Analysis

  • max time kernel
    2650900s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 18:48

General

  • Target

    6cc1445b5ac38d3089d71166b9de373013ba8aec1da9977b779535cd1846d301.apk

  • Size

    9.2MB

  • MD5

    b418a20ab90b3cc2b2b2af0796cca72d

  • SHA1

    f4470d634188aaf77c9de4289518d0cfd57ff8d6

  • SHA256

    6cc1445b5ac38d3089d71166b9de373013ba8aec1da9977b779535cd1846d301

  • SHA512

    4ac6f7dc1efd2fb783041167fdd4fa44ab08024d969bf0e454a1b9928bc84e9143186942b5444cac3b358bd91fb79bf2e6f45781ae5f9030c5a3e810a56d2d34

  • SSDEEP

    196608:jTKwgo6QnjgJVrVgeNBJhoXHst9pHxp4sa5dBLiDlUc:nHgo9jgJVOeNBJQUj4sW+p

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • ir.iut.moraba
    1⤵
      PID:4255

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/ir.iut.moraba/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/0a8ea4d1-d167-4726-8a78-d03564356a41.jobs

      Filesize

      176B

      MD5

      f56f328eea1d5c96a1b96dbbf59488df

      SHA1

      440c784cacff61932e2f61580b7cfdc3a4943c95

      SHA256

      90949c83a3d90fc0128f0d5df662aef3699971ce9e63ab067382f970cbab8918

      SHA512

      36e370cf16dac8b173fa182960789974d4087a7b607042000118ce518db8f1eaf93cf4f3be42c1c26ab53e87ff54da33b4c57a3a15e5cd47f2c2b66efe8b3edb

    • /data/data/ir.iut.moraba/app_com_birbit_jobqueue_jobs/files_jobs_default_job_manager/9545aa22-40ca-46f6-8d65-3771b40b4118.jobs

      Filesize

      179B

      MD5

      ac58f99a1b179d71e8621412ad31c6a1

      SHA1

      b51fdad95876f5615735c2ab411031ff67d5e946

      SHA256

      9537553772c29c4303e606e458fd9598c14f1eee3cadfb446e241638bee3ccdb

      SHA512

      faf45d5eb4b890216e6ad33825ffc02cbc57914628e625164f9cbdacd5962ce8ca8f473ded2f56eb4d4006fc7cafa9cff8c9f76655f17f83f38d3e89b8d7e67b

    • /data/data/ir.iut.moraba/databases/__pushe_base_lib_db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/ir.iut.moraba/databases/__pushe_base_lib_db-journal

      Filesize

      512B

      MD5

      b8f4e17f19df27bfc7a62fd744a5739a

      SHA1

      b7e405f585d6ec80a45a6ba2587c2f9dddafd665

      SHA256

      d167393f9f75de51e0cc1c21b0d542467156a0098a7816ebcc827adec508b7a9

      SHA512

      e719ac1941e4e3ce570a4814d6960ebce7b7bba34b7fda5ed259de3d2556fb9be89d7aea519cc0218bb29375b21425fc2d30089d2d4c9aa02279262e9933e996

    • /data/data/ir.iut.moraba/databases/__pushe_base_lib_db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/ir.iut.moraba/databases/__pushe_base_lib_db-wal

      Filesize

      36KB

      MD5

      958c8ab97a3643606538b193e2544747

      SHA1

      dd784fa7da439b1f524e36c36ffd1baa80255605

      SHA256

      6587f6f5e3a6b658076625f0bf108904e06b562767bd31581bca764689f50fdf

      SHA512

      31ce99c2280cf863f224b9bbdb3e1a4fa8c84936eaed11fc4b636e95d8a2296b8d28bba5f70da5f329b560a253e427318342a5ae87a8d1f18cf96ed6ea0b6e46

    • /data/data/ir.iut.moraba/databases/cheshdb

      Filesize

      20KB

      MD5

      a297d26228853d0a3897c2775de51084

      SHA1

      2964f35b8509106478923a021b952273776f2360

      SHA256

      b1022fec129b5ae58b2dc5323a0455460e92dea891f2cef57142c408c925a878

      SHA512

      d19fb069c7efb7c59bd3e7f90355f91f21e473193b0ec1fe0d2d339bc389638f3788d9d13b9229acd9dbddd7924102f3e7b0382048e9702f3708dbb29d926565

    • /data/data/ir.iut.moraba/databases/cheshdb

      Filesize

      20KB

      MD5

      893fdbfc8f14558121d48c583da06b27

      SHA1

      e7afc5f83b165b42e10c7c56628da6771e4b4c7b

      SHA256

      1f70ec2d1d400d28e5ee30c58095b30d6edf5609e754d2fb073ca028c1865f8d

      SHA512

      8a0c11993fe126e086f844a9090b9fb985d2e8b9ad1942054478502484bcce93ceee7883327609e5769e0add2daf204f775229dbc52e782161537bda27077ed3

    • /data/data/ir.iut.moraba/databases/cheshdb

      Filesize

      20KB

      MD5

      48cd9d56d0cb169ffc78c9f3301819df

      SHA1

      bed016c3e9693f4f6cc86104388b409a19d2a747

      SHA256

      ea476fb20daa405e272be7cb9cf7bbd7efa9d6f98d044563481515bbd4634c4c

      SHA512

      80ec89f9c644649bd8718fe99602668e3045cd07445a2a57adfe81b9e9a7bc1ada30982ef61008a9e0feb44186ed90c200ae7a172f1d8ecd8f3a905244738c78

    • /data/data/ir.iut.moraba/databases/cheshdb-journal

      Filesize

      512B

      MD5

      f8311a277672fbfecd5f7b5ed16181fe

      SHA1

      9f89754e3476eabf32ffc61af2beca8c6cda7278

      SHA256

      86bec7bcc3f9086bc18ddb78201d2f77f8c354317b0c788878be98656636fc4f

      SHA512

      c06b86ae579b1d89737aa917d45632713bf136c86dacbefb8aa99272df8e0ea0e9298f5e807e05e174d96ef9795add5946488f3b066cc72f1e15cea28c38237c

    • /data/data/ir.iut.moraba/databases/cheshdb-wal

      Filesize

      16KB

      MD5

      b3c01bb0e2274478da24901e139f836e

      SHA1

      29f117b3f57441c3caeaad6db6e2454c6ee13d8f

      SHA256

      846b4aa03d5a10a8af3db08d9eafb558d4cbd6e0fdb72994393b68adef770908

      SHA512

      3a666494e6079824a88f2645488f13ec37d005b7fc49c129731f9877b484bf759a4687888deb3b415cfb85aee058d6b1d2c13f572f500a5f27540a842b894968

    • /data/data/ir.iut.moraba/databases/cheshdb-wal

      Filesize

      8KB

      MD5

      6be48fca39569545a4768f6e1e901fee

      SHA1

      0bbc8ea99984877d6cf64c2296e8c03685fe4676

      SHA256

      aa3e5f5b1ee66a6c4f80622e686ee4a811e90aa40a41d9f34e7f6b03868ab7ca

      SHA512

      42af65dcca101f59de8ef7bda20bafc3cace29b2eca2c8fc63bb892cac65c421fc69b36a2f33c21e9660d0887644015faa575b51969874ea075eab8bce3c27f0

    • /data/data/ir.iut.moraba/databases/cheshdb-wal

      Filesize

      8KB

      MD5

      f21666883bfbd02b5da7f0fc97796c60

      SHA1

      1d8c69b6ba663d1d7ab3ec97e045e29684456523

      SHA256

      89cb9444975cbc8cf0a6342db95311223670cd914cff3312c09a9339df0821f5

      SHA512

      3e067d52d8e7c3a109f7bed9463ab2d7165ada517d316d3ec24650e52de6d65437a2f789095b2baad7c1334d3e5184da177c70b5c48bf319f26e54f9a250b86d

    • /data/data/ir.iut.moraba/databases/cheshdb-wal

      Filesize

      8KB

      MD5

      94af70a6970055efa61fa38c4914782c

      SHA1

      7092f6bc5a548ffe79b11f583f32fb2e9c91f482

      SHA256

      998bb8809c1866aba5939edab8b83e2b60a4d7ac8cc55e50bf66bbe5f16cb1a9

      SHA512

      78b6e6874c2dfd40de59aaadc54f2af17e7ffc06d07937625a408a730b51155808a759509796c5c4477cc39381867018d4c7bbe237e0927559b9cf5c989c0e1c

    • /data/data/ir.iut.moraba/databases/db_default_job_manager-journal

      Filesize

      512B

      MD5

      045617603fc417ca3dc9c2d15aab564a

      SHA1

      a3c88cb112c6a2d6f511306707c4ed952e55f188

      SHA256

      84913bf5e15c0fec6fdd7e3a7bf8c71d542169ec8c361a2cd700e486849a9923

      SHA512

      77a2073384f681b4f31769721ac09276e616a1318b92c41e618e93cf163ec54bb7b5bc1a8357010add710bacf1a42e3f51513652fae49191acd0d13d4126ff65

    • /data/data/ir.iut.moraba/databases/db_default_job_manager-wal

      Filesize

      64KB

      MD5

      ced03b8028375e62a12a71936dec95be

      SHA1

      b3f968cd980f04c7f54e4f0c5f690acb4b6cdae8

      SHA256

      f002e59a33c779ec01763642f7ebff038ee96e52bc605f80d20a57184503aa48

      SHA512

      156bc0793a14a017e00200aed772d9d2097765d0958d8a341599937e945b5d8c5c08bd1ef60e7e6244e1ad603905093c1121f595419990278c9407b4e9534646

    • /data/data/ir.iut.moraba/databases/evernote_jobs.db-journal

      Filesize

      512B

      MD5

      2cccd94763f26ae11363e42660b3211c

      SHA1

      a5b339adf8bb1117160acd8839749ab8e5a9f1f7

      SHA256

      64367b4968fc681964cd876f31dc76ad576136d740f39fd82f8ae15d90491309

      SHA512

      8d24304e48436297c7f86f3858d9bb30c241fab15155cb0574df4a02044fe5fac44d4525ea2c8e04600258282e02b54de2de4f6e2db2c4fb18d33cd9d2590bff

    • /data/data/ir.iut.moraba/databases/evernote_jobs.db-wal

      Filesize

      16KB

      MD5

      1456ef8dd1a305806c5054868d1d3e82

      SHA1

      7904dacb988822f54c0d13557d9b484c0c02297a

      SHA256

      5835e645306af7f19f65eecdd5485bd52f8ffd2a23437ba7c3f8b2b7a1425023

      SHA512

      5f41cced688c2083f5b5feebf01e3ee9b3f0e8f2463345e2ce41388bfcdfc0e6f846788bd13b591d4d6966b4fc39534d0d2ebf707f2204a5f4f0689c963e46c7

    • /data/data/ir.iut.moraba/files/db.db

      Filesize

      179KB

      MD5

      f81ac1486079e47d6690d9ba9ae56f95

      SHA1

      31f20b027a77bb751d29382de19c68aa497356f8

      SHA256

      65a3e8d4142077b80aa203ef5028ed78c6d3ea10a25076f4f2376c62918422cd

      SHA512

      16c9086e9f0901f15987ce1257a81847cfb1172109aa4b488c8fd62959e2e44dd96eb9431bd1e7aee7c785c75467283f3a0d700c8ecd02b5a040373638084425

    • /data/data/ir.iut.moraba/files/db.db

      Filesize

      1024B

      MD5

      9bcdde6a06eb20885424874bea9f9a54

      SHA1

      41691d5b62a2a567bf71f734b6241a386a551d02

      SHA256

      40fccdbd1a66e073a36173ad2d48077ac3574017e76426caf1f6b5ac1cf3c103

      SHA512

      25e84a0d661dc51de551b153c40abd620d513535af7f3a8e954490a96e60201e93e289f4bb4497a37a472f183fdef164357438e3eac72c6b1f4fbc69b0de774b

    • /data/data/ir.iut.moraba/files/db.db-journal

      Filesize

      1KB

      MD5

      dc0e63f12e6b05ab7c21662de8e12491

      SHA1

      cec1cc2cc47e0b1ac9e83519558edf42e3abbc26

      SHA256

      5904872856a4e54620cd176b0042d1e5e4fd2ef361037b45439c6a0f68a8c306

      SHA512

      86585ffeaf35cacab3ed04c493f7c6748d31cff7289edf7a8e529b77cec27f7322ba3eb76ed55bc8f95ba9a8fb6a47ea33e77700b4b38a3ecfa8fd9f7de8114e