Analysis
-
max time kernel
3514105s -
max time network
28s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
submitted
24-08-2022 20:04
Behavioral task
behavioral1
Sample
Live.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
Live.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
Live.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
Live.apk
-
Size
3.3MB
-
MD5
0e21c7d01f17601c5f7429e462f18fb6
-
SHA1
13accbae56211891cdf59609eac030702681584c
-
SHA256
200d2982befe9cf76a83082e423757e7ac8c80aa5c0adf19151171b586615d3c
-
SHA512
6a2c4070df1988a50df6a17f3419d5eec0f097b024a66d10cdca44c3d6ceac8046c9d7b3a7301d9a67607a6aa11fac770788949e8ba2ea114e54025cc271af99
-
SSDEEP
98304:4EVF6aL7fDW3v0AMYfccAAR+QRodxH8l37GiA:446x3vKcAAR+QRodxH4vA
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
Processes:
ir.shz.shzkisidescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock ir.shz.shzkisi -
Reads information about phone network operator.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/ir.shz.shzkisi/cache/2MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/cache/~test.testFilesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.dbFilesize
20KB
MD589cd606d433241b0e400ec6e41988cef
SHA189b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3
SHA256fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253
SHA512f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journalFilesize
524B
MD561e03718f83d8a1e9bb4c305d60b25ca
SHA1d27293ff8c63ddcb1bf059f918440ab22e90dd50
SHA2566f23fd9e9fc5ba8400a183c521b9786ba010630008b828889d825d5bd02c9922
SHA5126692a1fc252f632a6b86f141d57f49c01da56fbbde6f6748db4dd28a92329f9bab60f117b552d345ccc7e9433523f49b0b36c90fd7d3706952b628ac5343ffce
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
4KB
MD5dbe57eeac033dcb88101bca7029cf835
SHA15015378d90a63339b7e336a31ef2a6b48d00e0e8
SHA2569c7476cc2b904cfd90ce8ff1b5d068203c7cd21bddd2119eae36c73c43548442
SHA512368a3bb848af3d5ef80c4ac7c4b6d89b44ecb1afd5b990c0df2d484987d0c832f9e8a19aa0281b203a649511cdc717be8942ea94115a7f43dc9b2101439fae89
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
4KB
MD57e48e22ec9593ecc658bd3a738ba63fd
SHA1809731b86d4d6d38f3275d76cff34069c43db2b8
SHA256eeaba4964a210028b9cf1a5dfd18cd134cc71db11ed42baf3c18f1058578f0e5
SHA5127d820b5d03ff26d553138810cd6ea31134b480b85a1a513617ade7bcbccd03a8d8a0d04108bcdfe60fa1f43823a14079af8d041b086043e2534eefe0413df600
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
4KB
MD505fbfeece016f963fa4a055285075028
SHA14b1f4c68564ff6ffd2f0f02725a8c25679297e55
SHA2565d34d24b24ea7d6cb538ff69685fe5ffc054311aabf7f78acd47f3071e431433
SHA512d51555da07519bb2b19b7b2bdf653e8b4ab3e749afb92215066380e83efd3d866b812554ecf25a533acf62645e3483295466b2fbdf538aad4ce7e0f2b49b958a
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
4KB
MD527ea1e36feb43c9c66c1b51b2792aee8
SHA183406a0de8c6a26e99478fbc7d9aa900fd644bf0
SHA2563881db46ebc35131964a9dcf9465a526c865daed9f86d23411712735e3ea4086
SHA512eebebd6c1729899dfa303ea485cf069da3a442e89eda06d51c90d9b9ffde5722a7beb3e04bd40bd7689ed9a8b5ea3ecceb5b49f5966838684e934dbe30c288fa
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
4KB
MD550d8dbd5e112411350eb3347873d4215
SHA1efee681c7016efe3042b02056716f33838d6dda9
SHA2564e0a981c87974c69bb16d964a51ffa05af9e0d85ba7c2441b43c69a231a4ee22
SHA512d0e91f0af006b3a5dd15fe50a95862501438c0deb36a9e4bab4715e801f5a7b5d0f8cd5598cef8adb470c0d91c195148ff67d96447337caf5f9949dc4da0884d
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-walFilesize
36KB
MD58265889e0d28ef727ad83f6e0ad65221
SHA1f6d12c281abcb6df5305273495ebc976314b68f1
SHA25610eabbc9b92362af3d53fd644290e1850b6b9f81dbf910f59279d2957444b95c
SHA512e3bd5de084415ab8e1f6a25b22f3ff133cd98e6e30040672cdb38feb60227028cc97cde5ff00243f5ae50c0a1a586afd4b333e86220181e094aae906dbbbd990
-
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation1265386813874711966tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/files/PersistedInstallation1654204864277435584tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/files/generatefid.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backupMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
239B
MD5ce7c027d568358545eaee2028e0b8b32
SHA1790dc8830c8b1d04d4e670258648805b8403b9bc
SHA256a79297e0013462dcf94159e43e8acde334548d3115babe02dfa776dce302b9ee
SHA512e69a76329a48a68e80ebf361133f44d1abb87a1a66a361dacf0226cf87971d27fc81ddf9da060a4cfb2ed6db4d94e542e41e95e2f4144dfddc46939dffae3785
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
134B
MD5692dc3156226c225d69a83d40a8579eb
SHA17ac5fbc39fc1c911a622c78002bb8afc269c81ab
SHA256c49865bbf4c285ce055e7a8dee20f845f62e3546a45f451d1cccb442ce2dca32
SHA512a089c78821620fb48d73b53240e785e496ec222a3771e68daa2286a61c17eea0d414a43db112e4dcbba3b8cd62676315cd9a80496ec6af298e73ad44da95a4f6
-
/data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
188B
MD5f464d71e63fa46adfd4a3c9d236b4856
SHA17d61f3004e30f057e1eb021c838068ec7801e845
SHA256386a0db47f345280bb008587f155f55482f168f267e6dc6a4e4edd3cf00eb74c
SHA512f92799ebf2c39faaa4dfb34cfa6d189a776c31f7b164a1248009f973323e3eb340f10d5db9f8e2dbe239646b5ee9d417f8aa339dbd39ce01b0c4f1fddbd4b1e6
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xmlFilesize
192B
MD544499e7b2f5f460a52f9f84fa7da0b58
SHA13a673f8945365676cd8cc152ac4545b6b37a4476
SHA25655ce0008750bd9c78843972af1ab4f4e31f2a3e31d517dc2c1e7819520c5ac0b
SHA512075afdf3cfd34a07c46c248540daa8b14e09a0da6f47138bbfe90d35abebe872ec30754d23f16f7fecc891ad00d294bc7cdfe9c3a84ce6ada8d38eadf0d0d7f6
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xmlFilesize
507B
MD52fa1d4e0e898c7d97d699ee355ccf6f0
SHA1b8fa8302b1ca36cf86526ae9f5bc22a7abcf1b53
SHA25687bbb2b169f499441cb5992234769bc42e7a37f0fd83c695be8b86937530244e
SHA5121a6da31aef152083f9f0f8ded271e2ff6ff30b407b13c1370f347a34014f4da3f06ca01256bcfc6691c71aeb2e7301d1042a3541129bd2f8c5493eb563829a0c
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xmlFilesize
565B
MD5b3710839636e96d3992df68157c57428
SHA18d4784ddc9e4cb156412780c6058e54c2b45ffcf
SHA2563f21a2301d102c03e78ff253c09d2b10ed77dc61973f517c56793012f41ccf5f
SHA512048e61a18b1025beb8fd6383aa611b4ebd680220a53087d2465c27a982bccf79982726248be4647735a7defc9509b70a741c62d05c001dcf63b9b5c64c8da573
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xmlFilesize
558B
MD5042b1872677987c1276d717d03e97b6b
SHA1548345b9f1709fd8168ba69a01e08fd2b1166038
SHA25692be050ffcdc12c072953631316a3c97009ca35da8fb830a2f2eb5158d1511cc
SHA512da6089ba0e7dd5da15a02f7da1701aaaaf24e623f33fc9aec58d0544e0f1ea37062812f5da0a4c15a908fba7f9974219dc605655d63c554e9e8262a61ac7c643
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
395B
MD5c884f4d3f262149a218415a86e5a41af
SHA191577dcb140bcc0710c2f0558b3b32d6d28228df
SHA25626f961147c7f3738c96ab33cdbe8f4ef0f6cff9d35ea4d7caec3fd40cf1429cc
SHA512d7030e0a21b37927039abf120169db7c48984a7781fb25ee123bcec7864d1acf15f9caccac23dbd958afa7954e614506ff9b4577e9bd1c29e8bfbf5e90473420
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
605B
MD50ddec9af2e462cb8b1ca87acac54a816
SHA11b463dfd045e58c92316ac84fb4de0e0f0e03855
SHA256c59115f4b658ab49ba173e24b3e93a70a08f6a55b44b4aefb74a84bc87251f30
SHA5128f43a82b58341b4fb8d030d2a4f0e0821d0dccdca78603f2ae2822c3ad7fe14f1b788a2a8a80e83cf48e9834d4e24c793442bf20180464d638213be7d90a02ca
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
606B
MD5480cda78e766e28e262a091156575888
SHA14eb0167e619ae65706acdafc23d91461c726d850
SHA256a3fa67ebf6b675618146d09e2ec599a9a08304d70b44348c210fc0adde3fb705
SHA512c80aa809c6ff397e89d0231cca216bb6d29373cf7709765a2234137a0243fe091d562935d8da1d55db1be25a7e2ae0134476c730a224bd70c87dbbfbcb76536a
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
718B
MD570b35a919b640aeae7d0c579fe56c0a7
SHA100cd55c57b0317ba5fc8201838a7944c01916972
SHA256ad04b14dfdd6608e6c019865c5bc389b56045f5b74b79bcfa02390d2f93c18d2
SHA512a63ae859ac5787d259e6a628ecdd9be8012b8798c6336dc361eeeab9dd75ac4cf8afbe83fc67cacb5e3aaa264afc5c363957c54b40340af1da8a088d18c90967
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
795B
MD547fcb6a312eea4d07eaffb398178d4df
SHA12f322b2755d3e26a7ae3a3e3d576e34694b35b74
SHA2564c51a0163af05860ff9b3fc9840c3ec6ad85b14a013ffff91f5e4a95df63d399
SHA51263e036ad924bb7f7b924e721f7c7ebd955bcb6d9f70c172c67b0979ae190ea9cca744c9896d0bf92f6f3b751faf04214c19259a3b1d447ae1ae54ff7259df6d6
-
/data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb