Analysis

  • max time kernel
    3666688s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • submitted
    26-08-2022 14:26

General

  • Target

    sighe.apk

  • Size

    1.9MB

  • MD5

    7f4187c95cfd9e7194e4fed5cc4fd1fe

  • SHA1

    80b57bfc8616f96cbca1859256bc59f6e76ecd9e

  • SHA256

    4117e78f010c0418105dd551b67aca9a9fde75daf929a2c94a46a649b698b9ef

  • SHA512

    9c5c8f433a36b3e7450ddb44686d13316f2eb5fc0d0593dd5dd1bbc7a5213020bf4397bb737b06b4995d7ad7cc6f65dd19358ea488af8f30f5c371a59598c178

  • SSDEEP

    49152:jVv67GgMNxIiL5dh0rHT0FtoY23G3VbtHmkqMG5mv:By7lMNxIilwTEt23SIkwkv

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • ir.shz.Babsixii
    1⤵
    • Acquires the wake lock.
    PID:4132

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db
    Filesize

    20KB

    MD5

    89cd606d433241b0e400ec6e41988cef

    SHA1

    89b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3

    SHA256

    fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253

    SHA512

    f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1

  • /data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-journal
    Filesize

    524B

    MD5

    615b7b44389a1f3d42359d6f0f0acd29

    SHA1

    67726603ef6622cc49d4479ccd7da68a74b9f655

    SHA256

    f5c0819d0de34b867f2cc7522a743b3a18b51d74384f5ca31a736b67d2b916e0

    SHA512

    35520ced526db9e980e64a8f56295c3634c5d75aea6c629d3215b6ccc445a7e1f8c1828420a7794fc60f083dad42b35ac5241cc99b057d8aa287d7f246cd76f9

  • /data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-wal
    Filesize

    36KB

    MD5

    fa292b56cd16132abca43cd960af41a6

    SHA1

    3b6879628df479800914cce5e03e51f3ee5534ff

    SHA256

    c4421a1d9ed953be5d1120c72cc39b20b9d51c8e1f2bb45775ce6a3e6ac8c75d

    SHA512

    00c8e46a7362987099c5abc5647ee6f1c35df2db370d699f62796b6ba2cc856825df92919f29ab0327fee1f75662a4f2daa409b0338feb97ecfe8e80f28ba08c

  • /data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    4baf2880f6611884a209b80e8466c1f2

    SHA1

    52f30831d5389e7d3dd2bddc4a3c35a6d431ffa7

    SHA256

    cabf6874597585fbc54fbb19206a8da307d15cf74fe03e80376eeb6682733afb

    SHA512

    0cc3f53a37fc35b82da4326914f5b32b4c92d88e3ee1eaf878e8007cb093b68180882cb2fb8110535024ca50247bb9d4f9bab113e062fd510ba33f0bedbec858

  • /data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    3dac00f024aaa40bd3ec1656f10565c4

    SHA1

    e02ad8c841a60f2a923075d6f65dfa7166a97933

    SHA256

    2d78f6104efae2beddad164035fc30032d2f724c7074f92b91f3931f784345be

    SHA512

    870ac08fa8a3700253c0c5d7589a941ea3e520a193fd81166526b1426449a57775b86cea7a97410d8a6b2d2a66c942b112d60dfc248eac4a0c2e7a6d70d34a63

  • /data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    c28fedd02de77fea7ceafc15e42422d9

    SHA1

    6a1b9cde3c6a897627a3605fb99344e935ab1ed0

    SHA256

    dfc277dde0097b7ba04672b02bae5cd7eee235331bf483103f54e8336feb2713

    SHA512

    850a1d9416d5df37230356458ea7bfac0a2fb12513d7684e8356302662338eb79d836b8cff19f25e6395ac1dff5c34dac5fdf4c7e15d8a7d29db6e246fd0ed12

  • /data/user/0/ir.shz.Babsixii/files/PersistedInstallation3808896597571556601tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.Babsixii/files/PersistedInstallation8904760800778642678tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.Babsixii/files/generatefid.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.Babsixii/no_backup/com.google.android.gms.appid-no-backup
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.Babsixii/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    134B

    MD5

    955012b13ea072bcd105544e3694c463

    SHA1

    332bb5fa5dc6ba0e3589678fa115a0b5b6a7a909

    SHA256

    7ef0dc57dd26a84266c507d818efe12fd730d40a6eade79c9380130ba0cf8afc

    SHA512

    dec39fa91f6f7ed8a872438ca6eb15287b758b8c960e0205c5334e5767f92f794c9a4505c7c59e494d62b8d6129e99cae112108d17ec672c97d20f561008a1a8

  • /data/user/0/ir.shz.Babsixii/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    188B

    MD5

    5d6f488bff8aa06687c71f6120c2e66b

    SHA1

    81cc2685547c8dbfb667f6a8722aa951dcc66346

    SHA256

    fcb87025c8e980f049036551b026d1549ddb0d8c56b61e01e663ba706d7dbe53

    SHA512

    bbed96bd00e107f0817369f36abae17c608b030861dc5b5e62c9c577236e38f25b8205cb6e21c95044bba9eff10910435d31af6a63ac3f2e1c25a27ccb591f92

  • /data/user/0/ir.shz.Babsixii/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    239B

    MD5

    df3c452ab415287359e77cadb3ea2852

    SHA1

    a495546cc3a97f0e7cf6be4dc70e883e66bd6d62

    SHA256

    a0ddfbe90d2459a4e71811c41a2a6461cce91e87a3c7303aa280166e95ad0224

    SHA512

    888bb40a67925efb899e5404a1a88281e67534d7f65770578cf47e840c000728a255be3ba90656ac9cac3e4010d015eceb79342383c24cc53c88deabfca7f8f6

  • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.appid.xml
    Filesize

    192B

    MD5

    683905164e5059777398aefd62907c8d

    SHA1

    7dcd8831102b2e9db354a2456e12591e89220f47

    SHA256

    d4630758943aa852f8d5909d000a49cf32c1bf2c17430cfe28100ebb51691a62

    SHA512

    a2166c629b86a4655550f2b6648fd1c6834a54e289a48bed38c3cb1a76b03a116ef6957dedd9f3dbd16ab3bb88df3a4990db00acaf122680de5cf91e039b7aef

  • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    265B

    MD5

    636e58dd0d39c6cac2473e2d5486a959

    SHA1

    785ac10cfc0616ce43e93e03fbc7ed8a0d4348fc

    SHA256

    cd03c4bc13a719d65b07df16b8df04b9696e2cfb7a50e865777917109b97076f

    SHA512

    ba6dcf292db7a138c52fd7d145e23af83a07766b845fb37464f3c8cc7e4093dbc95c45fd8ebc34a68c88c22311ff87b825fa1a1b41f2a51c5c916f0ee9ed7278

  • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    332B

    MD5

    1dd084fa3b62d608dba46badd1fcab12

    SHA1

    f3e312a8a95c64765ef95794633b74e514e91575

    SHA256

    0d7bf9c060c3d83ca18c286fbd152f9727e572b2780c1ebd34a73b0f0165a428

    SHA512

    685e4afd799d4a179ac92c3cd55da6a9d283862873bce3f5e83166935c9774cf62450c2095151f33ac9a0aea3ead0b6fc9a11b3efa9c7f7102b01ebcd11058e7

  • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    395B

    MD5

    64c313c11c274045f223dc646e93cd1b

    SHA1

    58c33970b21c185aa1c7d9144c39e7bab0c4fa05

    SHA256

    ce4dddff2030016adfe0a584fad8f5217eac811a067896ad564b2916a7b88aca

    SHA512

    e3992f9d6afed27a3f0e27a1bd4a849309c26d71840d0d8c2e0451463a13c4832e981ed9d90f09e335a83d1b18cf8177e401566b0a95312bea433e8d5ca7b130

  • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    605B

    MD5

    b8f0ed6e4f6ae19dd121dddcef7d4043

    SHA1

    594497e23d50e0a596513ec268c1c5c83a616409

    SHA256

    d4eeeaf11a7ec92cf281020fc61fed24ada8420908c587bf1f92d557d8ff4276

    SHA512

    dfcd2b2cb90862e32475941bfba78369b739bcff1a30cbd074a458784193da0fd8388422befe4c318d289633c7eee04892a269f07f14d4ad9ac18d75f13dac52

  • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    606B

    MD5

    7a7996ebf6001df3dba8377754db0054

    SHA1

    1b26b7d4bcaa33eb98c3a6a548b923d3429f1c58

    SHA256

    0ef420e36df72c4a805cde0f78e2182918a541e03f791598c17cbfcf6bbeb458

    SHA512

    891f0d3d61c741c913ad33f8365e901fcd02e10d747c48783e4126e5e5f7822265e0449ab27e58ea7ece2976d7ef15b766cd262d40a7b642e5274e0a452df5a8

  • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    718B

    MD5

    1d2091a48e34a81a199fdbd545ff1459

    SHA1

    737f53f03211a5ba2f57f4f450546451b7a16d6f

    SHA256

    66e8d9db28a93506f6a51977ece467980fc5ef3455315d01e122ede1ae75e484

    SHA512

    467f48474dd6a65da37dfd9c073e46a65266951185c20afe9e2f71b6b680af83149eea6e93c090f466bed68a5a3e23314062a1d72c5c8bcdb8f5affbc8f9c20e

  • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

  • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    180B

    MD5

    291437448f5b0559fc94c4943792a3fc

    SHA1

    53c392593125c83af16167f91a5f8221e0a42ff9

    SHA256

    b399431e50fc0d18652b97cb8a4d040f305b5e2d797b936890a64f44fb831c76

    SHA512

    f9d7ffa0782424cfce89d009b023cfa14842c7d4c47fc92486d4019131e4d40be15e1353c29a1562a9974c7c326801663903c08090036c480dc6dd6397157709