Analysis

  • max time kernel
    3514102s
  • max time network
    26s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • submitted
    24-08-2022 20:04

General

  • Target

    Live.apk

  • Size

    3.3MB

  • MD5

    0e21c7d01f17601c5f7429e462f18fb6

  • SHA1

    13accbae56211891cdf59609eac030702681584c

  • SHA256

    200d2982befe9cf76a83082e423757e7ac8c80aa5c0adf19151171b586615d3c

  • SHA512

    6a2c4070df1988a50df6a17f3419d5eec0f097b024a66d10cdca44c3d6ceac8046c9d7b3a7301d9a67607a6aa11fac770788949e8ba2ea114e54025cc271af99

  • SSDEEP

    98304:4EVF6aL7fDW3v0AMYfccAAR+QRodxH8l37GiA:446x3vKcAAR+QRodxH4vA

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4542
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4595

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test
      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
      Filesize

      1KB

      MD5

      1a2e3338f5bc8072724f165fe8a1dd77

      SHA1

      890aafb6e56716d0b95d31abe317a6d316bc47c8

      SHA256

      340d43b9e69ca6adc14eeae368ab03d5bc99b74aed392374bb73cc5d25f0e568

      SHA512

      5ff7921a2c0aa12caf2f3a447db118acd3ac5c835aae9c0bb53c20b2895083d07da23de62acf6a2072b4708af38d6753ca26cb20fa19cfd4cc989a7eb905d59e

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation883663023316953844tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/generatefid.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      239B

      MD5

      88240f889b71e4902258a0697aac3530

      SHA1

      5533ca42f174c987948bce742d602b308bf20f32

      SHA256

      92f83fcf4a974376345f43925c102a51fcc379a95cc2db2d53abc0a196c33a41

      SHA512

      ec9d742d794837e04b20b9627740b26163369c5f53be595846112160618dacb92cfb727f77c8e4ef0026d4722daf4d80d6ed82a61a9e7242f92226cdb011957b

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      134B

      MD5

      4b7d007dccd6987b47e40c4b06eebd3f

      SHA1

      29734b7313fbba88a741b6cca73d4f77d7cf6ee1

      SHA256

      f01bd2fc288b340827a0bab3cfd09ac9bc356d8d524da520a7b78168e11b1f64

      SHA512

      38d00e92fb0d8cb36a475ab6827e08402d06bacf3adbc3c95c65e58f312556f8362dbeac7ac3ad0ec866544c235902340e8f41b047a19c2c9e30e506e15a21ca

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      188B

      MD5

      4b0282dfd75f6fef9f2201a96b028963

      SHA1

      b7d9f2871f450c12f6ba05e278516acab51a8285

      SHA256

      06213c63f10b4659952fe88e1a44a99b0b3e1d98eb8adaedb48a0e51bce603a4

      SHA512

      32c1d62f0f51b857d45f6746efe09eb1ff13419607ef36d8274c111ae9ee864b20bd0a4898954ea36a30380cd76cc13a2386ace82c301a8b38f8ae1d1f1a23b6

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      192B

      MD5

      45d690adc6d3017b28a3ea7e27b5dd5e

      SHA1

      e8b76fd2fc39f2451f3100ff5bf6ee7eeef1882c

      SHA256

      e2e8db5b8729a6b97da854a1d92b66aa66a131601d9994353e06315f38e23b24

      SHA512

      28a61196d6a3bb0bd989860123bfe0fd3708e40a77a4a9393135073a4d09658f58b6d5aa87e94e6357e4bf81ccb9dce74bd30259fa167cbf94c53765a913c3e1

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      250B

      MD5

      4b8cf1dfdb452dfe53cdcd0f7c658d64

      SHA1

      904db81e2511323afb4999759e5180b7b7b9e30b

      SHA256

      229bc8ba966cba4141fecc56da2bf4d4ca5b77457d725025628007274fb6e6fc

      SHA512

      cf44f1d4039ab02cf403984c7ed46398d9307a42323b420168cebfe1b193724812dfdd43504cf5a61de4b4f30c0cb78c8b9bfe69ac1496cbacf5f95c5d898a8b

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      607B

      MD5

      c2c8dde0f04c925ff8c8b605580e7815

      SHA1

      4585eb4df921ebf36993f8b6f00daca338c70f89

      SHA256

      ddbbde9a7fc599ede34b5e5173c1b4577790e35f450d78f45042b66c4dd03d60

      SHA512

      dcea8c835c6d2ec5ad84d2e333123cf359d065d81793af07ff6304e3062324d7ebadf9259f007ca3e95f5fdcacb4a859b00beb41f5e7712fa3a455be3c7029c2

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      665B

      MD5

      1da842ca8016a6f456fc938d73224153

      SHA1

      f963728850fa2f57c435ab2ca032c762ba7899a9

      SHA256

      5df576e65c257894ce5de6765bc51e2ba31a716663346a4068b2173a5fc95075

      SHA512

      0dc7379ff58049c519023fa9079063fa660ce14103f46943cde3dd084968168177f560d7b27c1d1180f8e35d6c0f2a051de73e1727cf8fea09927d75b05c726d

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      719B

      MD5

      da3e198044d7d321e5913b1044394f59

      SHA1

      7f93dcdc397761f51ef52c3269e82c83e1ef8e6d

      SHA256

      96c7a356030c14d9863cd42595aebe2788b405a19757123518119c4d24658160

      SHA512

      f703a31df76dc83ffbe195e0a5e1bcdb452989b9bcf08522e8a934e5701c899e5c2a4dc1cf4251ada4ad60682902f889a2fa3c5d9a035a44c603323e46d57092

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      796B

      MD5

      0e46911e1f425ce3d6e000072e582fdb

      SHA1

      805491fbd139bf51f53f3feb39f80c6eb4b2500f

      SHA256

      242899a4301ca8bb0aec8888a43ee97e76553dbb1646b2ccf87484f46a0b69eb

      SHA512

      9c9499a06c81e0ff87d2a64fba614d603994dedc92cf2866f2c0fe7caf4fc02bb259506d76b96f9087c63a53c415dd184dd0ad087269fe86ded92975f8716a89

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      395B

      MD5

      399e55911618e72b36a150dfe48d0d2d

      SHA1

      d1fd10509477cec4808f4e37e59fa3d2cd75ee41

      SHA256

      0bde45c11200a73a271aafcf3da61c91ffbe89b40f0ecb85de1bb352f9bbdc3c

      SHA512

      eca250563f560f79e9b97379182419b52f9431d7fe5080293a62eddb514eef336b0b84e657a0e61d87ab31e362abb0b096f53a89043a03670d384b2872552ca9