Analysis
-
max time kernel
3360425s -
max time network
120s -
platform
android_x86 -
resource
android-x86-arm-20220621-en -
submitted
23-08-2022 01:21
Behavioral task
behavioral1
Sample
لایو.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
لایو.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
لایو.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
لایو.apk
-
Size
3.3MB
-
MD5
13eaadda71609960c966873f36efa735
-
SHA1
8c08e9b78984c56e87864fc451dcf41831348ba2
-
SHA256
0f1d9b29cd29f8a7f2c6e1a9ce68de3480f680177f08a61b1934c965ea65a55c
-
SHA512
b573935beaf86a7c2adab761f87be59fd3e8b4c4067c672761c6292ba78aca5927e39dd739ac6f114567819335814dfa5d8ce9189c6d1e6b38961c5806e52d54
-
SSDEEP
98304:IEVF6aL7fDW3v0AMYfccAkOzVsx6g5fcK+1rKQpPMihj:I46x3vKcAkcV9g5ulhj
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
Processes:
ir.shz.shzkisidescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock ir.shz.shzkisi
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.dbFilesize
20KB
MD589cd606d433241b0e400ec6e41988cef
SHA189b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3
SHA256fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253
SHA512f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journalFilesize
524B
MD567f3373f77e165f8da2e9ff03829a2c3
SHA1ebefbba1b82625294cd151f8b5dc4bef251cd6fe
SHA2567ec657f48dbd52838dc4365119196ff3d92ed0c4d09fc602c49c207fd133e213
SHA512d25d0e575bbcbbb2764c1716c08d3e668960b2938d3c659466172689cd0abdea9771b7bb250057f7e553cddc086250f59cf8bba68ac521e7a137395d7064ed7c
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
36KB
MD55f2a605b73bd5aed1f866d7ae3ab391d
SHA11f2b02f3a62bed3dadda3b97876ac6aed2c64959
SHA2565cb789029f64f71e6089d326bc7a93832a32dc55c2fdf60a8c99f5e6b064642f
SHA5129b232d6e31eab7ffe5ca2d3ba377394218b0ccc020f9fcb481e95734ee4e3937a95fcec068d19ae29136094cc3013e691682466e6b7af940edbe6fe5a084a88c
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
4KB
MD559d541740e0f68b9ae5b08caced39674
SHA18d1900e80c7a5acdfa8c9a2860ce6e810e98c3c0
SHA2568b04fc27c7ef4462dfb8877f7a5502cb40c61c491da1b424c81d44a4dc1cd395
SHA5121c803ea6b35bb41b7f2e76b57800e3ac1d0247eab4658bc97cebf2ac3617c7d659fd8f0712fa38ba2b4347e64f8d90835ca84aeb7214155cfc2d41f34bf364f5
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
4KB
MD5fe2eb8eb2c1da8c4bec82253af61aae4
SHA15e83b3dc3e68e261f79ebc0a32de492196dc7a8c
SHA256c7ff5500907f4d5ca6d680d47db83b3f130c50291d9398a8ea10f00121bd4354
SHA51246cf1cbe1bd77b4c030c7d7a607c438e9e11340f0e46885819cf958d7b429d66475c0c6dbc5f3f1d4d7be36482c2befdd3b2f07b3dac68bd6b03fd00cab11c5a
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
4KB
MD5c69872fcaa8635cd5cfbb13d2cb4f8fa
SHA1206b8b850adc92fe2a975fcf19d3c8b01f2fd10a
SHA25602290587ca9afaabca35b35d76cab379fcd1a21152305375a32a50b0b1126c9f
SHA512b5637baa417559d2eee3b2402e6f5d50924d149568d3134e1edf7306965c7b7a89b8ad2e9828ca4d1c5a7d433459c1080a850773e76e318c9838f2f15c51f507
-
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation1864456970081276764tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation7333258077610739658tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/files/generatefid.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backupMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
239B
MD50aab94b4d302c3af8590fc466587c3e1
SHA11503872ed464b15a38e5be4a01ae3c7bb51c888a
SHA25671d6501164fc3cefb588bc70b5b2c90ee82707e0ae95fcd894caced789b08ab6
SHA512c35ce87f707f86c26e62f1b6d0bf1dbf177027e2cf5ec31a1bd90a0aa866da698aeeef0479a55f17fbcda3bfc826d7b1dc266c59f96d3e28da65c94bc2c65c66
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
134B
MD503248e1a5d09e225f13f82d827d769a8
SHA19a42585d4451335dc38f01b6b5eb89fedcc948cf
SHA25665c2454993e08e72fa5213b5df5fdf7c70b50601644510d5c2f4a1972449ba5a
SHA512f345c630273706e035225821670c2d9e529be9046d009aa019a16e183f50cc6f8b70b5574cff96007f50d7496d729cfa395543e021ba43b2d0b1cf4c71b8570d
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
188B
MD519dec884f633da0acb5770f19a24c291
SHA1f363fff04937ae20d01ac261f52c3a985f7728db
SHA2562362f7d7989cf8a56a5b70d5caccdd0392c023b2e250943deef918c5d8634cc2
SHA5126d425fa67aab01e39bf322e5903d5d36f7d54e8efe05b5fe2bd90a4e21c9db882843fd5e6ee285899dc82a2b757a3656353adf795192e43edde4f40307598a7f
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xmlFilesize
192B
MD5051a44984cdd7899001bc4ea3645e2d1
SHA1634fe134b08cbc3870144768d5a3cf2236e6bdce
SHA25621b46595ea308567e9d97aabfe1dac49417fdf440add4412da11ab2a6c579512
SHA5126644843b0e2ba2deabc1f19fe4e3bcccb87ec749bf01c5c0d2004390fb6537891a43719b0849e97f6bf3670a114c01cd85a0e48a2d0929efe8ffbb7bf9c2feb7
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
605B
MD5f365a9858928d3e3f594d8d7792e5bab
SHA176621a08c80ae74952ab31d778ebc7b120c6bd19
SHA256a809f2ba2d6dddaca38481a27c9c793fab2c14a77f320450df4cd81526e8fa76
SHA5128a912f485416f2984f465aeadfcd2e0ae73a67b7fa5f9aafc295656f3dad2dd89f3f6af5d34323249a03ddabe000c554f983ff1796cbfc80737fa2dac829f6ca
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
606B
MD5e34ec1b87a40a3752bbe3e2d643c37a1
SHA1b7e438867c9533280157dcf72a774589b2b32cf7
SHA256ebb218e69a3cde0b023edea1c67e88a89232e0041fb957c331ff8a9fa72e2f6a
SHA51230b9a6d84d43d79dad4dd08e71af63c814fa683ad758dcdd420ee3b4d22e6e74f53d1cab22148e97796fbcd1c0c83626861e7c030d8caf0220a4bb454d7379d5
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
718B
MD55687d3324e9547de1e575aeee651f1fc
SHA1b72733d14a212f8df433d661db64e119b6cff69e
SHA25681c2d21f935bcbb097fbf6a6bfa25904ace55a3ae65ea303e6a49d7d956cfa49
SHA5123c81679a90a4ccd30b09d14f4b371c4ba56f4e29ba5d42a715e26e46b2f21ac960f55833972bb2b22630334ce297189c8017ca8ab22ad521343e7ec6b26d1d6b
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
395B
MD5110ea28d9a76a1d621a31980190e6ba6
SHA13e9b172d6c04324a59418e2f32d27e18b565d935
SHA256f5e92bd7963fa7ee3892f8f4b5b7d7f85fb2caaa33195b2ca03caefd02b5822f
SHA51268711fcfc44a569f442cc18a1467bcea89756051b22bf74730fedba4270666aa68bff953a4b1c5dc61035f7457f9f5496dcc1a54a64f051c4ad499d584cfa91a