Analysis

  • max time kernel
    3610917s
  • max time network
    36s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • submitted
    25-08-2022 22:57

General

  • Target

    M.apk

  • Size

    3.3MB

  • MD5

    db72d4823679136473bc9eacc17b997d

  • SHA1

    ba5b271a35fb7588313a18d4093638f4ae00b288

  • SHA256

    090e0a999e5fa62739f9bc5d1474c1bd964f2f15a20824eda7d67ae080f5bef9

  • SHA512

    6c14e7966620c0f47244b6f84beadd155d2d063bdb5d8d72aa415ea88c8e0896225708ee7385e99760ceddefcc78cc1ad6ddf24742a90883edb27e891df80853

  • SSDEEP

    98304:aEVF6aL7fDW3v0AMYfccAyIif51VgHR14BQDLhWnd:a46x3vKcAyXTVcQB+LhWd

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4735
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4795

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      1KB

      MD5

      f22c4be3b92534b09076c7d356783a08

      SHA1

      9bdaa949f9661caa21ea77b4c72760165aaacacf

      SHA256

      d39003e664bd881df6ac7ca2b20da3cc7c6137d030497a88478728e9a2acf84b

      SHA512

      84e87224628f5658e31fde00eb5cb3afcfd7336ed3b3c48515bdba4afa19cf0e464f1ef6f487fb24b7e58f7372c2a111a08bb5daf04689b0d266b68a7afecbc7

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation2040268600698019253tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation4898450351078965553tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/generatefid.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      239B

      MD5

      de257973a3f4786673171c186b6866ae

      SHA1

      4d458db4cdaa35c764bb946f348c185debb38a53

      SHA256

      2d54b91f7f3929a2e5e9c9119de96b6e2b62a8b2a3fc55de29dc393436938ff0

      SHA512

      5b8295623354dc891cded317028902c7bde6f26b2245f0a2c48820722b807a25d44b6190f9acd955616515e7bdd974f1ea6f099603841f13bf7257be1b71c82f

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      134B

      MD5

      36e00d5200e63fac841449f0b623cec6

      SHA1

      d686f7be9e9ab778e931e581a7842e96ea8d8a91

      SHA256

      891a2dbcde153cc928abaadb07392cced4be472a2436d82c9f1b0d04189f45f4

      SHA512

      1d398f26a93801add200bd9bb14b0312006ca56a840b56a833a3812286b73a369ef5ce9f72fe4586d28e03ef3881d01df253f70ed9639802990fc9d7bef1c667

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      188B

      MD5

      5d4f24dc7c3712137b3919cc2b271782

      SHA1

      4d581b54dda04762050da762f96c231ea22a772c

      SHA256

      76cf73122ff8298d7d9dca70e2db8e8446ceca7a9e066532981ce6ba93bd5cc5

      SHA512

      d7c040cca552218753911c864bf64b30553fab9ae940eff65b80dee3b530166138b1ed9e54a88ae8c72631c1336d678d0b13e352060b517988a7e7687a35eee7

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      192B

      MD5

      ce213c55f6fcffd8ed8718dd45b904af

      SHA1

      f09a64ae9de96a8498009e286390323fb0bf7d9d

      SHA256

      d2f98af22a6d8da3f034cbb44ddce63111f271500b411c66307da44a8fef873d

      SHA512

      15bab02f404314d4f4a295e66479bc70f81574af19467d92dd307d5fb1666ac6f3fccefcaaef0a6878d9b5e6845679aa99b82d3948d9f24305caf1f6fb7c6e2c

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      507B

      MD5

      63910997dbec458ad709c2bd30c8da98

      SHA1

      d49b47a98b756dcd74c4711fb1fcde8708b0c778

      SHA256

      0b70267e73d5b8c873d4f02dfbfdd128401f21ade158cebf1028dbd9cbef8042

      SHA512

      ad97b39e194ddd1546549c1361d06d79e6743174308dea7a2575fc267a2914cf91dac48b42b85d41610d2e6ece05299296cc35bddb2eb51b8da1e9e9e43aee8b

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      565B

      MD5

      eb2d06de30ecdd9f36761d7aa2ab3c89

      SHA1

      b494f01f0f4869d73444632afdad0599ccde2aa8

      SHA256

      033b537e6149301212932f77592f6c1b4bf0dec4040c83eb680f8b3dbc2fa036

      SHA512

      071847385ac1c74f5b4f82fd1dd19b5eb01d86074f6f6c63af60adbd5a3991025c962f6775e7e7fd67a0cbae84003fada40d0384910ccaf00e4e3595620d1ea3

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      558B

      MD5

      493488ed87e5f21d7d4d5e1f5403a23b

      SHA1

      1745cc8682f55f6518dbec74840c09d9f99551e8

      SHA256

      46a194e318c7f56dbda65b9f37e6bac47dbd8007887792298716279a1221f5dc

      SHA512

      7cec3c75ecaa6eee5eb368f1204cc020867a0709a4b9e90d2dcb76a3f41b5f07c0db56a6d68e786c35754d781a7fad53da0833c1a2a1633cc7b72dc54a88c18d

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      607B

      MD5

      8797a7a8c2dee6443845e61d9ccb1c33

      SHA1

      961b26959ba1c91f47a984966054be5f030e163a

      SHA256

      35a4ea8a2561e07d4db47e238b36949ded5a3bb28e05c57e94448e841b121ee8

      SHA512

      40e11df259059569ae2f5f06198638435016ff303ff27510f9fbaf0a483fff5732acd3698674e5e0300109bae0cf1c9e9d8b372ccc916a1bf108f77f42be858d

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      665B

      MD5

      dd6a665caad3b221be83f8619597a90d

      SHA1

      f78b3cbcd70fc720963bfe25975bd52b00ce888f

      SHA256

      7ddba8c7d789a72f46dea8cf9ec6c224de3f9bfd2c659c3d7731207d54a5c817

      SHA512

      2802d525276e8aa69042af043bd9020fa7f780fbfaa885ae175d1b1f783e36c410e6d587df3941e81ef4324c3b5f3b80b7288ee4f93f869749bc23e5d6d73cd1

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      719B

      MD5

      dcc66b4e2719e006f5d2ea1a889e8dfd

      SHA1

      feeca5fa3813a2b0a5321b7f5b6a1c3de6764e3d

      SHA256

      89eac8376139cb94a98ea347f4dcc8086a3afff19530db1a57f3dbeedf3e487c

      SHA512

      abd4c70eeae4a090ef3a90de82cdbb4b2ff9ff445b2fed3c7f38225832ceb775981d663d2e702261f3b5c5c5a0e07f9f27f96215970d8232deccae08365f53b9

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      796B

      MD5

      580bba27eba4fd0000de687c9aa2f9a6

      SHA1

      93c69c7f407b9d6ee7457a94a0711694cacd9e11

      SHA256

      a6586389b9d50fbf6bba70636517b34a7631a74afa1f93682b85785b09c6e8ba

      SHA512

      132117ebc880bf82b39f8ed4bd0c418a4581187783f3666e13b49a5bdd1c1d54b6536a7993b3dd0d0a4b61e525e107de60e3ec92a59837794d9d93fc7155c852

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      395B

      MD5

      5b1e9181fc73f73be0a301e733700ac1

      SHA1

      9dec7c5f2bb9a86f7dffcbfbf1462e750029b5d2

      SHA256

      e2cd7387152169195b0290a9d130cdafe54eb283cd80bb28214ad3913c2e2a40

      SHA512

      853c1b1415315ba8dd0ff99d7ff7382ed1a1401eaa7bd1bd0bd0b4b676d2c85ff7c72664af3ba89d8a939643bceae4ac8e92b0240f9defab0d4ac68eca101320