Analysis

  • max time kernel
    49s
  • max time network
    155s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    10/04/2024, 08:03

General

  • Target

    f15a22d2bdfa42d2297bd03c43413b36849f78b55360f2ad013493912b13378a.apk

  • Size

    11.6MB

  • MD5

    4ec6d5a178e7e0b21ff965c970db3da2

  • SHA1

    2ce9639452f1a920241952cce5a03d415763b102

  • SHA256

    f15a22d2bdfa42d2297bd03c43413b36849f78b55360f2ad013493912b13378a

  • SHA512

    a9a3fe6d23c7f3ebd79f20fe2074febf8c4f684e95e4c599b5232f13fe91931e37916998da6191cb2c6e132b763cfe789374d13909476f2ea8a2e4f55bae32bc

  • SSDEEP

    196608:ShjUFKNpH6Au1GdQYGcrbPVJO2RtjlKS8uBR6jT4LMUsRox+I6pqFH54gC:EjdNpHW15sPfxjX8uBPo1Roh6pqFHGgC

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Looks up external IP address via web service 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

Processes

  • com.teleram.app
    1⤵
    • Acquires the wake lock
    PID:4180

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.teleram.app/databases/Marshmallow

    Filesize

    36KB

    MD5

    fe70530b536fa55deb1b8911e7281933

    SHA1

    fe532c303f69678e346186bbf0cd7d2787bbde99

    SHA256

    086894a5a6ce1adbf9bd56b2952f850943b893fca483d2617043ba996f9f54cb

    SHA512

    51618f25899663e427bf143c522e5a68871d11de7d91912e1b269b9c3afd09fde156763c603f76f7b4ac173ceb9db8e8e1a85985f080d98cd5a41c28c8c96664

  • /data/data/com.teleram.app/databases/Marshmallow

    Filesize

    16KB

    MD5

    ff3cb7df43c6dbf0d082315b0bf68ff7

    SHA1

    5bfb627ed03b79da6d5e1cf791aabacb5daac825

    SHA256

    b959115e4d1b5b0674a3acbeeda223131f2adfdaead63b76858551b00acb3c91

    SHA512

    567b989236c962bddcde824a531f18171e351654f40aa38807e638f19844431e56ac9528551cc6bed58d0c5b966564458da02a86e72860b87984e40ba08eba79

  • /data/data/com.teleram.app/databases/Marshmallow

    Filesize

    16KB

    MD5

    0582eb34c8576f3b0abdec445e8b3b30

    SHA1

    22814aa8e827921854c14e10ff0ee0cac8041b13

    SHA256

    f2d07fc1f8f4ff023530e4653542e39ff898f2a648df167811099f64d14ed2da

    SHA512

    6f88ca1b9b16aa92c50b32d85aed0f1d62c043135a898290faaef512e2127ffa0b782ec37ec6f26d96275cff50b36a6f03e9b48e553e81bb35f45242c6a8497a

  • /data/data/com.teleram.app/databases/Marshmallow

    Filesize

    16KB

    MD5

    c20a7992a72d6863c07204e1fa1e72f0

    SHA1

    dc00430a6000a0e6150d4c837c750792b279b25d

    SHA256

    f17525de157cf198b71e43b53286feff4d1638e8fb48db61369be1302e23d116

    SHA512

    6ba45c9580e68ad08e365f1e83a5c7461af55eb31bcd0de0480ce2e318b41942ff73d82d958624ddb279a72305a174fea01ab10d17d055d290442949a6f8aad0

  • /data/data/com.teleram.app/databases/Marshmallow

    Filesize

    16KB

    MD5

    62b121170798adf8a5d89e4c7d7b9193

    SHA1

    be33ae3c95018f87add3e08e7dcc957d67d021cc

    SHA256

    b9a07f1b8521889d884355183207308e9b824dd6e071ff3ee7548fbdff0da52b

    SHA512

    aee08f18f81bb68c65f480ee4e193c50a816e4bdba84d969b2e35737359fc578d708177fbe704e55608a7d83b0e94393c002d6cd61aa49470e4d5811ba6ec1e5

  • /data/data/com.teleram.app/databases/Marshmallow

    Filesize

    16KB

    MD5

    c706b946de7feea954a9e2c66492b23c

    SHA1

    3783c5f3919a76f9ebb46555b54308e68a66bf5b

    SHA256

    3f72534be76bd5b405e36a21cccb81fac09c295efc7e41772ba645cf5a99e65e

    SHA512

    6adbef74e47c2d4cccecb268c67d9fca8b77d25014689f1a9635032c524a38dafdd206b054dc04b5ffcc4284bc1de3981908278c212d87d861fd275f179fccf7

  • /data/data/com.teleram.app/databases/Marshmallow-journal

    Filesize

    512B

    MD5

    8c56e99e9d6a173e739e2c5a9cc55996

    SHA1

    285aa17245d61f080d7f7108bb820970e80e3687

    SHA256

    c73c2973939eabb77704aaadd972ebc4d75dabc2ac7ca6a6843dfb1baf49b6d4

    SHA512

    d093ed583a055106c76281d492a2c40595e72745fcb41000e7eb43cbc566c89936b0478706f60910716186e6f4b82f021f1e8c656e0686b07f8bc7f1ee6bdebe

  • /data/data/com.teleram.app/databases/Marshmallow-wal

    Filesize

    52KB

    MD5

    228ed46069af33f6cd8c082cc44ed74f

    SHA1

    3fd0a5425a997faac7e55c7559606414d92d86d2

    SHA256

    1503c3e48d1f87d4598973772cfcd891399103b06f96db2476189ca8333a48b1

    SHA512

    669fb26068c5f4d58c92b0890c685fc60d5d01d934320918e7dfcd60a43cee33feae8c9395e360a815ea85049a4366e2e89c3226a0b293fbdff5df15f0408352

  • /data/data/com.teleram.app/databases/Marshmallow-wal

    Filesize

    4KB

    MD5

    7c1b9bd5efb65a8fc2d5747d86be1ce5

    SHA1

    6f49bacac282aabd1c1117e01d3995c28d5d69f6

    SHA256

    a1321263401284d5455a990260b757fe8df5115f9bcbfc447c7c6f6b10a7e9c3

    SHA512

    2a351098883b6623f488c1c39d63f6bca72a9446ccbfa2857cadaf9e3c24efa505999a4ad46376bf508730b9dcdd19f05c0c4734ad8c2781c3ab492b0a5a753f

  • /data/data/com.teleram.app/databases/Marshmallow-wal

    Filesize

    4KB

    MD5

    f11742bc2a3fe9814d483903443c215e

    SHA1

    44a79428300375e4d524967c955c62832da362f1

    SHA256

    700b8160489d025deb1799ff7db1d3dfeb8b0293e50e90ddde607ad18a9f77e8

    SHA512

    347d14e57f6b929a779c49fc049faf0489affe5e44d97b74723843d4eecbb4a783691357146f0e76ec58a994bbd709db71210794d4e9cbd5f877f346585d9568

  • /data/data/com.teleram.app/databases/Marshmallow-wal

    Filesize

    4KB

    MD5

    b0342c2f379da022c1a0e88c5c69cb02

    SHA1

    57f3d5ab1e04fe93238681a4eaea189dc3ec6efa

    SHA256

    0ef66ada357fcc27dcaac83063e5be25e9b1622cd3f329cc145aa78c3a825a31

    SHA512

    31bba77673bf8dfe20d14de63f2f43919876b0bacff111c2063542b1e92ffdf6032215ec6db1a0439b6a091c5307fb352312215d9d20bb1929dde981c05f9d8e

  • /data/data/com.teleram.app/databases/Marshmallow-wal

    Filesize

    4KB

    MD5

    9d5e3e64586f069c32ccc48df353664f

    SHA1

    679baddb01ef3a08ae09e7cfbc3a402efd14643d

    SHA256

    e12039b8f703391e552511692547757469b37a3bd9089f20ea17ca33d079ce30

    SHA512

    8448063054d34c56f55fbe1cd0849002a9bfbccfca980e41274278cc014503cfb4e84ea02e6781e9b9b56b39336339805252ac544a2363beb4d4197386e7ae6c

  • /data/data/com.teleram.app/databases/Marshmallow-wal

    Filesize

    8KB

    MD5

    32253053b46aa7846f85b62603d7ae7a

    SHA1

    757d2a2a276502393097e435a790e58819133446

    SHA256

    776f20f91cf6fef7196b7acbc77f794226e8595870f8f592a3625f0fdd4086f9

    SHA512

    edb67d82076bafa402766e9bea80d19c8978a0b246b931b929695231f26c1eb4cf1a5e9a04ef625ccc43cc97080f9a4e1e721fabc56266eff12e4ca1a595ac57

  • /data/data/com.teleram.app/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    6ad5ac54818dddf87e6d545199c32ef2

    SHA1

    5a768786244bebf74651826bf5d6efcd9c6582e3

    SHA256

    40b5ce14b95ffbac1f830728394dedc00982a447d7f4c3d97258052afd7586d2

    SHA512

    39800a3e00f58aaad4ccb1d3e712d520e2e803ed5168c1b6a189a8eb15fe32bd4021310ba5e5225e1638217f1b87d71e535bdf5c52a5adbb959cbd2904fa455c

  • /data/data/com.teleram.app/databases/com.google.android.datatransport.events-wal

    Filesize

    52KB

    MD5

    7080acde4cd8229067c7538579bd0b40

    SHA1

    7995832ad906a9c71230f5845b2d66d603934740

    SHA256

    34b76b750292a24560a4f3a0a41a55e8defa8fdb85ab713919200743d6792b15

    SHA512

    de6011daef2ff8470069640037baef44dcf3e26ec1c9aa7afcdd128bd4cdb7a980da63092dceaad9038ed57164503827f864e6b7986ce5afe7575733e625473d

  • /data/data/com.teleram.app/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7237409e0640cfab7bdbd429bf821a3b

    SHA1

    4c3da934842f8d4835dfe2a9c275a300e5123309

    SHA256

    5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

    SHA512

    c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

  • /data/data/com.teleram.app/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    0c0cc9d710369a79aad3f7220c33a0ee

    SHA1

    84ecfd962f2fa9d6a5f22ab17d84c74aaa6ca270

    SHA256

    b121a7fd1b7312525518ccf13d06ef11189527a4c80909a8d00a603111a7d921

    SHA512

    f8d5b435506d6b013eb00025a32432ebc6f254eeeb4d5b472340ed762c1dc58f71a8a0ccfbd999e7f77128ad62f910f2305dc760a81dab2bc1745a7e86456003

  • /data/data/com.teleram.app/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    77900c4428d03f7aa133b8580c20374b

    SHA1

    af9627a72228e5a87f06a9a5c6596c05fb770fa2

    SHA256

    4b340fbbdcbc16f6a4407a99b3a03028a986281a3ffa1371bf10a4458a1459fa

    SHA512

    6f409ad5d43fb744828b2cb4dfea5ebca6e426e6de3bc7d73231cec115f32aa403c887bc532cc2ba315145c6ce7a3df71865710c0d48f3e9771ad371e8e83aa9

  • /data/data/com.teleram.app/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    58d6497215e335de2cf41cf60bf3fe38

    SHA1

    438cc40cc73fd0af86eeceae104f55d0fa3e819d

    SHA256

    95c4a2ad9bbbdc70162a2287a9eb0e8b60abe1bb9557258faef6250965dedbf8

    SHA512

    19c73ecba0dcc5b44534308e53f9bd00730fbf8e0f3622be9239d2812490fce635808660a3787788d333cfcd7797dbdb82f1a34fbbecb7a91d67f1bffa23dea2

  • /data/data/com.teleram.app/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    102eed1caf6a76f6a1d2d9357ee90eea

    SHA1

    3cf2de8e7732f686d81471b3bb012442d585f4c3

    SHA256

    7b7391288ec22bb7aff5ccb27d3f20b5f523bb50df4dd90b82468633ef8959c7

    SHA512

    57692e7469f711b7dae0222fe519a17c8e560609c163030d357039bb896eda7dc728e211d8b9d4e162d46c3bafd5cdb4dee755338239a46e50be024f72cae86f

  • /data/data/com.teleram.app/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    44693692da738db6eb133cf0e4cde91b

    SHA1

    e6bda56494c325d8d37ad89552263ae85d9b0550

    SHA256

    8fe0ac9db76d4a2dcd3b3d54c0efedcd223e25aabf716506493d50e243a7a2d4

    SHA512

    b34ddfe1ae343b1b12f7029ae476a0ba8e1b4043ccb520afb412b3f71335ef679bf29723c9a5c00af7e922e9982d5b3af54b2ed779da8cb601f378e5b9d26be5

  • /data/data/com.teleram.app/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    864c39e8f982d43e9791a65621fede1a

    SHA1

    26a60696ad87cd05cfcb0d5045a3cbf468dbc5e8

    SHA256

    b85c826f2751b14ac878669e7828b0f4c54dbe5c0ed6946bf93f67c5c6983917

    SHA512

    6d16c71dbc2e67663dda16b0f10f1c3802933573450330b259669f384f25d625fa15d7a4ba7ceadcc73525d3e416dcd362d27f655df2cd6b43bcd34c6090477b

  • /data/data/com.teleram.app/databases/google_app_measurement_local.db-wal

    Filesize

    36KB

    MD5

    ab50fc2a4dcf851717298ef7e3af8a8c

    SHA1

    b08a34f1d32ee5748b010075d5a6d593a593b662

    SHA256

    3e05582485fa56a61327a3d2fa761de5c2138d45d7c9e59f3a7d427afc9330eb

    SHA512

    b2b1e4ff5ac63897b71d0ab4911d4cd84d703ad43551a86f45e15e281f6a0afbf0f28e4f54ce1063d6d8b7ab80f6e6dc29e6925fc3290c06eb35bc1135318449

  • /data/data/com.teleram.app/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    923837642a2aeb7ca6314c7a6a9aa99b

    SHA1

    c48f94472f1cd678098d797c19afd97a73ed1075

    SHA256

    7e6ac2a19638ecfbe4f43ca05aa025b6aa6dff4efcb3948a922d19e902ac002e

    SHA512

    30f553be5486104b50ace9cd8174e6c5d1d59de6da4b110b423a26895ff0d9adbd7d604ce645fc5801db212e76e182fef7ce044f428fbd7e465eddf9cc45bf6c

  • /data/data/com.teleram.app/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    688b57bfe8dd8072e0cb4eb79d35e032

    SHA1

    61d468e4cade9ae20e08a32b92a0ab1069b938c6

    SHA256

    0b1c7920d10e48f7d5ae6dc0ddc5b077628a9981d56e41482043dfbf1c78cfc8

    SHA512

    269d74ee870c01f7a1fd59db76f3691d6ef82cf3817e9dd729efc982dc67f7a59f189a5f61318db3396d5481ca7c1d915d6d55cef2584ead1f43907dd8b110a0

  • /data/data/com.teleram.app/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    99883aac26d50955a9c43153696df5d3

    SHA1

    286d470eba383ecdf6cc86ecec26e4615136c4e6

    SHA256

    a661a3c889d80b0f6542da2519ac217314113516980faa1d7b1af2057cc2bf5c

    SHA512

    849d7803f84940363111ecce2d0825ac81ff8209fd2f76ccf68ed612d3227ac88700e3a7bd3bfaf25acce04d8b35a8fce4486395da85edb95a466707db1d3ff5

  • /data/data/com.teleram.app/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    63f297ecb495cf2809a35e025fb45f96

    SHA1

    f84ac77f73b164e136794a5b9fcc091b16522ef6

    SHA256

    e6057cf8dfbd24696c05232f9d2cc45b4d969d231490997733f04d6bd4d7eb4b

    SHA512

    7ae4f44ae6e295c924986f6f4e263df32c64f1db6a182de448552f52348a6c719ab46261525afca523ce53ad7ed747b2352ad0ce4201bab578627eb14f44ef71

  • /data/data/com.teleram.app/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    26c2b92ec50efda4f41f88741d4c1072

    SHA1

    43ec08366281b5afe78cb6066b5e4579a9454024

    SHA256

    5f7d029094bd0d1ecf494ef3066f9ac80a6ede34ab36713ebcfb37b8e48b8518

    SHA512

    878576e6f937c63681f29bdc24ee8363900e569b0a8916e7546eb865951c0b9a4047a80f0adadc53e5a73458ebff505d98f8a3aa33fa0cb70c87217acc8552c6

  • /data/data/com.teleram.app/files/PersistedInstallation4331865405120369200tmp

    Filesize

    569B

    MD5

    5b2fcf00ded788d1b63f90d4f250a28a

    SHA1

    42b6f761eb7476db410289adabb84a4d94c96af6

    SHA256

    04096e4f0306166563ebb8aaf7144d4622b7ddc01d45661d25cecdae8ee7cce3

    SHA512

    585055eb3915840abc77b9837487cf8351314c8c81b63955a0094ec24202519132811e4a4c5afef4bf5aeb6735181ec750e268deff3454137375e297c252a191

  • /data/data/com.teleram.app/files/PersistedInstallation8699278399737074518tmp

    Filesize

    90B

    MD5

    2f1013b23723c377ac21783b7d0adc38

    SHA1

    dfaae460994aecb438e3c5f5baccfba72706a23f

    SHA256

    aa9f7e7c9fa208434b4a97cc7833d0547a6b4beafc9f4304b78921791ac94f81

    SHA512

    0a6e77bcb7ada04630fdb3789c2e4a5458f6ac48130646e36a8057d42f6fd6ee627acd3961aa2a29bf09bbc73072095407c89be37ddd5f36198ce501afe8e6da

  • /data/data/com.teleram.app/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.teleram.app/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    ca531588049514a6ff0c9cc02faeff35

    SHA1

    43ce884f90907c26468c449a0beb8bb13e40999a

    SHA256

    f60bfa1bc85a95f7acb2637450c565bf9db1459f4acc050294704dc46b83be12

    SHA512

    b9f9c3f34c5ee26e0d2c5082a516ddfe76df1f8bc121c58149c2f65b615c6931ac3bb98f66c37f4c24d7fa31478619bfe36fccafb3aca1571766ccfd90220e22

  • /data/data/com.teleram.app/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.teleram.app/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    9629cf25fd71cf96b391662c4dd67bf7

    SHA1

    d6f417bfdf213a9e318165c2552990b9df929bf8

    SHA256

    5a718de5796cefcd9a185115030b46aca7986bb26883f7e634dcbb7c7fc18db0

    SHA512

    220bfcfec3716af506309592877487a0cc60af97ef7d15a15a9528df4873831443c08494ca16f10fba0185d5749ac520214cb67cb90d73878350c8210495c5f6

  • /data/data/com.teleram.app/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    b92674051731416dfeac8c2ec6bc5a8f

    SHA1

    702eed154df63c7bb82ad4ed8cf60e99a98e3b8a

    SHA256

    c6acd117f64430db35b86c0bb42186df6a353c99dc83eec3fde18874a8ac5673

    SHA512

    f555828d0a2b59b505157611098b6ff6939310f10467ac647dd31fccb5dfe20fa17a4f06de57a469230c0bbfa1c0f1ec28fe42d69c9eb8c76f93a5688526dcc0

  • /storage/emulated/0/Android/.com.android.setting/info

    Filesize

    46B

    MD5

    809e444dd831662784f0e21043971f9b

    SHA1

    749faa12dea3b21dafd6b40da457b7da03df49c7

    SHA256

    a73311cbbb7524ccea2f6f10eab805c340417b2fd336d99ddc4e4bc155cadea0

    SHA512

    bcf0e899765feda5c2daa5c1f7cf717fa703f58d1fcd03b9816dca171351ef2bfd5316a18d0863461844c6bff75862e84f0e6e97b19c3eafd621fc8177ec0ac2