Analysis
-
max time kernel
3360428s -
max time network
141s -
platform
android_x64 -
resource
android-x64-arm64-20220621-en -
submitted
23-08-2022 01:21
Behavioral task
behavioral1
Sample
لایو.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
لایو.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
لایو.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
لایو.apk
-
Size
3.3MB
-
MD5
13eaadda71609960c966873f36efa735
-
SHA1
8c08e9b78984c56e87864fc451dcf41831348ba2
-
SHA256
0f1d9b29cd29f8a7f2c6e1a9ce68de3480f680177f08a61b1934c965ea65a55c
-
SHA512
b573935beaf86a7c2adab761f87be59fd3e8b4c4067c672761c6292ba78aca5927e39dd739ac6f114567819335814dfa5d8ce9189c6d1e6b38961c5806e52d54
-
SSDEEP
98304:IEVF6aL7fDW3v0AMYfccAkOzVsx6g5fcK+1rKQpPMihj:I46x3vKcAkcV9g5ulhj
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
Processes:
ir.shz.shzkisidescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock ir.shz.shzkisi
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.dbFilesize
88KB
MD58dfcfdcef5a9793fb83bda404ec3f42b
SHA1dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b
SHA256a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2
SHA512e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journalFilesize
1KB
MD57922d69da31952b0cae38375a12f1448
SHA1998ef356a38af31ea4e9a38447d282cbc393233a
SHA2561a2ef5e800c9fddac39244a44d6905401615cf1f24171d566196364699f46527
SHA5125bae7f1b77961025f56974ae7de3d6f30282f208f5a80119e60b30277dbb4db5e935a25353b18dade02ab95320f71955c7bf4885f63dac95bb88fe4573594c72
-
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation4815321446176553077tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation6571462979711907543tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/files/generatefid.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backupMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
134B
MD57fd2a11b93bf47a6d5c758600108640d
SHA150a21b029e378a599db3b548ebb35be12bf781c2
SHA2568d4468ad4a4d6d11542b0a8af978a68dd5c1ff2a34d273ddfe0596b3525bcc66
SHA512ef606d262714354fcc0bcc478c196798e9da5942daf6d2e13526c62185f1d5da169b71f1b0ea0cbadeb421b633ff4f715c2c8ddd7bb4e7011f3891b0e5caee61
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
188B
MD5096316182f23638963ac1c636b6ed36d
SHA1de896d17f8934466fa8710ee29e2425a88a1e571
SHA2568c96e2861c290f12445f42e737a0d76124009551ecc2e2ed2f945097c18b51cd
SHA5128d6a8c66032c34c050e5e77b579d579514aca4a6e40cf05cdb8a7858d0d9eec52337fe23e2dc4aa3ae763107c0ec65fce9ef22e6a2e9c419cec26b527245b98c
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
239B
MD5e1c4f8e85288e8272d77d8447df15fb6
SHA11c0d375ec1ad674077093af10f0419d22947d452
SHA2560ba9b462409ecaa4e4813f734605e96eaacf3c4492154fd0efca680e8cea1d2b
SHA5120863ed864888b9b7d4bd36832917c39eb90081958827103e3054444e1940c5cd0920d65f2987365aff1279dedccca4d6e15dc5f68542b66feeb3fb6d0e32a11b
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xmlFilesize
192B
MD54b930114d7f6d02f96e2ac9e6d06b4e9
SHA1d79d76fa0bc97396d1a3070ed2b8c6a53a1a1aef
SHA2562bbe1aa10f489fba3cced5d10adec0396e10d5e264764d3162889e05b867689c
SHA5126e511a89b2b6722aa32c34691242bafe136a2c394fdf4b7e9a7df6a2d7d5e14c60bfe255eea818c375df6c8dcf5ce353ce1d13bd5b3c7fc8f9840c38e3a40219
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
265B
MD5dd5917fcd9f7c45fce4cd8cb57035889
SHA190c386a3156c2c2daf4ff189b02a7c8adb4a714d
SHA25659f1778fc0bcf8833a763afd47257f21ac158051626a243bac7e8d2b8242825b
SHA512a9a09104742bae2b719b935da0ed5f14f802e37c3a41abe48608a5bd4aa6ce3d8ba8cd13e979c2e4dde9a224d9b8ee8a4c963bf7bb0b235a249a35bb525c1cb0
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
395B
MD5119f20bb8dccbd60f524c4e54c767c07
SHA171dd9eba5025c044f8b4e979e9023718a0998d7b
SHA256887f83e606f62efac4ff599781e64b6644f2a47853fca8c2d342557a587b283d
SHA5123d7c3d5ce0302d9f3392aa640ae156e71d95af41c30c501a9b6bcf3a5beb81100df44dc57bc477b08eb4aa03e32b8c897a85022de88d797e54bbda8496ee2719
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
606B
MD5d3ac86863e59b4b3bf8e8c588b69ada4
SHA167f10e51a494e2a93e13f84f3daaf4b0ea4c0429
SHA256c029a74724b9de39ec6308195d9c55e94cf90b718410f0a6ecc1a6056138482a
SHA512e3df57ceaa087e9a14cb008fe62caae9f5d74cfe6ef44344e7045236c1903204d0473ae5c786ff4e9a927a3f446b161c791a1dc5e67e8552f2470f38f9bc4cc6
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
607B
MD539bc23195eefe410edff376c2c1e071e
SHA196f6c92b8c2419d342f4c262e34ea2bd40f38bbd
SHA25623de11c375167b6cb564bc7af6d8185ba5d11292ae61fb747eb31fc7e8a3a22a
SHA5123f55668ca530075629dfee2ca112f12cd2ec2a7eb572d2c9b3025f35030e0f08b02de49d83d620708c20e9d9fb01ddb1ee2db079b77897920a2ba0500cad18f2
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
719B
MD5b5829a9449f609e4557a92a3d5e075e6
SHA133c89f47737060a625db84c6a78965c38a967fa5
SHA2562b0bf56283dd38e9c17e210b1b3dff3e7ffa44507589cb79ce3afb07b659881b
SHA512b74c679bfcb799da914b8de90eb5bea683d469f7570b849ef61cf8d250a0a5662e476a138b66b31d9c56428254ef1de73129679968df47467739013f258642bf
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
180B
MD5168e5f16245ddd6e38cb414b108125e3
SHA1ef03e417c1ccb833135e44ed7536bf4d7b6b4a21
SHA256ad88b8be7d112d5ad5f8dd64e3750f119ee5f8eaf83037c6905fea7d7fe369e3
SHA512a3eb1a7c9a70365c31b229ae7d614cf7c1c7cbaca8ac508d68d2534af9734b27fa0f17c0c859a706db2c590849b0b3391e90b915f5a4182c47a962cf5c9861c1