Analysis

  • max time kernel
    3663510s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • submitted
    26-08-2022 13:32

General

  • Target

    sighe.apk

  • Size

    1.9MB

  • MD5

    2148abb74558f4ea968cb48ac31f2e48

  • SHA1

    2484aa1aa8d7324d290e49ce8e2ea3ddc17fa6d5

  • SHA256

    942106b0a31c6d963788c539a2a764cbd190baa5cbe80a1c90be67751249f535

  • SHA512

    f1d7118cd0ed23796fadfa2b16ace13eeb3a50cc00c2a0453208f8d1e0dea0c43af347680b427b6a2814f24e55936a897ffcf57ce98f383a4681a3b077250bd5

  • SSDEEP

    49152:IVv67GgMNxIiL5dh0rHT0FtoY23G3VbtHmkqMMlUW:ay7lMNxIilwTEt23SIkC

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.Babsixii
    1⤵
    • Acquires the wake lock.
    PID:4652
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4704

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.Babsixii/cache/1
      Filesize

      17B

      MD5

      9254e24c5465af6ffd98bfc227a73a09

      SHA1

      8423fe7f3d43e98cc9a3467ed7f2ffd84eb18f99

      SHA256

      cdcff04b63c8cc73b698e614944f60d66f085706f3acfd9dfe59b76ee2fba682

      SHA512

      5192e738a8b14f83d466b9234f8aece73f2da8cca1ece0331c271442cd989630f1fc3323f73bdb601f830cd80c18e9bcd44a8fb508feeba79bca781cbe718707

    • /data/user/0/ir.shz.Babsixii/cache/~test.test
      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db
      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-journal
      Filesize

      1KB

      MD5

      43807b89268a7b6ba251d77ecf66fee0

      SHA1

      c9b1e2571dfbfe920aaeeb2e591a517c9029e75a

      SHA256

      d9801501841697f9b65a578a89a0ada1d8fc99b724c1f75822c7c8d2f0b556c2

      SHA512

      7377f3938ba5c495c7fba8e301c14f2e46c8e2fd58028ced7ff1f767161f8a89be51b90eefe3fa69f951492d9718e49241012beb81cd3c8dbaeb2b25d2968edc

    • /data/user/0/ir.shz.Babsixii/files/PersistedInstallation1753536847149125879tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.Babsixii/files/generatefid.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.Babsixii/no_backup/com.google.android.gms.appid-no-backup
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.Babsixii/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      239B

      MD5

      b0ff9041ce47738d0240ee33545e963b

      SHA1

      aff21a559d1cbfe7fd1e7aadd1e255ec1ec70d10

      SHA256

      b87f24c9fe1de6531b3490368c72dda4df87b1788578d6a583b86fa5215eeb94

      SHA512

      917b42a4fff83961302310b6e5a29fb45c7e910810c40710bc748de6c7e787cacbd9f3ef5f8ac8ad4ae2ae59fdd5569b7cbe398b26ddbd8875ebce7e7c1e849b

    • /data/user/0/ir.shz.Babsixii/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      134B

      MD5

      fb69f15e6b4e43482a688f67be3ea4a2

      SHA1

      3d7b33f8c87e714c39eed52a7bc91e2c46a70951

      SHA256

      35b4a2e58aba7e626ed24548821a8c59579b4de72a8a4440a7525b053fde5847

      SHA512

      d15b422abedbf09e1b1f78d6321ca91cc30d392e71b9cbb986bb4c4c10a8a569150147cf4db31428913d022037ec709cfd3b213940b7a19b6d6b6d97ffaf2614

    • /data/user/0/ir.shz.Babsixii/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      188B

      MD5

      b6be3a26126022483bc7c5056196418b

      SHA1

      d48f7397ece77158a4c1ed931a361e297f503dec

      SHA256

      38a7696d0dbd8c8a79ec2d0157cd8dbdba029ea6490b75e15c70737a7312b95f

      SHA512

      9feb2d989126c812d61b90dcb5692c36758a982c57d8c18d6aebb33f96d9adfbb00d00d0c6b67746c391daecf5f747992aaacd49b296a79ef1912f17d98c0467

    • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      192B

      MD5

      7fe6ae73181a3896bbb2013a2752b8e1

      SHA1

      25973e6a0ea2b5f62d11f80d486b646fcec4c37b

      SHA256

      15914bee03675658a53af49e8b17d366a3fcfe229d31b153c49209a7189b9574

      SHA512

      12ad2dc551acfc38f5638db2a662f6226c690c55a0ce23c7c1e5cf1b0fd3e1804a30e701c3ae6e5a570cbe4e64242546830426fdb00b6e76c869673af93699ed

    • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      250B

      MD5

      756ba20cb62543b2af7c42e3301e9d79

      SHA1

      c3afb19f03ae177ea85a93c6d06dad025e7fd76d

      SHA256

      aac3cab1249a111d63ee6f8f897451453047c007114bc82d9e5a3ed023d4b5d7

      SHA512

      d66c5e26e382549640e4130e0b2d5a13b49e28097d3d4ec64687c00c9ea74027fa481d6b528b9e84ea7a1d78004a3109b6530bbb9df2d76bebfff84125aa7afd

    • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      606B

      MD5

      bcf040344cbfc149add512177e0a7629

      SHA1

      f3d174f55af4d42c8e5a877ce35f463d79301d93

      SHA256

      5422dc45ad63ed92518d3cc9b7c809366a4767603327801df959fc3263ee1537

      SHA512

      60a168bacab32e92737f923046e6351d68ed5d901b7d895be2734172d8025811ff366df70f944536e5e882177fc584e5465bcc37f1b008a690619e578590a3a1

    • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      607B

      MD5

      b6b3e6b4532d36b7ae620c25f06c853e

      SHA1

      35a407cff97f92b009d3db4c66d8f17552676e97

      SHA256

      50cc26c26057ad9349a63848b02d8313e11c9a6e72b0da9863899c2729adc175

      SHA512

      596fd217c5eec505c4e1f9d1c4880e65335dd35783da4f382bd63ebb0f9b12fce66fc96fd3661369e8ebe473d6e8c451982745fb03b12e1a39bc483dbe60ad0a

    • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      665B

      MD5

      21972073c2bef83b4ec6b6257cea9ab6

      SHA1

      ef6466a3079b0bf3699cfa48fa0b3e72e65c54eb

      SHA256

      4968735a6d5b1506800615695f1f689984fc766719332e44b006f76080ce8267

      SHA512

      e5f26034d3dbdbceff0752ebb382d94e857b56b49b3fcbd1833fded5ff338d3ef79e82070c342ab242d32fd690a0f206267c398fd06eb6b7a27d845bc0656725

    • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      719B

      MD5

      52e9e82fa308feb61f52fcc5cb9e8f0a

      SHA1

      74fab1222febcf2c664ac7d148960fd44df617b1

      SHA256

      e2fb1cfd5b198ef6786e4003a54f5f6d4466e9d17a0ed3e48d1d6dd954c8f456

      SHA512

      ba6e52256942d4e39e0226db99639bb3b76b275e8352b587f551afdfebce7a2872d613dd512aa410d05cae16bcef2f64294ec3f5cf0d368ed102e6dc06bcec21

    • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      796B

      MD5

      0ffdab0a728cc472e2ea9cf9424a42a6

      SHA1

      88de9a9c158aea136654df51d9327f85a16674d6

      SHA256

      8504ce7e98a912b00e37057d43dc455763068542a1eb5b9e00794e034713bb42

      SHA512

      1480ea8d72c442e964e699b7be29985033b1bb786384f55d8d45af76bd1b18196f6528de550d9e0eb2cbc2e83df144d7aa35800fdc6132b29ad030a17185f508

    • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      395B

      MD5

      fcadc591ef590db250be5713d7a093ec

      SHA1

      1185c5594e56fcfa04c10e434fa420cc295950fb

      SHA256

      f5749c85de254634787c6a5249cc6538d301e6c7cdfb54485a4dfc4d3ff4b5d3

      SHA512

      bf7fb6cc74a4d6babd9e4ef5abbc716a54cb3135b50c8aba0ff7c1d556107b247ae788c0bcbac8cebd8c1674713f33b072f831fce13fc4bed9ccb13675618b3e