Analysis
-
max time kernel
3894445s -
max time network
144s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
submitted
29-08-2022 05:41
Behavioral task
behavioral1
Sample
sighe.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
sighe.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
sighe.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
sighe.apk
-
Size
1.8MB
-
MD5
480379e6a333b21d1b807f85a8a6c65d
-
SHA1
6159cf42b20fcba1d350b0893e56674cdfda2b5a
-
SHA256
4dbe5345b61ceee178e1b57b032e9f134706bc1f5860832f9e44e7190128c2db
-
SHA512
a46b8827654485c1938af2557268b4280fe6b1a3100e748a38e42df70dcc7877f978490ef7814d67075a9cb477d3eaa9c53a915f645b6e13edc8321fe4566b69
-
SSDEEP
49152:DY1RClfotDc9G5ulFTeOQb/+xqUQuUePxOHj4:DY/I2Dc9k0TeOAmxHaePxOHs
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
Processes:
ir.shz.comindescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock ir.shz.comin -
Reads information about phone network operator.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/ir.shz.comin/cache/1Filesize
38B
MD57ae4da7f94f2aa48b66eac0fef2724d7
SHA17ad3f12b4bd42baa9bc29bac5670a9f5072d5c7a
SHA25631d99710ea1849c6f68f130c41b2a9da314d4e0582972bd258597deb88f468ac
SHA512912ce1a5674de616974df88617d8c8fc5a15d0c9b22fa723f0dcbffe8a4d42f8f20b407983d0b64dd0712002067eeb1fff214209cedd99f2b6695ee2df2bf794
-
/data/user/0/ir.shz.comin/cache/~test.testFilesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
/data/user/0/ir.shz.comin/databases/google_app_measurement_local.dbFilesize
88KB
MD58dfcfdcef5a9793fb83bda404ec3f42b
SHA1dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b
SHA256a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2
SHA512e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807
-
/data/user/0/ir.shz.comin/databases/google_app_measurement_local.db-journalFilesize
1KB
MD553891d93b0c4698d056bc3301a242778
SHA1db67b85114988e9ff969bb3aecaf351f160245bd
SHA256e7489f4e5e8ac0dcdb8b8f5f73883b0d8f5a95b596a8b727275391986208f5d4
SHA512147b93412ec1a2dcbb6dbee674a8a784e9c8b28d48955083fb1eb4a4acecfa0a735fb134153b5901d96142816bd2abb8902ade2911ea461a9f6bfc0f6bbadbc3
-
/data/user/0/ir.shz.comin/files/PersistedInstallation6500772189095579287tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.comin/files/generatefid.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.comin/no_backup/com.google.android.gms.appid-no-backupMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/ir.shz.comin/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
239B
MD564521f3f1281424be22db47e9b238830
SHA1c0df0279debfd43febc374eda44a4fd23c673af6
SHA2563d772736ac580854477f08478040d3eff04e3ee079bc6b8c9b130105a04d9be3
SHA512504c339409772a633e74ed0809b14b8e35b3f232001f4991a57d1d88b0a64a93a4176efa514df3801a38a1706c2e1ca775188e2669d1df6d0d58e99f9fd8143e
-
/data/user/0/ir.shz.comin/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
134B
MD58fcb4ddb310b8cefd00f07114e7521b4
SHA1b0dc6ada0c07f5ca3fcf22b8b80400b1f9136273
SHA256e7eeab16776e10af90eb140f1721e1ed21cccaab2cf6f599d24ea3b4d43cc66b
SHA5120842ac66c576ae63d884aea00d0618c013e0d4b89f4d7f826fccef8c1e08020678556cb8b5614b39f53a197735bfddab5272e25c055a0c0d9e1b06c322f2eadd
-
/data/user/0/ir.shz.comin/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
188B
MD53f3a68139bcf168b64c8d1b0f84a869d
SHA1f9df3e1ccaeffb92932b4e18b59ada40bc7a0a09
SHA2563ce2cbbc9da53c13632cb44000b07565de6a96ab3aeb156b03797c5e44193c53
SHA512be1246fadd8fcb0056c2cc2e579142726ed72202c9cfad96710009b418652a79936e67832425d6cbe983b1d494f99f21e0e9287f21fdb62ff2bec5aa7648fd6d
-
/data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.appid.xmlFilesize
128B
MD56784f7ed44ca2225163497d681e6d067
SHA1e29ff80b0c705d64d3492515202311669d9f30ce
SHA256f73eef873334ed506e877192a95f9098179c3c8d680779aa7975c8ab2f41a60d
SHA51240f87a0c79e642d2e0f77aa787e7f7d0a26484e8b51fd1449fe219722fa44878159ca5b68886afd70cbb6fd834b1c9d215141b597c2c43b79361aa60165db6f4
-
/data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
661B
MD50e4ba0b65eb76b414facc16a4659d1e7
SHA1d668f4161656c8a2949bddca0de854c9065236b0
SHA256e302180cf0db54cbbbde21840f0121ac398ab0354827bb2cf93b45f330a1819a
SHA5126d2c94f2709f1e791686cd45085b194dfdfd4907aca16c55b812a3b7fe8a0059340adbcc275b47642d43a34bb8574a9f18e26b0064eeaaeaaf190b906ddf81a6
-
/data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
719B
MD5af054f77326b43f4edbdccaee056fc53
SHA143320246be52d6feb952f9cbcc1ea5e0a2e35b40
SHA2561f1fb11d3516d53bc81035c876879f90c6858014605fbaeed4251b2da63d18ed
SHA512df34fadc94ba1f244f4fae11d99055f194264de46c310402b46e3bb851b3801e61a8e8698624513ad14d11652e39eadf8328e7e18c02bb4d6b57f0a88dc9bd40
-
/data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
773B
MD512db74ee75182fda93ed1f31db1a59ff
SHA10c94145ad3f20ad487de4db8f152ca7dd53f2bf9
SHA256dc8f5118e1b29c424259078387a8e73b14080b1ae5d721245e18ca30721990be
SHA51288be9f36066e6e3e98c917d825c9f6616c5604486a3de090ffa32b92308c1978ed779ed580c711a1f0986188ff9a1160296a83cee6f8b2f7e8d84dbb537e1a9b
-
/data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
850B
MD58130bc16dfd89ccd4f9d283b341591be
SHA1637129d2a41b1285652eca0a15260db5b43edd39
SHA256ec0e9310eaf9699b260f1671c215538af7b57f8cc9ef12ea04d9a89a5d0e5b97
SHA5126ecafb2301525027c68fe62b42a341299764f0adbcebc62f94cc97247db16cb351ffd2405f7bac42ef91d976780da9d0729fe06774a18fcdc88e9f4c199558f3
-
/data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
/data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
449B
MD5320223e8437e4135d3c164e7103aade8
SHA1ca4715c6d203056daae2f7ba75c04cd1bf720bab
SHA2566669fe3a75042df099cec9464946e0c0529253dcff58cdf09bda4c466a4440c4
SHA512bbff5c96340ea6f0501e97bd64b6d0e890bde51ded02566a15065fce3e26c9d5a03e36d833ad9a7f287f4dea7e844704a44f7c342c3bcc237927293762d64822
-
/data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
660B
MD5207f7e8b24d6d916d81812e27f1b0ae0
SHA1ce02bcf680be91979cccd7a609f8a2bc39da441f
SHA25621bcc9bafeaad2955aa5f85450a520ac2968e3dd808df6e2626ada757739d7d9
SHA51233e42ab70fab3adea2b697fff0dfdad1df5b542a75bf4c7f3967b9e36af852564b87596050acca2cf4c6884bc5690feb86672c8c7503030a81e383affd183e98