4ca30f92aadf9409173eef9491281e7e389a9d9f913edf018d554339b7c12594

Resubmissions

27-08-2024 09:34

240827-lj6kmawbml 10

09-06-2023 09:41

230609-lnrl9sbg83 10

Analysis

max time kernel
179s
max time network
160s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
27-08-2024 09:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eblagh.apk
Size

2.1MB
MD5

6cfeee3ec52dc569ca7f5ccaba4110c9
SHA1

96f2cbfaf41c79665fde6daa02ffb3d08a067643
SHA256

4ca30f92aadf9409173eef9491281e7e389a9d9f913edf018d554339b7c12594
SHA512

4592027af2e5dfc6be1810cf8ddaf02c6625b21b5d413e140fe3f32cf869299f8cef04c83e6e68a05d096a91fd6ebe9c90402b86e9786ef5215fd9be8abb1fd6
SSDEEP

49152:r/0MokTjvWLBos1T7/1W4yYRHd8vt/OVxfMgSSp+t:z0xGTW1vRyYR98cfOSgt

Score

6^/10

discovery persistence

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.rez.ir

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.rez.ir

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.rez.ir

com.rez.ir
1⤵
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4937

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.rez.ir/cache/~test.test

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/data/data/com.rez.ir/databases/google_app_measurement_local.db

Filesize
16KB

MD5
6e272cde253983c83f1483b9d4f7d95b

SHA1
468eb90ff38fc24183a024a69b2ce87ccd8d6165

SHA256
0f16b2ff131de7afcb10fba2fbcac5cdc5b16d8fa9f0a00a5ebff29544dfc4f3

SHA512
7c9a3bf20e45bf80aa7748411eb74f2b39348c269ae93ae72fb7d8e88e0f7eca0182ec156caa6dc378a2b2716f912c77af0609846587d5f3ebb0434757ececa1

Download Submit
/data/data/com.rez.ir/databases/google_app_measurement_local.db

Filesize
16KB

MD5
8521985169fe10039929d4b32226c39c

SHA1
e4e29af52490977c8ff2b283da34262d41e95b3d

SHA256
18b03f7da804f5cbce39311be2642ffa1c5a03924e54fdec2f4eeda3898ea213

SHA512
b347f3f36cb7e5f6a8f07c56c4e9bca7ee005fff24500b50c940b39023b4f0e3d4c5be620df0f16bf463399b06075539da2e97b9fa59b978d49a289aa41e95ea

Download Submit
/data/data/com.rez.ir/databases/google_app_measurement_local.db

Filesize
16KB

MD5
210e7a4768661855cd1e539ecd676fc3

SHA1
3c288220c6f6f6a21a06f6539d6c7f475781e442

SHA256
18e17fef98d4eccc30b389c80181163e999edbe3d40f40261c3113f7a760d545

SHA512
65096a499681657e8ab4f4dd8816f41bfa4cae1111cfaa12ab23590c31321fb9d23fba0201540c26f2ac448e2752e567f535e4e1f72b475c35e0ccae71506fe4

Download Submit
/data/data/com.rez.ir/databases/google_app_measurement_local.db

Filesize
16KB

MD5
51fcaea717294cf9abf26a9b050b1b45

SHA1
ccbd685094a875183319eb59a6610cb40693a2a3

SHA256
69b43d4b8dd804c189052ef1036381dea252f0778122d4f06a3d7fad303b04db

SHA512
400dac7f165859eafa546c59f312368e9956c777f5d415bf635d36365d9dc4a08938a1fe139728eb92ffd90513e67a883f10a25e97718655d337cef204274dc3

Download Submit
/data/data/com.rez.ir/databases/google_app_measurement_local.db

Filesize
16KB

MD5
adf6082723784327d7d1b34adf974e7d

SHA1
b1502f70eb881a1dfe41139cb719fefb877ee37c

SHA256
252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

SHA512
762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

Download Submit
/data/data/com.rez.ir/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/com.rez.ir/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
099cc3141aab73f031415fbb1c993093

SHA1
f8d8df744bb2eec0e24664556f4155fe82f39f01

SHA256
15e5d7cb968a169220c4ec2517d9daa5d99e152ed12cbc5d771c45b6eb5d90f3

SHA512
2d792430f585bff4b65b08340bba3cf0ab3904b34ab13b970cf8b54aaba1fab2e15b61689118ff2082f8018e60f760e5d82ab5cab253b63bbcee6dbdfe28ac05

Download Submit
/data/data/com.rez.ir/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
407f3b7dee0b50632aabe8af403f757a

SHA1
d8490ca3c3fbb1bcd0be46bb6a1ecd66c8c911a5

SHA256
67907199b5ea12af2a278015c90e49972ddecf924d6a854ac7d3a07db0fd4cc8

SHA512
fcb6a50c9f7c7577b3e5674f543446b8fd7832df578d825f835b1d7318323a03a83e8a6f2ea1fa6b661f6ce8528789fbdf0a8a7c583f26ca5ffc1456fe3d33fe

Download Submit
/data/data/com.rez.ir/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
900a39cb771468af1248fca31dbd86e2

SHA1
6c464b93df1cd9be6cfd645103dbf917467ab8cc

SHA256
211b2ee19acff3399b55460bf1f1bb66ddb045d4bab7cc330368d26868e28353

SHA512
5b6fcf13a9eeb5308abde37f4140d2aa80965546754000ea0ccd22efae0171121dfb4892defe02b5252fc623ac895b146ce36c829301d0c35ff352999798980b

Download Submit
/data/data/com.rez.ir/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
04983345058e75e210f71eb589b98638

SHA1
fb7f4846b36dd368e531baf15ef7f9e49923acee

SHA256
3247b0131e9304a09425c9cb36f000238a3c883c0896429c11a15fced4002163

SHA512
cfc3275d3b46c3ddc844907f1f357c871568ab4f8801a2e54b5f999fec6a32c716bc3072439280cd76b1fee7750cabc6b1253d61f85e2041bc2692b85d56c7af

Download Submit
/data/data/com.rez.ir/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
32b9af2d1ec2f5ed18e3cb236f0d0677

SHA1
6e48e50ef960e045fb8bf95ae9f77fdc863836f1

SHA256
41438d4d60225441db453c5f2d8f4227844200b2de415138f9cbd89aa85dcae8

SHA512
3f491688f6bf6ca7b99452a44ee7f7a7fd587f2db4584cee543dd0ad1aad8349d7a5f12fbca2411962b6d5ced5ea8fe26f01db34f14827fc1ba284b6a8e0d6f2

Download Submit
/data/data/com.rez.ir/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
2f0e011657f80a3dfda337a721fa9987

SHA1
092bf0d477f5ca07513b500ab400b17ecceeb673

SHA256
6617dfbf6a4d77d60d8797749f41b84406e48317243dc9aac4051109f6d065e1

SHA512
a8c5ebc242efea154653e6a2162b224b089d16283e5350b2092224fa6134ba895264415645fbdc8369e526817c9953052f03bf275c0b245abf980838008083a8

Download Submit
/data/data/com.rez.ir/files/PersistedInstallation5254157911245418188tmp

Filesize
566B

MD5
8e030fe72d92d9435f8815daa796bea7

SHA1
24fba14c57eb41a42fc63d2bcd7570b4c9e58ce8

SHA256
19025d5dc02762bd293ac70c1cb39dbe78d6c0ee3d9c9efa51f5cb38dc7537da

SHA512
439bddd47c4ed1583e69628094b5922ed5fdaddfd748dcc3954af17c164727f829faf648616ad0e9737f8e8b7bb9aba528842397f194573a9821e9414370c7a4

Download Submit
/data/data/com.rez.ir/files/PersistedInstallation7934879980013414462tmp

Filesize
90B

MD5
04a62c213fc641c0adbeac5250342346

SHA1
9e540e88de62c9a20c7aa532b859145d84a51559

SHA256
b3350717fef67c13b4a51d9c44087ee02abc42c9590d1f00ec1f5bf54fdb20de

SHA512
3a4fadb7c4b044789e66db17a12dca14f17ac9acfa303df3eacf856b3abe75da6f2f99263b5d3f24cc56f649256ee53064b4c1b2455fdb450041c5f88e9f34bb

Download Submit