Analysis
-
max time kernel
7s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
27-06-2024 08:24
Behavioral task
behavioral1
Sample
457A210B7BF23BE5EFB5F495CDEF257AB5A1151B7E813DED1CDB903B0917332D.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
457A210B7BF23BE5EFB5F495CDEF257AB5A1151B7E813DED1CDB903B0917332D.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
457A210B7BF23BE5EFB5F495CDEF257AB5A1151B7E813DED1CDB903B0917332D.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
457A210B7BF23BE5EFB5F495CDEF257AB5A1151B7E813DED1CDB903B0917332D.apk
-
Size
7.8MB
-
MD5
f367b12edc790f897b890351efc47391
-
SHA1
cc40d47f9989397dd1c4df558fd50aec7ed65e4e
-
SHA256
457a210b7bf23be5efb5f495cdef257ab5a1151b7e813ded1cdb903b0917332d
-
SHA512
622527522ba50bd1a50d69c68ea1aafb54fb502a828a903b089ec1f349bee574e5dce94863bdcaf1370ca84299a0d5a6764db32ac4304c46cae24a3ef661bd3f
-
SSDEEP
196608:kOquPwQ1Mkb9xeVTePThlUR1xuHKKFXHvG0oI8yIDc2:kgwIhxeJeLhPKuXHvj8yuc2
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
Processes:
ir.quicklearn.nodbehdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock ir.quicklearn.nodbeh
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/ir.quicklearn.nodbeh/cache/~test.testFilesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
/data/data/ir.quicklearn.nodbeh/files/ArabicFontFilesize
2B
MD51f0e3dad99908345f7439f8ffabdffc4
SHA1b3f0c7f6bb763af1be91d9e74eabfeb199dc1f1f
SHA2569400f1b21cb527d7fa3d3eabba93557a18ebe7a2ca4e471cfe5e4c5b4ca7f767
SHA5128d89aa701de5a35b24cfadbd2088986ae13311d1a7c63abe5c780c62bc939a0577c3a78cf7ee4951c1b09f6849074c21ca1f7023e89bee683c1dbb2134a984d0
-
/data/data/ir.quicklearn.nodbeh/files/FarsiFontFilesize
2B
MD5aab3238922bcc25a6f606eb525ffdc56
SHA1fa35e192121eabf3dabf9f5ea6abdbcbc107ac3b
SHA2568527a891e224136950ff32ca212b45bc93f69fbb801c3b1ebedac52775f99e61
SHA5125f3a799ba20c20a225f75d4fe2acab79912dfcd2f2b333bf062b37acbb6463388c344430d5ba1e9fd318d3ed8263074e999e2b2e811bc51c5e2dfea4e2f32e58
-
/data/data/ir.quicklearn.nodbeh/files/appversionFilesize
1B
MD5cfcd208495d565ef66e7dff9f98764da
SHA1b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
SHA2565feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
SHA51231bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99
-
/data/data/ir.quicklearn.nodbeh/files/nodbehFilesize
82KB
MD5be3fd52252d0611fc64d843eb37ed3c4
SHA100edc638d33534530c33cbae03854cdc7d9c3163
SHA256747a43b47b9dc9eff37f17e36523a4b546b46bd3633dabab360b51e1a43e6f08
SHA5129a70d2856b3ca80a32642fd20057f53c1baa45d19e0432f68264cfc782dee3fe8c4d82b39d538fcf2dba191e947764dd1d15359699740db6184f064f63d26ab6
-
/data/data/ir.quicklearn.nodbeh/files/nodbehFilesize
1024B
MD5ac2632d34f8d16871ab845b9f7eac136
SHA14f99ece4b0f0879bba5386ac5549f6d0145f3af5
SHA2565c163bf9c8c0b603efdaed7f0e5ebe9540f5e25493da909e41f933fdedc68e64
SHA512d43be798abb4c7855f030f51ae7a057bfafd4b157f21616a10a188ff12261d4f7f132f217f894a6163a294d06b2315ed69e2549007f8e6f60a7b3b56b4650cae
-
/data/data/ir.quicklearn.nodbeh/files/nodbeh-journalFilesize
1KB
MD586890898f5c23ae08d3c5c557cd28096
SHA1ea41f457964f0f8b2b07922855cc72d05f5a3e9f
SHA256f45a6f4b346d19c487606b3772a147bbed3e039de3cd017c98c87f778e007d17
SHA5122cadc2262a78747cf2fa474b3b1ff972385090e821b0947b3f0f55abb12ade027c7c5daf00f4325d86623fe83333c42f17759166b7fed80a8723924e46b7001f
-
/data/data/ir.quicklearn.nodbeh/files/nodbeh-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012