65c8e45b85b50782fadfccaddf32803f244d2b920d55219376f410f3dc4c49cd

Analysis

max time kernel
36s
max time network
164s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
03/02/2024, 06:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8ba88db8cbc03fe250af06776ca88cb0.apk
Size 6.2MB
Sample240203-hfvgeabdc9
SHA256 65c8e45b85b50782fadfccaddf32803f244d2b920d55219376f410f3dc4c49cd
MD5 8ba88db8cbc03fe250af06776ca88cb0
SHA1 cca1fc7c1023b5e1f3455dc6d10f874dd443483a
SHA512 b25100b602322366772d554118df70df20459944e7b14950fe965b576598b9c9257c8b3290888e9ade3549e4e76c085ed962674884b6af40fe756c4f2bbee308
SSDEEP 98304:Wt9InNVWSHvCWMqY8UCpB90xLhyP5QwG9kJCHtDgZLROTNoqFeGvDiLis:WeW83MqY2p3011ncR2NoOjLi+s
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

Malware Config

Signatures

Requests cell location 2 IoCs

Uses Android APIs to to get current cell location.

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	ir.mizansoft.mooor
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	ir.mizansoft.mooor

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	ir.mizansoft.mooor

Reads information about phone network operator.

ir.mizansoft.mooor
1⤵
- Requests cell location
- Acquires the wake lock
PID:4976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

__pushe_base_lib_db-journal

Path /data/data/ir.mizansoft.mooor/databases/__pushe_base_lib_db-journal
Size 8KB
SHA256 770d71a77bc40fef7b4430c4d133aa50404aeb2966b4dd745bfb09e3bed4e14a
MD5 bb63775fed957b2c4415789301182bd5
SHA1 52b42a88abb60ff426b3ed8d54bc3eebb32fb105
SHA512 d745a125099cf449a32dcb61759bdf8708c511c0c14fe4fe82d06345edc3cea429a79895b0c0b5515fd0f6d5232fc09f0f9d395ec62d450a30cba8e64273451c
SSDEEP 6:7+/l9yh/Gn1ERg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKln:7+tsh/lRqLiuWdwRmBEyPbqn
MD5 SHA1 SHA512 SSDEEP

Submit Download

__pushe_base_lib_db-journal

Path /data/data/ir.mizansoft.mooor/databases/__pushe_base_lib_db-journal
Size 8KB
SHA256 a99a24ba2cf715ffe457e80e38456e410af3e11154d67587ed83d81e8f2ecaed
MD5 c6f12c6993054cc5eb5daa60fd7e24d8
SHA1 76ecf2955c3d6adbc99822aa5774628f9fe23052
SHA512 49abfcde1896a1f764477198947e2c6aa09db0fdbbec9435a0eace320eec9fbdf8b6c5fe906529ff89b637a551e525e0dd1ffb8a933c2a696a674926cf3aab75
SSDEEP 6:ZOPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKsa/Bn:0qLJdTRmBEyPbOB
MD5 SHA1 SHA512 SSDEEP

Submit Download

__pushe_base_lib_db-journal

Path /data/data/ir.mizansoft.mooor/databases/__pushe_base_lib_db-journal
Size 8KB
SHA256 fffb5835d6ce423df3171ca54038911e7fa3161191e8536b0f8b6ff3ff266960
MD5 eaa1dd823a9493c96281602dbea9e44b
SHA1 cd30dcdce7d2862ede5645e59a2821a99db09838
SHA512 f5440472d2c8ca13a2fd4bd356f28b39218f63ab61ba3f6c75216af020a82db65f0b2f413d8b7a15cffad83b8b01c1b5ddce47f8af71c42d95cd4478ed785c15
SSDEEP 12:7+tdVDtnqLXyFormG4NK0COnHdOnHXy1TOnHyilc36/QN6/uJaEcZVMJwRPVz27Y:7+t7DtnqLbxSe7TlcK///IoVM9cREGSO
MD5 SHA1 SHA512 SSDEEP

Submit Download

__pushe_base_lib_db-journal

Path /data/data/ir.mizansoft.mooor/databases/__pushe_base_lib_db-journal
Size 8KB
SHA256 f6c541725d98c4c460fff19bec3d7c4434ec1a854642a59e755b4021d0b79993
MD5 25a79bbbbfeb69efca50ed85848545a1
SHA1 66ee452e5e498fc38640a3b48682829f1e3ee266
SHA512 e7503c54dd21b736be83cc96dadf1864f0471fde808b1469ebbc1bedb55f91680861c215f7046e5a9c74c60314b844217a200a1ae9a8b650150beb4bcd9167b5
SSDEEP 12:7+tJ3WqLO00FormG4NK0COnHdOnHXy1TOnHyilc36/QN6/uJaEcZVMJwRPVz27VC:7+tJmqLhFxSe7TlcK///IoVM9cREGSW
MD5 SHA1 SHA512 SSDEEP

Submit Download

__pushe_base_lib_db-journal

Path /data/data/ir.mizansoft.mooor/databases/__pushe_base_lib_db-journal
Size 8KB
SHA256 d0e8899d21a7d6b1ddc1d5069136359c7220dd32967d3891d6fc77b519db7acb
MD5 5af84798742f6dab2d2d0cd7c1bc8472
SHA1 1ec6d9c7f318bbe809dd0f3e70f052b18dc30e5c
SHA512 a845fe0ae2a8c7fde2884aa3de3f6f2e48ee5e6a2345b3af66e447e28bb4a515168d97d92b257c655665c6f4afddc487568eb68e70117887e9dca65d69d13d1d
SSDEEP 24:VsHi5AoppNIQeh2C7GgCL0wHuNBLIQeh2C7oqLsoxSe7TlcK///IoVM9cREGS+:zeopASSwONS0qPxfHX9VM9US+
MD5 SHA1 SHA512 SSDEEP

Submit Download

__pushe_base_lib_db-journal

Path /data/data/ir.mizansoft.mooor/databases/__pushe_base_lib_db-journal
Size 512B
SHA256 1da61175c6cd860756fe560bd6a1a4f14ecb74a2feb2e2e59c782e426c2acbbf
MD5 0df9ad0f1f04e9f2a61d43b40b9afda8
SHA1 05f3b51a8bb69e7e96efff681efb07c23fb3728e
SHA512 c9bf6777765f39c11bc057254cc0e41e711db22e00c73f4060e17f78e3a9ed820607fa9d3f7f4d8bade2c5483101fa3f600f84959eacbe17957d22e7ab859135
MD5 SHA1 SHA512

Submit Download

evernote_jobs.db

Path /data/data/ir.mizansoft.mooor/databases/evernote_jobs.db
Size 16KB
SHA256 514ee93e9376f931eee57bba94c5e5145a9de0b8d4475496edfa7ac4b6ca573e
MD5 179b2e4b831246083afafbcdec23eff4
SHA1 54dc53f01d96deb817935840b10e9c22cdc678c6
SHA512 0fd060f941f4efcc09a35ede6f37b0c4d9a196cb469db8d4de85031c37d10e70a1d7658cb8d185eab13188555260fee7155cd02c67955de872ef4786549d03d4
SSDEEP 12:TLWuLeSRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbP/QG1vw:TLzedVKRvTZc+UGSP/t1vw
MD5 SHA1 SHA512 SSDEEP

Submit Download

evernote_jobs.db

Path /data/data/ir.mizansoft.mooor/databases/evernote_jobs.db
Size 16KB
SHA256 1abc1a9d40d729e0351f1b67c7a762e9ecdc17b23349421167a7c29d6e568b63
MD5 286c4e8a97b6a7b2cd13c48e08fbd9b1
SHA1 a74b3096f85d86b4bd16a2dd5601682c3b5333a9
SHA512 0a26527b70e74071e0c9c94976e36befe4dcc7eea256430398c6280b09f5432e4f04b6f1468aa973bb8aa7fb76a3b63e99db25ad385d9ca6ad3bf6f869f12911
SSDEEP 12:TLiL+RulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbP/dXbMvw:TL2hVKRvTZc+UGSP/drMvw
MD5 SHA1 SHA512 SSDEEP

Submit Download

evernote_jobs.db

Path /data/data/ir.mizansoft.mooor/databases/evernote_jobs.db
Size 16KB
SHA256 8ef525a19642754d432c094d7cdd8345282515b9c246afaca34a2c15b8354acb
MD5 a610325847afaa0e3dc71e798c59d773
SHA1 bb726b16c3ed87be67e489fabf9be7028549bff1
SHA512 452242390b2cea858914ece4f4dd18efde6fc9d203bf9a1bfef2171d9762cca05e9809206250561745cd431e6354cfb466359ff9a425655271a5d3a9c4faaecd
SSDEEP 12:TL1LDRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbP/dXSMvw:TL5sVKRvTZc+UGSP/diMvw
MD5 SHA1 SHA512 SSDEEP

Submit Download

evernote_jobs.db

Path /data/data/ir.mizansoft.mooor/databases/evernote_jobs.db
Size 16KB
SHA256 616b67b09eb54a9c0734f53f0ec1e3f380c1acb8097c729e5f78a3efe4cc7128
MD5 3b139f9f0d27e8bead0e141c8dff39aa
SHA1 1b4661bacfb22f1aa6305094417258c909c2108c
SHA512 9ac957cb0937a4e07a29d60fde5090548a86f37853648e972470002e8a64158d12b39300c4de665a62b5a160b02d0bc1f552d6f1858de302dcaab22f46e91bd6
SSDEEP 12:TLuLuzRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbP/55qraN:TLaFVKRvTZc+UGSP/55qBui
MD5 SHA1 SHA512 SSDEEP

Submit Download

evernote_jobs.db

Path /data/data/ir.mizansoft.mooor/databases/evernote_jobs.db
Size 12KB
SHA256 885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
MD5 ea628e04765adaf4238a5dcdff4bbd51
SHA1 a801947619ea8c368efe9c006a324dc6339ac60b
SHA512 c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe
SSDEEP 6:l9bNFlLdrlOERX4PBX4ogLugMBX4suuKTqiOw2:TLJdTRmBEyPbsOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

evernote_jobs.db

Path /data/data/ir.mizansoft.mooor/databases/evernote_jobs.db
Size 16KB
SHA256 e22c8e4f56f74588c631cbbb287fb288116c4cb56b4a7c76131c378136c47a3f
MD5 c7f33375b05b662f9e77a5d97a46bed9
SHA1 eab8404d5057495dfe20f7e1a563921f42a98789
SHA512 9c386f7adde524cc6c7c262254be7c83994d3d47d66adefada9d2192538e4674c6c650aa91d640ab1302f5ac00b760603ef7b398a2b18f1cd169078b44e2aacb
SSDEEP 12:TL8L0BRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbP/QGEvw:TLw0qVKRvTZc+UGSP/tEvw
MD5 SHA1 SHA512 SSDEEP

Submit Download

evernote_jobs.db-journal

Path /data/data/ir.mizansoft.mooor/databases/evernote_jobs.db-journal
Size 8KB
SHA256 1a4c2998d04d7072ad7d0bb82c7b6e856c80728e6daefa13167a7895881d50fa
MD5 04c6c225622d34e44f8522456b94aace
SHA1 98f8a1acc81b27dc51c0e67245201c5a9d410d8b
SHA512 ea87cc316329bc18f9893b9e6a85da5311bb5fd3ce2d9706f119a6411c8897723a55929ca623fa6f1bf06016b36969b63c109ac0e379839c71b2160beb1d62df
SSDEEP 12:7+tFNGEv6WqL8L0BRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBE0:7+tGEvtqLw0qVKRvTZc+UGSf
MD5 SHA1 SHA512 SSDEEP

Submit Download

evernote_jobs.db-journal

Path /data/data/ir.mizansoft.mooor/databases/evernote_jobs.db-journal
Size 8KB
SHA256 c203cf50f3fbdbe09951e43a890fe7be4aa95d4b95da0453743eecd76d33794d
MD5 e8345aa996bfd59456867dc9bbb4213a
SHA1 a1d9eb59146bb3461cd8ed7cde267cc30bfeea6e
SHA512 4d11e9ff7e4e341a8d7579f24a86252e723f5241d699689235a1c27f9a43d2970ca2155b54ee48baec360e145965a3d0ff9f3d72e0dd3660a4326ccdd43d1a92
SSDEEP 12:oSXSMvzSqL1LDRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbk:oSiMveqL5sVKRvTZc+UGSk
MD5 SHA1 SHA512 SSDEEP

Submit Download

evernote_jobs.db-journal

Path /data/data/ir.mizansoft.mooor/databases/evernote_jobs.db-journal
Size 512B
SHA256 fa96a1bff2572979110cf8c7492e20bc06e3c6e64fde57228bee30c481023640
MD5 46ed2f56513b9418f88b831010d1e6cf
SHA1 7051d6cd845abed89b4e7c456b5065b739171282
SHA512 58b3be450481994d82827ce9635b89ff6eda4992d5a3eb3beb4019b3ae2783d9eef03a13d0c58ed8fa8c8ad91c49f0900a47a430f9e9c95b1b5e37a845408300
MD5 SHA1 SHA512

Submit Download

evernote_jobs.db-journal

Path /data/data/ir.mizansoft.mooor/databases/evernote_jobs.db-journal
Size 8KB
SHA256 ff0bac79e9247d539db39a694d848a73c43b4730cc3afef5bf1deca37762c37b
MD5 f91ae2973515f376422f8045e3a7e6b5
SHA1 051f901bbd11673aeaaa5c41ed82255bb5bf9924
SHA512 7ffab09c2d81dd1c52cbf237c8b0bf78c03004a56f5a10049afe7cdd4becf5db56bfa27df0e20f22065b0808d0a2f40d9963f1ebf29fa762ad871bf25d61f3d4
SSDEEP 6:7+/l9Sn1tvg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK7S:7+t8qLiuWdwRmBEyPbSS
MD5 SHA1 SHA512 SSDEEP

Submit Download

evernote_jobs.db-journal

Path /data/data/ir.mizansoft.mooor/databases/evernote_jobs.db-journal
Size 8KB
SHA256 706f1efc63fcb3953c6a5ffb6b6ac32bcfb1234ae12ff6106cb5132e4e5e765f
MD5 22148b715170c708d10eae5e32f22383
SHA1 9e93d9294caf92c5689d7d2e4b0ec3f83b9482d5
SHA512 e9e672bce9d4d0f6e5da92dc158dfab945397ec0610975d55a2236dbbbf66445653711dfbaf5fc1f3479d41f93d276fc625c9ea89c1b8b5bcf6b7bf713993242
SSDEEP 6:TPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKs/:LqLJdTRmBEyPbD
MD5 SHA1 SHA512 SSDEEP

Submit Download

evernote_jobs.db-journal

Path /data/data/ir.mizansoft.mooor/databases/evernote_jobs.db-journal
Size 8KB
SHA256 1c81341397da605d58793abfd1e2c666a3bc40ab81c641ab801fd89deadf7314
MD5 6dc74e4b7a582edc283431f7dd9d5e2c
SHA1 56fba8bc99e46c758eb46adc7919ff6b6848cebf
SHA512 9cc3e8be5c37fe8297deb6cfe7cfd8529ee3e15b1f04cf9612886e939b696dbbbf91177c9a65817419b36cab1c3ca50909b996130dd2c7b595f42305ac7a4eb3
SSDEEP 12:2vqLpLnRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPb+:WqLFoVKRvTZc+UGS+
MD5 SHA1 SHA512 SSDEEP

Submit Download

parvareshkaktus.db

Path /data/data/ir.mizansoft.mooor/files/parvareshkaktus.db
Size 232KB
SHA256 2b439069ac31f89382990ab7a1a981ec0c4a8edae5a4a16ee34389e660939845
MD5 c101459a332c099ba965dd5b3280e2e5
SHA1 cc3004f6d4f6fa344ac5327b8aeba0c3131c84c3
SHA512 7aae30eea1d17a143223c64f651f6c48e9fae5368efb07af0045daca7da6162457574f4abb2d3b78f02a7e6a5b63b4a5af9eca8bc570937118b757dd76c7106d
SSDEEP 3072:A5hFWPr+ONIpeMYyp7rjk1lysKomWUpQEt:AFGrLIpZYyp7rjKyTomWUp
MD5 SHA1 SHA512 SSDEEP

Submit Download

unsent_requests

Path /data/data/ir.mizansoft.mooor/files/unsent_requests
Size 58B
SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
MD5 0d210bfb2a0e1f1b4c082a6a0f79de07
SHA1 bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA512 536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads