Resubmissions

30-08-2022 14:04

220830-rc9xcsbec2 10

Analysis

  • max time kernel
    4011028s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • submitted
    30-08-2022 14:04

General

  • Target

    gen_signed4.apk

  • Size

    3.3MB

  • MD5

    3e65dbf2ffa436c521958addc1f3cebe

  • SHA1

    5948951a86bb68987238f98773a959bd3cc1caf6

  • SHA256

    c1634d86ddc52c467bd21a9e325d23f5400c970515f927754d248ceb3e346878

  • SHA512

    ab8577c9e111367f660aef29333f3a9eb93a062dc086b45094034cb390869152142fc6f11728e57a0285d9af5c88550e81b14b9a62094715e5972e6fb2ddc4e6

  • SSDEEP

    98304:IEVF6aL7fDW3v0AMYfccAIv06ESCLTUDYckgNQ2XiC:I46x3vKcAIv06bjFRQ2SC

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
      PID:4786
      • ping -c 2 -W 10 -v google.com
        2⤵
          PID:4840

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/ir.shz.shzkisi/cache/1
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/cache/~test.test
        Filesize

        4B

        MD5

        098f6bcd4621d373cade4e832627b4f6

        SHA1

        a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

        SHA256

        9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

        SHA512

        ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
        Filesize

        88KB

        MD5

        7bd7e08b7c157fb7a04f9701b6965b65

        SHA1

        19ed78cffffd879509071b091ba60776c18e8d97

        SHA256

        c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

        SHA512

        a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

      • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
        Filesize

        1KB

        MD5

        4d89c56b406a9abad58989316c4c5ad4

        SHA1

        a6078a3a0e5ef7e9bd66b6ec82c8a6024378dea1

        SHA256

        874470082d7e7b21c17433b83597f1b68c8f181312518a8618c427d0ab50a8f4

        SHA512

        f3f739b8b0c4f44a263261bbbf7895e8484e8fac8b96f2088b0ccce5f124bbb831d7e67a91f7115dd5eb7c715494fd4fdc6998662a69db23580181970871dc43

      • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation1567854582872111176tmp
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation6396853976900015116tmp
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/files/generatefid.lock
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
        Filesize

        239B

        MD5

        68418d6cc24ab3f06248078850e1f0bb

        SHA1

        b67c05fb20b854071fafecd3bd1c180d395a1851

        SHA256

        86a54909dccf36043329b1e23e3a5bf607a9cd1fbead790d6511a5b722c0ad03

        SHA512

        ca0c48b191be597b427f8fdad2326527845692bad42a79448096d31d49e50d77034a7665d8b036496ab75e369556f3f6f8e527eac5fef4cd64d5609916a62728

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
        Filesize

        134B

        MD5

        31dbbd19bf3d612ef54dee271e4c52ba

        SHA1

        bb220cd2eb1cb6d5b162eea2d875ef5bc0055f59

        SHA256

        c2260f26b66113c0c3f09b8326121f7a9dfe373042b2412251e585b9582243e4

        SHA512

        c0a0742601fe93273854b142b857fb870365d29b0bd14e65b3e469aef9789ea2f831f2f9c88000a77b2efb922001a8ed3623faa735df0c9ed5be03857a53903b

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
        Filesize

        188B

        MD5

        8008c741540a170cbbfe2857a0433d35

        SHA1

        dff0edecc5be44aca09b9670b660057b3a41b85e

        SHA256

        f64f60e9a5728725506f5490f717bd6f919885dd30759e041bcc8b9ca2a25784

        SHA512

        556ae5b92b443458060c1c867220c7bf2faf20c06712225d81f43af93bdadeea57b89e7f1df36a7e7c902842346aa0da6c5dc2bd8904c101aa3b7ecef0f856ca

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        192B

        MD5

        e387ad4595f02494c17e76570a31ac3a

        SHA1

        74f97a5c5ec84c49ec2fdab2883bd61fe5b5218a

        SHA256

        809fad1f5dc878dfc6056209e47e9317296297e785a03e51e3cefd083d03c5f5

        SHA512

        df51a4679227868da62436b322049c2cb240e5dbefd32dd9e4e9e167b9a24c24c1ee0b61bd6bb90f7faaee89cf027996830ae02b2c3452164afb7f82a0cd4898

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        250B

        MD5

        47a5411004afd7bdc6d312bbc05d2f43

        SHA1

        44843c030e39ec0fb82f89bb5983f68881d5f829

        SHA256

        6a12142740f8df56331b4154fb3148c000ee2d91751bac3f80e087a2b0afd81a

        SHA512

        035784223989d9e0a298eebe3e7b354c243260305b513a92433ca924eb58fec3eae125f6ccffd0e44fcd8a82134efa8010abb5b917f92367f77218f7fb2df174

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        565B

        MD5

        814436ca342cde57050aed5511041c9e

        SHA1

        af93028cf7e4c6ea8c9ef4cf65018b5bdac2f56d

        SHA256

        3d38992e336c7c0e07fbb6562a9d661556684ecef45ed72be5c95bd37d68c53b

        SHA512

        62053ff9f3f2fb35611431e3246050ef4f3d687de79a35f19770153fc9e24086859c5a599365bddb8a5d126cf43c1ca07b07e0927433b7c2d2ccc80ba1ae9990

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        558B

        MD5

        b21e650dae3136a0531eb760701bbafc

        SHA1

        a8011dcb4826cef62fad74ceeb7c74255c01103a

        SHA256

        9942876e04f0d3061387cc3736001a45e4addd822d6b1bd6ed151b6ad465026f

        SHA512

        10de54628f99b3db88b2232d08a0f9ae290102e8d245e7aea27cb3354cbf833f07917dc0342755dcb3391b5f2549e5f44282ec7def5995cb4868fb111488b83a

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        606B

        MD5

        10e716baf9ec6e5a8d2d996b281c6986

        SHA1

        aabd0336f04e28ac7c604603161427712dac2f85

        SHA256

        be5e8a4bc8c1c4b907106285e1b029b565d120acbbf796e9c9a1ae772db5e426

        SHA512

        484c51ef8c40f867b547de57456a15a4e2292e1a26deb8f1cd155118b37021a19b62f15ebee7ade9074a6f03974bfaa40cee8599dfe43f0c93e83dfa04f3a30f

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        607B

        MD5

        e4d6309d4bbcac8b7f98291e851db485

        SHA1

        d20be9cbbaf2a6a64e34f5a36ecd65c106cbdf6f

        SHA256

        8ddbe90c57c661a33c90ce09388d71c4a83b83fc6573fe60de8fb4cc1d81026d

        SHA512

        92bb53350ff93bf0dc8ec8bda042c0a27ef933c469da6c21d1223b8818f87d7e6ce421496036385bcc31e9988789c02cf3ec052e589e3b1fa7360fa441540ed2

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        665B

        MD5

        abd0be715294e13e4dedcf696209c93f

        SHA1

        72b855be55ebed1a274dc54734ee041e6d3b1428

        SHA256

        633dfe43e423a8ea2755338a93d69951782adca03c865c6d7d4adbc715ee1922

        SHA512

        678952d28966057f160cfaf4a27ef3ba2f428faf1c24526beca3356abd49b5491115f8db47506e31e3ea0aa12fcd1629ee016b14b379a4c0d463b608873ea361

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        719B

        MD5

        1c5a852955ed210eeef017c1fa757a87

        SHA1

        c1ee8c4832422d7eb5317ea72cc39d4b1a01c077

        SHA256

        1b6be16ebb75d0e3424a33903b2d0503b8ae35040daf72f57ac25403863cff57

        SHA512

        28dc980d56a91ee21a2bfbcbde8a8819c52a2f9c03d853a9ee5b0db3c997bb00732f9dea553eb92bcfd719bb20b2e9383a76f7c9fab768c2c97447c3c167d367

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        796B

        MD5

        e110f1b724acb1b89b57a78a3ded26f4

        SHA1

        c8c7b06ce41478e6a09b237f744c0c39eb486007

        SHA256

        44e1bc4f378ff23ffcc75cd4a71ee681cfb96451ec1a8d055586c118fc0f9e62

        SHA512

        b29cb4a4c4325fcbdeb3164f04b4a6b06009258e5f3d2270f367790efa3555d7d8f4b8002c5fe58eeb72a900d8b3e121fee094b0d8708760dcd64f8d0245fa58

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        122B

        MD5

        250b4caeba60ddf53228405750ba66ca

        SHA1

        422ab714feb34e9f3b4f1cbe669887bcd581ddb1

        SHA256

        2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

        SHA512

        373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        395B

        MD5

        7f59d801f7f079f1402341d6e0635758

        SHA1

        2bb2ab2ea69f6bce3950c952dcaf613192a68d49

        SHA256

        ed81e38e7293c39a6d1580cc1b9d814f83a62726f207f87a9e0ecc84515daf6a

        SHA512

        0c2a2ec2b2568f349a531b4f8b4eaab020d113ab198f65147f58f3f25ba8f7a06f587b8609d5f7d8da7de89e65d14e2296183cc6ef070ef60e7682998b3a7d94