Analysis
-
max time kernel
2645164s -
max time network
67s -
platform
android_x86 -
resource
android-x86-arm-20220621-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220621-enlocale:en-usos:android-9-x86system -
submitted
14-08-2022 18:40
Behavioral task
behavioral1
Sample
gen_signed.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
gen_signed.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
gen_signed.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
gen_signed.apk
-
Size
3.3MB
-
MD5
393bfacf5aa8809348fe403cdf1dfada
-
SHA1
ea9ceef4bbb07ce390af11cbcfda14e2f999ee65
-
SHA256
553f2a06d025f54961e4f6f8697d38b63b896a67eadda3743d3d00b2cd4edb10
-
SHA512
55ab8eb80d1ca31bec19debc9565a348e1ca269b1ad5dd7bc000435b41dd83c6c8f535ce30ead65127a9f13dad740cbd7357415e600bb62067a209965868d9c4
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
Processes:
ir.shz.shzkisidescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock ir.shz.shzkisi
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.dbFilesize
20KB
MD589cd606d433241b0e400ec6e41988cef
SHA189b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3
SHA256fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253
SHA512f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journalFilesize
524B
MD53974b52037f4532e0a60a84b7ebee559
SHA111d1f6573cde252e1059891a6dfb063485c7bcbe
SHA256adab660e1be96425c93a8e0ed37156d6aef41187f64768a74137b6e04ed96793
SHA512c68c010be0fc5c2fdf8625aa17089f8700b8a2bb2cd7f2ce475b35af018ee88056740609533095738408a4daac26ff0b485ba3c814ff583456db9459d363d34c
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
36KB
MD59dd1148d69d4af7e018eb081978fc8b7
SHA12e3da10a27257f918e20bd1ff1434e9de2c1f5fe
SHA256e8abc3dae27a8852beff38c63e5aa794327bf32d6e71dfa2778edffd2296bc9d
SHA512edff96259a689b30e52b149b2790e8ba72c423adf7a43ebc1fad73389cbc00543ac11027ef74d0421d1b9ddca00ff7efdec4b5be7983b27ee8deff7730376c01
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
4KB
MD5b1276899cb0f0709b51eae0452977f6c
SHA1fb8703ecc4c7c60c995ebd2380509d8f5778339f
SHA25626fb671f27b98c2bb072182a3ff76f0fc98310e5396f64b66bafe4a4d6793af9
SHA5129ee75d4d2fbc1059cac7e28f09f930ab449ec636eb213548cfb3097da7f6893a0678789a3cc9fa00e0d034c390c88f1ea0a37e56743c605af86c861cec725583
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
4KB
MD5991cb89c35a4feb4a980b3cb1ea272b0
SHA1be69b14daa01043c253e0e4c244fdaa742b92bc2
SHA256d79436da39c9a458acfea59af2d4afe7b44ef0cd7e4c36457c90b18c99aaf2cc
SHA512407dec1252a91b3fc2b14381282f8b3f2c0f569efd9c112ee801e1072af8616e77d482bfaf5ebd5d6b57d91de48a9acb3fc6a7f5d27f70356eb469dd0ba05aa5
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
4KB
MD51c08afca25ebf46471f7cc3168df3a06
SHA1872e41ab54043faea91a0cddb7e08f55c8976e39
SHA256e6f19f59dfc802f2f1a307f76cfda05a4d843994b5ed34ea5f0c1904136f2898
SHA512a6effdf86a747ef27caef0995ab4987370836623fc07c000d612db98a06e0feababa54d733b2e213d2731f4af629cb265bdd4726d329279667d73fec6e6ff98f
-
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation3001726661907447963tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation5763074259286238035tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/files/generatefid.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backupMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
239B
MD5b27c47c73c9d47d1e07b6e8a28fd617c
SHA1a7152e98da36e4a3e6066a3bdeac3071b516b7ca
SHA256960be0fcdf89d96a97147bd80ec03701010a88493af93f92bcc130d977979a43
SHA51210625410756086d547571ce980e736b987b8897fb962f66b15f9d80d8139157ac99f5f8cd92fed6e45d3be294a7a38dc51f47541d5cec50868f05e1d14c5b94a
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
134B
MD58dbed5dc5d89fae387c4dae874cb1b46
SHA1d4eb055c88fd6755188007b45d817b073f53b26a
SHA256beaddc6be8b5c599590a3c16c17a50be135baa6f93380f6a01fcd504dd691549
SHA5128cf36eca1100475c6d85a1c0cb1c1e644aefbe497502e93b5d5cad1f3f1179b66bb08a73e848bc699ead73b56370acf2e29926944e3a2994223852c48f09bb9e
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
188B
MD5251193072d10e4c9c2b7d30accba7d80
SHA1ca40ff0329fc585fe38a95fa0d2b444da81e055f
SHA25645b72b7e3b3725c2432a3494d1cffa5383688113898e192d81fae2df9be7e884
SHA512e62e2a637b0b76742ecf4a33164dcad083d9067fbe9cc0086479c1bf7b2d6bfb6cc822b148388f944516ff7ae272963272527a61fb3cfac6e6a2fb43292da8c2
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xmlFilesize
192B
MD56c88ffb7fff401757605658adce07b98
SHA1d677736af33a2ac649b179abb87128b6f3875718
SHA256561024cc889a1eb02d39aeed9ef5620931ab98c22fc123cdb5981f66d3a445d6
SHA512fb78eb14c565b11267060d424c97880f3fe9f719cf51621e3befe926dee4e6d66d8e12aecd30a62b7a949782ccde443bf1e2c822d23f8d8fa27d671c138c1da2
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
395B
MD57a9e84ef1f52b03b68c12735adf17472
SHA11137df710bc8a25150c5da6f4a25c22002269672
SHA2562ddaefdf6e79391d977b9d55dd02ad7cceef093c1e16ee8693874771a936717f
SHA5126cf75846399c7228cb5514ce26ead547ad4d3d490aa7b32d8da35dbd5a5ea94c353d1c3b92a2b4c20b4adf50d93000947a943eb9842650f5a8e76174ae04f7b9
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
605B
MD5262e158ff23a7bf0699096fb7abc8311
SHA11f6cd15b9f5014bce7877e5a476df01d654d0fc6
SHA256718faeb1756257f616a53a8cdaeaac157a67caf11a540b1bb3902628cd057e52
SHA5123ff586eee95a52e685b9b9a4ae1fac00d2c3c865cf6fee302b5499aded15bcdc9dbb0f657577279f0cbe1858afc72ba176a0d4d290cbcb368da32558a2341d9d
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
606B
MD5558c23ef99211039e65b216977695962
SHA12eccb16c213c9bc057c57a481ba31cb91c3dc509
SHA256eacf89d249559c62582055eb157a667c00447b686010819198a50cff4e090ba1
SHA512861041f1dda6e5e2f9d6671dd6ff749b6c3263dd7588ddd3a5c7c29fa86342fa6d2afe45c74db9a1e5a4dfff179b0a5baa95c75ad9c29e61e6f1786965c44702
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
718B
MD5006ffcef2aea82292698856f8176d5fb
SHA1a980b5d7211edbf71ccf2afcaae827970d66aff0
SHA2563c6abbb86218fddd8899d8dbf4909b3ad51d8599fb6d9554c9ae6eafc023a3a3
SHA5125fe5a4f63fbe2a088c7c8ed83276f05a89227dbf7b932d55eb9264c7e0e95c118c92a80f40228e1e953a640a22a3a56dce4c77d74464c28da792748aa8acd952
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
265B
MD59b181fcd46ca9167d06cc0e8a5083dec
SHA154a4263897a3fbdb8bccacf3a6b31b820ebd683b
SHA25678564294ab589b58bfb2f2761fa042ff4aa208519b7eb063fadeb78e6a4541e8
SHA512294e1966246e88866f1e52e5ca51d28ec5269568a7f323b1d6fe30ddb10c10d7207176a4ce6c2a4229c043e96a2e166ebeade620a207186391db402a0e8b9648