Resubmissions

29-08-2022 20:20

220829-y4ec4affc4 10

Analysis

  • max time kernel
    3947190s
  • max time network
    159s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • submitted
    29-08-2022 20:20

General

  • Target

    gen_signed3.apk

  • Size

    3.3MB

  • MD5

    67bc18eeaca9ec3254394dcce2e3b0a4

  • SHA1

    ef0a17ed409896959fb93e5f6d62c14e3ba5422f

  • SHA256

    c160f3d1d4559482aa8f614e74c1cbd33dcebc2f7be5df622ee1ef3cfb052593

  • SHA512

    378c4e513c2831ba7c7136390c82c21a07fcd55a6a5b61bf35c95bbcc4293f1c124faf911af56951b96201090998a2352f3ad39af0a0d552bd35fcd65e46e266

  • SSDEEP

    98304:IEVF6aL7fDW3v0AMYfccAAmonM9QF7FuYN8p5HWVrziP:I46x3vKcAqnXJCp5292P

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4434
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4488

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/1
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/cache/~test.test
      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
      Filesize

      1KB

      MD5

      de66da82c77eddafa8db628b65218927

      SHA1

      1f9a81a29c4e20e26cce9b0cfec60caf0031ffcb

      SHA256

      a3ea6894127b5586d03aa6a2ef21b543ff1b812af1051512fc75655e877f1ab7

      SHA512

      be7759fcbe6b2d2f16a7030a4293189a2eaf7ae43b5d829d2dccec9c4dd6a31ecbf4e7fccb81454df8408e97cc5903032b3551de7350c98dca12225b2558b4b5

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation7032085416003579551tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/generatefid.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      239B

      MD5

      8dcef363a2ed64b38a360b0df43e8533

      SHA1

      cf7ab516ef9afd8f801a0ead5406acf7952192e9

      SHA256

      27dbe5e30438b179940fff953a342bf9fc993954991630416d7d6885c1303c32

      SHA512

      7048273a5fc09ae4d07b197c181b28a43ebc303623f60d6db73f52b0c019455f36525d5cab36abc4af7734098e87c4421098b13986048cb56846d97c550cd8eb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      134B

      MD5

      a63e9535bf0496021028c15f059faa8e

      SHA1

      b52419250d6f2a6a041c387e51fc80b2dc68c48f

      SHA256

      d00166bc7263c4322243f8cfb6b3f2503d1fc03243b642b78a7212ad4918b393

      SHA512

      e4fbee3fba8ca1e5f9270dd839ef252d02050014b9ecc596b733317b089cbbf4b392d08aae7dcb48b46e9e611bf0ebdc963042e1311556a1b2dae8a423da5358

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      188B

      MD5

      6485fd9a42ff0f27be2d22501ca2052a

      SHA1

      e54b4a7a555f96ce4f4aac9cf92e2b2ba896ad42

      SHA256

      96cbc8033ec0b264ae979d220deb0ef92ceaf2b2b1fe552f5985f1aac9824a58

      SHA512

      305db386f0ea3e3e708f0f1bf7902e87f4571d0ff36aa4c2c75b4a209f280c40627911e71bf1c3ea963818efcf020fa79bc50cf0b11dd2fa42130c6ccfbd3b57

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      192B

      MD5

      526ce412ac2859095f696cc9eae4e35d

      SHA1

      1b8627a659b548bce20a7d029b1a8f12f7b4b88d

      SHA256

      6a75e4df7ee989c8e44d84b78330df368f35350f6328cb05c49443efbe24342f

      SHA512

      521691224271b6796263032215967258c005a22cec72fda512c7bfd136936d57626fef9738692f77c3c2717aa535370135f3bf6a172d9b74e9efc7acdf599dde

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      250B

      MD5

      dcf037ed6780db8a66ee11ab8d1f7922

      SHA1

      56f0e4c40fe5b4e63f3ebc955b9e00ea0b6cbbf1

      SHA256

      555d5b661cb760a35d4686d7308cb9445fc6aeb5af54e6c225d14606dcc0a969

      SHA512

      855cab3ce9ce216dbe3381dc92892941e133427673e8f02386839ba51de0392f7db2e9664a1597a7e976d11103d474b053f4bbc064513d7bdc7b6ae02a37a109

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      606B

      MD5

      60fe014b85c74b2c4e80cb21eddfeb49

      SHA1

      276b75f321ad9fdfaaf6b46b81706c7d77f282c5

      SHA256

      b8293f329ee0e78a05441672a38228fbd4986468f00df49669ae945340f150fe

      SHA512

      c8e170ec1b1e9848a9ecb58b479891be0530e08469ec707969f00df7127825f4eba2a11dc0993cafd487992ecdbd4db60ab2348548ddf5d6a101446a633a4c43

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      607B

      MD5

      5b8e02e7f0a93cac77fc27fb208d2648

      SHA1

      9a7184dfd3e0cc0f158cfa17c8257455a07a1c5b

      SHA256

      a0553be690ad8d3365085370e0333a54d68b7a1f0c4cf9a0f2745082fcf4c08f

      SHA512

      c5035bf4a03ba6b91c3c703d6d61409f462f53e5aff7dc64c4cc184354378bc19410d4c3c534de5a349e2130d4f28a5e09655b39f4b4bac0c33e3cab24d28bbf

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      719B

      MD5

      0c91a7c3b52d969e5f1136bf5c3cc314

      SHA1

      352606285ec92478df49f8a4bc406f12a97541b5

      SHA256

      1076a809caf48eb1b0d614b892a5fc9ecd1f72c7a8943359dbc58b246d57310e

      SHA512

      514a3a312a046103eeb1282e26275f224f58cfb2b662abd0aa452a64e825d37df75e618fbef2aafde94bf15cf1668575114b51476d02bc4fd998a7457679dee0

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      796B

      MD5

      5329dc581d388d04c0cad2a4e40ecdaa

      SHA1

      db32fb6e899d008f7ad1f83c334f0ad60b64c9b1

      SHA256

      b16872dcf51a70fc54cdbebdc43c87240699488bb00c5dc9914ae1e60f5723d5

      SHA512

      326ced690e029bcc91fcad23e6a6540a8d5e722a1b51d09fbffddd1cf8e364b445561e7850691075de453dce63cc6d847ad5de31f4a5cdb2ddaddc8a5d5ecfc1

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      395B

      MD5

      0ec92d53cba0634b1e8bf52282f35caa

      SHA1

      118d6e6e89b216cd0a1b24b0ee977e0fe28400cb

      SHA256

      f4640e3017b84d01a3e431828f21543b64910f5382af9b67f77ca98b5247a723

      SHA512

      1271d9165e6c63223163d520e298a44a65b20da4be6f7aeccd2b9f948bfd7c741ef38956dd539a0cde65012f87c321924f2e027cc83cafefd86e206b94705b02