49f1272ea5b35a183b7318bec5bdd5838e3b09427437dcbaaf3dbf7a752a0f57

Analysis

max time kernel
3s
max time network
150s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
18-11-2024 22:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Edalat.apk
Size

3.6MB
MD5

01c764331c7d9d7b49ad4ea3501b779a
SHA1

94abc7e4b13759f23dad6b146d11563f22131d21
SHA256

49f1272ea5b35a183b7318bec5bdd5838e3b09427437dcbaaf3dbf7a752a0f57
SHA512

7c7ecc7b807bddc7aa2d1f22936887e9c3e53404676dea3ae17554de780754c765635c28febf1bccb97fb636a1fcabece0999612ee07f9fa2a1fa8c312284249
SSDEEP

49152:A/0uwlP1CEhu9tkBTIl4dzcP8UrzdXKOopueR2Nd763nzvLH+3qJb6Bx6fWMS3rk:LRU5uB0l4rSEJVOknyC6mfjS3djS

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.zoku.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zoku.app

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.zoku.app
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4981

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.zoku.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/com.zoku.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
19d4103ead12ee945d32b995109960e2

SHA1
4190fd7533c4a34c61c11ddf3b72210af24dd640

SHA256
d0bbe05fcbe98d3e89ce9e96ed918086a65d4a783fe50ff6aac5543e962b71c6

SHA512
cf9370bb394d7b629f37db35b847bad8c4189d1bb4321cbaf0d542a240ff14d74bc3374b62d4c959a222a7769d27e8008a679ba1716517f3558d57c4accf7d1b

Download Submit
/data/data/com.zoku.app/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
58d3e509da169245a1618ab592864406

SHA1
06384976a1959f44cb155dc44ca5c55c85c59ed9

SHA256
93ed9153210ae4d6b6679b1f8b6ac077cb9b501b9015ea50dc370669701bed07

SHA512
c2e52046b4bb66ea0fc6f09f8022cc4606d7db833bba8934eedd0b6f022e887f1acb05a1187d590d1c33c8ae39326e3e724c5db1366e4e13c659abb6ec512b8c

Download Submit
/data/data/com.zoku.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
90e7b12398c6653d4815d16d047ebd07

SHA1
f9ab0ca4a18ea5d0f73c724d95c20bb8f06f498f

SHA256
884fcb60e106fe6ad39688b5f71acb2a29812848b803c90b435b618c370e53bf

SHA512
11248b72bc173975d174831d5c163ef87a561eeaadb73186a4c3c6878942dfb73240fcb7438cb7846aca95e0b77e4764903b38a28786dc29f50afd1ac31b01d9

Download Submit
/data/data/com.zoku.app/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
a1f32eecf02ee921267370ad69e80737

SHA1
d70cc56f48e754a8737da94041d540e446fe7dca

SHA256
5646b9fa71f61e5849ba359b3e58175d2d95dee919a8bc6d5ad6cc5079447cb0

SHA512
c2df53a5b2208792f0fbaecd7b686518d25c290d932a63f4b4a0ce44f3b474716f52f2a958eab8bcec90361e658f8018679c29bd2e2e3da82e882ae49a77920b

Download Submit
/data/data/com.zoku.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
7d89c3ff684dd61d057e2f43b5d5eaa6

SHA1
6216336d5b2c765374d6cdb5a13fc698dc27bbe4

SHA256
837b0a101397d4ba3a06b0a1bd7108bbdbaeec218e7a3ea773a7a7c203b44759

SHA512
d7571f476935b1324a1a3a673a09b6cd9e8d00727c5063426a4933720d954b4f423b8db06415739bb27b0a19f4ba9989b6e180ad039a2f51a2c553724c75f3c1

Download Submit
/data/data/com.zoku.app/files/PersistedInstallation9043824247391483104tmp

Filesize
90B

MD5
ac6e35ecc5e3c554f9775cc891c206ea

SHA1
9ea6dd680ee1298534d7363c3436dd09a1f8f14e

SHA256
c734a5f22110fbdfdf17f4211c9abaaec59299242691b64185f7485818e5b25b

SHA512
936eecaff09dec9abff24adcb0b424e51dbf1523f84969f881f5421d0ab3ba02293db496c81abaceb33a1b9dbc74fbf5de4ebdb107a361040b0c2c5c48f7da08

Download Submit