Analysis

  • max time kernel
    4242041s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    12/01/2024, 08:43

General

  • Target
    5600676c99de6e1ec35f104a37a0e341.apk
  • Size 6.7MB
  • Sample240112-km338sdfb5
  • SHA256 6adead79c597943a8db40268ec6adb428b29c684c2b80943f44036626b34fd75
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10

Malware Config

Signatures

  • Requests cell location 2 IoCs

    Uses Android APIs to to get current cell location.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.askar.noshidanii
    1⤵
    • Requests cell location
    • Acquires the wake lock
    PID:4635

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        __pushe_base_lib_db

        • Path /data/user/0/ir.askar.noshidanii/databases/__pushe_base_lib_db
        • Size 24KB
        • SHA256 302f4661c8b3ee28f8d683efdbd245386989422e54073e2efdd326d36dd42269
        • MD5 SHA1 SHA512 SSDEEP

        __pushe_base_lib_db-journal

        • Path /data/user/0/ir.askar.noshidanii/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 5040c8d5040cdf10fd9b1b4024a0b2141031b054c6f664172789231cbbb1f67b
        • MD5 SHA1 SHA512 SSDEEP

        __pushe_base_lib_db-journal

        • Path /data/user/0/ir.askar.noshidanii/databases/__pushe_base_lib_db-journal
        • Size 8KB
        • SHA256 72aa6763d9b324c4f6de88a81e33f3a7d2bdcb7217ea0d4e437b590fb5024f7e
        • MD5 SHA1 SHA512 SSDEEP

        __pushe_base_lib_db-journal

        • Path /data/user/0/ir.askar.noshidanii/databases/__pushe_base_lib_db-journal
        • Size 512B
        • SHA256 b09db7e4deb1239b56dbba8e4fe860abe28717c7bdf030eb1c5ed4190a7c5e68
        • MD5 SHA1 SHA512

        evernote_jobs.db

        • Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 382e4cb7babbe5878451decf2552f3d5c85fb1579853c1bb8dc9186526dd70c0
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db

        • Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 90118e1631239a812922a49bcb78a742befd9f7e9e814091eb19bf12f1725045
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db

        • Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 62ee2ddbe4340fd6500d3d5f2371d312cd8118e5259216bfd1d332827118d811
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db

        • Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 9a93bae294cb5c683d2e060b48f2a7e2b5eddad6c6448a3b0521e2b8d1dfb910
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db

        • Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db
        • Size 12KB
        • SHA256 d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db

        • Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 bcb5bd032b5568be63a9d344aeeddbf160c0f4f42129d9eecd12aebca0bca55b
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-journal

        • Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 5d82fb2af8cb13f7390188b3aa8f4c82d512e6c88710661dad27d670e9deec16
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-journal

        • Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 7aaea69473b45f280611fe0b3729d514e0aafbd0625b3b1ad4eb8c32642e26f8
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-journal

        • Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db-journal
        • Size 512B
        • SHA256 43edad4540e6d6e6967b0a5f827739addd297a14284bcbe79a438b3100dd178f
        • MD5 SHA1 SHA512

        evernote_jobs.db-journal

        • Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 ea5593465341422d98b0eb108d10437bf4e0e05e48ec7d9490428050efdca83a
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-journal

        • Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 12031916351e8ed938e79992def66c475c5bb57df373121a144bcde59b4dfa95
        • MD5 SHA1 SHA512 SSDEEP

        evernote_jobs.db-journal

        • Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db-journal
        • Size 8KB
        • SHA256 e5384d39d493ede11d6964f9518d83e4569dac103e716c121a4d9c4d94caf1a8
        • MD5 SHA1 SHA512 SSDEEP

        db.db

        • Path /data/user/0/ir.askar.noshidanii/files/db.db
        • Size 119KB
        • SHA256 2fb777e58b9434b661640ce5cc263dfac03253575b4cd5116b34918f067e2a47
        • MD5 SHA1 SHA512 SSDEEP

        unsent_requests

        • Path /data/user/0/ir.askar.noshidanii/files/unsent_requests
        • Size 58B
        • SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
        • MD5 SHA1 SHA512