Analysis
-
max time kernel
2896717s -
max time network
162s -
platform
android_x64 -
resource
android-x64-arm64-20220621-en -
submitted
17-08-2022 16:32
Behavioral task
behavioral1
Sample
gen_signed.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
gen_signed.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
gen_signed.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
gen_signed.apk
-
Size
3.3MB
-
MD5
0e72685fa0551ee73752f50a30744d95
-
SHA1
5b2aee37943fef8768b272149dd5646385df2d72
-
SHA256
1430dc0cc26adfb7b7715624602767af26f453e3f34df66f1a6d41c38a35819c
-
SHA512
697674ca8fada2c8db75c635a2c81c35866deaa6a481fb78d473265849990475e77a54397620343412dd2ad5597dbf25618b67f9c88586745c36c5f6e6eb3430
-
SSDEEP
98304:ZEVF6aL7fDW3v0AMYfccA+a/73Sl2vAhipDZA:Z46x3vKcAP7JvAhUD+
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
Processes:
ir.shz.shzkisidescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock ir.shz.shzkisi
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.dbFilesize
88KB
MD58dfcfdcef5a9793fb83bda404ec3f42b
SHA1dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b
SHA256a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2
SHA512e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journalFilesize
1KB
MD558974fa4de885561c35dcefe0f349a8a
SHA1a3958a7b3198a39eed8d8cd3a9f045496242a9c2
SHA25634e0cef2e8ad905d261b5064bfaff29a754f9bc6061ed6fb8ef3b852047efd54
SHA512079142169bd5f13f2e882cb1388d5f7f1fb0af27e2cc377a5f6496d60aa254e66d0001f63e9c236210fd31fcc5fa0c3dc3c9f14919c8365022b28be6baa5db4b
-
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation3208643008408890126tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation3510737775562140280tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/files/generatefid.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backupMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
134B
MD5cf198d8fa16d3ec4be0f4add4c03c7d6
SHA1870f696aa44f914494668c7f6f026b4c31952605
SHA256cdee69a446c22f72e09ceb70f39daa149e2f92d67f3c5c6d6e2c407d543ec52a
SHA512c33bdbec29f68b819ecd887e68b3d250c9f7377c78477768b39ef8fd4ca4d6545b2e37b50bcc019df9accfa7991f0b019f1feb6fdeda010cb637262eda702176
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
188B
MD551b3e5d5bc7893794dd45b332d0bc780
SHA1ec79a68f7e6367c0890177fb60552b66ee11fb94
SHA2564ce9a478345ea640442d4374ddb293bb3abd64b430156ef0cd7e5fec650b9bcd
SHA5125c00d8a6c77b52c67262bbe40255bb9486c904c4f38317b620225ed52c14306bf4a2486719000883b7364e9a16e94707cd8073ade3f7c0952b7fe9cb3020dc99
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
239B
MD551ebe5192a22be3cecb649b2925ffd8e
SHA15d83402d6ed4069ec0006a2cdabaafeb5f6c478d
SHA2567000028988c1d690ff588e39a7d87ec9b5dfcd3a871b85043ddeadba823f845d
SHA512081e20f2fc8753f78fcab8a1c814b991b38c79404d46da62bc485d55c2cbdc9dd2e513ad5b4878dca8010757404b12917ee69d790d7561e4a58e395cab600dee
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xmlFilesize
192B
MD5cb7d75cc3d55a86c4e19f6a75802de6a
SHA17ef04d2929ff8bdfe68fd91ed2a207a35af8910a
SHA2563c6f4d0d992145c1134191e057335fc06d9a57d1606d6e8a558355656008d4ce
SHA5120dc8dbacca6dc04646c8d576a6557af4b9327e4e605c78174671ff5327306e7085b510b9c73e856acf5ba7093a082bf89ef39699f5307b22567c4b293f38984e
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
395B
MD58e1b2c914bb985857d2aa695f1211210
SHA102cede841e9ac63d9c3f5e3f7d4042e2354a0a17
SHA2562740ca9e8b7563e7807be98e7b2bb60801b386d4a67982ef20bf8123321c2e24
SHA512bee5ac1d57a522ea17e98357c7386582b8048747afbba38cc88f412c01e7e0d5f76c7613d091c842a72af395d22a27b2156f6bbacc7133377a5e0045a803b14e
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
606B
MD57babb87e1c3879f210a1e1c92861feef
SHA1c703ce09e44543854e341250fa472484a7413243
SHA256a433e298b09c0c48dd516c989b74a32f129750250b185e64323b25a289e4eb7e
SHA512156c9e6d82b1dd7b3409fb17c944796afbc91a69201bce3f9a7a1adceb7605ca11de4040b06f461ef6ce5959ab1ed5986c2bf6960e034cbb7d8b05b15f5c3b6c
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
607B
MD51bf9343399d9514430224cf53a6d733b
SHA17a55998791ee27e179c55beb94ea974c3f1ba2a0
SHA2563ba26cf49d97a0c663f78288152b0af42335321ba5b666caa9c47bd7c0919dce
SHA5125080b9c63988944bfcf697d18cc7c5276104e7d6513e8850962bcf6750a5759aa5e6224a1281e510b58c6d3e4f884c2d5b687a13fcc6f1281db01311bcf4062c
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
719B
MD5ce09f35299d3d08321ddaf5aa9cabb85
SHA16d44c551c8c746b21cad6f3c5516f5e80031cb67
SHA2569ba9a64d5cd0a822f6651b03af37bcb4b4f6b79d201432f166bc2a5aa7494cd0
SHA512e63428ab469a1cde6b65d27da909817444d19777d4352798eedd8ef485a42d6a79f315e035a150544f1f67dea68abea507ee03cd0884918925a119ad6148f0fa
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
265B
MD57b00b87549415b1cbfc5c5d69bf4b790
SHA18f4df8cf4611e9908e344a0b3c52c0d98e69a19f
SHA2566eb034844894afd9a73c06fbc58df577fe3fe4fe72b87a71eed22a190b2c6b00
SHA51291f5341e1f412668186ec9d456d2333aa783bd3178092ad3aad5b2b2e9a010f10c0d820e48c4749408f0a82f47b056352c4f89a65830d486c519e5dc1e1dbdc9