Analysis

  • max time kernel
    3894447s
  • max time network
    131s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • submitted
    29-08-2022 05:41

General

  • Target

    sighe.apk

  • Size

    1.8MB

  • MD5

    480379e6a333b21d1b807f85a8a6c65d

  • SHA1

    6159cf42b20fcba1d350b0893e56674cdfda2b5a

  • SHA256

    4dbe5345b61ceee178e1b57b032e9f134706bc1f5860832f9e44e7190128c2db

  • SHA512

    a46b8827654485c1938af2557268b4280fe6b1a3100e748a38e42df70dcc7877f978490ef7814d67075a9cb477d3eaa9c53a915f645b6e13edc8321fe4566b69

  • SSDEEP

    49152:DY1RClfotDc9G5ulFTeOQb/+xqUQuUePxOHj4:DY/I2Dc9k0TeOAmxHaePxOHs

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • ir.shz.comin
    1⤵
      PID:4864
      • ping -c 2 -W 10 -v google.com
        2⤵
          PID:4925

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/ir.shz.comin/cache/1
        Filesize

        38B

        MD5

        7ae4da7f94f2aa48b66eac0fef2724d7

        SHA1

        7ad3f12b4bd42baa9bc29bac5670a9f5072d5c7a

        SHA256

        31d99710ea1849c6f68f130c41b2a9da314d4e0582972bd258597deb88f468ac

        SHA512

        912ce1a5674de616974df88617d8c8fc5a15d0c9b22fa723f0dcbffe8a4d42f8f20b407983d0b64dd0712002067eeb1fff214209cedd99f2b6695ee2df2bf794

      • /data/user/0/ir.shz.comin/cache/~test.test
        Filesize

        4B

        MD5

        098f6bcd4621d373cade4e832627b4f6

        SHA1

        a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

        SHA256

        9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

        SHA512

        ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      • /data/user/0/ir.shz.comin/databases/google_app_measurement_local.db
        Filesize

        88KB

        MD5

        7bd7e08b7c157fb7a04f9701b6965b65

        SHA1

        19ed78cffffd879509071b091ba60776c18e8d97

        SHA256

        c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

        SHA512

        a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

      • /data/user/0/ir.shz.comin/databases/google_app_measurement_local.db-journal
        Filesize

        1KB

        MD5

        c06644c6142c9d1642233b9d1bbe399f

        SHA1

        8a8ed6dcb9e2f598c6d03ad657ec2ed835f2b4f4

        SHA256

        e7f05a42b0e2c0bfc1bb2d009eed28a8a36fd7a002a7bc59629abac23fa4dd4a

        SHA512

        e3823bc763ffaba0e30bbf5c06163c757d212a5804de55f45bd8a78dc1a219fb9252928a3ed930c38f813203e008801802f6a4371e2617cf6e01b8b50792f705

      • /data/user/0/ir.shz.comin/files/PersistedInstallation4054453123418709616tmp
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.comin/files/PersistedInstallation9062387404484816578tmp
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.comin/files/generatefid.lock
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.comin/no_backup/com.google.android.gms.appid-no-backup
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.comin/shared_prefs/FirebaseAppHeartBeat.xml
        Filesize

        239B

        MD5

        b7476127bb85cab2f7dbe86b2aeb97ac

        SHA1

        69860c462500f82b04d49a7f8ff29a2f07a66723

        SHA256

        aa30014668731ea1d5d5aa2501602bb5592c29883aae0b11b69ddba60d249bbe

        SHA512

        00ebeb095279624884d62b4e200fbe5dcfc1ce30bcf9f11b216585a76ae4b8a15aef9f02dda0c909d8152d4cc0e3c2f15d97724ab1b1806b33c9756bc2bc3cbe

      • /data/user/0/ir.shz.comin/shared_prefs/FirebaseAppHeartBeat.xml
        Filesize

        134B

        MD5

        0499b61c80434165f0f8f20b6b5eb989

        SHA1

        8dc1c50b29b67a1703d455a002683680ef13c0f3

        SHA256

        62f9ee4d6568440c0b3f22976b7d68e7a9c2983d14135dbf4afc399194324925

        SHA512

        71b1153bf1d435a31aa279c6f23b8e7ca0a3ad3716758061c1256ab61a8e2a98e7f0203d8f0ae098293313bada4fc5d13878f2bd26ea00325d7f7273d286d804

      • /data/user/0/ir.shz.comin/shared_prefs/FirebaseAppHeartBeat.xml
        Filesize

        188B

        MD5

        6e52b9fd26b47239e8dc4e4f7e05034f

        SHA1

        437bff93c725643cd331f5053c0b665bcbf9a0ba

        SHA256

        810a3dff825ac301149c27354d06ebb0a208b55a22a097f63bb2357332c55bd7

        SHA512

        84ae56d17b21d9631e87d3f22d1f470816a8c8bcadef8c1d32670d45c34852a962c1e2f5efa314e9350b9ad5bf7ef454afafffcdce6ea56da3bdb479e72ad53e

      • /data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        385B

        MD5

        21c1a5a7c3d90ec4f4cf22da49da88e7

        SHA1

        e867a5a5f24ab57eb18df5cdc67f2d8f1d981683

        SHA256

        f5776078d2e90fc20b09572de584bda5638a62d7b1c3494a1a5d8438a09123fb

        SHA512

        142184ec3247f8987180d96ce7c146a2fc5ab07d9cff3a8c72fd6b4281f5f05d8fe889e00fdd58ed1a832c7b9da049a13ebd2127d631572127b875031ab21b59

      • /data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        443B

        MD5

        be53234b86fab2038d7f86471c9c668e

        SHA1

        cac9efc464f0ebe16c0c9ff518c6aa445a0ee2a2

        SHA256

        532f9fea87f8812f760a68085b35af3d9baeac7263858d483f35b83f8bec7c08

        SHA512

        fbd206191baaa1f4d05f67299d4c623c289dd238b505bfa46805f19ab6bfcfd6429c0df86bcfe7c41f9fd9fc8b969d6cc0f6c85a5030df49fee5d9e9509cd727

      • /data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        436B

        MD5

        f619f72b86326565ae2d17572aee8137

        SHA1

        fecb4ce14f4dcc378b3a747867e4eabc1b7760cd

        SHA256

        c30cec74350133dc5d1dae099a5a5546edfeddb4f8daeb130f530efa012a2fd7

        SHA512

        73a89597c55d8dcd44945de74b608d5585729a36e1a85a92adca02d07b91c2520987fd57e1f7d95aef642c249a8a5a2ecc07c9219e03b23fb1e0c9cf0e993000

      • /data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        660B

        MD5

        c0ec06a32adcf979e49c648f434c92c0

        SHA1

        a8bd3f53401d220fd1549ccd49d86eb28d6062c0

        SHA256

        121ddf0f5d8ac79ff20a7035a3de0478269874b39a8c6dabafa215a8712ff84c

        SHA512

        77983643675004b9f6324c5dcfc11a9aebf9bc271954d643e249f7e792f367d53090119a5c23b8817b69908958d834d7ff004432d5a9ce370403ba518a49f4a6

      • /data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        661B

        MD5

        9d95929be81ab70b550094a685e342da

        SHA1

        a988a8dab4d113cb3d1fdaae04ea3f6ebe052458

        SHA256

        f8031d1111d9d170ee191e174f3979c4d101e1b7fee6269af320faad8a86b0da

        SHA512

        e06aa96f48384dba5edb06adfbf867ae803c215fd8d7d81db3b3e3d6bf3289f54f363bb9d4b21c9d18a47f5ff14a03bdc4daf088b7c51eb841a633b157d6408f

      • /data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        773B

        MD5

        f8d120a25b7d598755575b3420e599e3

        SHA1

        01c4695d5d20dbc98aaa8b451e86f9631dd586db

        SHA256

        590cf665bc5ed7a61c220c9507382de27ad2bc87ee01d8232bdc9719ef70d200

        SHA512

        38fbeb6abc08fe6115ee798153b07534848a2d89115ef8782ad9854cd2a145c484969da5f341b2ad0c5429804303ee9b8cc433ab172cd4ee8c73f075183d6fa8

      • /data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        850B

        MD5

        0deb00f0f5efbe85d31b97cffe327ea6

        SHA1

        75c53b9a275beba4ae3abd350df4875907f5bfed

        SHA256

        0e4ff60781e65d171baa239ddb7d0e77bf4584f6982934775ac77bc01c5b19f2

        SHA512

        ddea4764dbfbe5573f8d6deb4e2839c1c3117cf236de258774140a96437dfabf5c8189cb6a7341a0c17b597f216d05ddbaa42025e316a72281ede7aa889deaf2

      • /data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        65B

        MD5

        9781ca003f10f8d0c9c1945b63fdca7f

        SHA1

        4156cf5dc8d71dbab734d25e5e1598b37a5456f4

        SHA256

        3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

        SHA512

        25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

      • /data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        449B

        MD5

        7bdd317e74c17ece24c6cf5c759152a8

        SHA1

        4136c5255f8e2518df170089010f83de62404574

        SHA256

        8bbb6f62f11e1e055553e9cc4750ff4e49fef61e89c9ee9ec5204b0ff38ad674

        SHA512

        de747968d773179a36293be69e7a76210fbd9d02f0bdf42889dcb358e20b03ee3a110cfe59c2bc33ee52534fd4e412f4c2734f07621aae1eea5a90deb7984bae