1e8759cc3f57dc5b0b425a21e2f9de28629b147b31b63908df0192a7c4339850

Analysis

max time kernel
8s
max time network
154s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
22/05/2024, 12:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Charkhooneh137.apk
Size

10.1MB
MD5

d922d3566b0e859d4b7cc4097cfb9869
SHA1

a58adf34d68761e55c153503a7ef5c4b7e6c9735
SHA256

1e8759cc3f57dc5b0b425a21e2f9de28629b147b31b63908df0192a7c4339850
SHA512

d98c585c94888ed8407deadf133e2a1242001db2dca186d334112487c2cb8873b9daacff228c0d8fedcb1574d3f832e40ed09158725fbb0776d756e4862de60a
SSDEEP

196608:8tb2emV2mCtprhdy1Wy/SpBpoJyqCr5Df43pvn8x7opr6B:XVZohvyF/eBOyqYwZvnPpK

Score

7^/10

collection discovery

Malware Config

Signatures

Queries account information for other applications stored on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect account information stored on the device.

collection

Stored Application Data

T1409

description	ioc	Process
Framework service call	android.accounts.IAccountManager.getAccountsAsUser	net.jhoobin.jhub.charkhune

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

net.jhoobin.jhub.charkhune
1⤵
- Queries account information for other applications stored on the device
PID:5245

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Stored Application Data

T1409

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/net.jhoobin.jhub.charkhune/databases/jstore.db

Filesize
68KB

MD5
d75892a71cfdf9772ba261ea662502bb

SHA1
b6afc04cab0290b32831ccb6b2f0eed5bb427ade

SHA256
e29dfd692254f2cc2ed0a510b18edafc0cdf2402e2e629dd3e042d418d0956d7

SHA512
ad905a893e73d7f24f757d160cdeb19352e4bf449ea0fdc2e9fb0cab0385a139d0c7822a987e68521b2e819b9024471b5f3352d5adf3c00814ce1763bca7d44f

Download Submit
/data/data/net.jhoobin.jhub.charkhune/databases/jstore.db-journal

Filesize
512B

MD5
17ebb6698232d86a81f6c36dd03c35f0

SHA1
77e80f19696c6806ea0d92b1ba26b00620ddea8f

SHA256
5cdc552d26d25c5fadb1f1cad24e3f353a8ac162a862aacbf3487f03ddbe7da8

SHA512
90ef66d4e2f70f722d0176bc7c5e5d328da342e4e30bb70f6cb63db5c2e6615fb84afe34f7c183f703f06e75c357aa776bc962dc8ea9536ba17c6aeb4fdd929d

Download Submit
/data/data/net.jhoobin.jhub.charkhune/databases/jstore.db-journal

Filesize
8KB

MD5
7d09d4d614d399b28f19e8fcb871d599

SHA1
173ba97fe2eaebb64802a957aa1b1b43abcc4ab4

SHA256
7319330dc074d49d97f81b815d6f20074426736fd23af60e110065e45055cf28

SHA512
0800e20a5d4356faeed36e68d6461937ed41a703bca1f330b82f41003692fadd6235dc7f61cf16c7fbfca3032b49e04721e802aa10cc833fd633a88147694a6b

Download Submit
/data/data/net.jhoobin.jhub.charkhune/databases/jstore.db-journal

Filesize
8KB

MD5
674325d71abd27a2fb187d295e508596

SHA1
f33ea01170d27359b7065c26cec26726fa5d3dda

SHA256
fc387e033f211535c019737100977647e7f54b6b7ef6424a6199a8565aef5771

SHA512
e4151da0613068e482b6e12b04e80ad9c631013919c97a5f313bc3603cc85f84b283bed9008dddd3fcc489318ac96e573b84af186b0a2d2fbd55b70372a17a1f

Download Submit