Analysis

  • max time kernel
    462015s
  • max time network
    35s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • submitted
    08-09-2022 05:13

General

  • Target

    gen_signed3.apk

  • Size

    3.3MB

  • MD5

    73a8af6ddb44480a9aa87de968edf055

  • SHA1

    2f9f9be1dc67709ec1719f494dea199a7463841d

  • SHA256

    9c3e0fa862609d1ec431d12b66dcbfea76cbca7e36f9714eea810eadf7c564c5

  • SHA512

    ee791865f6ae7694144d81325333eba90b75e09684ebc955323c496c6af6beba885e2702c843e92ed11f9c5423abe295daf076559f9c520825b7b45799ffa344

  • SSDEEP

    98304:IEVF6aL7fDW3v0AMYfccAwW1sCR9fFjo5sgQDLZatuTFQinQtim:I46x3vKcAp1NfE9tC7nNm

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4369
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4642

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test
      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
      Filesize

      1KB

      MD5

      94490aac236090d2f1cc0156ca4eeb7b

      SHA1

      76a163fb0c7afb4ae88635cb702d562ce6c3875a

      SHA256

      d04c7705a43edeca5ff3e98b11766361f4fa00f1a3e4cbfcbfffb66855c671df

      SHA512

      bda3891c02f050f9fd30886630b9316cf33367781fdc93ee21eac4eb8623fbcaa783185338f5bec648fd27a4f1fca1793d92ced80168305207547df80784bcb0

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation2911209556292603104tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation6079764913992327165tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/generatefid.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      239B

      MD5

      966877dd622df4e15f5eba5614664997

      SHA1

      63e9ef7c7f0c43bf5f0b34256d64c255ba09e3f6

      SHA256

      fa7a33d42079dd1f1fa106319a01d585c7e9f64099f1b588b0c35b1e45bd5261

      SHA512

      dee74f5700da63f5f23ca1a7b3852d8057d4f2854479dfc7398e5311dbe792f6d4496125ac2fe830bb061c81c5a5cd048ab78b0c779fc8ec05a2d894d30253f1

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      134B

      MD5

      1c97c7cf43c05a2edf736fb77d0bbf27

      SHA1

      26897a95b7a6f4385ed72df40986cb63de8a571f

      SHA256

      a9957f9c0edc21f72a34db5b822dda617d6a75d3fbef8dabbcbc7d1308f28b9f

      SHA512

      6077e0c9bdb5c5e199fbbbc03f7e7844715ccd5fc92e02f9cef933db5d5a3c72ec6264f13fea323ef7987d5f8c48f06a462d284c2669d185ca8c3ccd193788f0

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      188B

      MD5

      8d4fad7fc4356cd78e665daf9be3cb89

      SHA1

      f09e32e5e1ac6326ee9696275052b0b97ee17a80

      SHA256

      cdd6a3b924852ad4cc10a41c347d5a1d6b9362eaea5a003f1a7e8028f2ae9309

      SHA512

      3434620b4ffd595a83e1dfa0c96740f7d483d1f6bcaf3a0ed5433eb25cc2f76f02a37dd13f46da754412ec9ba5d91bb49b9d1bcf0672035cb545136c85c017ee

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      192B

      MD5

      7b3fff421d8804673647edb10b540333

      SHA1

      a1de40feadfacc876168fb4167c428d16bf1cdd7

      SHA256

      f2240eb2c2b1c355c8000104aaa93e3f7779a82f5c5e356da64724295d82c50b

      SHA512

      65945f1d084085537bd2cd114bcdd034087ba23fd4cd1333642e42274d3f7705e58cfbc59b3c67c10645a35bf2827de31ff809cc2d87fcc5cae0f47429a1b3be

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      507B

      MD5

      a9094d35d39751a604e3ea8c03d20e58

      SHA1

      252f9e5b484e47a4acecdcf55205c29ca26d3db5

      SHA256

      ed187844a393d594a8e38639fc38e08eeb13188935a3ab6aece5012b6cd4ba09

      SHA512

      d5f4ab7dfb5fa7b47a3c54d50fb2438b0034bf585366c4838a4b507ba4f274bb93ca75d28d76fcfa0f342fcba9568bb7d53bf6e201dab72ba3a96d64ad47bc78

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      565B

      MD5

      c0fb0d8fa511c5c981c7c746d7bb75da

      SHA1

      8ff97eb85c870a9dfd84c89c1ba12d572c803976

      SHA256

      63be35c8bf69948200a781123fead5076c7f48ad994114c8831ab563da770a0e

      SHA512

      f8bc36d7342017745ba62dd50b77a956b2f8a305560ef40cc6502b0664b384e3156b107f547d16fba549018aa013bade42357a4090fe871d7aaea61e7fb6375c

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      558B

      MD5

      ef195bc5fa4dba36553419d387636fa5

      SHA1

      2772bae14780e6a2c6cefcffda6ac5a08e8b47f9

      SHA256

      9e97d953a0edc9c8372c46e46087453f8423bb583fdd55bab3867309e0826dee

      SHA512

      dc1ee09d5d1febdf57d2eeb3802cde17e0ea9a5d328ca32ed001bafee27705f1d6fceef4645c5bae0e3c7bf6e09c02c0b04407739daf3842d090cc2633cc21b0

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      395B

      MD5

      6b63cd085df3f47e8f4ae0fd61b5216e

      SHA1

      dee575b8f1f70ea760c678d32a29809b641ff06f

      SHA256

      3c3ec43cab6165514bc290a49447e54b66cbcbff1b5e9d82edfd2d88bcbf8082

      SHA512

      5346b84324605f2c568c67dd8c0dfa4d065545556841781211c6bae980fcbd56884b5d82aad3e53c0ac837d3989ddf82e3b7be00f3b1067e79a3def8e743521a

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      548B

      MD5

      1b1855d9167218b39d2b6f366abcc563

      SHA1

      731dceb3021e27f1fc27eb27692d97ae9832157b

      SHA256

      4a398dc742d9f5978bda98d77930fceea07dae4e16eab28e68bde848e6700fbc

      SHA512

      a353374065867ca9dbc9b7c28a870c30f284da06540e69aadc36e21874cbe5c46f740b1f7f7c8cf33433b115e8c7c6aca0144f08daaf63ea9b8c38362a200706

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      606B

      MD5

      b02316f2a3e496364fe0dde83f99f350

      SHA1

      b4dacaded950a11313c55500fc47af02d5ffff0f

      SHA256

      d54df891f3767dbaf51e8431d21ff5dfac8a36cf326837a6ae26688e06f16e4d

      SHA512

      0b9ddd2f12bcdc923bd400e65fd28ef6c7344d5173fe055bff17640d8bfe5247ec6ca9e2a9860f3832eb61a0843da40ac154c4088486d6f14788aec984b6b0dd

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      607B

      MD5

      dc5d8a7d141c64d1421aa4b7ba18a011

      SHA1

      74a53f13b6e586e056e1cf629261fea77dc2fcef

      SHA256

      5248f298c3a45c49f9ebb5357e971336519dabc4e375f9f59511a51e12315597

      SHA512

      8ebae22788baf08852ceea6b6b6e8fb597180806f8a139e8b8bfa184329119827e5087c878093361c109f609578ce0fffbcb3cb19294e10185e894aab3eebb24

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      719B

      MD5

      9ec31e1b16334ed8b2eeb630c4879ca6

      SHA1

      243a5d98befc514bda9369b0d6480fd4083dd8b7

      SHA256

      81817c369e113ddb2fa67444753a9da5610f19e67af15894bbbfed0cfb115b36

      SHA512

      ebc8f9767013ed328e1bb6379f7108e524845928500d9c988b845afcae18342dd0dd8e5d4dedc44cddb5557915152728d9c8fe1e0fb3fb5c96bc215df8fbb140

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      796B

      MD5

      10a05e4dfba15367afd8fde4a4405716

      SHA1

      9e98b2c35380d426bb8625f971dd784a9b7cef12

      SHA256

      1af08fba74d4ee8ac444bada0fb12240342de9b3b2f53fe34b7f41abab2f11a6

      SHA512

      9747efd137749f4c29a07cee50085bfa48a1ce3cbda84dfa2e43c0649eed7cd46fd788021c587438acaeba12790d395fef1594f22c8b1d2ed9b9fc0ff6256def

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      265B

      MD5

      412ab234d3b898accbd497c9cf42e18d

      SHA1

      6a349b7d560b347af6b6a79c23737e88baa5762c

      SHA256

      948a8f75d4968b5af493c1c7a22685983b77f73a0e818be1d5ea94fbe62f1bb6

      SHA512

      80ec1f64e00eb9ba22c96707d16a5ba35b2598449251a3378644576c6bb9654cb773db7599b9bc653e8d9dc03c4cf9124b4e86d21c0475dc6dbac78caac286c1

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      332B

      MD5

      ff78c5a4245e6babafb12adf646e93e9

      SHA1

      38622c9cfd29af142ed6dfde07a961a59275d160

      SHA256

      73e33394578e94f134c3df4cf1fcd75170853ad316cd39ea6dda84774b804b09

      SHA512

      e68a7d93627c1a4e804e9fef38527814762cfbdfa79c3384115cce6a6696c28284c92c29b8b056f90a5cd09a504124cc02c8227ac8f2e283ccf2c40fdf833d59