Analysis
- max time kernel
4242041s - max time network
157s - platform
android_x64 - resource
android-x64-arm64-20231215-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system - submitted
12/01/2024, 08:43
Behavioral task
behavioral1
Sample
5600676c99de6e1ec35f104a37a0e341.apk
Resource
android-x86-arm-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
5600676c99de6e1ec35f104a37a0e341.apk
Resource
android-x64-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
5600676c99de6e1ec35f104a37a0e341.apk
Resource
android-x64-arm64-20231215-en
3 signatures
150 seconds
General
- Target 5600676c99de6e1ec35f104a37a0e341.apk
- Size 6.7MB
- Sample240112-km338sdfb5
- SHA256 6adead79c597943a8db40268ec6adb428b29c684c2b80943f44036626b34fd75
- MD5 5600676c99de6e1ec35f104a37a0e341
- SHA1 ec92bc0a68bf5d1cf693c1b5badcd0c132c7e652
- SHA512 578544365e42d75082af6d10b6adc2f4f64f7e643a880e0d40847d6401cc49195f2eb91cb535b10d7f1e24e2fef56089eb0dd42e32b64407cbc6453520e7584d
- SSDEEP 196608:cQHJu5mT1PICFgi3piiSQodtrPHPEC4fmKO:4a1g2miSQsrXkG
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Requests cell location 2 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation ir.askar.noshidanii Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo ir.askar.noshidanii - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ir.askar.noshidanii - Reads information about phone network operator.
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/ir.askar.noshidanii/databases/__pushe_base_lib_db
- Size 24KB
- SHA256 302f4661c8b3ee28f8d683efdbd245386989422e54073e2efdd326d36dd42269
- MD5 a04439d267049ebf8a492bb6e7cad486
- SHA1 e748c757e7ff22b4f1f1a8440cf9ea9037153d7b
- SHA512 763197f8327f710b86c9393fc3e6bcd048d9e9fd7254d90d34bb1ef3a64579b60aceac33aad957c7914ddb60df671e3f9f8e4299db9ad7c079e94907aaa452e1
- SSDEEP 6:l9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKGQQQ:TLiuWdYRmBEyPbZQQQ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ir.askar.noshidanii/databases/__pushe_base_lib_db-journal
- Size 8KB
- SHA256 5040c8d5040cdf10fd9b1b4024a0b2141031b054c6f664172789231cbbb1f67b
- MD5 433314c3c314d4686f20ee263c09b242
- SHA1 f71ba4b4d6e2106d8bbb52e6b39ff8134eea1f47
- SHA512 04078ca0769074bb2e6a257c7ba82c1e0d9274205902cea34d5ccb664656e9eb21200ffe06bd0c4eb4d43c0b0ad68df9912d45028ee5623bb43b6be79eec6fdf
- SSDEEP 6:7+/l9jqn1pg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK43r:7+tB+qLiuWdYRmBEyPbZr
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ir.askar.noshidanii/databases/__pushe_base_lib_db-journal
- Size 8KB
- SHA256 72aa6763d9b324c4f6de88a81e33f3a7d2bdcb7217ea0d4e437b590fb5024f7e
- MD5 e355d33cf17db9909a72033689afe8fc
- SHA1 e4a56227ea03b15b619ad9546f9cf8cf2549fcb2
- SHA512 d949d784f18284f7f0a8176d63ac6e1d79d0c11c979c30269c166afa5c74b45f284c968f01d2c0ec3549090e28f3a7c20fa7706a8950b9eb269a1315c2049d6d
- SSDEEP 6:7+/l9ZlFPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK9kt/G:7+tJBqLJdeWRmBEyPbNG
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ir.askar.noshidanii/databases/__pushe_base_lib_db-journal
- Size 512B
- SHA256 b09db7e4deb1239b56dbba8e4fe860abe28717c7bdf030eb1c5ed4190a7c5e68
- MD5 a6c9ac8a9c9fc8f1dcd37e8bbbeb5605
- SHA1 93a990f263e81cb1813c2d375222bf672aebfa6b
- SHA512 7d681f711627894773d0d30feda1b52ee58ba28a3aec369d5cd181eecb46a5c805e237ff1e5d8f329750bba2093c2a4c480509bd8f5d13b894aa745def353f87
- MD5 SHA1 SHA512
- Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db
- Size 16KB
- SHA256 382e4cb7babbe5878451decf2552f3d5c85fb1579853c1bb8dc9186526dd70c0
- MD5 dba41b84e8b4e254abe51adb51748c27
- SHA1 ebef888fe958b2d93cad70bce2ed88d28076e034
- SHA512 761b33cd2acc83c0b70c08fb6f726d6f4039977be6b08ac1e566d9207530f3fdb1c796e4efadf5fca50c951e9e1476688cc541971c41346d1ee537146b3f9caf
- SSDEEP 12:TLWuL2CRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbP/QG1vt:TLz2NVKRvTZc+UGSP/t1vtn
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db
- Size 16KB
- SHA256 90118e1631239a812922a49bcb78a742befd9f7e9e814091eb19bf12f1725045
- MD5 98b22b11115da8df137998b98e93b5dd
- SHA1 44416828f87dd2bf2e54d4e0c705cfdd6c969f07
- SHA512 8b4b2def893b009ac92c6702775eafb9d1a2a12682f76fd400131880b2044710652bbfffb18c90927ba622509d6d710a0b285853cdcef6924904cc2b5111bee5
- SSDEEP 12:TLiLmRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbP/dXmcivt:TL2JVKRvTZc+UGSP/d2xvtn
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db
- Size 16KB
- SHA256 62ee2ddbe4340fd6500d3d5f2371d312cd8118e5259216bfd1d332827118d811
- MD5 34da5be700afb28a6d3cccc76a238498
- SHA1 6e50af681b11ba66e7974f9eb9b9be81a4204a32
- SHA512 82efca20ca5b8c486c355e61850e823557eed1846057e78566991cf53d7daa830432870d554441492b1577a5c3c6fbaa15457e401af2af7a3b0f25fee9e446c5
- SSDEEP 12:TL1L7RulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbP/dXLcivt:TL5EVKRvTZc+UGSP/dbxvtn
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db
- Size 16KB
- SHA256 9a93bae294cb5c683d2e060b48f2a7e2b5eddad6c6448a3b0521e2b8d1dfb910
- MD5 4381b9d1bdc428da6637cf3fa8ab6ad1
- SHA1 d0e2ed18d0634f5dafc8f15d3d56c342573d9ced
- SHA512 0e5ba9ac2bef2ea81645298507b5e68b979a5fa5262e2a9a1e2f63f415e8288d6ccec47c2c9e7fb9704dbea6a5f958268e0797eaeee8b1bb234942f56f68116c
- SSDEEP 12:TL6uLhRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbP/hquamf:TL6aKVKRvTZc+UGSP/hRuQxvtn
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db
- Size 12KB
- SHA256 d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e
- MD5 171aedf968e17a2744d2585715606cb9
- SHA1 bbeddeb3b89fcf809619c35b4a318a80e7d5b029
- SHA512 78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b
- SSDEEP 6:l9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKTqiOw2:TLJdeWRmBEyPbsOw2
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db
- Size 16KB
- SHA256 bcb5bd032b5568be63a9d344aeeddbf160c0f4f42129d9eecd12aebca0bca55b
- MD5 6a0de113a167ddeabc5b6e60655f6c97
- SHA1 1e54024e709567aba0fc040e44da09d1a1026fb0
- SHA512 246fcff44d405c652248df0256c860ab48c5597dc3847cdf977c6599d0dda579838747b45972db55aa4155d2ddc97746b6b5910db052884951bcbcc77a0294f9
- SSDEEP 12:TL8LIRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbP/QGEvtn:TLw7VKRvTZc+UGSP/tEvtn
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db-journal
- Size 8KB
- SHA256 5d82fb2af8cb13f7390188b3aa8f4c82d512e6c88710661dad27d670e9deec16
- MD5 312a6559d40dab15df53940efc5937d8
- SHA1 3cde891d0d97375ea46f6abc3efadd88aac9078a
- SHA512 dd7afcf14814ed767d296d7debdb2dfa03e535f6f0ce57b86ba3b85064f4a91557bc458e3ee925e439ebd1ad1535e146f0a05aaab4642a5935927fd9fbb6a2e0
- SSDEEP 12:7+t4v8GEvtKlpqL8LIRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmz:7+t4vBEvt+pqLw7VKRvTZc+UGSn
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db-journal
- Size 8KB
- SHA256 7aaea69473b45f280611fe0b3729d514e0aafbd0625b3b1ad4eb8c32642e26f8
- MD5 0c86e633428d96e280dcb15409decc1b
- SHA1 1176b54978eb7443b52419e8b82fd2eff929e63c
- SHA512 b4b4b13d00e99353560563b5634c064b0b88278c6749d2efc6127443c9f7c0b980bf2ef626bef50540596ebedd3f1a384db8df7865d0552f20f4dcbb7ff2d6d6
- SSDEEP 12:7+tDpJmuoDcivt49RqLILkRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dV:7+tD+uQxvt4RqLUvVKRvTZc+UGSk
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db-journal
- Size 512B
- SHA256 43edad4540e6d6e6967b0a5f827739addd297a14284bcbe79a438b3100dd178f
- MD5 30aea145efd8fcab2080524e5aca0930
- SHA1 6e5ad1f54ea04efebc822e23cac35d302e19ab96
- SHA512 3408702b5e7a7304ea3d09f31bfa6ed234dae3ccda31df406348d25923062e94c362b7ea80b74706b985c0375ae9e0e9e8129c8af7fb4641f9ee4d6332168be1
- MD5 SHA1 SHA512
- Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db-journal
- Size 8KB
- SHA256 ea5593465341422d98b0eb108d10437bf4e0e05e48ec7d9490428050efdca83a
- MD5 c891c9f806b654a6b158e187147748db
- SHA1 ee75a6359b547e75f0435528d779ef99eae9eff2
- SHA512 0bac39c135d1c41022a4fd43de868852ee7fb03f999e185e09c726a7536ae54c960fd66a1446e7e761c97ff95465d8d0fd81690aeb0f46ab7c50587659adcbe7
- SSDEEP 6:7+/l9tWuHn1JWg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK2S:7+tuuyqLiuWdYRmBEyPbHS
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db-journal
- Size 8KB
- SHA256 12031916351e8ed938e79992def66c475c5bb57df373121a144bcde59b4dfa95
- MD5 d3880a361291c1f098be34892110bce2
- SHA1 be990299efb7b30b5111d1d1be652cb55e8fe48f
- SHA512 fb92daa560092f058892bbd2e5a86617ab27ac5c224ca916bea353fd35e5555c174032ab938e1fcce4ebc7461d6f7ae872f97242391368b52362a8419c91e080
- SSDEEP 6:7+/l9Al4Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK4//I:7+tylwqLJdeWRmBEyPbbI
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ir.askar.noshidanii/databases/evernote_jobs.db-journal
- Size 8KB
- SHA256 e5384d39d493ede11d6964f9518d83e4569dac103e716c121a4d9c4d94caf1a8
- MD5 786325b404c558bfb8207381137130d1
- SHA1 b43296461c32f88a6f103513a402eb40e2fbd165
- SHA512 30aaea21932f42167518d28a1ea634d4c08996a79b77aa62d43f894410288cb09a8792508e6dcac4c4978cfe8efe35ad0802bce0aec186e3c5022293b15cc27d
- SSDEEP 12:7+tlWqLpLPRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbm:7+tEqLFQVKRvTZc+UGSm
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ir.askar.noshidanii/files/db.db
- Size 119KB
- SHA256 2fb777e58b9434b661640ce5cc263dfac03253575b4cd5116b34918f067e2a47
- MD5 02e5217d57abe8d010a592215d3617ee
- SHA1 151df9e157cf82fadf27c50a905f1a918ab6f410
- SHA512 2caa925ab90e034a812919838b82136fd4f4ace97464840d0ed7e2072bb912147b0a7c3e3811149c72abb7334a519bd73c7c61358f546edc0df8d8f6154b2633
- SSDEEP 1536:3cQuLFZjp2tW0plciOQ98HRxBNElGbLlfACelUWbm3En/BOS:cfCWACvfCCJ6
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/ir.askar.noshidanii/files/unsent_requests
- Size 58B
- SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
- MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
- SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
- SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
- MD5 SHA1 SHA512