Analysis

  • max time kernel
    3666641s
  • max time network
    55s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • submitted
    26-08-2022 14:26

General

  • Target

    sighe.apk

  • Size

    1.9MB

  • MD5

    7f4187c95cfd9e7194e4fed5cc4fd1fe

  • SHA1

    80b57bfc8616f96cbca1859256bc59f6e76ecd9e

  • SHA256

    4117e78f010c0418105dd551b67aca9a9fde75daf929a2c94a46a649b698b9ef

  • SHA512

    9c5c8f433a36b3e7450ddb44686d13316f2eb5fc0d0593dd5dd1bbc7a5213020bf4397bb737b06b4995d7ad7cc6f65dd19358ea488af8f30f5c371a59598c178

  • SSDEEP

    49152:jVv67GgMNxIiL5dh0rHT0FtoY23G3VbtHmkqMG5mv:By7lMNxIilwTEt23SIkwkv

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • ir.shz.Babsixii
    1⤵
      PID:4782
      • ping -c 2 -W 10 -v google.com
        2⤵
          PID:4843

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/ir.shz.Babsixii/cache/~test.test
        Filesize

        4B

        MD5

        098f6bcd4621d373cade4e832627b4f6

        SHA1

        a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

        SHA256

        9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

        SHA512

        ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      • /data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db
        Filesize

        88KB

        MD5

        7bd7e08b7c157fb7a04f9701b6965b65

        SHA1

        19ed78cffffd879509071b091ba60776c18e8d97

        SHA256

        c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

        SHA512

        a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

      • /data/user/0/ir.shz.Babsixii/databases/google_app_measurement_local.db-journal
        Filesize

        1KB

        MD5

        0cf7166e0ebd484390e32725ad2a0690

        SHA1

        0b2429c82ab66678437a38bb1b3ddec436155cb1

        SHA256

        7d37cc077a2e9e4ba548075914ff4794402a37d90cf8f594ff36a295734ecc74

        SHA512

        1c4e496f379725e5dec75d64768c967cabe0021fc6441dc75a8eeeee5570ee87605f5ceda3f135e912497e9b0da4a3a8e5ae8d81a3f004f60fb86e48e4678ef1

      • /data/user/0/ir.shz.Babsixii/files/PersistedInstallation8528644519572091907tmp
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.Babsixii/files/PersistedInstallation9190640526114015709tmp
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.Babsixii/files/generatefid.lock
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.Babsixii/no_backup/com.google.android.gms.appid-no-backup
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.Babsixii/shared_prefs/FirebaseAppHeartBeat.xml
        Filesize

        239B

        MD5

        f505e2fc29673322efd8194ac2a8d34a

        SHA1

        8684f15d1120fdb879783da17091da2b545526a4

        SHA256

        cf8c0e4b85dd50fe72f91a9960d7ec07fbb34580d8d8c4d228c2253f4f8a21c7

        SHA512

        d9a798d7215627a19924bd77e66de2901ee8e47807039749bbe8b4679fdaba42a61ef86f581ba4179444281a0c432a8b6ca20edd590f6893db9f0d8009d3397c

      • /data/user/0/ir.shz.Babsixii/shared_prefs/FirebaseAppHeartBeat.xml
        Filesize

        134B

        MD5

        e19800b228aced130ef04308fbdf360c

        SHA1

        d61928a0e5d17735c6940e5c9c1906d1d86f57e2

        SHA256

        a123cca94c757fef1d69eca54863663f09a7facc4d1950eafcc67d2c47938883

        SHA512

        b8c9199c63779549d81268a62db9009f3eab77786fb31cdb9f46e5d5c85bc2a89bd351e94a30ea546e20c4c10f9c0c9d49aff1845f7081e17b52f489890aebc8

      • /data/user/0/ir.shz.Babsixii/shared_prefs/FirebaseAppHeartBeat.xml
        Filesize

        188B

        MD5

        f84a6b1161c2e1e05733953a570759ec

        SHA1

        19ffc7b8a1fcfb57d3980468fdd1fb7a5b8e7cd8

        SHA256

        eeada9d31b91d4d9699b46153409c361e8c55a53ab53610c6e8258c684bb4da2

        SHA512

        efe1d117d786c5d8cb9780d8e032caa11301018b8a0b94204cd7494952b3fa8094d8e52abddcc8e58215829f9790780e1aa27a685b892d1398084ea6e420de2d

      • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        192B

        MD5

        befee27d26404eb8c8e34fc4ae1eea0d

        SHA1

        e53629f677659c8faf0dc2f96e1a079f5a040e5f

        SHA256

        5140921d8ff94e0e2a1269323143eda1c05b87044eef7d31f8597d718b684dc0

        SHA512

        e4de0cec0eadb4a2fc56789e6c4131e90b1bc50a02a7c71551bf9f157bd8910cccb87ed5f3cc44f2cf9b24b55ba7ae820202a6cfb557709fbb539e221badb2a5

      • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        507B

        MD5

        4e16ca3e62c86ff56bfb52e6674a8894

        SHA1

        fc899b1e9453c901b56bfda5a8975de9a92ededb

        SHA256

        109ef572e777fd88a43eeb0732a5ab82d1a1141316ccb3924575b3db0f7149fd

        SHA512

        edefbaf6ec307192082d8833e648f58ddeeb1bf86e4dbb9ca652a619e9800aeba3dfb27db96b97cc914e8141c8e042fa3dae717968588f819f9bc5a66bf7f9d4

      • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        565B

        MD5

        dd4430bdab7275d51ee280ee6017e30a

        SHA1

        989e791f48f0167c72b2ed53eae59f3fa7e977a3

        SHA256

        d83b381aff37108c2c27ddbf40d84bcc1ddf3539c7cb29e61d5446c5b0b05e13

        SHA512

        531392cb10790ffd2e32dfe47b0bcb96c7eb90c62500ad8e892ec1f4ff21fa02ba53592e10179a28844d7ad4b0d32c692e14ac97b6c25db3310d28bd0e98f1bf

      • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        558B

        MD5

        ff87f160fd957bbb39baba0f2094a1d0

        SHA1

        7502be23444c68027296d503bfd35840ded61cff

        SHA256

        33d64d7a9dd3d39e1503bcfdbcaebd1cb900c99e114ff0ef45482dfefc156f23

        SHA512

        95d68bab93afd614093cf9619493133d904388980d3bb0b8e8b3869329299fa8bbe6aacbe6ab04907c13ec66f209a238ff36e3d8aef84f6f1995fadfee9b6204

      • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        606B

        MD5

        599d64262364ad694121141146cc0177

        SHA1

        492d122c615a12842d5b8242661103eff7e0cee4

        SHA256

        2422ff0d2cfd2a4a65003caf468aa39dc47aba28dd255ce43ff073ed2b8beabd

        SHA512

        c8a07ea1536b58bd55fd5e534abcdf354e4fa207bc92e65cc5404a8106b190e1b09c7113f62727b8365c9cfd254b4ca55be67e4dcae7156822ff20f6244e8b5d

      • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        607B

        MD5

        31cc050eb5ff8ec43e7c3327e2df5168

        SHA1

        6e45f5ec684677343a709344632df383ebee5fe4

        SHA256

        2ebc9f15620a653ee6ede73e8c360d9b3b4c08aa8dc353b270d58e60a2a76178

        SHA512

        9bfb3916e0d1e297cde4c888fc62921ae5b1e6679190a0ff7b536076f9a6361c8a9e94d243976e332170ea6f4ada491ebdf15f57028b9f557a41ae545c31a57e

      • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        719B

        MD5

        cc10f7982371cc9e2556a6c61a18683b

        SHA1

        4d91556960f87398d1473a431bbff1c1028b3ccc

        SHA256

        6789110ca7b8cc6a3f5ee5d5a2e61452f7df8d5ccfa5c05db95ed2c2b2aa607d

        SHA512

        a1bac299010d807f23879715a52c1a77d68f133ed6bce676ef69e845b9f031d82347a1caa48357378ca6e72ecee916af50065f5580abcb535ec58c77df910eae

      • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        796B

        MD5

        f8d55fd3a9286f2397bce7043f3145b3

        SHA1

        b9e7354ed694b0ba64ade792cfcf5a722854c6a4

        SHA256

        76771321d4ba0567f5d6580a8dcbf93fe781627df2cae1ee16943409078b8013

        SHA512

        bcf1284317d5fec2136bc8f2da896d9947f94c9fa71c0d5bd1b7dffc75ee522f57edb1390b7fb53cc1c151c9318c5fafcd1856d3e2656d0399b018e9578de6e5

      • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        122B

        MD5

        250b4caeba60ddf53228405750ba66ca

        SHA1

        422ab714feb34e9f3b4f1cbe669887bcd581ddb1

        SHA256

        2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

        SHA512

        373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      • /data/user/0/ir.shz.Babsixii/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        395B

        MD5

        f1857454e126e6ef6e30869d48ec2330

        SHA1

        07a1dee086070f8d5e114f41d0c18364b4a3e21b

        SHA256

        5bf379250bca1ac8578c5f1ce986388de40bab5cf2fa1adb7e8cfc8c2e0f6025

        SHA512

        8cca2639d5335d343d561e7780e49065b2fff2a9357b0b1b1cec1a73a45a8a21a3cdcc582237d08a8f5018f020e3495fe0debf915ec32bc3d4f1ab6ab40ab73e