Analysis

  • max time kernel
    3360425s
  • max time network
    120s
  • platform
    android_x86
  • resource
    android-x86-arm-20220621-en
  • submitted
    23-08-2022 01:21

General

  • Target

    لایو.apk

  • Size

    3.3MB

  • MD5

    13eaadda71609960c966873f36efa735

  • SHA1

    8c08e9b78984c56e87864fc451dcf41831348ba2

  • SHA256

    0f1d9b29cd29f8a7f2c6e1a9ce68de3480f680177f08a61b1934c965ea65a55c

  • SHA512

    b573935beaf86a7c2adab761f87be59fd3e8b4c4067c672761c6292ba78aca5927e39dd739ac6f114567819335814dfa5d8ce9189c6d1e6b38961c5806e52d54

  • SSDEEP

    98304:IEVF6aL7fDW3v0AMYfccAkOzVsx6g5fcK+1rKQpPMihj:I46x3vKcAkcV9g5ulhj

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4714

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
    Filesize

    20KB

    MD5

    89cd606d433241b0e400ec6e41988cef

    SHA1

    89b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3

    SHA256

    fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253

    SHA512

    f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
    Filesize

    524B

    MD5

    67f3373f77e165f8da2e9ff03829a2c3

    SHA1

    ebefbba1b82625294cd151f8b5dc4bef251cd6fe

    SHA256

    7ec657f48dbd52838dc4365119196ff3d92ed0c4d09fc602c49c207fd133e213

    SHA512

    d25d0e575bbcbbb2764c1716c08d3e668960b2938d3c659466172689cd0abdea9771b7bb250057f7e553cddc086250f59cf8bba68ac521e7a137395d7064ed7c

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    36KB

    MD5

    5f2a605b73bd5aed1f866d7ae3ab391d

    SHA1

    1f2b02f3a62bed3dadda3b97876ac6aed2c64959

    SHA256

    5cb789029f64f71e6089d326bc7a93832a32dc55c2fdf60a8c99f5e6b064642f

    SHA512

    9b232d6e31eab7ffe5ca2d3ba377394218b0ccc020f9fcb481e95734ee4e3937a95fcec068d19ae29136094cc3013e691682466e6b7af940edbe6fe5a084a88c

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    59d541740e0f68b9ae5b08caced39674

    SHA1

    8d1900e80c7a5acdfa8c9a2860ce6e810e98c3c0

    SHA256

    8b04fc27c7ef4462dfb8877f7a5502cb40c61c491da1b424c81d44a4dc1cd395

    SHA512

    1c803ea6b35bb41b7f2e76b57800e3ac1d0247eab4658bc97cebf2ac3617c7d659fd8f0712fa38ba2b4347e64f8d90835ca84aeb7214155cfc2d41f34bf364f5

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    fe2eb8eb2c1da8c4bec82253af61aae4

    SHA1

    5e83b3dc3e68e261f79ebc0a32de492196dc7a8c

    SHA256

    c7ff5500907f4d5ca6d680d47db83b3f130c50291d9398a8ea10f00121bd4354

    SHA512

    46cf1cbe1bd77b4c030c7d7a607c438e9e11340f0e46885819cf958d7b429d66475c0c6dbc5f3f1d4d7be36482c2befdd3b2f07b3dac68bd6b03fd00cab11c5a

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    c69872fcaa8635cd5cfbb13d2cb4f8fa

    SHA1

    206b8b850adc92fe2a975fcf19d3c8b01f2fd10a

    SHA256

    02290587ca9afaabca35b35d76cab379fcd1a21152305375a32a50b0b1126c9f

    SHA512

    b5637baa417559d2eee3b2402e6f5d50924d149568d3134e1edf7306965c7b7a89b8ad2e9828ca4d1c5a7d433459c1080a850773e76e318c9838f2f15c51f507

  • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation1864456970081276764tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation7333258077610739658tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/files/generatefid.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    239B

    MD5

    0aab94b4d302c3af8590fc466587c3e1

    SHA1

    1503872ed464b15a38e5be4a01ae3c7bb51c888a

    SHA256

    71d6501164fc3cefb588bc70b5b2c90ee82707e0ae95fcd894caced789b08ab6

    SHA512

    c35ce87f707f86c26e62f1b6d0bf1dbf177027e2cf5ec31a1bd90a0aa866da698aeeef0479a55f17fbcda3bfc826d7b1dc266c59f96d3e28da65c94bc2c65c66

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    134B

    MD5

    03248e1a5d09e225f13f82d827d769a8

    SHA1

    9a42585d4451335dc38f01b6b5eb89fedcc948cf

    SHA256

    65c2454993e08e72fa5213b5df5fdf7c70b50601644510d5c2f4a1972449ba5a

    SHA512

    f345c630273706e035225821670c2d9e529be9046d009aa019a16e183f50cc6f8b70b5574cff96007f50d7496d729cfa395543e021ba43b2d0b1cf4c71b8570d

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    188B

    MD5

    19dec884f633da0acb5770f19a24c291

    SHA1

    f363fff04937ae20d01ac261f52c3a985f7728db

    SHA256

    2362f7d7989cf8a56a5b70d5caccdd0392c023b2e250943deef918c5d8634cc2

    SHA512

    6d425fa67aab01e39bf322e5903d5d36f7d54e8efe05b5fe2bd90a4e21c9db882843fd5e6ee285899dc82a2b757a3656353adf795192e43edde4f40307598a7f

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
    Filesize

    192B

    MD5

    051a44984cdd7899001bc4ea3645e2d1

    SHA1

    634fe134b08cbc3870144768d5a3cf2236e6bdce

    SHA256

    21b46595ea308567e9d97aabfe1dac49417fdf440add4412da11ab2a6c579512

    SHA512

    6644843b0e2ba2deabc1f19fe4e3bcccb87ec749bf01c5c0d2004390fb6537891a43719b0849e97f6bf3670a114c01cd85a0e48a2d0929efe8ffbb7bf9c2feb7

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    605B

    MD5

    f365a9858928d3e3f594d8d7792e5bab

    SHA1

    76621a08c80ae74952ab31d778ebc7b120c6bd19

    SHA256

    a809f2ba2d6dddaca38481a27c9c793fab2c14a77f320450df4cd81526e8fa76

    SHA512

    8a912f485416f2984f465aeadfcd2e0ae73a67b7fa5f9aafc295656f3dad2dd89f3f6af5d34323249a03ddabe000c554f983ff1796cbfc80737fa2dac829f6ca

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    606B

    MD5

    e34ec1b87a40a3752bbe3e2d643c37a1

    SHA1

    b7e438867c9533280157dcf72a774589b2b32cf7

    SHA256

    ebb218e69a3cde0b023edea1c67e88a89232e0041fb957c331ff8a9fa72e2f6a

    SHA512

    30b9a6d84d43d79dad4dd08e71af63c814fa683ad758dcdd420ee3b4d22e6e74f53d1cab22148e97796fbcd1c0c83626861e7c030d8caf0220a4bb454d7379d5

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    718B

    MD5

    5687d3324e9547de1e575aeee651f1fc

    SHA1

    b72733d14a212f8df433d661db64e119b6cff69e

    SHA256

    81c2d21f935bcbb097fbf6a6bfa25904ace55a3ae65ea303e6a49d7d956cfa49

    SHA512

    3c81679a90a4ccd30b09d14f4b371c4ba56f4e29ba5d42a715e26e46b2f21ac960f55833972bb2b22630334ce297189c8017ca8ab22ad521343e7ec6b26d1d6b

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    395B

    MD5

    110ea28d9a76a1d621a31980190e6ba6

    SHA1

    3e9b172d6c04324a59418e2f32d27e18b565d935

    SHA256

    f5e92bd7963fa7ee3892f8f4b5b7d7f85fb2caaa33195b2ca03caefd02b5822f

    SHA512

    68711fcfc44a569f442cc18a1467bcea89756051b22bf74730fedba4270666aa68bff953a4b1c5dc61035f7457f9f5496dcc1a54a64f051c4ad499d584cfa91a