Analysis

  • max time kernel
    3894445s
  • max time network
    144s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • submitted
    29-08-2022 05:41

General

  • Target

    sighe.apk

  • Size

    1.8MB

  • MD5

    480379e6a333b21d1b807f85a8a6c65d

  • SHA1

    6159cf42b20fcba1d350b0893e56674cdfda2b5a

  • SHA256

    4dbe5345b61ceee178e1b57b032e9f134706bc1f5860832f9e44e7190128c2db

  • SHA512

    a46b8827654485c1938af2557268b4280fe6b1a3100e748a38e42df70dcc7877f978490ef7814d67075a9cb477d3eaa9c53a915f645b6e13edc8321fe4566b69

  • SSDEEP

    49152:DY1RClfotDc9G5ulFTeOQb/+xqUQuUePxOHj4:DY/I2Dc9k0TeOAmxHaePxOHs

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.comin
    1⤵
    • Acquires the wake lock.
    PID:4279
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4334

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.comin/cache/1
      Filesize

      38B

      MD5

      7ae4da7f94f2aa48b66eac0fef2724d7

      SHA1

      7ad3f12b4bd42baa9bc29bac5670a9f5072d5c7a

      SHA256

      31d99710ea1849c6f68f130c41b2a9da314d4e0582972bd258597deb88f468ac

      SHA512

      912ce1a5674de616974df88617d8c8fc5a15d0c9b22fa723f0dcbffe8a4d42f8f20b407983d0b64dd0712002067eeb1fff214209cedd99f2b6695ee2df2bf794

    • /data/user/0/ir.shz.comin/cache/~test.test
      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.comin/databases/google_app_measurement_local.db
      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.shz.comin/databases/google_app_measurement_local.db-journal
      Filesize

      1KB

      MD5

      53891d93b0c4698d056bc3301a242778

      SHA1

      db67b85114988e9ff969bb3aecaf351f160245bd

      SHA256

      e7489f4e5e8ac0dcdb8b8f5f73883b0d8f5a95b596a8b727275391986208f5d4

      SHA512

      147b93412ec1a2dcbb6dbee674a8a784e9c8b28d48955083fb1eb4a4acecfa0a735fb134153b5901d96142816bd2abb8902ade2911ea461a9f6bfc0f6bbadbc3

    • /data/user/0/ir.shz.comin/files/PersistedInstallation6500772189095579287tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.comin/files/generatefid.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.comin/no_backup/com.google.android.gms.appid-no-backup
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.comin/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      239B

      MD5

      64521f3f1281424be22db47e9b238830

      SHA1

      c0df0279debfd43febc374eda44a4fd23c673af6

      SHA256

      3d772736ac580854477f08478040d3eff04e3ee079bc6b8c9b130105a04d9be3

      SHA512

      504c339409772a633e74ed0809b14b8e35b3f232001f4991a57d1d88b0a64a93a4176efa514df3801a38a1706c2e1ca775188e2669d1df6d0d58e99f9fd8143e

    • /data/user/0/ir.shz.comin/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      134B

      MD5

      8fcb4ddb310b8cefd00f07114e7521b4

      SHA1

      b0dc6ada0c07f5ca3fcf22b8b80400b1f9136273

      SHA256

      e7eeab16776e10af90eb140f1721e1ed21cccaab2cf6f599d24ea3b4d43cc66b

      SHA512

      0842ac66c576ae63d884aea00d0618c013e0d4b89f4d7f826fccef8c1e08020678556cb8b5614b39f53a197735bfddab5272e25c055a0c0d9e1b06c322f2eadd

    • /data/user/0/ir.shz.comin/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      188B

      MD5

      3f3a68139bcf168b64c8d1b0f84a869d

      SHA1

      f9df3e1ccaeffb92932b4e18b59ada40bc7a0a09

      SHA256

      3ce2cbbc9da53c13632cb44000b07565de6a96ab3aeb156b03797c5e44193c53

      SHA512

      be1246fadd8fcb0056c2cc2e579142726ed72202c9cfad96710009b418652a79936e67832425d6cbe983b1d494f99f21e0e9287f21fdb62ff2bec5aa7648fd6d

    • /data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      128B

      MD5

      6784f7ed44ca2225163497d681e6d067

      SHA1

      e29ff80b0c705d64d3492515202311669d9f30ce

      SHA256

      f73eef873334ed506e877192a95f9098179c3c8d680779aa7975c8ab2f41a60d

      SHA512

      40f87a0c79e642d2e0f77aa787e7f7d0a26484e8b51fd1449fe219722fa44878159ca5b68886afd70cbb6fd834b1c9d215141b597c2c43b79361aa60165db6f4

    • /data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      661B

      MD5

      0e4ba0b65eb76b414facc16a4659d1e7

      SHA1

      d668f4161656c8a2949bddca0de854c9065236b0

      SHA256

      e302180cf0db54cbbbde21840f0121ac398ab0354827bb2cf93b45f330a1819a

      SHA512

      6d2c94f2709f1e791686cd45085b194dfdfd4907aca16c55b812a3b7fe8a0059340adbcc275b47642d43a34bb8574a9f18e26b0064eeaaeaaf190b906ddf81a6

    • /data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      719B

      MD5

      af054f77326b43f4edbdccaee056fc53

      SHA1

      43320246be52d6feb952f9cbcc1ea5e0a2e35b40

      SHA256

      1f1fb11d3516d53bc81035c876879f90c6858014605fbaeed4251b2da63d18ed

      SHA512

      df34fadc94ba1f244f4fae11d99055f194264de46c310402b46e3bb851b3801e61a8e8698624513ad14d11652e39eadf8328e7e18c02bb4d6b57f0a88dc9bd40

    • /data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      773B

      MD5

      12db74ee75182fda93ed1f31db1a59ff

      SHA1

      0c94145ad3f20ad487de4db8f152ca7dd53f2bf9

      SHA256

      dc8f5118e1b29c424259078387a8e73b14080b1ae5d721245e18ca30721990be

      SHA512

      88be9f36066e6e3e98c917d825c9f6616c5604486a3de090ffa32b92308c1978ed779ed580c711a1f0986188ff9a1160296a83cee6f8b2f7e8d84dbb537e1a9b

    • /data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      850B

      MD5

      8130bc16dfd89ccd4f9d283b341591be

      SHA1

      637129d2a41b1285652eca0a15260db5b43edd39

      SHA256

      ec0e9310eaf9699b260f1671c215538af7b57f8cc9ef12ea04d9a89a5d0e5b97

      SHA512

      6ecafb2301525027c68fe62b42a341299764f0adbcebc62f94cc97247db16cb351ffd2405f7bac42ef91d976780da9d0729fe06774a18fcdc88e9f4c199558f3

    • /data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      449B

      MD5

      320223e8437e4135d3c164e7103aade8

      SHA1

      ca4715c6d203056daae2f7ba75c04cd1bf720bab

      SHA256

      6669fe3a75042df099cec9464946e0c0529253dcff58cdf09bda4c466a4440c4

      SHA512

      bbff5c96340ea6f0501e97bd64b6d0e890bde51ded02566a15065fce3e26c9d5a03e36d833ad9a7f287f4dea7e844704a44f7c342c3bcc237927293762d64822

    • /data/user/0/ir.shz.comin/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      660B

      MD5

      207f7e8b24d6d916d81812e27f1b0ae0

      SHA1

      ce02bcf680be91979cccd7a609f8a2bc39da441f

      SHA256

      21bcc9bafeaad2955aa5f85450a520ac2968e3dd808df6e2626ada757739d7d9

      SHA512

      33e42ab70fab3adea2b697fff0dfdad1df5b542a75bf4c7f3967b9e36af852564b87596050acca2cf4c6884bc5690feb86672c8c7503030a81e383affd183e98