Analysis

  • max time kernel
    2746076s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    24/12/2023, 02:22

General

  • Target

    bb92475836abdbf41272ba9c0c8719ae46303a6b29338b0df382754e6837898e.apk

  • Size

    4.3MB

  • MD5

    8c1e8e2e1f9a3b87f79ab6fb9e62e66b

  • SHA1

    85817db8a82ddc9c0b4fa788ef2c4c4839e73f2a

  • SHA256

    bb92475836abdbf41272ba9c0c8719ae46303a6b29338b0df382754e6837898e

  • SHA512

    4b8b0a9a8cc0c5568ad1e61ccab7d933712c555c642c624f15bfe0733b18e30e5f1af2bb213b006cd0daf7d8223d0f5ea34d4cff10a2e9ddd6548cb3775328fb

  • SSDEEP

    98304:7JWwr6Ge+58dCKbC3HOfxlVfYQq9b26U3OPUNZO2R6:7J7t58dC4x4QCbUeSR6

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.farnazteh13.shatranjeherfei
    1⤵
    • Acquires the wake lock
    PID:4992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.farnazteh13.shatranjeherfei/databases/__pushe_base_lib_db

    Filesize

    24KB

    MD5

    abe9fa56c177c65db8c072e6d81fc41c

    SHA1

    abe9e9bb6f7294324f549af4435f58578ae69f2f

    SHA256

    53f09b897033e2496e13f3c6e8d14ec1d1f7b273c2b4d47dacc569594fef0f8a

    SHA512

    bb1b70eb859448050dd71822652d1976456be07c098ab41f2f75fa277cde059aff0c45629564170ee07028b85d501cc941529ab06753e5be2e710692bfa3922a

  • /data/data/com.farnazteh13.shatranjeherfei/databases/__pushe_base_lib_db-journal

    Filesize

    512B

    MD5

    1b3866a0b899aa6162592f69307640a2

    SHA1

    0c7418ca0ecafc14c6fa1a4fbb8c62ee42395c64

    SHA256

    ab9e216e2330128af8e42c36f0efc5c23f2e988041da7b2ff56cb289da04236a

    SHA512

    df6b81cca66e96931194decd0e2d23945d73e493b6e00134ebbebb26c0377f627ef9592f4c2e04b5b79c86e8a5922749eeb1f9155b5da6dc262764b84a0ca102

  • /data/data/com.farnazteh13.shatranjeherfei/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    09aa1878d423c628121ae51176c0d775

    SHA1

    e8703236642c10bd30abd35f8cb53cadbc84f69f

    SHA256

    108fcfa8c94e13eed38ef5ded14bfe4eae71e46fb574367b8eb40b67c7b539ad

    SHA512

    a32d6166e9355a2567c806ac2b49097180a8d1026864971ef64bc56651a00aacf0d834630f18e43ff0bfd3ee59abd4e524097c9709a588e4318e1690a1546ed0

  • /data/data/com.farnazteh13.shatranjeherfei/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    5092f8b4b09b7f1d40b9ed13b313c122

    SHA1

    500f15de2133fe9aa90e5fa651523878d6f21cd6

    SHA256

    5349ba3074cf1b84ed8456daa8777d04cbc7810b603cc853e01578e60c048a5a

    SHA512

    6c9e6375aa0d30ed8e07bae1c28ae54c27cd7f0c756774d86f1109e98427e1e81ca06480856e9dbb38af40669965ef2f0b05b6c432a9f6b99559b61eb8b0643c

  • /data/data/com.farnazteh13.shatranjeherfei/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    a6c8f92efe6989fb4a15a46410641257

    SHA1

    e672984dfd6fc07015f839bea67ee547c5a8913d

    SHA256

    8904c61df9bcfc5be09e7280757a53fecc13a926cf7b3d2c0e9bbd65377ee1db

    SHA512

    e272e01c8ca086dec8191fc0c1c35af3ca003973f94923e7750731ad5232478b5c9ef75b024414feeda3d905fed70292afdcac85a5031750b244cd6c1690aa4b

  • /data/data/com.farnazteh13.shatranjeherfei/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    9703f9530999aa7baac41fe51be84d5b

    SHA1

    9392ca91cb5cd9d9048a38342dc2680ec42f1335

    SHA256

    3743d6707347aed3df8c20d7c69c4dd31876aa75d40e03dc27d3fe9b1211faa1

    SHA512

    13653b65cf746e1189422e9bcaa6d2f5e8ddc8a8e944958961299aada2a3cc8c17e8b6f8e1cdd00172c3e707f3ebde13bc2e1aa1d84a068af81a98b0d86f8462

  • /data/data/com.farnazteh13.shatranjeherfei/databases/__pushe_base_lib_db-journal

    Filesize

    8KB

    MD5

    54e5151805e8a32015dea524a601ec83

    SHA1

    c003e2fc64be27b7c70939881a1b7b59f3213b1f

    SHA256

    eac5999397ea61d83f29c4557336b35b258881a347eadc5f90aaa88c56dd175a

    SHA512

    d41b22cca8f2301d36f3d4804a1d0afa95a11808a0a64babf6556391fb393a3f41db2edc684adc28d98329ed2ac45ff6be355e917cecffc3ea78a714307436b1

  • /data/data/com.farnazteh13.shatranjeherfei/databases/evernote_jobs.db

    Filesize

    16KB

    MD5

    6525214cf605c8a7930880400bc1fd6a

    SHA1

    ca956cd9ff0039a33d67f425a7401d66b4f2d521

    SHA256

    b25aaf860f182c55fe5c40d95632b47c29b8d0b13ecb93bf9b660113455ffe2b

    SHA512

    c0cfee3f449dbadfdfee8d5f48b11ae29fbda1d84a838b4e3662c29255b61da0d47d66c7b1abfc1a0e62a6c643a54a6509b8904637fc0dfed50e15b8d67a598c

  • /data/data/com.farnazteh13.shatranjeherfei/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    02bf278fe4bf9a8e687b10b120be2c54

    SHA1

    461de0579316c0122ee4fd99eb8706fad63c12c5

    SHA256

    2f624cf427da12e44bcf80906df5ffcf1d89bf0b61a45624047fc29e6ce93253

    SHA512

    af973e4c5c1c4d78c30c939a52fb85f82f748c4364f1006af64469011b04268684c7432f53aeec4d973d42af4cb52359c31b5a2031b80bf5fb725b038491e176

  • /data/data/com.farnazteh13.shatranjeherfei/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    5acfa9ee250e52a903d5a323bfd181fa

    SHA1

    ecb1a98f22bac4180a8392878d51546993b9c71a

    SHA256

    25ed7d75852a66f09b9acf371c423daaf6dad2778833bc43722a36380d091fe5

    SHA512

    1a047e56d379ab6a67b543342f352798602a4d279e62d5be408e8580377206eab37b8c00e9f2f232e79e4d3653e8923b553f45a246aa1637fa84117b4a2cca3f

  • /data/data/com.farnazteh13.shatranjeherfei/databases/evernote_jobs.db-journal

    Filesize

    512B

    MD5

    756b3ad5b1fccda71dfe19688cccc8dc

    SHA1

    407cf407ba61763b13039970f951a318b945e05d

    SHA256

    1f8422466a11bcb3f5028a943f691b1b981db2f394cc68409384f24b84a6d864

    SHA512

    733b3dda1575d9f82268b3731c841de29b9f3ca6f256550b17e66077294a4ea05685b469452bace3b66d4edc3b57d55d33c2e82e89728227728a602fc406d75f

  • /data/data/com.farnazteh13.shatranjeherfei/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    afda7a0d13e3b5a530424ac0fb0a7dc2

    SHA1

    b6b812693608763516f6d97a32970058e2a4b4f2

    SHA256

    29f847b6435b98d08235bf5e0b925b275412d3a15f0ee297e2b475866ad1e4b7

    SHA512

    0c6064dad7ee9f0a33254898712c07e720052cfe3413901b23551f7ed1d8ade4a35053597a274212b6aa93b6774c3fec4e4004b039e822bb745d1a4d8f3c7e29

  • /data/data/com.farnazteh13.shatranjeherfei/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    1c425d19ff18bdf5f850ed8f0234e5c6

    SHA1

    4aa22f4f5f3fa1fc1aaf504e7188524eb75d3e51

    SHA256

    5a5dce025ff196b573a73fc4dbe3b4b370ebb257ea558cde37ee871017a88579

    SHA512

    648a743955d1f72e4d3029cd057021774bb20709d37fd121979d3885fba1d6df187295d7cee364a6f6065dbdfc2737a64b69234d5ec08264449e33f143e9f4d7

  • /data/data/com.farnazteh13.shatranjeherfei/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    2d19acd2f91a4e1b56009bb903f33aa4

    SHA1

    804a8df0fecb8e016855951eb371847a8abc1bd5

    SHA256

    a52f1718e68061b791476229ab36d4c4c8ea4ccbd5f2098485a2f347cc53b6ec

    SHA512

    19d8a0080b03de9905f5ceb3e1980ea46fcca047a430286675c1ef8fcda602ca1c273b79c2f0c7a6e5d279fea535f353fdf48c1267b9490fe64b5458c74619e1

  • /data/data/com.farnazteh13.shatranjeherfei/db.bin

    Filesize

    95KB

    MD5

    6a9e82d3b33cdc409c5e2444c36e5165

    SHA1

    76a4cd716bb524d129d552a62a8ae063282020d3

    SHA256

    2103324727f3872acec5e6561d2f5e0b682e29b63bbe318d758f37514534a209

    SHA512

    b5bcee81bcc2a124955c5d5bc402e436a9e19ee3aa0348911e778063de3596984e571684ba69a461ab3277818b062d2324bbd1c9af64a2d1b6b31da981381f48

  • /data/data/com.farnazteh13.shatranjeherfei/files/unsent_requests

    Filesize

    3KB

    MD5

    6acaba88dabbe2e2adcb4216cb94a508

    SHA1

    230bd5f73abc820fce57ea4f1066b93f9267fd98

    SHA256

    e2d62d94087816f8ca2fae299e8a46d15c196eda0c45f24b0cd05da43baf801c

    SHA512

    68ba5c7b411763169689d7e6052881df03ad2ce1efcd80a98a24a00a015812884edf341fe351bc67d5a1bf697fe59ab6bbf5583eaa95d62524c39ac6ba634c0b

  • /data/data/com.farnazteh13.shatranjeherfei/files/unsent_requests

    Filesize

    7KB

    MD5

    406750875a89a70ca624908928860d44

    SHA1

    2bbc272ea7e3f7fabb7d621e25baec050c62c1d2

    SHA256

    6548e4bab4beeb59ffc758cdd76d83dc0dd6e87087210909318c61fcb0cd7d49

    SHA512

    2b3f05d57908680f094afbb1058b6d47c15bef246156014f214e03a3728be53d6ea3d257947f72ccf30462924c587c2791fbec9cae46783c262bcb20c3dcddf8

  • /data/data/com.farnazteh13.shatranjeherfei/files/unsent_requests

    Filesize

    58B

    MD5

    0d210bfb2a0e1f1b4c082a6a0f79de07

    SHA1

    bb8ed9e364db79d1d9f2fcde3f15091893222faa

    SHA256

    988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

    SHA512

    536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

  • /storage/emulated/0/AndroidID.txt

    Filesize

    36B

    MD5

    7f12538837666a48689dfb9fbe76e5ae

    SHA1

    602124032dbfbf6a08e528d7db33e718b8230b37

    SHA256

    d3d00b8afd0be5d00fc9b66b9703c89551d520851d29cb19e5c11e95a645396e

    SHA512

    d76b09af52db21c1d5efed4d85232b358867ac7e13024858c82893c4e8a8d5739c3f2e755afa83b7e4fd2e4efbed78634aa4ce4eff7d2654c506c49ceb46db37