Analysis

  • max time kernel
    3360428s
  • max time network
    141s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220621-en
  • submitted
    23-08-2022 01:21

General

  • Target

    لایو.apk

  • Size

    3.3MB

  • MD5

    13eaadda71609960c966873f36efa735

  • SHA1

    8c08e9b78984c56e87864fc451dcf41831348ba2

  • SHA256

    0f1d9b29cd29f8a7f2c6e1a9ce68de3480f680177f08a61b1934c965ea65a55c

  • SHA512

    b573935beaf86a7c2adab761f87be59fd3e8b4c4067c672761c6292ba78aca5927e39dd739ac6f114567819335814dfa5d8ce9189c6d1e6b38961c5806e52d54

  • SSDEEP

    98304:IEVF6aL7fDW3v0AMYfccAkOzVsx6g5fcK+1rKQpPMihj:I46x3vKcAkcV9g5ulhj

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
    Filesize

    88KB

    MD5

    8dfcfdcef5a9793fb83bda404ec3f42b

    SHA1

    dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

    SHA256

    a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

    SHA512

    e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
    Filesize

    1KB

    MD5

    7922d69da31952b0cae38375a12f1448

    SHA1

    998ef356a38af31ea4e9a38447d282cbc393233a

    SHA256

    1a2ef5e800c9fddac39244a44d6905401615cf1f24171d566196364699f46527

    SHA512

    5bae7f1b77961025f56974ae7de3d6f30282f208f5a80119e60b30277dbb4db5e935a25353b18dade02ab95320f71955c7bf4885f63dac95bb88fe4573594c72

  • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation4815321446176553077tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation6571462979711907543tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/files/generatefid.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    134B

    MD5

    7fd2a11b93bf47a6d5c758600108640d

    SHA1

    50a21b029e378a599db3b548ebb35be12bf781c2

    SHA256

    8d4468ad4a4d6d11542b0a8af978a68dd5c1ff2a34d273ddfe0596b3525bcc66

    SHA512

    ef606d262714354fcc0bcc478c196798e9da5942daf6d2e13526c62185f1d5da169b71f1b0ea0cbadeb421b633ff4f715c2c8ddd7bb4e7011f3891b0e5caee61

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    188B

    MD5

    096316182f23638963ac1c636b6ed36d

    SHA1

    de896d17f8934466fa8710ee29e2425a88a1e571

    SHA256

    8c96e2861c290f12445f42e737a0d76124009551ecc2e2ed2f945097c18b51cd

    SHA512

    8d6a8c66032c34c050e5e77b579d579514aca4a6e40cf05cdb8a7858d0d9eec52337fe23e2dc4aa3ae763107c0ec65fce9ef22e6a2e9c419cec26b527245b98c

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    239B

    MD5

    e1c4f8e85288e8272d77d8447df15fb6

    SHA1

    1c0d375ec1ad674077093af10f0419d22947d452

    SHA256

    0ba9b462409ecaa4e4813f734605e96eaacf3c4492154fd0efca680e8cea1d2b

    SHA512

    0863ed864888b9b7d4bd36832917c39eb90081958827103e3054444e1940c5cd0920d65f2987365aff1279dedccca4d6e15dc5f68542b66feeb3fb6d0e32a11b

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
    Filesize

    192B

    MD5

    4b930114d7f6d02f96e2ac9e6d06b4e9

    SHA1

    d79d76fa0bc97396d1a3070ed2b8c6a53a1a1aef

    SHA256

    2bbe1aa10f489fba3cced5d10adec0396e10d5e264764d3162889e05b867689c

    SHA512

    6e511a89b2b6722aa32c34691242bafe136a2c394fdf4b7e9a7df6a2d7d5e14c60bfe255eea818c375df6c8dcf5ce353ce1d13bd5b3c7fc8f9840c38e3a40219

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    265B

    MD5

    dd5917fcd9f7c45fce4cd8cb57035889

    SHA1

    90c386a3156c2c2daf4ff189b02a7c8adb4a714d

    SHA256

    59f1778fc0bcf8833a763afd47257f21ac158051626a243bac7e8d2b8242825b

    SHA512

    a9a09104742bae2b719b935da0ed5f14f802e37c3a41abe48608a5bd4aa6ce3d8ba8cd13e979c2e4dde9a224d9b8ee8a4c963bf7bb0b235a249a35bb525c1cb0

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    395B

    MD5

    119f20bb8dccbd60f524c4e54c767c07

    SHA1

    71dd9eba5025c044f8b4e979e9023718a0998d7b

    SHA256

    887f83e606f62efac4ff599781e64b6644f2a47853fca8c2d342557a587b283d

    SHA512

    3d7c3d5ce0302d9f3392aa640ae156e71d95af41c30c501a9b6bcf3a5beb81100df44dc57bc477b08eb4aa03e32b8c897a85022de88d797e54bbda8496ee2719

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    606B

    MD5

    d3ac86863e59b4b3bf8e8c588b69ada4

    SHA1

    67f10e51a494e2a93e13f84f3daaf4b0ea4c0429

    SHA256

    c029a74724b9de39ec6308195d9c55e94cf90b718410f0a6ecc1a6056138482a

    SHA512

    e3df57ceaa087e9a14cb008fe62caae9f5d74cfe6ef44344e7045236c1903204d0473ae5c786ff4e9a927a3f446b161c791a1dc5e67e8552f2470f38f9bc4cc6

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    607B

    MD5

    39bc23195eefe410edff376c2c1e071e

    SHA1

    96f6c92b8c2419d342f4c262e34ea2bd40f38bbd

    SHA256

    23de11c375167b6cb564bc7af6d8185ba5d11292ae61fb747eb31fc7e8a3a22a

    SHA512

    3f55668ca530075629dfee2ca112f12cd2ec2a7eb572d2c9b3025f35030e0f08b02de49d83d620708c20e9d9fb01ddb1ee2db079b77897920a2ba0500cad18f2

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    719B

    MD5

    b5829a9449f609e4557a92a3d5e075e6

    SHA1

    33c89f47737060a625db84c6a78965c38a967fa5

    SHA256

    2b0bf56283dd38e9c17e210b1b3dff3e7ffa44507589cb79ce3afb07b659881b

    SHA512

    b74c679bfcb799da914b8de90eb5bea683d469f7570b849ef61cf8d250a0a5662e476a138b66b31d9c56428254ef1de73129679968df47467739013f258642bf

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    180B

    MD5

    168e5f16245ddd6e38cb414b108125e3

    SHA1

    ef03e417c1ccb833135e44ed7536bf4d7b6b4a21

    SHA256

    ad88b8be7d112d5ad5f8dd64e3750f119ee5f8eaf83037c6905fea7d7fe369e3

    SHA512

    a3eb1a7c9a70365c31b229ae7d614cf7c1c7cbaca8ac508d68d2534af9734b27fa0f17c0c859a706db2c590849b0b3391e90b915f5a4182c47a962cf5c9861c1