Analysis

  • max time kernel
    461940s
  • max time network
    143s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • submitted
    08-09-2022 05:13

General

  • Target

    gen_signed2.apk

  • Size

    3.3MB

  • MD5

    f9939b6f558ab2da1a11298dcd0daaa3

  • SHA1

    921ca7660f20a49679ba9ee003df30e10968302e

  • SHA256

    fa88048b5f80993c1535ec1629dffe075db7f60e2509be890966826f2631da53

  • SHA512

    9ceb274b52e46e92d00c464f16be76135a24ff57f8d18eb3bcbadbb0723e20179a46aabb43d1896c51db3567ee3ebe5acd4f8a71c58ebe70f5fc64098507fbbe

  • SSDEEP

    98304:PEVF6aL7fDW3v0AMYfccAEGVGrL+UopnjRKkQil:P46x3vKcAEGwrGRKkZl

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4520
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4579

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test
      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
      Filesize

      1KB

      MD5

      6475f03c13d958f5dcdcc451ade7edd1

      SHA1

      2586bd387c38d2f77fd77eec529d783b8236921e

      SHA256

      44b62fba7a678baf9df4c5a3ae8acaaf7ac5365169bc93ac4617feb6d253418c

      SHA512

      478e6e3998edc4b240988e8a241d76c864ef8c64fd09e56c77bf42ff2f984bc42a0c4e1083fbfd5ee53e9baeb0df6b05553b68a7da791db500f8bb38057329e0

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation2806520084301966977tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation6684152419319455755tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/generatefid.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      239B

      MD5

      30fc900238dd241fce2e4d9cda962d62

      SHA1

      6a56e0c6ee6b1f9e4b028210cdb7849c89c97efe

      SHA256

      17bce8e4e66b79f67e6479009c6228492385a0f2e4bd024029257322bcba144d

      SHA512

      3b10e13bc327c2b651e15af05a3ffaf33ab76218f2f4ab161bc980189acccfc0d39e7bb1cdf112c6891cc3d084b23760e8c4db5101307f34e3c858fefd56f1d2

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      134B

      MD5

      6efdacf4d92a6e1051de8cac0faf8499

      SHA1

      771b3f4c23e0c8fa9c620174732d33e0d6410626

      SHA256

      ad5ea083f8af213a77019885090b931ac6691be2f20cd449d909b37a435a336c

      SHA512

      6bfa6a3c9f7b96d848d5b83cca3279ee17474ba5a1fbcefef71fd90b6018a77376cabc2e4a6be15faceee775623a23279e44dad3ab06768250f3f8b0382ef204

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      188B

      MD5

      5e1fa5c0558a22b7ddf241874acba5a0

      SHA1

      6f6902d2a53487cc5b56f6f5eab098b310351060

      SHA256

      262c1b0fc2d0b34051370cac0b6439adf01f4528a45edbf12c340999824fe80c

      SHA512

      b5c4545f6533f871a0ecd202dea62e100819cbd73202dcbdf283cc910d4493dbb3cc5ecad8fd15252b299eb03f1476eb77daaa8983c20e65f6c716653da1e912

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      192B

      MD5

      f9294d55ab77b214fbe3324cb4e47eed

      SHA1

      106ba8e395a49e6709c814401c82dc6355094dd5

      SHA256

      94d695441e483df05945bd224a125a4a3676a0cea506ea76812d4ccd795ae905

      SHA512

      339f1ffe81349be179817cd44ba0ad88114a77a7f6739985d56bde4aa5d44051792b6a4b7b51bc75edaf89c2f9665747b524931a87e4b10d61038ebc972a4dfa

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      507B

      MD5

      dfd74d02d1c7a9089c842ee4f7cde515

      SHA1

      1d210f72a3fa8438c4b245482df6aee59e515159

      SHA256

      e985742074337bf805cbba3266371b1b37111680ef98da5a26d2ec3ccc4aa5ac

      SHA512

      5c09f602bc6ec5f8b6602fc5177e3cbd170877ea7c5310af6a89f1bef9c34fcdc7bdfe2b9cc9de45a2e61fc5003ab64fdf7306b15314d7b16b858b9c32651a2c

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      565B

      MD5

      22d2c381f37f0aa16cbaba04f70255eb

      SHA1

      c8f0f4dd4acc25d16812c7d79174daa4d4c34efc

      SHA256

      4f474a6768226b3b13f4611a0da64537f18d77cbf8d11ce3fe218048808fe4c8

      SHA512

      9b11dd60de5c63c3e67ec701edfabd631787170a14e06c2bea68e5be112456b1924507b1723dd0251494602b0a22b54520d9d4f744761aa7d4dac49443c7c263

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      558B

      MD5

      7b5e64dd16bffcf80f7525834fc23bd8

      SHA1

      6664264da4e92a7568b6f40e3b9af533b94e05d0

      SHA256

      866e5f30c1d6204eecd112c60e801af95667c7d8b19e98e108081eda97ef847f

      SHA512

      75e10f45ebe6150374c96eab2f5bbab1a8a742400bef62032f7cab42de35313cf6a6d88a10be6d0beba7013b5def3efc5681168bc7d8b9814f6e423316b8f8d5

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      606B

      MD5

      562ecaaa2580925a3052e3bbc04b47cd

      SHA1

      f26e9c453052f4da16e9d426df581b11f4cf39e0

      SHA256

      2bdf214378b21a1d1bdd37d2e9e78fbb39961a0c6d51b428aced7ea02acda9a2

      SHA512

      929279e11bd16000383daa868761af93fa92b93d168f761f1e707c2c412016b09fb3a6b97d547922745070b78b173bfc3d927ef5baf1ad98597410081eec6a71

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      607B

      MD5

      45b1822b7844304e0d2bd0cbb0cc2078

      SHA1

      6f69aa155b6ff3e00071dbfee3b4ec504a2c4b73

      SHA256

      15d1a3e272d02b066c4e6a7091652e29a27136ba6fc296cdd10fe19a98a35651

      SHA512

      79b8d54d8cda0f91b224cfb9e57534088a4d147469a05fa649b6a0f708216579683675b128a7014fb98bf02ced171fd86f42f5fbca2c1fa4e7b6597fd156c204

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      719B

      MD5

      1bbdbf228df67f7fce174a0b710dc546

      SHA1

      16b7202e82b0fb3fba7530fd267df57188d752b1

      SHA256

      d919addbe7d3e4df64fb73df001737d45ae3adf11ed8dac66c2cb51aa66ac21b

      SHA512

      3c92092c11d0a2bc2c5b851c5f83c5bbd4007789120c4806a9760aeeb7b3f9bba81d8f742c588db1ee5e4c962d9a543216c461733adf2517b265fd77845d9a14

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      719B

      MD5

      451fdbaa7d7f0f5403c55d84d1b5fb80

      SHA1

      dc797b53bba65971351f82c00fa4987f633a3f03

      SHA256

      d4d27e90264016b01da61d313869dadea3543f00b40babde108bb97d737024ac

      SHA512

      627a8f7e00401d89d13b773f81f1b30fbed53b47320fb5f650e014162f6f15c90842f318dc963aedc74b72ef0286dde34e90b5b02d8a5a4e9d1cf70244449f49

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      796B

      MD5

      1c37754b5b897855e034d93e0711248f

      SHA1

      6cd3153fbf80a6aba8365ca5e75b4974adc11823

      SHA256

      8f20f205b85a79d9764a0401214078893142e3f30e0ca6c4315d0dc53005f19a

      SHA512

      6f811aaff555fc2a93ec5e458d4985d42222d04b10d5e860efad789b6075949ba848cb1f269dcda06a3e84baa0081b9b0f50e3bf02d1c1461156a4b482258beb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      395B

      MD5

      b2a041a6e498a502b3414bb42e545fb3

      SHA1

      0a11f641d428553be17cf573eeb2df6be7648d02

      SHA256

      0396fe628c0ffcef919d9ec2ac8afc62b2b81af5f982a76c43e61cf6c8c1cd32

      SHA512

      09b73defcb2a4b6127f69ea6a6798f47dfde9eee4da701d836901df77ca2ca3f6f7d0cc4b3561ef9bd0d1929d3ed3da439ac5ab4267cb1ea7fafd3a2af0ea5f5