Resubmissions

11/05/2026, 13:29

260511-qrdl2aaz9v8

11/05/2026, 13:28

260511-qqxnhses9r8

11/05/2026, 11:06

260511-m7ex9af1918

Analysis

  • user interaction
    yes
  • max time kernel
    12s
  • max time network
    61s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    11/05/2026, 11:06

General

  • Target
    سکس ایرانی.apk
  • Size 3.0MB
  • Sample260511-m7ex9af191
  • SHA256 52b11991a7f54f351fdc2d6bb80564840671c1d82f2b2d0c4df038f51708a62c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.opic.sla
    1⤵
    • Checks if the Android device is rooted.
    • Removes its main activity from the application launcher
    • Requests cell location
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    PID:4260

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        OneSignal.db

        • Path /data/data/com.opic.sla/databases/OneSignal.db
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH

        OneSignal.db-journal

        • Path /data/data/com.opic.sla/databases/OneSignal.db-journal
        • Size 512B
        • SHA256 d35018b538a634a5cf27f49c50aa3447f7cf52a0b57ac77ad3c2237beb9d4199
        • MD5 SHA1 SHA512

        OneSignal.db-shm

        • Path /data/data/com.opic.sla/databases/OneSignal.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        OneSignal.db-wal

        • Path /data/data/com.opic.sla/databases/OneSignal.db-wal
        • Size 32KB
        • SHA256 280655cde85554b5c24e3b4ecf8137a0f820381efed2eba7745e2d08b8b1972e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __pushe_base_lib_db-journal

        • Path /data/data/com.opic.sla/databases/__pushe_base_lib_db-journal
        • Size 512B
        • SHA256 eb43526d9ea5fc50d2cf4dd7c1c3cb7c88cedcfdec0afea0ee74fda34d602cde
        • MD5 SHA1 SHA512

        __pushe_base_lib_db-wal

        • Path /data/data/com.opic.sla/databases/__pushe_base_lib_db-wal
        • Size 44KB
        • SHA256 219d59ad9ea7b013d4790f948be3d2afccd9d7693d8ef926f86f71ce3331126c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        evernote_jobs.db

        • Path /data/data/com.opic.sla/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 cd642aa75c05d15042ad15a58569844b1b242593d3730eadcad4331c2d198b74
        • MD5 SHA1 SHA512 SSDEEP TLSH

        evernote_jobs.db

        • Path /data/data/com.opic.sla/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 ef580f510e34ea1266b85c7ebfe063eb57abe421c21a9131d96516d5f8eba593
        • MD5 SHA1 SHA512 SSDEEP TLSH

        evernote_jobs.db

        • Path /data/data/com.opic.sla/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 f56b4c835b5c9dd50cda058d44dd22425083539e58d5df6258e0979a4576dcb7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        evernote_jobs.db

        • Path /data/data/com.opic.sla/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 9281dc487bd01479c2a4fe34509b516becaa9645a35a659eb4a8c3e42681ccf4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        evernote_jobs.db

        • Path /data/data/com.opic.sla/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 cfa26eeeda27db5826728321aa46339b97cad3fc9a060ab717439335378f89f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        evernote_jobs.db

        • Path /data/data/com.opic.sla/databases/evernote_jobs.db
        • Size 16KB
        • SHA256 8f72919eebbe45ed6d33b7b763d7e45d76a880128aee9aa5c29d28ab79689a92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        evernote_jobs.db-journal

        • Path /data/data/com.opic.sla/databases/evernote_jobs.db-journal
        • Size 512B
        • SHA256 350d9cc05bfd38a4a1fba5b11738ec52d2078e29b0f4076bb185f12b17b833a9
        • MD5 SHA1 SHA512

        evernote_jobs.db-wal

        • Path /data/data/com.opic.sla/databases/evernote_jobs.db-wal
        • Size 28KB
        • SHA256 a32dc56efdd34d592aa3bd34ab636337ad4e82329cc91ff7077df8f9aaf35fca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        evernote_jobs.db-wal

        • Path /data/data/com.opic.sla/databases/evernote_jobs.db-wal
        • Size 4KB
        • SHA256 63afda1ea4d18d9583027eaf289829bcee3c1cee35999334a155297f67a1c982
        • MD5 SHA1 SHA512 SSDEEP TLSH

        evernote_jobs.db-wal

        • Path /data/data/com.opic.sla/databases/evernote_jobs.db-wal
        • Size 4KB
        • SHA256 3df62d4e6da22d89ae1785a81a985d4333c3ebf14590982644dcc3f7e754a041
        • MD5 SHA1 SHA512 SSDEEP TLSH

        evernote_jobs.db-wal

        • Path /data/data/com.opic.sla/databases/evernote_jobs.db-wal
        • Size 4KB
        • SHA256 beb16aca2c4d0f6a00dd46f538e7db53a758f54407f709d9aec3898f89af4ecd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        evernote_jobs.db-wal

        • Path /data/data/com.opic.sla/databases/evernote_jobs.db-wal
        • Size 4KB
        • SHA256 50bd1914face11be9023d7219b97a97be10bab75d6f2eaa0630f30520c78046d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        evernote_jobs.db-wal

        • Path /data/data/com.opic.sla/databases/evernote_jobs.db-wal
        • Size 4KB
        • SHA256 20de659f1e576a6aa4f60a294a27cecd094fff4c4f056ee8233a1e6c6454e0e0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.opic.sla/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 156de873a401d30a669656919c9481bd49305236e37065b5ab7905f7b87dddbf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.opic.sla/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 93cc3a517cb70a4eeee6293ec2c29277219d01c2e48edc64c7bebd732c75ca47
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.opic.sla/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 f0756554c9e8c508ce05e6bd95e94e3953a803066e17c100d7358fcf5711e4c7
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-wal

        • Path /data/data/com.opic.sla/databases/google_app_measurement_local.db-wal
        • Size 36KB
        • SHA256 9393c2dbb20f7e024dbe9b1c9ce74206fcac93642027a4450ee5ca68842dd2ff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/com.opic.sla/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 faf0b426d116ae60df0de0ddebeaf3c2c785205899d8085776b29b897897a2a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unsent_requests

        • Path /data/data/com.opic.sla/files/unsent_requests
        • Size 58B
        • SHA256 988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
        • MD5 SHA1 SHA512 TLSH

        com.google.InstanceId.properties

        • Path /data/data/com.opic.sla/no_backup/com.google.InstanceId.properties
        • Size 2KB
        • SHA256 df8c67dafd45d613fe9e25b09299f574502b4e056d468fae87cc9819674beb2a
        • MD5 SHA1 SHA512 TLSH