Analysis

  • max time kernel
    2592815s
  • max time network
    143s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23-12-2023 18:37

General

  • Target

    6a578d9f7793412cb9155e811f8c913c2f6ea805a5d2e50362dc884097f4e849.apk

  • Size

    3.4MB

  • MD5

    6e7e12cdcaf2188697cee24e3878b936

  • SHA1

    00f49638f0cb8ca1bbd80508130f9c6a3d1d2670

  • SHA256

    6a578d9f7793412cb9155e811f8c913c2f6ea805a5d2e50362dc884097f4e849

  • SHA512

    2e66ed715817244723e9f343d3e3fb3905a67edd203466c6669816cfc3e9d07004ed2fcb985d2036300049a1c1868047f1e5b66c7bb6199e7548920420f187b7

  • SSDEEP

    98304:X06BY3h/E8NdnpMbFXYkFpYy2ZVXeh6zM+pss3mFOF:/YNEupMbedTZoh6hz

Score
8/10

Malware Config

Signatures

  • Requests cell location 2 IoCs

    Uses Android APIs to to get current cell information.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.dena.iran2018.daryaei
    1⤵
    • Requests cell location
    • Acquires the wake lock
    PID:4484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ir.dena.iran2018.daryaei/databases/__pushe_base_lib_db

    Filesize

    24KB

    MD5

    2cdf77d5c14dd3f313b60c691579a0b9

    SHA1

    6a74a7a3170cabead82152871c90749afdd6f310

    SHA256

    55ba022e5aa9eb87c256026289112e4c0531a41d0d56380fcf845de71ff99ca0

    SHA512

    eaf21f0acf8b98ac8bf4bce81e66a07d6a501483b141bfb7a2ef476a8dc9927ccd39971f4e0d1f7969576dbf7abb7befb3bec04e40c5a9b28fa7a2f15ae7a98c

  • /data/user/0/ir.dena.iran2018.daryaei/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    db12cbec84190d88dcf2894644f34095

    SHA1

    165d87b51c08e10d4525db1e2967963bf92f9e01

    SHA256

    5644845eec09fbd39a5e696458510ec643e3460a47a3591315f312f18bcf0688

    SHA512

    789c3e9cb4649fd0d8be571ed60c807980015459353da49385bd440744e61b582df2f49320cf1714ab21a38a5fbeb00457a08eed0502a5678a0f52e104469cad

  • /data/user/0/ir.dena.iran2018.daryaei/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    3585ad234315f92a63f4b14c18e207b9

    SHA1

    a5dba4655b98f520565ce3e0241902b3805aa0ed

    SHA256

    04f9a08e19fadd8b38fc6eef831f046d3ef4ee648cfd762900df9f9b972cc782

    SHA512

    d12a96559e9aa8cbc650bb8af22f56eeb77fa34081c250b5718dcfee396162b52c930e5a51660eb7c1cfbf6f80b39e799c8a10011e1ce6a8e77fee252c9e58ac

  • /data/user/0/ir.dena.iran2018.daryaei/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    3dd8d73b82c9ab118b4be21f8ab5fd55

    SHA1

    bc3b05a99925fc6214345dd929a9ee1f5ec524f2

    SHA256

    e9614a4e075caa7c18fa97c5eb4c18177b7bf0d23a8832da08c5d5fdba1b4a52

    SHA512

    36e94f1a5d462a3380c8a2ebdb29ba8d9adb45ef5098619f99f63dcd62de6228361792b5322aee995ba1ae2bad79d735fe192a302cc1675527b28de0a987aa31

  • /data/user/0/ir.dena.iran2018.daryaei/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    4673e64149de3d5c5fbdeb091e4f8c32

    SHA1

    ab52cbc0d948fddde41253abfcd697c001ff649d

    SHA256

    218550f3f1c204bb13bb2e331291d731d9e05eb7c618beb79b1b6c6b90938858

    SHA512

    c56136166d065230ff4847a736c2aa88ac229f508553ceafd970d1fb2e74296b9381fc9a04d60368c9fcc91c6b267e07d133ab43b7e51545d09843c8ab1ca688

  • /data/user/0/ir.dena.iran2018.daryaei/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    eb312ee0b64954321cbbed4fca38dcb8

    SHA1

    9e4f4fae417916b818f03eff4fac9f621f91e57f

    SHA256

    2709ea7218f9728ba82e1bc453711f4b411d8f105f72a38b77760b494e93a5cf

    SHA512

    dc049b12aa912233c22bd971afb8d10441ebdb0e34221b0668d028252b572d69e18784b91436674293f6de15f78700039ff2612aa9b61c294407e06ed5c3426a

  • /data/user/0/ir.dena.iran2018.daryaei/databases/__pushe_base_lib_db-journal

    Filesize

    512B

    MD5

    383b96fa3b0d73a4465a2c0f83a9ba04

    SHA1

    6e04adc60019ce11f41d373fba9c069811937e18

    SHA256

    eec4a179a48364708e7c939f80afa11c95c510f8ef944b231f73b0b70ef17047

    SHA512

    611506df2b49202c49cf8eae3e4aa2ead19b02e4b7f9ee70ea157511e8223dab248d14f11581b91fc9b0d2e67641bc5c5b468b659f57df3292e2770176cb61fe

  • /data/user/0/ir.dena.iran2018.daryaei/databases/evernote_jobs.db

    Filesize

    16KB

    MD5

    3f89084cba531362bea884a5e9ab74cd

    SHA1

    6cd2f95cdbe50e14eb1353f5aead38b088d50624

    SHA256

    6e80f909dde2fd7751adfb66a421b42ef1447ab6439f3523a1b0a38fc8917886

    SHA512

    269fec26da15336cf0c5c294a856f3b85df1f09d9a5062d3fbec3651d2caf40707303027d0d5e441d1758b4d95dad0ef9a7dea97399757264fe439264c118945

  • /data/user/0/ir.dena.iran2018.daryaei/databases/evernote_jobs.db

    Filesize

    16KB

    MD5

    cbb57bc0ab6cdee6b740b3e612dc2bf3

    SHA1

    48fdecddc99ed6bf69a2a53a1e602d443d0fb39a

    SHA256

    76fb63b09a5aea33f45eac48ebba98b6ca77895cdaa9a1502fd2e4f23d1ca25c

    SHA512

    1350304e90634f0344b4b1f0622eeacd2b151671ffefecb9377882359eff7359c9efabdea489edc851b42c622c0c93003969c591a32e7101d12ea0fc5d3cc8a0

  • /data/user/0/ir.dena.iran2018.daryaei/databases/evernote_jobs.db

    Filesize

    16KB

    MD5

    df294e40d6c83a00c279150fd1ef0624

    SHA1

    fda16dd8ccf62ce3281e691814d3b8a8b7892411

    SHA256

    0a0b432b989ee19a4ba25fdc8b291fbff05f9e182c0f7f32b07fb9acea3c2275

    SHA512

    9d41e09e77795ad1123807ed4dd4c9b4025eb3a098c11057ebb66b386ce97db3da4a74677dea013be58fe7605b0809f845aa6650609988f8948ce37894fe400e

  • /data/user/0/ir.dena.iran2018.daryaei/databases/evernote_jobs.db

    Filesize

    16KB

    MD5

    06788bb3ef113ff25b4a4e16bc4afc74

    SHA1

    8fda347dadfc0f46e174c47cbdefe940acf65f75

    SHA256

    de30bb2c6cb2afe8ab22d2d50397982a0af4b9e44bddb24a9004db96198662e7

    SHA512

    0481b7988998f4c9b494f4e7fefce5fd6d37f932ac7cbe2e303fb7fc8c3c573ff15e765df26a8c3bbe02cea41b1cf0d568c2acb7c26ec288875d58d13bcb152d

  • /data/user/0/ir.dena.iran2018.daryaei/databases/evernote_jobs.db

    Filesize

    12KB

    MD5

    171aedf968e17a2744d2585715606cb9

    SHA1

    bbeddeb3b89fcf809619c35b4a318a80e7d5b029

    SHA256

    d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

    SHA512

    78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

  • /data/user/0/ir.dena.iran2018.daryaei/databases/evernote_jobs.db

    Filesize

    16KB

    MD5

    c3706af7b4938e68e35a9d3d62d36268

    SHA1

    6c657ff2dff899429262ee9a1ccbc91438b2700d

    SHA256

    773109b84fb7af2d3bdb61c31c2fbb058902b27ce3c1e55aed51a2ac001e77f5

    SHA512

    972c3e1110c73021187b24c1f43e743a7840df833e2a6e886377ec2dad22a6d9c5ae487c0d2489cb771b7bba23dfb2cda77dca4f7dd29b3e06038c3b1977219a

  • /data/user/0/ir.dena.iran2018.daryaei/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    84662045f971d6b33b47ccb77506da15

    SHA1

    6d5564e65992fa15cda6f899527edcd784cba66e

    SHA256

    543885350f38ca3df7bfc87ac342528707f56558785785b8ef308ee2671b1927

    SHA512

    68533f80a4ac62171a7560063cd3767c23c7cb23814e899cf37b3d4cec6fac8924fc29badd9eb7fc818f67df3902f76252a5c818e0167ea5cb20a2dabb56edcb

  • /data/user/0/ir.dena.iran2018.daryaei/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    9e31b9f081994ec84c54f19c03bf528f

    SHA1

    e2f309c70fcba7240b48b532b121ea43a8856bd1

    SHA256

    12ecb0df6582601684ade9d2041d9aae5c97a88ca4e489d2f8621bcdf4ae6242

    SHA512

    6ce2a4e45f96fc55e31a705a7b4e31e2a4e9f950a171167e665978c503b085d6ff483dde804019ddf17cc8cb14e707a98d9759c0c3f48dd0d1c913f048c4edda

  • /data/user/0/ir.dena.iran2018.daryaei/databases/evernote_jobs.db-journal

    Filesize

    512B

    MD5

    73f821a839473631e4bfee86694f86db

    SHA1

    2a630e9d391d300fc4d52875cab960dff1bf30e8

    SHA256

    c7b33f591b1f5613959a963d869d6c633ed46ca5c472d6b474d58fbe7b9522f6

    SHA512

    b2dd7988204f4dd21f76c7616b04cb1f824de3cfcd219890e8cff8e9647a0b9fecb4c69d18079bd8a9b030d5515118ace281abf9275e22fe857d633aa0752758

  • /data/user/0/ir.dena.iran2018.daryaei/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    8ff114fe35356ce66be7133a96c73307

    SHA1

    1dd68f5629185c13d6c296bd1fd338c117031dca

    SHA256

    2303420918a3deca1e20247d8d44b05b3edcdf623c4e5ab751e25b72265374a4

    SHA512

    f9485aec76ce1337481d03c49a2173c0221f414cea88267dd847f4ccf3d3cf06468b853e2708544534a72d07de8765c3e2ff5a36ab6cf46737c3b5403b6c3f63

  • /data/user/0/ir.dena.iran2018.daryaei/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    e2045bb5f7b1d911d5f9ced5e2750e80

    SHA1

    8f1a6693461515137db90b0285d2e4a43629a8fe

    SHA256

    0add222b901f69a4ad974eedf8b6df0b76e89640dceb90d88f63af899c8c1c6f

    SHA512

    23187ed1e58571f9fefe3a2bd8755d74b2794aa42c7cf87759b9051ccb13e294c80f6aa12ab8f6c9684ec8c4c65401b0bf9d72ca5b69f1caac57cd48a2444eb8

  • /data/user/0/ir.dena.iran2018.daryaei/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    3dcfe3f60f6eaa2cf9252fae7fb22fe9

    SHA1

    84bd1e36db96c0db016f405b27bd0700162879d7

    SHA256

    7b58ef84030b5b220d8fee4114521d5d353a45bfdf0d7df38e3de7154bcb145f

    SHA512

    803d61d07e51f5f2fa11a85fdbe1c395d3845a56edf62093a8d301bfdf52cd19a5e837348b259ecc560b3d0b4a05c778866788bb917ef7d3274399f06e0350b0

  • /data/user/0/ir.dena.iran2018.daryaei/files/daryai.db

    Filesize

    119KB

    MD5

    06fe7dc230e9deb9a5ccd10511d8bf60

    SHA1

    4088be49b5310b656115c48a5bcfec759a3f97bd

    SHA256

    4164f2bdd2ff5b8509b04b24d78ed8e072c06f63dbb8183290ff1a1ee87bb781

    SHA512

    5d11c5e79dedeb89b2c24d7da697d83dd171de387f158ef293d908c3ec7063ba59137998cc6394c52fc553d289b02906aa9cfa9bc13057b426dabda1fde90f72

  • /data/user/0/ir.dena.iran2018.daryaei/files/unsent_requests

    Filesize

    58B

    MD5

    0d210bfb2a0e1f1b4c082a6a0f79de07

    SHA1

    bb8ed9e364db79d1d9f2fcde3f15091893222faa

    SHA256

    988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

    SHA512

    536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1