Analysis

  • max time kernel
    2573109s
  • max time network
    161s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23-12-2023 17:15

General

  • Target

    54d7923d73a811b91a7bd2b5b80eec837a551da37d4052224b1c6c768a658f35.apk

  • Size

    6.2MB

  • MD5

    c1e577dff16d8dada13f11aab06fac70

  • SHA1

    e22b10286b71f220c9e257c6d11e2065fb1b1c78

  • SHA256

    54d7923d73a811b91a7bd2b5b80eec837a551da37d4052224b1c6c768a658f35

  • SHA512

    e0208bc3e1e902cb82cfbb0ca8360528ba44ebfee8fdce40ccf1bcee44d65f035cc2a4488a6bb2e18140734a44bc20fb30b4e1fdd7275f3fe2398ccde8d315e6

  • SSDEEP

    98304:mB/1+IJ0T0c+7l1ltVMBo6l6CstLZyRkIQiPtTargWfu9b:2d+IJA0cGlztyO6ECeyRkPKargWfuZ

Score
8/10

Malware Config

Signatures

  • Requests cell location 2 IoCs

    Uses Android APIs to to get current cell location.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • honare.araei
    1⤵
    • Requests cell location
    • Acquires the wake lock
    PID:4992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/honare.araei/databases/__pushe_base_lib_db

    Filesize

    24KB

    MD5

    abe9fa56c177c65db8c072e6d81fc41c

    SHA1

    abe9e9bb6f7294324f549af4435f58578ae69f2f

    SHA256

    53f09b897033e2496e13f3c6e8d14ec1d1f7b273c2b4d47dacc569594fef0f8a

    SHA512

    bb1b70eb859448050dd71822652d1976456be07c098ab41f2f75fa277cde059aff0c45629564170ee07028b85d501cc941529ab06753e5be2e710692bfa3922a

  • /data/data/honare.araei/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    c8b9f292da6941281327958e026e379a

    SHA1

    67b663e79f108c885dd04ca063828572009f05d1

    SHA256

    4198a27226415c89ad58b6cff1b47e3b28e62f9d5fa37e6a4db7600d1cd32fdf

    SHA512

    34bd0bf387250919d37f81ac5d7391801a4fb42cdc075aadfc64559db2cca2452a86c2d05b12633cbe96489b15393c5a530d14be1d6ee1334262ab66a465fbb7

  • /data/data/honare.araei/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    41158ca5863dfc18ab5ccd29709cda3d

    SHA1

    6a6697fbd7fc3574810d9ce7f2291df34299ea5d

    SHA256

    b40ff65f32b9494d54b5996c6b45308f28799ac4fd2ed431292f407dba71d59d

    SHA512

    a7fd859a826faabfe5084919f31e601936d5f7c463b9e4b18f2c442fa64f006ef8566ff514b2e4e5bd139845d715568335de29b7a53ccb971fe7617873eaa8b3

  • /data/data/honare.araei/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    3064816666538cab5c90edd24896c1d8

    SHA1

    561d89ccc55e9cab808cc853085aba6d3fc595b6

    SHA256

    bd8336984d4fb6a60f67cb084c0d8fef09e6caca40b916592fbad86617285e6d

    SHA512

    a0d5d0fa5f9c4cdfd00c767282171329c9ee6205299a2cd4c337e5bc4bae9a02545eb6b3c1f19d6a7741aad3f9ca9b202382d346569ebc5ebca9e3501bdd7c1c

  • /data/data/honare.araei/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    0dfe9e88aa5124f84e23a2004f069350

    SHA1

    013eb901ce91a885988ede301bf0888785acf047

    SHA256

    9e9393d70ad353eae6ff7ce848f34559f3104b3fadc73bcabc20730d48dddf50

    SHA512

    b9accfab2320e9c8ba8764622604ad17c5e1bf54ffea2ebb35a18ac0f72ae762c1d5235ce1aa1ff00c2ba3759c1de3e7cc915c2f7cb1f92ee370fb6640032632

  • /data/data/honare.araei/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    6f4ad5302504367d6b96c17882c47c11

    SHA1

    9c24e7a635da7d12b990046135e713500706a871

    SHA256

    ac9057df04aef9003dd1772bef056104b9f9c0b7f0e1709eb288b4d29c8591d3

    SHA512

    793470a995895d2d12ce49606d64071805c7987854938d7745961959e1e6b962c1f4a73a6be72bff64adfcf52b29c79ed98b524f13fea1fdab184a2f917bdca9

  • /data/data/honare.araei/databases/__pushe_base_lib_db-journal

    Filesize

    512B

    MD5

    2175b2f386582e1218039e05c503b70a

    SHA1

    dd394a85991bb03cb694e6da268f4a02d9fb8556

    SHA256

    e0587103112901e0f6b41025352d168045c70762daff1cc9e43f2310d18b0832

    SHA512

    563314b5c6f25aa0dcfc63e586b68fcebd74eae55bde4a1a63006228a066c962ef4fd75f68a45bc4a199b6bed2144ef731d9188d05b032abc7a034048ff631ac

  • /data/data/honare.araei/databases/evernote_jobs.db

    Filesize

    16KB

    MD5

    3eae40bb4a005b103b9d9f1f6393c4d9

    SHA1

    f5dc7e8837c6864833fbaf62ea5e5ca1726a4bea

    SHA256

    17945f6ebd4a346d3e598466ddec9a49e0f85043705bef7e20cd6dd10a657a6b

    SHA512

    edc9d50f41f0f280f015f1095ac50fd7635cfbbbb3dce9d0f47b8178e50943453b346862e6c68148452ae1d98dd5c7ced1361dce9afacf159f4d12bf18b4f7e9

  • /data/data/honare.araei/databases/evernote_jobs.db

    Filesize

    16KB

    MD5

    7927106eea4337670c33249ad5ad8b9e

    SHA1

    015b1ba44449e6364e59e37c3332777c990bb421

    SHA256

    a94e6f8a6c51dbdde6669c12926b0b929eb5838f1b6ffd09c7f824a2e7916091

    SHA512

    4ea1efffca0b7422dbb08f3f992b82b497e11028f0a91b7d06e0f9127b82614a4327c2f3eed6a06faa7acd6adeb1bd516486845f1ac901c870a95849b60409d0

  • /data/data/honare.araei/databases/evernote_jobs.db

    Filesize

    16KB

    MD5

    db705bf9d1d5e087b669e11c8e8bfec7

    SHA1

    24d2592878e70359af337928988bc3ea6d225a82

    SHA256

    45986670e4c3451594023f0517c902def59fa827e31288b277892dae19d2ad5c

    SHA512

    429cc4421f96bc4096ff5aa9d8d7bae7e1e9175b3e3f61c12a5b8108425f4ba32f8ad7d1ba2aa5341b274b019000adf45e584e4fd6a0ac42c51bd69661988c14

  • /data/data/honare.araei/databases/evernote_jobs.db

    Filesize

    12KB

    MD5

    ea628e04765adaf4238a5dcdff4bbd51

    SHA1

    a801947619ea8c368efe9c006a324dc6339ac60b

    SHA256

    885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

    SHA512

    c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

  • /data/data/honare.araei/databases/evernote_jobs.db

    Filesize

    16KB

    MD5

    b88a3838a4885120b4dfd68c81cb39e5

    SHA1

    75c9f84d597a54e1009b6333bd5f29326f6fa993

    SHA256

    c0006f96da527308ad6acbb3e21e4eac9af2aba68e81d19f7cbd048fff58e6d4

    SHA512

    7faae2a9da22752d6a08796faa7841f94657e0aae8da28a7f53e7143462400a9d2814fce873cf294bfe9a523deb7b44a39e84b66501c467c908859b96c8f1875

  • /data/data/honare.araei/databases/evernote_jobs.db

    Filesize

    16KB

    MD5

    6a276e51d2b8a08e66f92dfa466cff7d

    SHA1

    94d4f806e08ae9edb03b09bc5ddea09a39237851

    SHA256

    76291553012d4b0d7a3ccd3337f36f1b3a9b186cace3f980e38ec0ca7e6da32c

    SHA512

    7acb6554ef4054d56fc93100b21b0b73cedc4ad871486f67f17940ac5616a1edc485234237c4956c650d459d4355657c71212646891553abb5888b6949a69440

  • /data/data/honare.araei/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    6be3fc9b02de4fa83cd4df72be3d5330

    SHA1

    990fb7908d529422184c05d3aa00606fef26b956

    SHA256

    59273ddb2fa3718fa0027ca5d2f6fdd3cb23ab3b5b4a1270a9b63626b431d716

    SHA512

    1555b497723de609ce658f1431aea3f77ce5ff1d3a60c4af9463230483a9ca33f73c4c1c77c5ba32910b1a3ef253186eeb6f78d07411e538f1cc0f252bd7859b

  • /data/data/honare.araei/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    8f060c9e20784e9e81cacc10d732e59d

    SHA1

    7f2ac211af6a7d024552dcd95281d5c7a47e1692

    SHA256

    d62eabd2bacb3b4afbd14c39cb3de60f39aaa5b5d3bca7d573203539fba15e6e

    SHA512

    516f691fd91b7e043fe781fe83b771402d883802e4f4f17a600851c72082c6a6844074ab5544d2152e2b1941686772f37c8c984a35a956e4e1b90ec5175e4f21

  • /data/data/honare.araei/databases/evernote_jobs.db-journal

    Filesize

    512B

    MD5

    ca52b4812f206b715fbb79538c8dae93

    SHA1

    1ceee90c41107632263640b2ebd0991704904f18

    SHA256

    a654f2f6233cda89b3df4c7f4d4c107bc62c1432fe572b0aa67fee337402d789

    SHA512

    6704292d9dea162c7495488dfdf2897152271f5e7ce42396f1f3e6cb23c92d4f538e528a1b5da4e68abbced7d60da033cc832d4895e7733f991e6e17ed47d49a

  • /data/data/honare.araei/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    79ba0c653bedcffe9972ff13a9a48774

    SHA1

    9b532fc1529e4d4d18f03c8261ea1ddfdda1a694

    SHA256

    c5aad8134da55a59b7abcc85dce58e5488262ff17071bc1dbe00551e69bbe28e

    SHA512

    b9195c5bacfc320933984bd0b0513c8640f0b555ef5c782fc328f5dae94e390239ee0452c67ae09b013de922300f9c803fe079625f2a609a297ef0edb0c4a634

  • /data/data/honare.araei/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    447d22cf54589052c4f1fc3f6720789b

    SHA1

    9b48c96c1a989425e5f836a0324d69a35a9f0a44

    SHA256

    ca77c753c0b7e2efbec4816cc605381a8d46ee9474e1c6518aceae1a0ffdc930

    SHA512

    e0e4ab269343728fa8dda2c53f54bed3d672cc77c74af02ef1ddc0ec60fac4fcf9ae6101e9f445f403595be38eee98efae83e01164f833f2e5fa06fcbf567fd4

  • /data/data/honare.araei/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    93c0dedb77c3b6aa2a5738352b874e73

    SHA1

    5187ba1766365286515d947bb9edfbb4f5186b7f

    SHA256

    411dba223584ec76a18e9b633fc1bd26b36ba7bfcedef864051894757f92fad4

    SHA512

    fe1abf30ad35cfa2ba991923e0728c15254279ee575e842f7bf6324ee5c411f26866536724ca98b417b350f24016b435b7b394b9e780e1e6b2d5a62ba31037b5

  • /data/data/honare.araei/files/fav.txt

    Filesize

    3B

    MD5

    a5ea0ad9260b1550a14cc58d2c39b03d

    SHA1

    f0aedf295071ed34ab8c6a7692223d22b6a19841

    SHA256

    f1b2f662800122bed0ff255693df89c4487fbdcf453d3524a42d4ec20c3d9c04

    SHA512

    7c735c613ece191801114785c1ee26a0485cbf1e8ee2c3b85ba1ad290ef75eec9fede5e1a5dc26d504701f3542e6b6457818f4c1d62448d0db40d5f35c357d74

  • /data/data/honare.araei/files/seting.db

    Filesize

    4KB

    MD5

    ec3e26c859373af93bfb35ad7124deaf

    SHA1

    f3deec3fa82bd72054091e9e07c2ee96e63a32e3

    SHA256

    a7cb5508bed65398db8d7119cae233f0815888f021ec13042363ae6670bb5efc

    SHA512

    64e4642c341dc07896023d964db9ef03ca7491a8ece764edba48d81b2471c01dfbd104fb577d822662da5062dba68f5d90524d459ca563dbd8b170a23a2adffb

  • /data/data/honare.araei/files/unsent_requests

    Filesize

    58B

    MD5

    0d210bfb2a0e1f1b4c082a6a0f79de07

    SHA1

    bb8ed9e364db79d1d9f2fcde3f15091893222faa

    SHA256

    988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

    SHA512

    536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1