Analysis

  • max time kernel
    2613966s
  • max time network
    128s
  • platform
    android_x86
  • resource
    android-x86-arm-20220621-en
  • submitted
    14-08-2022 10:00

General

  • Target

    gen_signed.apk

  • Size

    3.3MB

  • MD5

    2603c03fd88573b339f37f5393f07bf6

  • SHA1

    6126939b9ed0a9d6c59ffc6765ced79dcb5b86c7

  • SHA256

    9d105edc4e3a53b342968fe805769342b15c3068100bcbdf22bc2e8b77f906d1

  • SHA512

    7da0615de2cf1495074fa405dbea6e5cb50aef5647f35b01fcff68ec3f6252735532d8a01c5288ccf83b9a6a99a405527e1dae794b53e784de83810c4ddb8032

  • SSDEEP

    98304:SEVF6aL7fDW3v0AMYfccA5AKknE3+586kWzExpzwZvMciT:S46x3vKcA7NgwwWT

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
    Filesize

    20KB

    MD5

    89cd606d433241b0e400ec6e41988cef

    SHA1

    89b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3

    SHA256

    fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253

    SHA512

    f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
    Filesize

    524B

    MD5

    69be24446f7788ae5d9163f131dca7f5

    SHA1

    b5bbd031073f9472e76b23d3ea04c23c8b20500e

    SHA256

    32f37541a2d8a774ecbb12d83181c9e0229f2bb426e1bf9fa2e5be1ad6a7156b

    SHA512

    20575e7e2deecc7012f5d25a0200fc4763078eb95e7a57702aa5faa80a35e559aa661e4524e24b21be0e837962db6b34fe8c701dabfadeb11ec7c991a50348c6

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    36KB

    MD5

    23d760973e67150b1a86f39e5f8a6f7e

    SHA1

    6331a349cc292cb179663bedd5c0f329cbe758f7

    SHA256

    9570c9b3330ccddecaa7fa8ffeab89bb7202173af42f604d42b9c82792bae377

    SHA512

    bec23e0f58f74373dbd6353ec5dfa3751f4be4f20027076d2e1808c61dbeaca18252d2d7f37ee353f1d664838826730b36f1a124aea836f168bb89080f5e5030

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    86964c83676ff00f81effda9b712ab51

    SHA1

    de3ab00292dfb132037268d12ba0788313cecc3d

    SHA256

    2abe7aa798337994629971dfaac5c8832705d32fa3e2b1f6a4dcd73e2b781849

    SHA512

    f7f8db463c1db00f789c5751954d4a2eeabf8d620097a1fb3e6163638a7806d1352be5c5faf0eaf6101544e4c478eb6ba5135705bec3a59adeedfbb1a3d6fa8d

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    892c93c8a1b5001e98f1bff1d3881996

    SHA1

    0358fa984bb412d13c50d514aef9ea9ed6f94172

    SHA256

    5d478223ba65e4cfc7a6bccf26148cf1fc5946524334c0166d278a733e220ed9

    SHA512

    d95e8472ab7706276e3c40c915ff885c0b0fd30d0ad6b0fc1dad76eb931330d78c8fefbe109c80479e2843485b985841ed8133df5621ef3184a8e96252fdf377

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    8bfa86a0038433289140b79ce8494677

    SHA1

    133e8b15910ef48037d42c0be598ebcf35a169e6

    SHA256

    12f2626cb0163e20b5588d40813f6ae1eb209cdfb30d6d1364259998c6575651

    SHA512

    9c39470739e6c9d994b4d7ba6aeb78f7c66632a5d78da36dce4d363750053bef80174a1f5207be5d4f194c47ed996f80e46c11c2c540b0766d8d6ec3f884eac8

  • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation520902590516803700tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation5554390848673682514tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/files/generatefid.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    239B

    MD5

    02cbdc4c8a57d9d05ef97f90a6a1fc28

    SHA1

    9adc6b092d6bbd8f90e2bab6ad43cb2d61c73faa

    SHA256

    df9633f166080372019c45a0792a3d41060300f96d18600754eae8753df4e30c

    SHA512

    b449428a8d6e8cfa16e9f524104009647dc2bff8593ea56b03178c83845b32739861beaaaef349dea932cb6f6c3b1225f531c25102fb305a9ac58dc562354ffd

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    134B

    MD5

    01c598da9aceee3a397947e6399dda1e

    SHA1

    7553d426a442a717e197ba56d9c12bc37135b272

    SHA256

    55b6a6a6e89993cca413ebb42e418e6fec8bcec20fa55ff143866653f61a877a

    SHA512

    6c32e5728c0bf479c0028d16965f4f14d6edb1cc19559056cd386dbdb072dc1204fc380b5ae80f046ca3dfe2783217a9657eba8877f731ee4a2a8b8ddfdc93ce

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    188B

    MD5

    e82abe2fd50ced6c7f2902054b6463ff

    SHA1

    090fea6f7a34951f693bbbc956de020973319ed8

    SHA256

    ae26f98ed635f061a11617335d11bbe2358b4cc89221822bb73859a90f56f8cf

    SHA512

    bc36999e6d9806b94d5910bba4ef5993ddfcaa97b87ff3cf64410cf1ee15a84c11c9c39ad2b51001256b0d8fa3de67f007550c391fb22176c26992b1a4207f39

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
    Filesize

    192B

    MD5

    bc095036f7069873ef0c051ce3a6d0ca

    SHA1

    ae98bb9de3eced5e49deada6ce84901a8f638cb2

    SHA256

    cff79798395153be22c9b68c194d2853cf32b74e4454db60d3b1a5c8f763a72f

    SHA512

    9729cb344481328801d90ccf51d69a258b87418dbb83f6610dcb1d9861032f9672d41f3057ee12838a04b3853092b8cdc4b1965845997a51f45ca1605c2c335a

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    443B

    MD5

    4b340ceb018d840bad4064ac422c8ab3

    SHA1

    c139349de9dba0d19d08a3a6df4c1a2f41f979d9

    SHA256

    8e4922e183548b37bddaffb8811db294fa3b81d398bd6e2b0c8ea41981840db0

    SHA512

    33109f63d81be63e0b81e53b49ec60fba587bf15d566d426b51cb24e2870db4c7bb10e1b23f5b88e6d25e43ae9a67cf65ee62886bd341044f8b6e41a124eb075

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    547B

    MD5

    badea7eb905e811ed81adc09ab90e39d

    SHA1

    96d32100dfa604f7234273ba47f5047d99690bad

    SHA256

    29843c06cb8d8ae5d505d590265481c37e3d8ae433497f2a87b62505de4e3f8a

    SHA512

    731b812541478c6239181e075607082392dc2c867e42679730b1f3797c77adb1dd22bc08d8c1826b6664476adb0b91fa14aa52b021a2f42e91e392ecb27d226d

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    605B

    MD5

    a83b3860d6fbb23aca0dc06d2832cb17

    SHA1

    8e9a48e1cd43158efc83240dcb44e987dc19a2d9

    SHA256

    26f8c17a7b13382086d31cf49d98b7928c90157ef337d5348b4e730dbe7cd9a1

    SHA512

    1de5b86c959cf7bae4ceeb38a0c1a3e03b49dd28b59d1511b40d92f7e18db975bc55ff5d607c9929c20e003a6aabe36cabeed8c097d76f4ab66c909d7f4629c3

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    606B

    MD5

    d91a66fd3205d9992845cd9cee8f8af9

    SHA1

    c7a5f3b790d630d33480e98752e34070f54bd0c9

    SHA256

    c25264b15fc2b9a72836a7a925b022ce013702ba014c735605afd0445e58e30a

    SHA512

    d831ffad937fda27010836aa33cda104fe74483f36af9086ff5948fa37073c26e94fe736b12c0f42a24b5169441941326351eb70a83a9161acee808850fd48ca

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    718B

    MD5

    b47f130b9445b014ed8606dfce37bf45

    SHA1

    bd20065e49231c85a004c852aec13c37349add0b

    SHA256

    c099d7496b887bf06703e6d9274e57c2ad80be9975b6a01b6e0d7ca0f5cf9ae0

    SHA512

    cc44fc934151e9fb3e2a1b64b11b94d1a1052c5ae85e73dba5f0b651c0494562b20b9707b0220a44a7a83dee27a9ff464fe4aaf9460ba58f4940df363ff3a163

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    395B

    MD5

    b3bd0320c4c1006bf1e29659ff6d52ca

    SHA1

    181fbb1d47063d0b493e9672a69cd256c173a3f1

    SHA256

    c96abec159faeda97e0998005fbfa5e392ebf6f8860902662546d6cc73d617c2

    SHA512

    7df6d11455bb1a8eba7b6995f18d1eaee0739a5743ffa7e03d2f71ad605d9f6d66cc61b9fc06a103a7af35336d0f915da8c9732cd7edc6cb750e590363d33304