Analysis

  • max time kernel
    48s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240229-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240229-enlocale:en-usos:android-13-x64system
  • submitted
    10/04/2024, 08:03

General

  • Target

    f15a22d2bdfa42d2297bd03c43413b36849f78b55360f2ad013493912b13378a.apk

  • Size

    11.6MB

  • MD5

    4ec6d5a178e7e0b21ff965c970db3da2

  • SHA1

    2ce9639452f1a920241952cce5a03d415763b102

  • SHA256

    f15a22d2bdfa42d2297bd03c43413b36849f78b55360f2ad013493912b13378a

  • SHA512

    a9a3fe6d23c7f3ebd79f20fe2074febf8c4f684e95e4c599b5232f13fe91931e37916998da6191cb2c6e132b763cfe789374d13909476f2ea8a2e4f55bae32bc

  • SSDEEP

    196608:ShjUFKNpH6Au1GdQYGcrbPVJO2RtjlKS8uBR6jT4LMUsRox+I6pqFH54gC:EjdNpHW15sPfxjX8uBPo1Roh6pqFHGgC

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Looks up external IP address via web service 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

Processes

  • com.teleram.app
    1⤵
    • Acquires the wake lock
    PID:4251

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.teleram.app/databases/Marshmallow

    Filesize

    36KB

    MD5

    bb0684ae8944e4f1770dc91ee334b53f

    SHA1

    d3a8f3730679163514659a09303aa94c64d1962d

    SHA256

    b26f39273af41a3fcd2b5d949d589f3bad23777d63e5d6ad70799ac076567e45

    SHA512

    82403f988226e99e5d7d2580d6d6a75af03637a2290d84d32b4ae41b981d69b31aac194b9a8d3eca1bcabe798785507e7eb9b1a1342f5c8b780e6506da168be3

  • /data/user/0/com.teleram.app/databases/Marshmallow

    Filesize

    16KB

    MD5

    c63ab003f3880a3cc3eaa5e4529669aa

    SHA1

    fc03853e183a4332c5399b2c9ff1bff866bded2e

    SHA256

    5c67a42ec17a70fa88926b8fb7c3fc9e1af8c69294f7862b31b0a36d5bfa0f06

    SHA512

    85d9eadf457fa95565ced6c6a80dd97918edd0097144aac7e46ff88604bc5b46c823ecb4053118a9069fe038a28baaeebc30239d3e56cd62c9a11cddcbd71082

  • /data/user/0/com.teleram.app/databases/Marshmallow

    Filesize

    16KB

    MD5

    23b648f7148c462152fa3e5547b812ce

    SHA1

    cb3d2880342bd1886acb716c0977f5cee9143d0d

    SHA256

    64d050c812d5111730cbe14ce0f62f753f3d6ebb689e45948cd0ee19ae18cc9a

    SHA512

    804417cc10a67dec8ec6d6f6d50438079f02d300cecadd566aabc073e693c1faf8040242e9207cbc55352c3fef90cc40af30833ce8bc5ba657904f4a9fba2794

  • /data/user/0/com.teleram.app/databases/Marshmallow

    Filesize

    16KB

    MD5

    13967438daec4cbc678cb5d5a167bb63

    SHA1

    e3bcc8cbf87482f5802c647aff363b6423af563a

    SHA256

    5fb21127f5c53d67b7783505becfb156f479f1413cd739fad2038aa16437a41c

    SHA512

    950ead99b2e821d22a7a37b50168a20fb0bc5074fd4a602cbf30a7693d1eb6c4897d1e807c9e8a34d63b6e7ddd170e11821cd87631bdb5f9ee5324d9fb741d94

  • /data/user/0/com.teleram.app/databases/Marshmallow

    Filesize

    16KB

    MD5

    31b3c40bbba0e5fe8808c18eec331b22

    SHA1

    eb1e4afe4c9f0941de5b946690dcf649e9669de3

    SHA256

    da01ad58d9f7cd60c166651a2e9a3dc661aacf4ae041889939fae0dfd63349f3

    SHA512

    c14591c4222725d8ccbbc804c63208d0b42321fdf5bf1183100ff7a5969fd686129bb79ef2f4e1b5806549bb7898fa7a933c7e97bc68d7ae91657c8f4e538663

  • /data/user/0/com.teleram.app/databases/Marshmallow

    Filesize

    16KB

    MD5

    813074220bb15d52427f10e42a209351

    SHA1

    43c13f2bfb4ba09ac786a58425661892d2f0ef7e

    SHA256

    837f12983695798b19ef094588227da9a8c4d9b78b4b1ecb4973fc660a8b47f8

    SHA512

    abcf7992930b8b2d58744bb4f95b85f7138cafbcd6fb8cbe18367c0eba9363f961cb387c74ed6877e20b9139e415dc89c93d075a4cf21ca0474cbb0632a757b2

  • /data/user/0/com.teleram.app/databases/Marshmallow-journal

    Filesize

    512B

    MD5

    a274158d939c0b1b7484f94536f912c3

    SHA1

    f94176309df4969ab7902cd9a7683d9750bb8816

    SHA256

    c78f5bb1430b110b3b0280c47b986af4b52d02fc1f6761ad83c46e754391a250

    SHA512

    6898a33e645f55b82cdceda4a009eaac524d3cd4e818b9dbca365e9ac32b70cb0aad3a122dd462ba0ad600fc16b171d4639ff732831da948adf3f8bed49088c0

  • /data/user/0/com.teleram.app/databases/Marshmallow-journal

    Filesize

    8KB

    MD5

    3f092f1650e1c58c59e55c0513728bad

    SHA1

    e4453f586ed94cad323c8a9f6d558e64a4f44af1

    SHA256

    3ef05818d7de517d93c8594f0aa56772c21f0b72106be4a20c9dcda076eca8e9

    SHA512

    84d04b75780cb2875d0d0b4e476d29aead8d2d7e4cf0defe03deac66d190cad1e33f8653f8234b524bc715d57c20f8522847e7ca07b304acdea87f3247bcedf8

  • /data/user/0/com.teleram.app/databases/Marshmallow-journal

    Filesize

    8KB

    MD5

    b733214fa0e10f06004fd922544d3439

    SHA1

    c8afa8f775be2f50349308ad2ad66908bbc53d27

    SHA256

    e31c566f5128d28956e0933372bd3affc34beffbefc7909310576fcf1ebbee58

    SHA512

    63bf6083a04687e2a29cd4425cc44824f8fbde13d28cb033a4746415bb348b86cc860f9723e4c3efb25caae806c71714708c0462ec578927271519029fb888c4

  • /data/user/0/com.teleram.app/databases/Marshmallow-journal

    Filesize

    8KB

    MD5

    96c7ec24b229d353bcaf08f5cf6e1b73

    SHA1

    df3b1f03fb862b106dff4d5b6f13d8e963f9bedc

    SHA256

    4f89f903834b7ce2ef82fdf554fcec941881acc0de2d4ec05e4c1404bf4848d1

    SHA512

    19136fb7bda7e8a4fdbad0543c4eddc6b7fe01cf7011c9beb2e0635c43837a1ceee57a52cc8b11ced3f42f4bd85d7184a88830e6494c849dc9765cdbdc486e90

  • /data/user/0/com.teleram.app/databases/Marshmallow-journal

    Filesize

    8KB

    MD5

    7fea66b94910ba955531c88ee5a9ef2e

    SHA1

    0a05f840617bb4291198b6e7d50fa9a7daf6317e

    SHA256

    901f7b91b1365cf33cedf4b34f59b35974c487f3bc67f6455696ecd00f911fb6

    SHA512

    9fadd2f95202fdb5b5fff3a3599b49d7c69ff91be10bcc64291a385fce762094c0e7da74c608a375b583e9d7c774393b7eee145d73852bed56413f52ef2a7f9e

  • /data/user/0/com.teleram.app/databases/Marshmallow-journal

    Filesize

    8KB

    MD5

    f62feba7618e5bbbf9aabace4bd2c81b

    SHA1

    96a6a5debe5e140c10c11534801eb9d0787ab928

    SHA256

    69b6151f15a28fa260c4156781a2619c689322744a9f336fe10564dd2d0e41e6

    SHA512

    78474576036f3ca21f65f56bd93e9d1d70cb4511f1a3b5fa24bd7853f7d09394764333dc1862ece6358b5e7c32c63a9afd3527b54c69f9bd97dac5e5dc495c54

  • /data/user/0/com.teleram.app/databases/com.google.android.datatransport.events

    Filesize

    40KB

    MD5

    571112758fefc013ca64f73bc959a009

    SHA1

    64b3e995d49a74c647cb467f54fc72c28c5af3bf

    SHA256

    632907b2357e6d3e99c86012795c6a2eebd1e8c1ee0a64c64878c5c1201413a2

    SHA512

    ce75b2bf73c4fd98b5391cf39610260fc90a91a7e85388c6074fe7b21f8b54eb88a0d0ce83a3403b496bcaf885deceab36daaae18976dc1f18fa4dd0605e2e34

  • /data/user/0/com.teleram.app/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    eb1582b26562f212d6c2166988dbde8e

    SHA1

    1fc0a3b7ae8565458107f26e67abb270b0663cee

    SHA256

    21e2eef501559a4315077ec11d104ebef44af75adfe109f9461302293748ab5b

    SHA512

    de6b88add9602c225dc07a71fdbc5c01cdf768cfa807c2b9acca6037cba727919723152a71f1b7db6c9ce0baba703b6c670c1d369e76fad216785162e28e0018

  • /data/user/0/com.teleram.app/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    dffe9ce8478975d3f4d3064af0b2b756

    SHA1

    0c781ea7cb9daef0e92d5b6c2df0bc6f869b718e

    SHA256

    84dba3cc11c935b4d3306b7949c31343e909588d19455072e59b6d6121967ad4

    SHA512

    f6a2ecbc0a49a59dcdb07780056938fd859ccb9b05e39c9b9bd6605eb97d4678d0d2f12e3fe491c8e2260dd4fc67c1b6ed4716fafc8e083f4a6150e7477083fe

  • /data/user/0/com.teleram.app/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    d57fd8eab94334ca43a141b7cebb917a

    SHA1

    94e083607164bbf48c4cf8ef8748d3783f0e0bd0

    SHA256

    29b9a0503ae73be04edecfb7c3ffaf8539de6743f3e3a0671db3fde9c261489f

    SHA512

    5384e065cd70c6937f1f52994a12115a3fee2332e9f6f0b186816f7ebd99fadaca55aa5b57f009dbe61e0b32aa56d7cd67871b4d72bda4e4e23fd2672a207057

  • /data/user/0/com.teleram.app/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/user/0/com.teleram.app/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    501c0b5aa13ff790c74ce7d25aa6495a

    SHA1

    ecc81d74200b816943b9ce30fc8464c85d263261

    SHA256

    72c42ba02d1f2ffa25d88262438720ee19b32af0a101fb147f8971cc758fde81

    SHA512

    6168fb2e57648f2575a5d721ff33c66e5e2e28d9edc16ed562fdd1921e15c7bce942371e1ac43fb1ab495a6d51edf516fc7797ee57586db29d0462179bbf2000

  • /data/user/0/com.teleram.app/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    8486ed54a7f1cb1fdbcc562486246bc2

    SHA1

    d0f01b62afacec64c89d9c21ac90f7c31eac617c

    SHA256

    21d69666907b60643e9a6ab01892bd9e059b94a991eeb939ac90e2c0a9204c1c

    SHA512

    3c3f10c75114ca1a3eb258973c6ded994c1a485e5108a25ac5c430b229911c812118e5df8d55aca30e3b5e76edfcaa6f0e35baac36efdd5b68d9856fdae95266

  • /data/user/0/com.teleram.app/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    399224b5a8d4d1466b33589280d05551

    SHA1

    f5a4539bbc45e0f731837938d7fab17c7ccf893e

    SHA256

    cc07af25a0b757a0c56b4c4b6496df4a36e47a7bd930558f0a731f0fa858be94

    SHA512

    84102935bec20dcbbb2c91ded4eb45f51884c92ad2e41c260c08661328924790249ce737900b09637562cef2048d4b1b0f4256c38ae6aa8029b6844872e6640f

  • /data/user/0/com.teleram.app/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    6e5dd4aeb07cb5ce0ec137ed96b02059

    SHA1

    91c687b7581ac8d42e2f82ef04b3e44952bfa759

    SHA256

    12b33b8e93087a2d182c7a5deb90e097525aac45d63c0268d2890198e1c80931

    SHA512

    9dd0002bd0e104a406d1123e7f3992d8a0b229fb711eb52858d577328f32b4fe192e7730c8e8207a5771fbb239bd67baaa70e0093018128e19697f9c154f1ff5

  • /data/user/0/com.teleram.app/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    0f33d19c127dac185a9d24bea05b7a0b

    SHA1

    614017cf6ee424cc161f84b9a10502ddc973c686

    SHA256

    613f692bc9a5f13ebd099f614269d710c6af01d7655b21c72c4d1a53aea11273

    SHA512

    ab0598d62e4e854c9e288201d950e4093244bae287a1ca30dd73249049b84bbe3699bbb50c75dc6191251b6ebc134bcd3bd7783184e71ebc7b9ec788188e9345

  • /data/user/0/com.teleram.app/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    50c7888973952c8ad3cc236a88cff7b6

    SHA1

    eb21124f76223b740753bbf902f64c93cdd21659

    SHA256

    ea85dbd3fef4db6a6478a22d5cef92e4adb0f38a69f562bf4fa6ad1238d9f3af

    SHA512

    ca436d264ebe3e37d11f1a74714aa12adf69766a9dbd28894560afc31a7f2f9fd44dac220db93146a601c72e8ba0be03bc81446dd568010d7389e9cee2bc40f1

  • /data/user/0/com.teleram.app/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    a1e4ce96c2e2fde0646c100c4594ef92

    SHA1

    62dbd830af2374d9733763c71d20db27903fec6b

    SHA256

    6f846a1392a46d45ce1a2865dd1e3e335ddbaad4fd6fea4e4b87bc7dcee55833

    SHA512

    0d3ded7251f05cf2090e8deb4c4ae2f33df30274db8a5a806af5953256180cf65a68dbd7ac644093f8c6847e7468a0dbcc70528d20884dc96a42064e6c6fc7a0

  • /data/user/0/com.teleram.app/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    07bee6be4ca7cb7780e5dd7559b1d732

    SHA1

    a86e17a7b472ded57ade44f949304d1b63caf901

    SHA256

    d2019a7a0bd41e974f98ba71f5670e7e57d172e0f50203c5cb149f6dcb36d7d3

    SHA512

    a9606478818c4a2c12919e02ccea4e4cfd33c9b3db102bb1c1261012c5d997be07b3ffe0a81216121b4ebc0c2786707540b063bb46b263d21af23f59f867dac4

  • /data/user/0/com.teleram.app/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    54a62bd6c67a132bb6b85ff1829b9225

    SHA1

    d1050bd3daf5d314948ef582f21cabcf4b88e262

    SHA256

    d247cde57d492aa4a9849d3a6ef381c8851f4f93e179da5cae69820b2e414c71

    SHA512

    9b2d0d0711087b2368b73501f07105ce91f33e9f925a288ac02a8576ce9999a21dcbf9a5b50bc4edb52e5b17df6d544479eacae92322a5e8a997d9a3aaaea3dc

  • /data/user/0/com.teleram.app/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    b80db6f6943025c4b02bc5938e3e94d6

    SHA1

    3ab4049a8eab60433df7635e88734d9c308c5684

    SHA256

    6ee8dadfc4e5a08ebc1939d1a16ca1fc9b8e409e1d2bad749a3738713ae47893

    SHA512

    0d604d8a20bbe5a82dbf478bd5f067f822a5ac24a4143927d2d64cc07db3d7a84a04c0fb5dcfe3b029a45c00a2b201c9756b3230da9a689ba3c61677581c3bd7

  • /data/user/0/com.teleram.app/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    ae17f8d678cec7d18f0bc53085ac7b23

    SHA1

    ac35baa826071a53795466d7e0d684861ac98349

    SHA256

    84bd1842de5b4a639bd62227db7bfe471cc691aa0eff5d5e6194f28da72baf50

    SHA512

    7fd8d365e3d99258c34c799fbdaa5080c9217006f2f2f0bc5e1daa05e86460dfdf6d5abeaf880616f77459883795d3e39ac7adf2657a67b2d7f2208ecb2c547e

  • /data/user/0/com.teleram.app/files/PersistedInstallation27600127133379128tmp

    Filesize

    569B

    MD5

    97a50d8860712cd58e4a4839ce8f70d5

    SHA1

    88f815f97b6578f0b823eb078e471e1c2ea9a3c7

    SHA256

    74467aa28ed9122fee87129ceb83d82e0a800a6848f417b0b0723cbee062120f

    SHA512

    d48e7115c7f58f5a5221446530e226f1a1e764e9a42fcfd1f4c309deb3bcabad3e55df7b2247b2a3766cb2dabb41746d84749928eac4c0b5c08ed6b390ffcb6e

  • /data/user/0/com.teleram.app/files/PersistedInstallation8634897341187997902tmp

    Filesize

    90B

    MD5

    46da0e0010ff8ea3dcd2b5fbd5b5bb33

    SHA1

    952a337ae7363772173886eb6f514c847d5ddcb8

    SHA256

    fba9de0dee3b2b475e9f5c84315cffe4cbcff31d565f7889469868390385229d

    SHA512

    eec01ff83633e80dd847e4e24dec8d6952a1f40e02ea7869d737c319e5b850b20700e6b583581dd1d21b3f36eb1788ef79ae04c1bf20e161067985731c423276

  • /data/user/0/com.teleram.app/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    0eb157e1a86d4d00aa601dd2f6ff3ee3

    SHA1

    fee434f784e73cc7916322e949f727caf8363102

    SHA256

    b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4

    SHA512

    b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8

  • /data/user/0/com.teleram.app/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    cc2ccc0951f4c0bed9a10b8a3bca1e8c

    SHA1

    f66932e3e321b3760574b9f90d4040d92f3fbf87

    SHA256

    ed35589c2e8952ce239e2bca0437383170d042a91489a4427faa689bbb4d1de7

    SHA512

    61897d34d886d0f91cb80b55de6827d1cef03a1393590c0176723e9e9dfc48a6786f31318c2aff382919b7a89ccecf91dab8b1933d0e6e0727ea045c03b929fc

  • /data/user/0/com.teleram.app/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/user/0/com.teleram.app/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    3e55282115eda07fc51532fdef047763

    SHA1

    ab8f973fce801fe87aa04aad42ca6fc9ae7a9847

    SHA256

    22143969f889171a5524461a636104d5ae01b7adfd5dec057b787bbfce1ad33a

    SHA512

    1e06faccda94f07e1ea898cc9b3d5a166be00cfc920aa7befce2ee41012d8a5c73371066b42d2189daf5e7b565be0728dfa4b9055ce6a815190edc196ca6665f

  • /data/user/0/com.teleram.app/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    408772f456593dbd02b85397aea47838

    SHA1

    dd1fc762c0185ed1c02d4caf604f5d7fff341c1d

    SHA256

    1aeff2caf479252699aab7cfc0322fe4bb729886a8857c72abbd9648b023e2b4

    SHA512

    8b18231ccebda25bb6519b9574d52717d22fec998be5f01cf5f46c5cd2262f1639fa25404456c7b6fdcd4d84c25bcf6f7e58d692bc3f3642ccf08397a18bb622

  • /storage/emulated/0/android/.com.android.setting/info

    Filesize

    46B

    MD5

    2138ab41d53253869b264b1df0701581

    SHA1

    c30f7c45d1e1feb10dea35b819822edf4e4a2e28

    SHA256

    267879a0a48ba0e4f7ab5d9a4e67259f5131620fc9e48c460eb539df905245ba

    SHA512

    218f7ce6e9340bc8a6347e803e67aa3de4152601e8cfe4566510e6381a9613f6a9ec8c746dbe8704749b062b2644b7e593b1bb246bca90e7fa3811b99492c8a3