Resubmissions

31-10-2022 16:23

221031-tv7wtsccej 10

01-09-2022 16:48

220901-va38ksgdcj 10

Analysis

  • max time kernel
    4193668s
  • max time network
    147s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • submitted
    01-09-2022 16:48

General

  • Target

    gen_signed5.apk

  • Size

    3.3MB

  • MD5

    8ef1ab67f230739956d1330689f8a909

  • SHA1

    6350763cf8a0af436f3abf8a43a812fd4c0fff58

  • SHA256

    07f84479a0d5efc5723d7124ff0b32b7e7afecd6075c78ee84983cbfa0769705

  • SHA512

    e5196202eb9c114b7a8dca77904470c51545ec2f8e7ef5af3fee15699bde2e16742405bc61d72318d8e270d11c5dceab14281d50164714361a75e29ec3ec799f

  • SSDEEP

    98304:IEVF6aL7fDW3v0AMYfccAxAWS2NPEMxmJRLCkS8dlhgFi37:I46x3vKcAxhSqPEQmJhS6N37

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4420
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4473

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test
      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
      Filesize

      1KB

      MD5

      c6a78c4d548e6fe627f17180b172c1f5

      SHA1

      915b95a95ee7efb5c05711ba2136b68cc53221a1

      SHA256

      3af813cb800b4b0b4bc11cf7e0a3329abd5f6f4c90ae8e7cabb1a82b8b38fdb6

      SHA512

      81ef9774e383852d7cbee38ea9cc532be51c4c35c9fbd0db1e470dac2197dee6e47c3fcfd211f3957523020f9263c7a99bd0996d20ccbea5510de4f7692fa19d

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation4629543446869602259tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation4830878676599459921tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/generatefid.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      239B

      MD5

      bccbcca6ca00354155d0ca0b66260603

      SHA1

      2e40e09893ed3f75fc9d583ebb3de21f1d981490

      SHA256

      89666b0f8f1741ec24c675e9b883cf145592284692fcacff9a8492d86f5f119d

      SHA512

      d25990b3ebe5d5e4cbb255306cf0a248b9cb874c28fa5c5041c2b6a973b508e1ae229342e8754a852f53b1045e3d41eb310ca7101f6552f138c07091dec4b679

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      134B

      MD5

      6e5e72873a7be70dac94fd831c8417e8

      SHA1

      f03fec00c658f0e3434fc0009a5f00e38d6c64af

      SHA256

      55fcdc3a9bdf1c6dd466cae056dbe9f3104a71b91c7ebd4e88e7da969d7bacaf

      SHA512

      9527689247f4413f5a615acd7fb3cfe7b66f13dc3789393987743ab7f087eb9c542b230a1f04aa0def5ccc17be563a88df71bb6943d4751f72bfcc84019dd66a

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      188B

      MD5

      e58ef74e9b6c746916a04c2a4642fbf1

      SHA1

      0c478dfc4a85616316b15c4ece3b41ef607a0c9f

      SHA256

      7df634f4d3e481e9e283994540afbabe596b287d83ae408f90c96e8fd21452c9

      SHA512

      02ae758269e73233c4cd60e58d0609d0cdffc7895b35fd0bb134a658c2c5eea0656da35b80fe73c67c7daa51823c9c593aaa7e7ca53e5418a2ac62dac0c5242b

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      192B

      MD5

      f3a1be843b5b06ccfb2a3f13bca92432

      SHA1

      3b33aa916b8f7beb06dd4e4367b94a6a8dddaf78

      SHA256

      72454f95c105e6d54078085f6cbe52a07316679b5669249cb77f96924c740f6f

      SHA512

      2f8f3fee14414d6f5a38a86e78dd1c2da4a2931150582d98bd34dd32a72121bfcf38900ba533ec8d97b4a5624fd7146efa4ca8fe2e194a4f5a1ce4b6b5108fd9

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      250B

      MD5

      158d5777eaa0fb34361accc5353a29cd

      SHA1

      a4655be0e61f301c3e50f69a4b25f2588d1010a6

      SHA256

      f965485f3c9c520d9469e4bde5fecbceb45d97d92e3a4ed616fdd3c8482a4f36

      SHA512

      390025ad38f7169106f85a57dce1248722c2a4d14071ef6b05c9d303a6fd2533e2786f343abca325effed33eb26a13546a8b30d40bc165714cbaf4c39d8a3a62

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      565B

      MD5

      242f9c36587826aa579aace7d03a6b9d

      SHA1

      2912f37e561378d237c9a492bfa7435baf83f33c

      SHA256

      502e3e6169d81f14aee29574ebf2805fa4ac0c6b2319ab39b914dc73f7a5c647

      SHA512

      abdad66566f9d2ad7ef9200ab5f4c92b1293c84f0d2ab3ce83746c8a90a54f363b09dd248e1cc2f277bf721ace8902db79999454aca36a38ebab08185d433c1a

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      558B

      MD5

      bd13aa4e999dcbba952f45830fc16c6a

      SHA1

      238d946a2f490c81e8b1acec1ff2dead1ac6733d

      SHA256

      6dcf4eb4f554a510d65625b7fe537819879c3f3bea910b49bad850972e74cb7f

      SHA512

      e4dc2cb116337107f1c5a2151624cd4e6ff2a6d8926e12236e0ef2ba79fce751919bd72b581bb15064025372a104378e02dcbab70c6764559f7d72b7b06860e1

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      607B

      MD5

      9e53db02a2e5bdcdae5404b65544c2bd

      SHA1

      5861d1e1c0f4279f3e95d0a8738045f2bc0cba2c

      SHA256

      9e4526a3aa562a0c8586ffd90effe9d8115c0cab229d1cb38484f32b86b1db56

      SHA512

      4d620b8a7675d2f163089f1e751903634e4e6422d6b2f52a7b281c0e1b4fd2f9a6305e09367b58fdcb3ef29b8ed0e501c7d7eb72e52f3d4afe4427642722b57a

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      665B

      MD5

      d5fa5c1224a3b5c3a0e2f9ff759b6fba

      SHA1

      8add648fb652adf739d5cb25e57e29a5fee0a6f4

      SHA256

      55751cb9c69ef0b3099de4e115e8cf8b89cbc929678820562b351bffcd351488

      SHA512

      9b6a018dad0d6c5a2b7cae4514a45f7405854132adafe1b75990fa783dcc9359aa29c52d566454729c1fa5cfb55172bdf455ecc4178c30e46855da30842f3e6b

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      719B

      MD5

      c66cc12fe4c09fbe61fbf37e98361fe4

      SHA1

      b68454155d3e7bdd0ac9259da944852ef13719e5

      SHA256

      f4a7825776dc3d4e50850c372f4f0da4a87110981eff5956ef1792d6cc1099f9

      SHA512

      f6d499fe531de5f73e4afa429c71bdea7b19519b5199faea2904de54fc0c0b868e18ddd85e2f40c95b3259caebc72322d960dd9a86b2f1677d71cf313c093eb5

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      796B

      MD5

      261bb65a0b0b9489d9d1f93ca862beea

      SHA1

      49a1714c09985a701826185dd8b25f65d8ad5db5

      SHA256

      1f17905ad8e5762de5d39ff9ce69e75c747456042d3b06a0296000f5e650ff15

      SHA512

      1bb9aed15255e466b4ddf6f999392d0923bfff6608773f1b11bc62f912d68da1ed0206f8fd700052f07ab6826ec3368cf2a6ba3887b53dd36ec1e4dbbdcb208c

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      395B

      MD5

      8273fbfcf128fb92243f98de60aebc19

      SHA1

      a0983c2d3c40b2f05f0181a55641f4c6b75a48b8

      SHA256

      d81329a032d514f0bd8d97ee06e35c872cc719cdf43fe4281258eaf0cac6e60d

      SHA512

      27b25733952ed48543085f9c0591c1e17841cc683430d714f5ab1e500ec8ee40f2509d5e33bf811517183c4fcd997a0f8cee68d39aa3c830942ebd92ae68c2ad