Analysis
-
max time kernel
2050685s -
max time network
145s -
platform
android_x64 -
resource
android-x64-arm64-20220621-en -
submitted
07-08-2022 21:32
Behavioral task
behavioral1
Sample
gen_signed (1).apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
gen_signed (1).apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
gen_signed (1).apk
Resource
android-x64-arm64-20220621-en
General
-
Target
gen_signed (1).apk
-
Size
3.3MB
-
MD5
8971f70b6ddcad8077f0832e4e96a249
-
SHA1
9c03b3d74df86166e747bc85f3ac9651886e0175
-
SHA256
75bc0a1913c404f1c02eea4a95900226a53b3775af78ee035e0b39c369d44b4f
-
SHA512
7db1fc5e9d2e5433759ec5819ce95425685ba1874dd799279fa3b851e823c98520a41b63cab3162181fa6abc20789fca499103f601445941875b374dd83ee2b1
-
SSDEEP
98304:ZEVF6aL7fDW3v0AMYfccAteMOQ/97o1einVQL1wviIu:Z46x3vKcAti+QeinIpIu
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
Processes:
ir.shz.shzkisidescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock ir.shz.shzkisi
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.dbFilesize
88KB
MD58dfcfdcef5a9793fb83bda404ec3f42b
SHA1dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b
SHA256a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2
SHA512e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journalFilesize
1KB
MD50b6e36b6ba0b77e0342f4bb062c4e36d
SHA12bcf78941c2a997f5803a48e617ef330f23fd97e
SHA256b8f2eb8aeb3691ed083e34741fd36ae2da90fd13d67ea7283764c68042710c17
SHA512585e9942795df73db30b9e429e7f0ca218c802477866b984311de3bacb61cd378576b02d4fd6d3225639b6392a9420f97394285552cd5b29aee1f8c47075666b
-
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation5469430396212653292tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation701598878722960768tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/files/generatefid.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backupMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
134B
MD55906596d8222c870c82df3220f9c55da
SHA10637382c3a9d66b6c092aa594b4fe75f9d646732
SHA256d0900b2d6e8a2f8f00f3fc7d38a5e12c1e6d6bced6f58d6f1bb9c66190646948
SHA51235549fa84e27241af3c8f41ec4ced631b94f514dd0b1fc2d412b2dd9fdce88bedf1482aa590838576294868adac5571a02296eee7f4355d951b749ea7a2f3cf7
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
188B
MD557454e3d9e8165ae4591ac5ea05a5eae
SHA1ac316e3d1e38ecc1965fbe1678ec0d4b884b991c
SHA256e433d90e606dd2d94b4d873a5a50e0f979a06ac756f78ae1bb6debb8f8993d04
SHA512c708cbdf71207a17525c01b6b2082fadba92f796c6d5441e12668e46b7ec7205bc7fddb6974cef0dd7de77a1ab5a7ec67c4dd05effc3c0298772f12fff1e82bb
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
239B
MD550f9e421f160031c36f74cce235ee606
SHA1a9de2fd9ba0317867576e2eaaa0dd8bb75e6f525
SHA256d23cee3557701727a02fcec4d20d881e00af804bbc8b700c70e4aaca3f26c0d7
SHA512bf3fe35b69936add1333dd3c668c388838f3321f36c4ad0b7a486a5352c03d281a029aca0ab2f7187a27e8df581318be8cdf8faef72b83c6c1b88dec82b3bd4d
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xmlFilesize
192B
MD580f87a46d6451598b14ea391f258c174
SHA1535b5fbb6d76ca1087df80b753fa2b142dcbc607
SHA256cd23be98113a55114459ea5b2add284cec660e7c5318b07ef75ab6d2e66939ca
SHA512d3ac2d3688cc1bbabd301384c9f314a826089eed9fee19ffd612f83b8c8f111b4bf2f6160c27f7f5dcead8a9cafa7e6eb7ca5dfcdb65dfd94e4487cf81a598f1
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
494B
MD593c9db65f180a2c7d90152d79abc9579
SHA1491766bf1bff4a24f6ea4235075e1cdc5256178b
SHA256eb22bc74346a486bafcfd47e69e33caa5afa0eff4a18e82d89199043cd562176
SHA512e4a155c0e032f68477dbe0002e8511a42e1fab5b78507db34be38259a7849d7d6f215969d15f27c9be70cdb909542baed3406468a7c3ee0a3612bc46ce75c627
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
606B
MD5ce822a4fa764757f779a31ebc5862cc7
SHA102c269c041954302916b0d42dc9c006da7770af6
SHA25617287538f1a2657903e978d2dc938c46a6202c27649c5db6d1dc152a4078f14b
SHA512598557302c50163709cc1aaa8b47a35f3ce3e7b39ae01c384c884141429652d64ccf82dadcd876533da52401d0d764cb4ffd678c986047c564b7626f48ebb9d6
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
607B
MD55334ff81209541959bb4d9461277c919
SHA13a2fedff17d770d13c10895f72002284a9911f44
SHA2565e1eb65286d78050e8726a0b25024b80e934cbe49746c1b4d07b41a542213b03
SHA512970bd32179abf1168b9ff8fcbd4576abf0d4fc529ea7ca173b1ae9628766e284bdf16f06b44e5009fe6c26434da487f7f2081b7115008a1a4db1e9362d334147
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
719B
MD5b388cd581cd47c24bb51cf3eb10173b2
SHA1bcf5a34d0abc0afbad5554d8b9c4e75f6267b322
SHA25649cfa5110675dc0a4e1028b79aa4f38076f6e1eb45c02506aed744e162aea556
SHA512fc7d3b7af220d83757ece85d8bb9c0b381b6d85ae0dd180c3145bfa510a512b47df620e733eb4b6d28b822ca89d4194bac5ab2ee5d26738415be44b516c2223b
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
395B
MD5275169d911e9b430cf03f246302606e6
SHA101eba4f7b05dded6077685cd45d6367edfef8ffd
SHA25646e310201ea2d46e3fdcaa51419f70251c5ffab236d9c8ec61d6b9350bcf3d9d
SHA512473373b4759bb666f426d1d1d220b4124920d71c235aa62a3fd9bd0df1d4166ba2a4672cb6ba0a5635a86ed2173ffb10b60039aee6ba695c4990a340a91f7983