Analysis
-
max time kernel
3666688s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
submitted
26-08-2022 14:26
Behavioral task
behavioral1
Sample
sighe.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
sighe.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
sighe.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
sighe.apk
-
Size
1.9MB
-
MD5
7f4187c95cfd9e7194e4fed5cc4fd1fe
-
SHA1
80b57bfc8616f96cbca1859256bc59f6e76ecd9e
-
SHA256
4117e78f010c0418105dd551b67aca9a9fde75daf929a2c94a46a649b698b9ef
-
SHA512
9c5c8f433a36b3e7450ddb44686d13316f2eb5fc0d0593dd5dd1bbc7a5213020bf4397bb737b06b4995d7ad7cc6f65dd19358ea488af8f30f5c371a59598c178
-
SSDEEP
49152:jVv67GgMNxIiL5dh0rHT0FtoY23G3VbtHmkqMG5mv:By7lMNxIilwTEt23SIkwkv
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
Processes:
ir.shz.Babsixiidescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock ir.shz.Babsixii
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.dbFilesize
20KB
MD589cd606d433241b0e400ec6e41988cef
SHA189b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3
SHA256fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253
SHA512f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1
-
/data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-journalFilesize
524B
MD5615b7b44389a1f3d42359d6f0f0acd29
SHA167726603ef6622cc49d4479ccd7da68a74b9f655
SHA256f5c0819d0de34b867f2cc7522a743b3a18b51d74384f5ca31a736b67d2b916e0
SHA51235520ced526db9e980e64a8f56295c3634c5d75aea6c629d3215b6ccc445a7e1f8c1828420a7794fc60f083dad42b35ac5241cc99b057d8aa287d7f246cd76f9
-
/data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-walFilesize
36KB
MD5fa292b56cd16132abca43cd960af41a6
SHA13b6879628df479800914cce5e03e51f3ee5534ff
SHA256c4421a1d9ed953be5d1120c72cc39b20b9d51c8e1f2bb45775ce6a3e6ac8c75d
SHA51200c8e46a7362987099c5abc5647ee6f1c35df2db370d699f62796b6ba2cc856825df92919f29ab0327fee1f75662a4f2daa409b0338feb97ecfe8e80f28ba08c
-
/data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-walFilesize
4KB
MD54baf2880f6611884a209b80e8466c1f2
SHA152f30831d5389e7d3dd2bddc4a3c35a6d431ffa7
SHA256cabf6874597585fbc54fbb19206a8da307d15cf74fe03e80376eeb6682733afb
SHA5120cc3f53a37fc35b82da4326914f5b32b4c92d88e3ee1eaf878e8007cb093b68180882cb2fb8110535024ca50247bb9d4f9bab113e062fd510ba33f0bedbec858
-
/data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-walFilesize
4KB
MD53dac00f024aaa40bd3ec1656f10565c4
SHA1e02ad8c841a60f2a923075d6f65dfa7166a97933
SHA2562d78f6104efae2beddad164035fc30032d2f724c7074f92b91f3931f784345be
SHA512870ac08fa8a3700253c0c5d7589a941ea3e520a193fd81166526b1426449a57775b86cea7a97410d8a6b2d2a66c942b112d60dfc248eac4a0c2e7a6d70d34a63
-
/data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-walFilesize
4KB
MD5c28fedd02de77fea7ceafc15e42422d9
SHA16a1b9cde3c6a897627a3605fb99344e935ab1ed0
SHA256dfc277dde0097b7ba04672b02bae5cd7eee235331bf483103f54e8336feb2713
SHA512850a1d9416d5df37230356458ea7bfac0a2fb12513d7684e8356302662338eb79d836b8cff19f25e6395ac1dff5c34dac5fdf4c7e15d8a7d29db6e246fd0ed12
-
/data/user/0/ir.shz.Babsixii/files/PersistedInstallation3808896597571556601tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.Babsixii/files/PersistedInstallation8904760800778642678tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.Babsixii/files/generatefid.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.Babsixii/no_backup/com.google.android.gms.appid-no-backupMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.Babsixii/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
134B
MD5955012b13ea072bcd105544e3694c463
SHA1332bb5fa5dc6ba0e3589678fa115a0b5b6a7a909
SHA2567ef0dc57dd26a84266c507d818efe12fd730d40a6eade79c9380130ba0cf8afc
SHA512dec39fa91f6f7ed8a872438ca6eb15287b758b8c960e0205c5334e5767f92f794c9a4505c7c59e494d62b8d6129e99cae112108d17ec672c97d20f561008a1a8
-
/data/user/0/ir.shz.Babsixii/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
188B
MD55d6f488bff8aa06687c71f6120c2e66b
SHA181cc2685547c8dbfb667f6a8722aa951dcc66346
SHA256fcb87025c8e980f049036551b026d1549ddb0d8c56b61e01e663ba706d7dbe53
SHA512bbed96bd00e107f0817369f36abae17c608b030861dc5b5e62c9c577236e38f25b8205cb6e21c95044bba9eff10910435d31af6a63ac3f2e1c25a27ccb591f92
-
/data/user/0/ir.shz.Babsixii/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
239B
MD5df3c452ab415287359e77cadb3ea2852
SHA1a495546cc3a97f0e7cf6be4dc70e883e66bd6d62
SHA256a0ddfbe90d2459a4e71811c41a2a6461cce91e87a3c7303aa280166e95ad0224
SHA512888bb40a67925efb899e5404a1a88281e67534d7f65770578cf47e840c000728a255be3ba90656ac9cac3e4010d015eceb79342383c24cc53c88deabfca7f8f6
-
/data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.appid.xmlFilesize
192B
MD5683905164e5059777398aefd62907c8d
SHA17dcd8831102b2e9db354a2456e12591e89220f47
SHA256d4630758943aa852f8d5909d000a49cf32c1bf2c17430cfe28100ebb51691a62
SHA512a2166c629b86a4655550f2b6648fd1c6834a54e289a48bed38c3cb1a76b03a116ef6957dedd9f3dbd16ab3bb88df3a4990db00acaf122680de5cf91e039b7aef
-
/data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
265B
MD5636e58dd0d39c6cac2473e2d5486a959
SHA1785ac10cfc0616ce43e93e03fbc7ed8a0d4348fc
SHA256cd03c4bc13a719d65b07df16b8df04b9696e2cfb7a50e865777917109b97076f
SHA512ba6dcf292db7a138c52fd7d145e23af83a07766b845fb37464f3c8cc7e4093dbc95c45fd8ebc34a68c88c22311ff87b825fa1a1b41f2a51c5c916f0ee9ed7278
-
/data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
332B
MD51dd084fa3b62d608dba46badd1fcab12
SHA1f3e312a8a95c64765ef95794633b74e514e91575
SHA2560d7bf9c060c3d83ca18c286fbd152f9727e572b2780c1ebd34a73b0f0165a428
SHA512685e4afd799d4a179ac92c3cd55da6a9d283862873bce3f5e83166935c9774cf62450c2095151f33ac9a0aea3ead0b6fc9a11b3efa9c7f7102b01ebcd11058e7
-
/data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
395B
MD564c313c11c274045f223dc646e93cd1b
SHA158c33970b21c185aa1c7d9144c39e7bab0c4fa05
SHA256ce4dddff2030016adfe0a584fad8f5217eac811a067896ad564b2916a7b88aca
SHA512e3992f9d6afed27a3f0e27a1bd4a849309c26d71840d0d8c2e0451463a13c4832e981ed9d90f09e335a83d1b18cf8177e401566b0a95312bea433e8d5ca7b130
-
/data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
605B
MD5b8f0ed6e4f6ae19dd121dddcef7d4043
SHA1594497e23d50e0a596513ec268c1c5c83a616409
SHA256d4eeeaf11a7ec92cf281020fc61fed24ada8420908c587bf1f92d557d8ff4276
SHA512dfcd2b2cb90862e32475941bfba78369b739bcff1a30cbd074a458784193da0fd8388422befe4c318d289633c7eee04892a269f07f14d4ad9ac18d75f13dac52
-
/data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
606B
MD57a7996ebf6001df3dba8377754db0054
SHA11b26b7d4bcaa33eb98c3a6a548b923d3429f1c58
SHA2560ef420e36df72c4a805cde0f78e2182918a541e03f791598c17cbfcf6bbeb458
SHA512891f0d3d61c741c913ad33f8365e901fcd02e10d747c48783e4126e5e5f7822265e0449ab27e58ea7ece2976d7ef15b766cd262d40a7b642e5274e0a452df5a8
-
/data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
718B
MD51d2091a48e34a81a199fdbd545ff1459
SHA1737f53f03211a5ba2f57f4f450546451b7a16d6f
SHA25666e8d9db28a93506f6a51977ece467980fc5ef3455315d01e122ede1ae75e484
SHA512467f48474dd6a65da37dfd9c073e46a65266951185c20afe9e2f71b6b680af83149eea6e93c090f466bed68a5a3e23314062a1d72c5c8bcdb8f5affbc8f9c20e
-
/data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
/data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
180B
MD5291437448f5b0559fc94c4943792a3fc
SHA153c392593125c83af16167f91a5f8221e0a42ff9
SHA256b399431e50fc0d18652b97cb8a4d040f305b5e2d797b936890a64f44fb831c76
SHA512f9d7ffa0782424cfce89d009b023cfa14842c7d4c47fc92486d4019131e4d40be15e1353c29a1562a9974c7c326801663903c08090036c480dc6dd6397157709