49f1272ea5b35a183b7318bec5bdd5838e3b09427437dcbaaf3dbf7a752a0f57

Analysis

max time kernel
3s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
18-11-2024 22:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Edalat.apk
Size

3.6MB
MD5

01c764331c7d9d7b49ad4ea3501b779a
SHA1

94abc7e4b13759f23dad6b146d11563f22131d21
SHA256

49f1272ea5b35a183b7318bec5bdd5838e3b09427437dcbaaf3dbf7a752a0f57
SHA512

7c7ecc7b807bddc7aa2d1f22936887e9c3e53404676dea3ae17554de780754c765635c28febf1bccb97fb636a1fcabece0999612ee07f9fa2a1fa8c312284249
SSDEEP

49152:A/0uwlP1CEhu9tkBTIl4dzcP8UrzdXKOopueR2Nd763nzvLH+3qJb6Bx6fWMS3rk:LRU5uB0l4rSEJVOknyC6mfjS3djS

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.zoku.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.zoku.app

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.zoku.app
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4469

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.zoku.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
73dde037d43818d6392e51665bee0446

SHA1
79d2b7aaad055aaa21aa371d61b05684c2164073

SHA256
d8aa44c8b932aa136e23d352f22689c2173c343125e0e7588bb111fb635b30be

SHA512
95c88a7ca75a3f60fc3715bcac6a0a0f67bcf8a3a9fde5482f15e8da321521faf184548fc7a31df3f6019c48214b97a683b9fd7d0d2b1bd5595e50fb5d80f4fe

Download Submit
/data/data/com.zoku.app/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
d52114dbfabe092e8c842bb2ddd8c0e4

SHA1
cad76d142b82f9c74ea68c79df63963096e8af7c

SHA256
d6cbaa9c08ea35ba284257330c5271b041e39cbbb431c3781ee1baa2be20eba4

SHA512
55ef72ba3a22b4311c2603858b5709bf72c28535cf771a03f21258d05ec95cd6509777966cb4a022ab27b0513d0a74969ac91de61382babb27329c264fcf3223

Download Submit
/data/data/com.zoku.app/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
5d57eeeb8fa92c463c126b767ece9ea8

SHA1
9c2973c858aeb519eb86e7b25e1ecf16ca14bb7a

SHA256
8667f450256fc8d8c8fe49053b706fc4c6533d1cb70794057ddd3098b2936afa

SHA512
a153aa5e1f026b70e8af3968b8a1a626953050c102149f3c119387821c42b9debb6d029c9805b7b7d86715cfd6dceeef91b97e31a997f54635fa090bc4b0dd81

Download Submit
/data/data/com.zoku.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
ae4c6527ab2841ed07549d34858cb950

SHA1
fbd926a9400b5f2894a53efa783677040b1a6892

SHA256
2274bc8d62be532d86a3441365963b5c68460076062cb7827d342c703408872c

SHA512
c171aab450ffe3d3eba5dc4b36b6a5f65e725a0c6119bac020d0361b04327fab55cf7f28d9be73c0d928f98384821f587b3894ec062817cce9e92b9480f54453

Download Submit
/data/data/com.zoku.app/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
637611035d537fdacd613ea35d42b801

SHA1
937926c1288cb4910a75b410ec3dbb06a7b40740

SHA256
d6ddc654399d73d80fb9855f7e565e9cc07fbe97815fde1fc6336d677ec086f6

SHA512
58bbdf3af58c5a78cd2b7b998225333b381cc3abc8b1bb7b1cbc8da0d98892172f40c33b187cefa82c2f51747542cd1ad6c9e49d135f21c2e765bd447481d349

Download Submit
/data/data/com.zoku.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
5c8676d03784cf4b3acad5c13da22d94

SHA1
c3013a0735e16ff1853926a2ab2330e86dc9c3c0

SHA256
477a11269d2c5c295449c1de267d84f74335a428746cb03c9fdfec66abd806ec

SHA512
73bf3d79a741d4fe39c8c7f76ab41c2fdc7f95cd71c544c75ed2ea63afd7c3cdc9a5cd8bc1777221a7bf9ae96be66cd63056540f83ae82bc3b981afe31386309

Download Submit
/data/data/com.zoku.app/files/PersistedInstallation7452988771637338224tmp

Filesize
90B

MD5
57edb8f56a47eb3e0cb70bec69c801de

SHA1
a7419aabd4831838cdd9e03c6b0bebcea4da6d73

SHA256
85556e870622cb0523a3cd5f812c5af257dee41af1575fe2f00040dba7ed42ac

SHA512
87ba67aaeb8c525d79d91de42d6a11ba7a6fade4914db7e0967f638c2c970336e4aa71dc6ac8791851f7d93dcaef1e3ff4b304b7f77195e4e707bd56ed05db4c

Download Submit