52b11991a7f54f351fdc2d6bb80564840671c1d82f2b2d0c4df038f51708a62c

Resubmissions

11/05/2026, 13:29

260511-qrdl2aaz9v8

11/05/2026, 13:28

260511-qqxnhses9r8

11/05/2026, 11:06

260511-m7ex9af1918

Analysis

user interaction
yes
max time kernel
3s
max time network
53s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
11/05/2026, 11:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
سکس ایرانی.apk
Size 3.0MB
Sample260511-m7ex9af191
SHA256 52b11991a7f54f351fdc2d6bb80564840671c1d82f2b2d0c4df038f51708a62c
MD5 aea3978f165fe143d60e2eb5d7f663fe
SHA1 445a53c4246ed06a3aa58cf2eec17340dd223b46
SHA512 2707316c9930f406a8090fc5313b49fb390e6f1385a143e046c220031a4cb619fff61e315be47c04d009a553a6ba369b224567532899199e9d846528cd887925
SSDEEP 49152:xu7YWUcB/5d8wctdFUyBIcxmvPqO2HF4z29HKJyOTSgd5gMi9LBiNgfVVBD6+:2UcJ5dnKQy6wQPqOKA2vqSgd5gMKysp
TLSH
T174E5F252B3FA9A28F2F76F35E975519259B9FD829E35C11E0200B11C0DB7E809B50FA3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

banker defense_evasion discovery evasion execution persistence stealth trojan

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.opic.sla
/system/xbin/su	com.opic.sla
/data/local/xbin/su	com.opic.sla
/data/local/bin/su	com.opic.sla
/system/sd/xbin/su	com.opic.sla
/system/bin/failsafe/su	com.opic.sla
/data/local/su	com.opic.sla
/sbin/su	com.opic.sla

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
5019	com.opic.sla

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.opic.sla

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.opic.sla

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.opic.sla

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.opic.sla

com.opic.sla
1⤵
- Checks if the Android device is rooted.
- Removes its main activity from the application launcher
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
PID:5019

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

OneSignal.db

Path /data/data/com.opic.sla/databases/OneSignal.db
Size 20KB
SHA256 22256171fa702f6f63896f2073485fbe6c3443f8078102e215409af85949a171
MD5 372fe282421bc6428982711c5d55df1d
SHA1 9078e7129d36d71c7ca7aec22de943aa48c35c51
SHA512 55fb906cf45f476c049b2fa5036d8a0c42b44c7adbbbf8b0aa853b4313f94d3b884c8c7cc1d5c341a1c79bf0ff1e4739239dbc6d30b6ab8124bd1d63a43f4487
SSDEEP 12:TLpIuVQH2uIVBAee6x+xFwgiTrO/njWPtFzEpwcRmBEyPbAVOw:TLp9Eyr2k+xGTrOPjwV+OGSE
TLSH
T1179247CF9B811281EEC710B3142342D84A3B610E8DA397672BE710549D02B86C763C59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.opic.sla/databases/OneSignal.db-journal
Size 512B
SHA256 87c162f893c2a13bb209f155e386731c0fdbd6f08861d8f08a3146f74236d1a8
MD5 43f287b7b8b579d6e2481d7a78a8dda1
SHA1 9ac447d41497eccf729ac7e99e476492efa7cb6e
SHA512 7bc35b3940386152dfb7ad764634a8b3c166a29800f2286d7e280f804d6938dedd7487451a47a1b1e157b43d7c35f6a5afdf64864d939999349562635b097c65
MD5 SHA1 SHA512

Submit Download

OneSignal.db-journal

Path /data/data/com.opic.sla/databases/OneSignal.db-journal
Size 8KB
SHA256 5defd0f7e52b5d0ec1bc05a64784071e0ddb0e46f095089ec4be40896ebfb05e
MD5 c576dacdbbd1fbbb30810e360cd436d8
SHA1 fb6368c67620ab1e70de248ad88a849fedf72b7d
SHA512 09057b0081dbf0ae4a84ac75d9554a29ce7adacd569cd42abc43b962c323db2b683bec3622a98a89f2e30afd01a143a30f7388712050d0578168420e00150139
SSDEEP 6:7+/l9in19g9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKxE:7+tAqLiuWdwRmBEyPbME
TLSH
T19602228D67813D22C81D2ABB90E583621EC0E719C961CB07157008A83C034CCA4A0D84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.opic.sla/databases/OneSignal.db-journal
Size 8KB
SHA256 45ae3217ada1c9fa5e2d57872c3ca20c6a992dd4a4073b45ea725cc35190c502
MD5 8a94a94b4609b3b233264304557fb88c
SHA1 33bbe58673b853298e37345aa757d9a503c4cc54
SHA512 175e04e46be3cf9fec2cdd5786e8c392afcdbc1e13ab9d5702e5c2eb90306dd67c7b9a7be03e0f8e9b5161c4df65bbb2335d1a92d0c1c9009325acce00ddd772
SSDEEP 6:7+/l9ZlGPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKuy//Ka:7+tN6qLJdTRmBEyPbkr
TLSH
T1A502228A63400813C02957B7A0C883403E20A72AC223CB1B997008983C026CCA8B4D10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__pushe_base_lib_db

Path /data/data/com.opic.sla/databases/__pushe_base_lib_db
Size 24KB
SHA256 53f09b897033e2496e13f3c6e8d14ec1d1f7b273c2b4d47dacc569594fef0f8a
MD5 abe9fa56c177c65db8c072e6d81fc41c
SHA1 abe9e9bb6f7294324f549af4435f58578ae69f2f
SHA512 bb1b70eb859448050dd71822652d1976456be07c098ab41f2f75fa277cde059aff0c45629564170ee07028b85d501cc941529ab06753e5be2e710692bfa3922a
SSDEEP 12:TLXyFormG4NK0COnHdOnHXy1TOnHyilc36/QN6/uJaEcZVMJwRPVz27VNgRINOR4:TLbxSe7TlcK///IoVM9cREGSzGQ
TLSH
T15FB25CA36FD83520E8C8547749E6836059B8B14D4027A6FB2F6094799D4264AF06BFFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__pushe_base_lib_db-journal

Path /data/data/com.opic.sla/databases/__pushe_base_lib_db-journal
Size 512B
SHA256 2f1c616da1ff0ee86e4237164c6a382cc5f1bf72c7513df705468290de89dc20
MD5 329fcac054be859ef3ed3f1a0a0d3fe3
SHA1 086c57bd4b17cfdc68cf1c0baa139adc55bf0fd1
SHA512 43f8f4bef153db3ee83aeda112d2d6a7f2f4b1d788fa80cf05883a6a1974fc8b596fa3c1ddf22404ba1f12952c10dc032fcb817349999a75ea5c2b68a41af5fc
MD5 SHA1 SHA512

Submit Download

__pushe_base_lib_db-journal

Path /data/data/com.opic.sla/databases/__pushe_base_lib_db-journal
Size 8KB
SHA256 b5e9db042fc1ae4a7007737151dcf63e14c07b84b8a349adb94a8674ea8ec64e
MD5 5ccb6b91cb8a440f8bd6a04c114073d6
SHA1 cbeccf88dd116528f8fd76ebc1bb95aa9959938f
SHA512 d32470ea0678d4ca09efe966c4edb1f9aaba8fd768827d53f5c66bd0510ae629d05f6580d1bc5abb579506e9262674f411b4a730f2ff768f1bf4f68063dd1580
SSDEEP 6:7+/l914mlFn12kWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKuo:7+tbl+qLiuWdwRmBEyPbfo
TLSH
T1FC02228963800822C81916BB90D483800D00E719C1B1CB0765600ED87C0BFCCA8A0E14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__pushe_base_lib_db-journal

Path /data/data/com.opic.sla/databases/__pushe_base_lib_db-journal
Size 8KB
SHA256 db96aca05f900d03bf579c8ab29c3dec01413af25d0be6f4e80b1af3e1be4d30
MD5 bbe6441aa8169311e50a5b3ebbb4ad18
SHA1 7f68c5b59344912f3fddb954cd034c2035ba6a85
SHA512 9a720b8752b9c87cf293033fd25fd00ca40c2fa67af451e84f3ee6abfbc10abe7680eab80a2dc6cdbbe872374c1aaa25d157284f0f140c95222ebd43ea1084c8
SSDEEP 6:7+/l9xrPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKqyM/S:7+tvqLJdTRmBEyPbblS
TLSH
T14202228963410A13C91D1FB790D883402E60E716C223CB47266108983C026CCA890EC0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

evernote_jobs.db

Path /data/data/com.opic.sla/databases/evernote_jobs.db
Size 16KB
SHA256 fb6c2a810de00d3820d82c1864de31d4fd57586f7412ec2585cffc39591ec4b1
MD5 a11d0ce7039d79e1ed03a1264df9f9d8
SHA1 dac37d56d2153759af2a6c235a5e55132c53a1f1
SHA512 fe9f9da66d9705d86d5d9693be707375f022800faaab330d027ee5bd7eb91d370b2a95983b41986d444f5dc4fdfcc8f30c7a58d33257abf4da46d4aa14e9d90a
SSDEEP 12:TL8L0BRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbP/QGEvK:TLw0qVKRvTZc+UGSP/tEvK
TLSH
T15E724246AB802912EF8C4E715245C3C02A29D68F56E0D2EB10788EB498C2C0961BEF24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

evernote_jobs.db

Path /data/data/com.opic.sla/databases/evernote_jobs.db
Size 16KB
SHA256 25a729d5f9430e52c4156d02c6ba1d2c13f7cdc6bdbc5717b2328286b9ec3efe
MD5 afafcf189458d28f0ed966fb0c75e54b
SHA1 9f75f184d91146e17a8f0d3108198146f3dc648f
SHA512 4f90b1bec531001093f06ff065e9ff7a91e7e30bfadfcd24e81e127bd037fe702bd2afa13d089fecf9bf08fc60bd52afb6094f4575815d12405b83e6fb382b4f
SSDEEP 12:TLWuLeSRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbP/QG1vK:TLzedVKRvTZc+UGSP/t1vK
TLSH
T1B9724246EB802912EF8C4E715544C3C02A25D68F96E0D2EB10788EB498C2C09A1BEF30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

evernote_jobs.db

Path /data/data/com.opic.sla/databases/evernote_jobs.db
Size 16KB
SHA256 c479f839c0bc15e9a9749cb5a5a3eef4e09c0163160073477f72fa78b2e300df
MD5 00e829076f54c72b50b63fd6de296a03
SHA1 fbeb1b8be863931f98a7c29224a03b89f9616ab2
SHA512 1c6b0bfe980050072927f8d407ca86353098d03502f7194f141d43c045a3f35103261811281f023262f4823a4fd70659d6802b76e126e991120dc14cdf74bbcc
SSDEEP 12:TLpLnRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbBvOw:TLFoVKRvTZc+UGSN
TLSH
T1827228869B802912EF8C4E725115D3C02A75D24F56D0D3EB5178CDB45CC1D19A1BEF64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

evernote_jobs.db-journal

Path /data/data/com.opic.sla/databases/evernote_jobs.db-journal
Size 512B
SHA256 89589bc06f2067638ea2d74e06b092358dffecb1e4faef9d5803e3124fd64e7d
MD5 f9e45f773c2cca281976f712d8ae588e
SHA1 229348449aca9e33c8730b906e08f765e2503171
SHA512 b2080ec59db4e51c2065e1b8a0ff563da514c482357ad093a80134876735ede63dd9437adff3484006153b9c69ba6df24cca88e6a3d5512b314db787ae62803d
MD5 SHA1 SHA512

Submit Download

evernote_jobs.db-journal

Path /data/data/com.opic.sla/databases/evernote_jobs.db-journal
Size 8KB
SHA256 3b6e1d0195e9d455428b8a39af285f75b8d171f08c874e8a223c78f4d07b8f32
MD5 444c7dce9c588aa392a21393064dd1af
SHA1 73cd0d81642c05b1d562397bd4eea62f771d75f1
SHA512 62ce1aa2b3cca08f60f045e816f06c13f73fd4aaea9c6e91f4b1ae4045b2f2b351acb498308bcf604ab6fcdf26e5cf8cf01038d927d206adc0bbb41c23090276
SSDEEP 6:7+/l97An1Dg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK4:7+t5mqLiuWdwRmBEyPbz
TLSH
T1BE022299A3800A33C8191AB790E5C3400D24F71E83A9CB0F196008983E434CCE4A0D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

evernote_jobs.db-journal

Path /data/data/com.opic.sla/databases/evernote_jobs.db-journal
Size 8KB
SHA256 d75b9d23cb464f1e5c553b8052e86acbefe73ce7c6365f78f67563cb5196610c
MD5 51709247b37e5f1030158f0bc36cea72
SHA1 211739db7c03d39f0b4f6798d24736165368a242
SHA512 ab6679c9747d993c52672340a274175c69eedaab5a5816abf26934c0be394e780c0314fa94397c9d29b3d712bc28d5247d2dc5a2f4308d1fa53f88642d2d6600
SSDEEP 6:7+/l9PAFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKxl//0OT:7+tVmqLJdTRmBEyPb4lX08
TLSH
T10002228963402C13C22D17B7D0C883422E24A7148223CB471AA00898BC0A6CCA892D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

evernote_jobs.db-journal

Path /data/data/com.opic.sla/databases/evernote_jobs.db-journal
Size 8KB
SHA256 45c36cfa4e9f0872b2a3e93be1570a98ec1cf10bebf019fea426fe0cea346c90
MD5 135df4d74ab7b25d26e14b35cd28b831
SHA1 9aa0696548719ca99f5476d1bcb2a9042f0f3f90
SHA512 e9dd889668f25f0021038229fe2431f53d9b1800f9a2c078d77801e9a600ffc31ee0d7108438b1ad76f5cbca59a4d47bb7fc4596c326a59802f72b45bc11add9
SSDEEP 12:7+tkqLpLnRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyPbXX:7+tkqLFoVKRvTZc+UGSXX
TLSH
T13202784A9B813912EF8C4E725125C3C02A39D24F56D0C2EB1078CEB45DC2C19A1BEF34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

evernote_jobs.db-journal

Path /data/data/com.opic.sla/databases/evernote_jobs.db-journal
Size 8KB
SHA256 654c41c0d5e93b2b78f4a6852f25e2ee7db028cf8504a8fd6c272a8e01b9f05f
MD5 274e98bda19cb0111a3c1b60488d5766
SHA1 60b8ee702c0fe0e54eca87e482a906076c6b4748
SHA512 cae0ddbbede615423dc419cbaa05e609e78e20f9a3c4d41bf8cfe3227acb719072e54456241d6759480e48ffa6fc600f882d3c3fdf20b3000c9228ae3e0e1871
SSDEEP 12:7+tgOGEvtqL8L0BRulQ0KkYrZASBMAB1G0d/P6dMboAGy3vAz9rxvW3dOeRmBEyD:7+tsEvtqLw0qVKRvTZc+UGS/
TLSH
T187024746AB802922EF8C4E725255C7C02A39E68F56E5D2EB10788EB45CC2C1961BEF34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.opic.sla/databases/google_app_measurement_local.db
Size 16KB
SHA256 101f7943674ad259b2a9258a5f802719264e81d1edb1cc3157eecae9bfa21aa6
MD5 38462d4b2c6a8491d5fd7fdd5226910e
SHA1 a7fa0530c97ffcb652d6a371da16587d476cff2c
SHA512 f253702eb3f3d9e32b11ab7910a4d9b64e83bc65893b4ce820a1f74d0fe391b53814614a8fa84237afbe78f6c54686fc5de300012385c86613856982c4913a6f
SSDEEP 12:TLWuEOe9zmzrfRmBEyPbBvOwu8FAiOLauK/6AUvkWlNHISE:TL5epmzr0GSNuOKary5tr8
TLSH
T188725CDCEB14D503E2730B3AA4CED3D02D78726A4727D7137E41291C6D022D59461F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.opic.sla/databases/google_app_measurement_local.db
Size 16KB
SHA256 b9ec7ef3639b78ce794fd930256c63a5971d6c591a575b72c2565e88b226f0f8
MD5 9af32e6e45cad9c22a0beff7e5a3b5a1
SHA1 5a29f2bc3632484e3b47e1c6f08bf5f9de1cc49d
SHA512 eccbc029247794c094a0ee62de06ac5017ef3c8097d132efb40af9487224eababd73ed51be4e681cefa2d9bb8b1041bd51fb26ddaa2f0b15368b1114ce5d1837
SSDEEP 6:l9bNFlsls1ylO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/Wzl8:TLiEy9zmzrfRmBEyPbP/W
TLSH
T171722BCD9F102603C5B30B77B4CE93915C14A21D83379E472BE40474AD43449A0D2F84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download