49f1272ea5b35a183b7318bec5bdd5838e3b09427437dcbaaf3dbf7a752a0f57

Analysis

max time kernel
2s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
18-11-2024 22:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Edalat.apk
Size

3.6MB
MD5

01c764331c7d9d7b49ad4ea3501b779a
SHA1

94abc7e4b13759f23dad6b146d11563f22131d21
SHA256

49f1272ea5b35a183b7318bec5bdd5838e3b09427437dcbaaf3dbf7a752a0f57
SHA512

7c7ecc7b807bddc7aa2d1f22936887e9c3e53404676dea3ae17554de780754c765635c28febf1bccb97fb636a1fcabece0999612ee07f9fa2a1fa8c312284249
SSDEEP

49152:A/0uwlP1CEhu9tkBTIl4dzcP8UrzdXKOopueR2Nd763nzvLH+3qJb6Bx6fWMS3rk:LRU5uB0l4rSEJVOknyC6mfjS3djS

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.zoku.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zoku.app

com.zoku.app
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4259

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.zoku.app/files/PersistedInstallation8766713508721804976tmp

Filesize
90B

MD5
6aa4619fcdf626d4e420c15d0c6c40e7

SHA1
d161452f4f1ab4226cb0a45b39cab59cd132788e

SHA256
a4ca52e05adf35ab096b6bcd67543ba147c59f5c7ddfcf56ad5042227d2bf895

SHA512
ecadd90134c8900e68b932ea485ad39ee1b514022411efec5345904dad5915a6c844d19aa6630b1641d5a224ffd71f0c6a2f03cccad4dca932db6e489d7111c9

Download Submit