Analysis
-
max time kernel
2613966s -
max time network
128s -
platform
android_x86 -
resource
android-x86-arm-20220621-en -
submitted
14-08-2022 10:00
Behavioral task
behavioral1
Sample
gen_signed.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
gen_signed.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
gen_signed.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
gen_signed.apk
-
Size
3.3MB
-
MD5
2603c03fd88573b339f37f5393f07bf6
-
SHA1
6126939b9ed0a9d6c59ffc6765ced79dcb5b86c7
-
SHA256
9d105edc4e3a53b342968fe805769342b15c3068100bcbdf22bc2e8b77f906d1
-
SHA512
7da0615de2cf1495074fa405dbea6e5cb50aef5647f35b01fcff68ec3f6252735532d8a01c5288ccf83b9a6a99a405527e1dae794b53e784de83810c4ddb8032
-
SSDEEP
98304:SEVF6aL7fDW3v0AMYfccA5AKknE3+586kWzExpzwZvMciT:S46x3vKcA7NgwwWT
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
Processes:
ir.shz.shzkisidescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock ir.shz.shzkisi
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.dbFilesize
20KB
MD589cd606d433241b0e400ec6e41988cef
SHA189b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3
SHA256fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253
SHA512f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journalFilesize
524B
MD569be24446f7788ae5d9163f131dca7f5
SHA1b5bbd031073f9472e76b23d3ea04c23c8b20500e
SHA25632f37541a2d8a774ecbb12d83181c9e0229f2bb426e1bf9fa2e5be1ad6a7156b
SHA51220575e7e2deecc7012f5d25a0200fc4763078eb95e7a57702aa5faa80a35e559aa661e4524e24b21be0e837962db6b34fe8c701dabfadeb11ec7c991a50348c6
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
36KB
MD523d760973e67150b1a86f39e5f8a6f7e
SHA16331a349cc292cb179663bedd5c0f329cbe758f7
SHA2569570c9b3330ccddecaa7fa8ffeab89bb7202173af42f604d42b9c82792bae377
SHA512bec23e0f58f74373dbd6353ec5dfa3751f4be4f20027076d2e1808c61dbeaca18252d2d7f37ee353f1d664838826730b36f1a124aea836f168bb89080f5e5030
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
4KB
MD586964c83676ff00f81effda9b712ab51
SHA1de3ab00292dfb132037268d12ba0788313cecc3d
SHA2562abe7aa798337994629971dfaac5c8832705d32fa3e2b1f6a4dcd73e2b781849
SHA512f7f8db463c1db00f789c5751954d4a2eeabf8d620097a1fb3e6163638a7806d1352be5c5faf0eaf6101544e4c478eb6ba5135705bec3a59adeedfbb1a3d6fa8d
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
4KB
MD5892c93c8a1b5001e98f1bff1d3881996
SHA10358fa984bb412d13c50d514aef9ea9ed6f94172
SHA2565d478223ba65e4cfc7a6bccf26148cf1fc5946524334c0166d278a733e220ed9
SHA512d95e8472ab7706276e3c40c915ff885c0b0fd30d0ad6b0fc1dad76eb931330d78c8fefbe109c80479e2843485b985841ed8133df5621ef3184a8e96252fdf377
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
4KB
MD58bfa86a0038433289140b79ce8494677
SHA1133e8b15910ef48037d42c0be598ebcf35a169e6
SHA25612f2626cb0163e20b5588d40813f6ae1eb209cdfb30d6d1364259998c6575651
SHA5129c39470739e6c9d994b4d7ba6aeb78f7c66632a5d78da36dce4d363750053bef80174a1f5207be5d4f194c47ed996f80e46c11c2c540b0766d8d6ec3f884eac8
-
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation520902590516803700tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation5554390848673682514tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/files/generatefid.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backupMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
239B
MD502cbdc4c8a57d9d05ef97f90a6a1fc28
SHA19adc6b092d6bbd8f90e2bab6ad43cb2d61c73faa
SHA256df9633f166080372019c45a0792a3d41060300f96d18600754eae8753df4e30c
SHA512b449428a8d6e8cfa16e9f524104009647dc2bff8593ea56b03178c83845b32739861beaaaef349dea932cb6f6c3b1225f531c25102fb305a9ac58dc562354ffd
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
134B
MD501c598da9aceee3a397947e6399dda1e
SHA17553d426a442a717e197ba56d9c12bc37135b272
SHA25655b6a6a6e89993cca413ebb42e418e6fec8bcec20fa55ff143866653f61a877a
SHA5126c32e5728c0bf479c0028d16965f4f14d6edb1cc19559056cd386dbdb072dc1204fc380b5ae80f046ca3dfe2783217a9657eba8877f731ee4a2a8b8ddfdc93ce
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
188B
MD5e82abe2fd50ced6c7f2902054b6463ff
SHA1090fea6f7a34951f693bbbc956de020973319ed8
SHA256ae26f98ed635f061a11617335d11bbe2358b4cc89221822bb73859a90f56f8cf
SHA512bc36999e6d9806b94d5910bba4ef5993ddfcaa97b87ff3cf64410cf1ee15a84c11c9c39ad2b51001256b0d8fa3de67f007550c391fb22176c26992b1a4207f39
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xmlFilesize
192B
MD5bc095036f7069873ef0c051ce3a6d0ca
SHA1ae98bb9de3eced5e49deada6ce84901a8f638cb2
SHA256cff79798395153be22c9b68c194d2853cf32b74e4454db60d3b1a5c8f763a72f
SHA5129729cb344481328801d90ccf51d69a258b87418dbb83f6610dcb1d9861032f9672d41f3057ee12838a04b3853092b8cdc4b1965845997a51f45ca1605c2c335a
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
443B
MD54b340ceb018d840bad4064ac422c8ab3
SHA1c139349de9dba0d19d08a3a6df4c1a2f41f979d9
SHA2568e4922e183548b37bddaffb8811db294fa3b81d398bd6e2b0c8ea41981840db0
SHA51233109f63d81be63e0b81e53b49ec60fba587bf15d566d426b51cb24e2870db4c7bb10e1b23f5b88e6d25e43ae9a67cf65ee62886bd341044f8b6e41a124eb075
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
547B
MD5badea7eb905e811ed81adc09ab90e39d
SHA196d32100dfa604f7234273ba47f5047d99690bad
SHA25629843c06cb8d8ae5d505d590265481c37e3d8ae433497f2a87b62505de4e3f8a
SHA512731b812541478c6239181e075607082392dc2c867e42679730b1f3797c77adb1dd22bc08d8c1826b6664476adb0b91fa14aa52b021a2f42e91e392ecb27d226d
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
605B
MD5a83b3860d6fbb23aca0dc06d2832cb17
SHA18e9a48e1cd43158efc83240dcb44e987dc19a2d9
SHA25626f8c17a7b13382086d31cf49d98b7928c90157ef337d5348b4e730dbe7cd9a1
SHA5121de5b86c959cf7bae4ceeb38a0c1a3e03b49dd28b59d1511b40d92f7e18db975bc55ff5d607c9929c20e003a6aabe36cabeed8c097d76f4ab66c909d7f4629c3
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
606B
MD5d91a66fd3205d9992845cd9cee8f8af9
SHA1c7a5f3b790d630d33480e98752e34070f54bd0c9
SHA256c25264b15fc2b9a72836a7a925b022ce013702ba014c735605afd0445e58e30a
SHA512d831ffad937fda27010836aa33cda104fe74483f36af9086ff5948fa37073c26e94fe736b12c0f42a24b5169441941326351eb70a83a9161acee808850fd48ca
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
718B
MD5b47f130b9445b014ed8606dfce37bf45
SHA1bd20065e49231c85a004c852aec13c37349add0b
SHA256c099d7496b887bf06703e6d9274e57c2ad80be9975b6a01b6e0d7ca0f5cf9ae0
SHA512cc44fc934151e9fb3e2a1b64b11b94d1a1052c5ae85e73dba5f0b651c0494562b20b9707b0220a44a7a83dee27a9ff464fe4aaf9460ba58f4940df363ff3a163
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
395B
MD5b3bd0320c4c1006bf1e29659ff6d52ca
SHA1181fbb1d47063d0b493e9672a69cd256c173a3f1
SHA256c96abec159faeda97e0998005fbfa5e392ebf6f8860902662546d6cc73d617c2
SHA5127df6d11455bb1a8eba7b6995f18d1eaee0739a5743ffa7e03d2f71ad605d9f6d66cc61b9fc06a103a7af35336d0f915da8c9732cd7edc6cb750e590363d33304