6e665c3829e2c9b04114fbce268cc8723ddd607

    SHA512

    b81765c369fdd130d77448c04b3ad56c973dd6b4cf48b87038588cadb853e9d506982543496c2d28c3f9f7ccf1230aac1d66296dbccd618499d8181953ced7d4

  • /data/user/0/com.kabood.koroshkabir/files/231223_040043558.get

    Filesize

    51B

    MD5

    703584898649f897ee28de72112a83fa

    SHA1

    2924bda1c2f747498063b3fcf7a5aca68c794244

    SHA256

    005472e5beaa5a4adee7528ec7a7a3dd9910314e4d46458aef2e321b13344ea3

    SHA512

    b9eb8611ffe9159fba58d671347debafa946997aa9b282c999bf689667046b2b9d7c2cff5e0242681440a0ac25d914c3f7d9f61d30188439c109cb478b821615

  • /data/user/0/com.kabood.koroshkabir/files/231223_040043592.get

    Filesize

    51B

    MD5

    46d699db3ffa4f30af5fd83d03f0b48e

    SHA1

    77b366ef57b7aee1c7490aa9a36c1b3e56d3739b

    SHA256

    abade68c264fe363a2c9ef62bbbcb77182fc1ecfbfbd916655015d36368c73ee

    SHA512

    911d1e0b99a011d481bb50039a5d228e149e7caf90170fa51b15277f600111aa7dced451c7e5fd67765b1edaf234c33758e14b828f3eba029d1bb52e9358ba44

  • /data/user/0/com.kabood.koroshkabir/files/231223_040043613.get

    Filesize

    51B

    MD5

    879cc79706e24b1b41c39ba185473f62

    SHA1

    913e1887f7602bd9db101dbbff5dc417b0b3c393

    SHA256

    58195dfec01e52ffe2736f7f3028f4454fe7c34e103e2b3e627a04540839b84b

    SHA512

    826da5b0724d2c98d9222bb5613b398d5cfdcd778d720376ba68574123316cfe55d4d877d5a4cee302f848cb6f84cf0eaf5e7b9dfe01fd42a9221fcaa0f06322

  • /data/user/0/com.kabood.koroshkabir/files/e959f73505cc13d0_231223_040043265.log

    Filesize

    368B

    MD5

    73f4b88484a38bc53d8b5469ffc11c9d

    SHA1

    6f8707a485e02e7d8be97db749ccf56a4d9f9732

    SHA256

    c8b244c9129a70040c644d76abb6e26ec75d8ac81cd7963b8e912870332bf6c9

    SHA512

    8345960a0eec950ffbe54112085996b7bd15cd1e66af4055d725a2245def47b5d2fcf70dc9dee8082df3dd7de5bfda5e8a86adc032e488379ebc97f1af6c3b19

  • /data/user/0/com.kabood.koroshkabir/files/e959f73505cc13d0_231223_040043265.zip

    Filesize

    361B

    MD5

    dd2b4a29c279c49b5b5ccb6c887639f9

    SHA1

    88946e280b371e82cfe0889747b21a7c2b196699

    SHA256

    88cb9a8eb823b6a611018e84bfc5d6f8efd49df859778567799669304ff72a31

    SHA512

    b25914a035ff5be5490728ed220ae532b97d8bd87cb8277509fa74f03c86544fcf61d748c82d079775b4e2ee43b535efde3c5168da8f413bb6124d74e5079993

  • /data/user/0/com.kabood.koroshkabir/files/e959f73505cc13d0_231223_040043426.log

    Filesize

    256B

    MD5

    568756a5607c3ea630a55e8d46cde19b

    SHA1

    62d860529d08ea05e33562b34d61156f63d6362a

    SHA256

    a4ee062cdf66f2c0d804df2e0689dcfca5b6a866a3144e4f1d43fd91366f077d

    SHA512

    2d05d4ee9a90d3f6473b66a4a1688b181a2823e3e446770e8bed9e1a8f1d809c62fd0e0e077fab7721fe9080191476f76938c7c097ea1df0fa42dd4aa674fa82

  • /data/user/0/com.kabood.koroshkabir/files/e959f73505cc13d0_231223_040043426.zip

    Filesize

    241B

    MD5

    b993201a1de8935e31961b1866a4b378

    SHA1

    ce4b31c577823aaf655b8f6e59d11bbf89cb16ff

    SHA256

    887f5347b3fc185bf5363cf2923ea8ff6e63b0b64ff2717269bb61b9a420b439

    SHA512

    ea0f15d2eb6976059d856ddc4d02929154638acc991c35ee8ea8aca3df99b96e21cd0d8357a40c18bacb715fc4ec8ef38399a1f9f35438b56417e39c40a30a38

  • /data/user/0/com.kabood.koroshkabir/files/e959f73505cc13d0_231223_040043499.log

    Filesize

    256B

    MD5

    d60f3f13b57f69715e8b878738a57754

    SHA1

    30ee349966f4b65f3bffbe0ded7db30ba9236e3f

    SHA256

    fc44bfd7d1a2e6c7c01a80ac0ba63ef6f59ca7d9a55c5c3d41ba2b829f5e996b

    SHA512

    ef6883da449754116bdfaf0fde81bffc670cc3490de1ae2ac970e8ced7527e4d15f687f820810448746fda8571ab72a08018cc21ec0bc7d225c8551a96a88645

  • /data/user/0/com.kabood.koroshkabir/files/e959f73505cc13d0_231223_040043499.zip

    Filesize

    241B

    MD5

    69a2b7afef13a9e0006651ec011209c8

    SHA1

    01348d07c2e565a3430088fb3e594ba6a643cfde

    SHA256

    f979e708e5bcc557a9dfac8129e288100dc38b776abb86191ede431824342ad2

    SHA512

    2ad9c1bf843cedb40b07ebbdb4bbcd67a28e8c444b6b704b89c999b4f036ad11f9e7a9614d09c4d784dca2d5066211827f20b02b6bb063fce7548f2cf15523f4

  • /data/user/0/com.kabood.koroshkabir/files/e959f73505cc13d0_231223_040043569.log

    Filesize

    256B

    MD5

    cfe659fc059c3a24c31d8263cea314ff

    SHA1

    c71a2327a400cd2e7995ac19cc09e8d7e099f248

    SHA256

    992c911cfb3c1680a225342ed66f02a1ba8de0d1b5f7977fbe11488ca2d69b3c

    SHA512

    7909c83536fd9c3f887a20c91686a75de78ecf0ddbf50fb52d916c5ec9741e133d4bf3f5d61ddfc371ba0eb23e33bf9fe816cf8583242298ba07f2b72a343ab3

  • /data/user/0/com.kabood.koroshkabir/files/e959f73505cc13d0_231223_040043569.zip

    Filesize

    241B

    MD5

    d7521fe2723ea575314c37116506dd4f

    SHA1

    4971a52d692665489962aef78f24e98295918c6f

    SHA256

    8b3d0b6e154c83a0c821afcb1ff5d7aed41f4cfa17738eafe0ea174ae0776037

    SHA512

    f6fbc5137aa222961cfae00828c54e3eb4f67a891d56387ae4a71e50061dd1d7cf6c275632e909ea761f083ff47579f7638474a14fe8cc126be74897ce7a45dd

  • /data/user/0/com.kabood.koroshkabir/files/e959f73505cc13d0_231223_040043595.log

    Filesize

    256B

    MD5

    40b77f0ed999747ca486ef8329aea9f9

    SHA1

    a76dee3599504287562c0a7460b8ab75fd138a15

    SHA256

    23bc8aacd59ace7be9e4632ae9d066137ed33fe4b2659fd2a5c1d488d5b66c22

    SHA512

    c8d924253b69cf166d5298e24c2bb088d1c6ea3d2bee0ba21e14578f49f260a025acca539824f63ec23b725581eda9bb05b132a538a9ee5199094f6f2052c21b

  • /data/user/0/com.kabood.koroshkabir/files/e959f73505cc13d0_231223_040043595.zip

    Filesize

    241B

    MD5

    36d240d8c747d05dbdd0416c8cdaa735

    SHA1

    dc88d192e32dff5750b9d171f1ed57a480c62bb0

    SHA256

    cb9d49614f01ab67be925e19a2c41588c48434d67bc422c8a597685081a69aaf

    SHA512

    c29515ca84a4142ba723f8e2959ae66cf66bb8850589df47ec31cafe7c0651189b8bf8aa6ebbfce00c2a4a4530e3f98f2cef24170bf3fbab9c96c4ce690fcd21

  • /data/user/0/com.kabood.koroshkabir/files/e959f73505cc13d0_231223_040043619.log

    Filesize

    256B

    MD5

    42be2c687caaa0c6e25b16ccdf90e2dc

    SHA1

    a2cd6fe41571bae8c9cb69efe2d9d77afde93299

    SHA256

    b899c54f61a5ba16433e6d2e6c3f2ef623e235a3209b9caacadcac0b093bb018

    SHA512

    0ba01f9875784a8924ec1284f0c55ff3ed915df6ca4efabdbf6da689cf58d13ce2233f7d45393328cd5d0a3ac44b131e9ffc9055cb785cbdc006f7b63bdbbc2d

  • /data/user/0/com.kabood.koroshkabir/files/e959f73505cc13d0_231223_040043619.zip

    Filesize

    241B

    MD5

    3a49e8d08fed922d6144630374c0adfc

    SHA1

    38def12dc935db59a97f95192e8daabb7f9eca03

    SHA256

    62b6ff6c5b29de483405452b506d84b2b9ed215acc4d7ec1f2f10f2dbaa0ad80

    SHA512

    7d4a2f1ed514493e7a3648fa13c9f5763451871c028dc76d2215a2a09643370f87c22dd450e01acbeee3f64fc58452f6ceb0e6b5a315c7071a83d3b130e5c4b2