Analysis

  • max time kernel
    3514118s
  • max time network
    44s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • submitted
    24-08-2022 20:04

General

  • Target

    Live.apk

  • Size

    3.3MB

  • MD5

    0e21c7d01f17601c5f7429e462f18fb6

  • SHA1

    13accbae56211891cdf59609eac030702681584c

  • SHA256

    200d2982befe9cf76a83082e423757e7ac8c80aa5c0adf19151171b586615d3c

  • SHA512

    6a2c4070df1988a50df6a17f3419d5eec0f097b024a66d10cdca44c3d6ceac8046c9d7b3a7301d9a67607a6aa11fac770788949e8ba2ea114e54025cc271af99

  • SSDEEP

    98304:4EVF6aL7fDW3v0AMYfccAAR+QRodxH8l37GiA:446x3vKcAAR+QRodxH4vA

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
      PID:4898
      • ping -c 2 -W 10 -v google.com
        2⤵
          PID:4962

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/ir.shz.shzkisi/cache/~test.test
        Filesize

        4B

        MD5

        098f6bcd4621d373cade4e832627b4f6

        SHA1

        a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

        SHA256

        9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

        SHA512

        ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
        Filesize

        88KB

        MD5

        7bd7e08b7c157fb7a04f9701b6965b65

        SHA1

        19ed78cffffd879509071b091ba60776c18e8d97

        SHA256

        c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

        SHA512

        a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

      • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
        Filesize

        1KB

        MD5

        f76f79871e01b98132e0303281b1ed33

        SHA1

        1ebd064585ca58c9f71ede076e8cb57164a33b28

        SHA256

        dcfd6945e89e9fb5e51d6310a4f7d979525a27ac54640d1a3e28e73a4a0556c1

        SHA512

        2d503b96ae4b7507f7c73402c4deed969749c0e2624ef9e6f1aff9ecc4e24df7a7a021448c8baeff0dd253514831c9ed2544039e3b2c526c3ccc0c169fbcf239

      • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation1448812532531028802tmp
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation4985170577843257597tmp
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/files/generatefid.lock
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
        Filesize

        239B

        MD5

        0c5031ce4f8a5db1aa35f05f0215ba02

        SHA1

        cbbce89cdf8b4ae6809bdc1890d2020764826f29

        SHA256

        21549dc77a44e75964060e1de3e43336cb75f11f29f492551a9f0267d34ab456

        SHA512

        f018026dea9684406baf194f42c7a4a19d19f8511936cd7a5996ada53380cda1f787e888904906614b346094dbc6b590bd440a0d79ecee98057de9c44e6d40fe

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
        Filesize

        134B

        MD5

        e702c30a2ad63ab06724a1ee9ccd9a0b

        SHA1

        8cf8c688e3c5b7cefe45dac78914111caaaecdd8

        SHA256

        35312d615774c73d7dbc231924357be7dbbcf861d098833f6ccf10f08715c2dd

        SHA512

        960781fba9df7bd2bf468a76676ab7684769703c78d5c203e9328e7ad041dc1a44e33520613c24926c602d44380a68fb70fc405b3fd98278fbe09914e1aecd7e

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
        Filesize

        188B

        MD5

        d2dc05531042de890f4e2a471eecdfd9

        SHA1

        97f4f583af74002839e7971c7fa07f63fef40e5e

        SHA256

        41abe46b1370877b25c065a9aed535a13475729da0f945ae22202753c3e1f7d9

        SHA512

        7a44da1252b85410799b26a2bcda1f0908b440b84f6c8ddf728ec1b26dd782d98b9fe077fc78e4c1d90193aaed7cae1e41fa48a9427fc486231f9f3f83616f31

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        192B

        MD5

        0c6c03d983211b6c1942f7905c56f602

        SHA1

        d6a3909d4a243601766a196e18459d906091a9b0

        SHA256

        0a4435b5f21aaae2fd3e45df7478884867f29d3ebbe580369e18a1aed1a8d01c

        SHA512

        241cba3bb83e54c0d6b63d3236b8c56167bfe9c9ed5f1233d2c7620179b46695796af7c7353bfa5ed2eaa568bdcd4d514c143107b03308edb86d5b694b8dcb68

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        507B

        MD5

        de9fb69f7a0a298aa990f8e13ef6bc0d

        SHA1

        4d2867c977dd52d73765cc8fb657ee4c08e66a18

        SHA256

        a6b7b84c04d2167d9e0079b592898b9ad3b81036462bb32640c6da9397c10dcd

        SHA512

        e38e9fb803816c80ff96903c5f2022178ea22a2510727efd1c226ccfb99e2129992314cf0d29a1169186b106983c8fc4064a07dc798d493a6b3a9dd8b7cc4477

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        565B

        MD5

        aa4b4b54617848ab5ee0905d4e8170e2

        SHA1

        e8c3cbdb2147269a8fc3b7ee8f2de9d9a77cba13

        SHA256

        61785ec6c0af76a88c15e20768b89941292037424ce8ae0993b6a93e06cc8007

        SHA512

        a2207cdfea8eccdd729fb5911fa059c5cf3d0b71fc6ffd7d9bb3ed80bc183c73a853b90fb635aeb581c0a2c38fa249d440431b3a25e1ad01e23e59b667d0fc3a

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        558B

        MD5

        60781d5f2f92dbb330a230b55b931cc6

        SHA1

        9799a9cef4c932b2e2e4d78a0fc244988cc6d735

        SHA256

        ca2f26d2e29d6531c3018db8964d83d833a239a915467944bf906f551792bc4e

        SHA512

        ea916e43c99352df1cfdfaa2714099bf21e9885fec88ade2c87970e326f744b2ac566b2cfac57cff50c5b82515a6d6879c126789226a7885df50a6c89595536b

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        606B

        MD5

        2d5a2320c53fd37db12c595665a336fd

        SHA1

        ea33a71ea8b7d0952db3b03e2c732f87928e910d

        SHA256

        0fc84133c26be9f19d79176bbd6ef9f832e095757be8f6ebee42499a4267a244

        SHA512

        a269a19275c0154c2efca7cbc5baa2e8ea387ca94f8729b7e8bea7b80499ce580efeb4fe4aaf6427b1310d1817e61a9a3fb724b834221220f2d03a0f989e1f50

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        719B

        MD5

        c3c1bb88208ca21a98c8dc4a6571686d

        SHA1

        20fedb7bfdef1786e0119a85e717e03da2f18923

        SHA256

        753c1aa69b0a0e9aaf0a869b461b3bdf6d6c674839f0ac9acd8bb62181835bc8

        SHA512

        84e2b23cc60e5e03fcc5c9873e4cab74839d255947667e541b9614490a76595f77299a1c465f1e7466c8275404635d8a7ca8f687b21953a14bbafb129db0ccce

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        796B

        MD5

        3bbca56e7fd010a20f54c99ff440c9c9

        SHA1

        c9c51f6f90ca76c2a66907a8023ffa89f1136426

        SHA256

        790c7d22eb0d3d00a3703bfd961c784560bd1d3b93c7632272dab304753729f0

        SHA512

        082f896df7920fcf497a754e8b81ab65ce5c8fae940407bb0eaab1510f2566a8abcc51db804b7f5fc05e7a754a5e66a650722783777e1bcd6c4c25c83dc3b869

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        122B

        MD5

        250b4caeba60ddf53228405750ba66ca

        SHA1

        422ab714feb34e9f3b4f1cbe669887bcd581ddb1

        SHA256

        2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

        SHA512

        373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        395B

        MD5

        db403f278d87935e0c335273caf5cefb

        SHA1

        4981c99fe2a66e7b67c679557034a99812694d16

        SHA256

        36c26be64d106e6e8a1c18408f11300499e253de87e1338eb7f66f81324e59fe

        SHA512

        c11a3ec51480361cc9397e6c88de32d31b2f34776fb8c34dbb46c38af37d0f65bd772d592e511cfbbde5e85444ae08491d0e4fd0fbd53dfd041849979b6e8c4f