Resubmissions

22-09-2022 17:09

220922-vn5csscac4 10

22-09-2022 17:07

220922-vm34cacab8 10

09-09-2022 10:36

220909-mm8ptsbgbj 7

Analysis

  • max time kernel
    567582s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • submitted
    09-09-2022 10:36

General

  • Target

    Live Sexy_signed.apk

  • Size

    3.4MB

  • MD5

    3cb25b33fa771650cfdff4c544528381

  • SHA1

    5532291652b2c6a494e1248bb1530fcd36a4e6db

  • SHA256

    a3d3835cf139b1700c2d2145afc911b6fa9345f2ecd3259d85169f015a83dce5

  • SHA512

    60539f7ef2d3a101120ed776ff1845b724dc348c4b861a80554e654e53208cd156631683b49b974f5781b8324983d5c3549858aac4317d6ddcdecfef3d54f295

  • SSDEEP

    49152:q/1UjSHe5UQtHy1fffEcy317sc1x7B3l0ZL7ZhJqzdNlSx7i3CrgzwMmePm8D8pf:giE6efffnRcj7jGPJqzd7rCrgtm8OElU

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
      PID:4720
      • ping -c 2 -W 10 -v google.com
        2⤵
          PID:4802

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/ir.shz.shzkisi/app_webview/Cookies

        Filesize

        64KB

        MD5

        9b23e6a88d5a95f155f205cb04b93cd0

        SHA1

        b62dccbbef087a0731f226b96d15d35d8aa5e5fc

        SHA256

        f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857

        SHA512

        bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482

      • /data/user/0/ir.shz.shzkisi/app_webview/Cookies-journal

        Filesize

        1KB

        MD5

        b768302094b988766ec145a3b8319b7b

        SHA1

        4ab133c20d8c6b23dc4d7fd4499763a9b064517d

        SHA256

        94971c0abc5da0d67a83b7b9bb78a6fba87034c71aadf76c7003e457a91d37a7

        SHA512

        0d70a2dfc5d27d58c3d4aa697de51acafa623b851d9dd6b7211746a655406f82f4ebdf060a4edfbda6f063132aff7db57e8b681efcc4194dbeacdcd6ae9fa394

      • /data/user/0/ir.shz.shzkisi/app_webview/GPUCache/index

        Filesize

        48B

        MD5

        6d7d499960179766cd4261d12dacc411

        SHA1

        e6f8553b0015e12b23cc551afe98763f3b1c9bed

        SHA256

        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

        SHA512

        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

      • /data/user/0/ir.shz.shzkisi/app_webview/GPUCache/index-dir/temp-index

        Filesize

        96B

        MD5

        b886bbd36d7a2a3772d69dba69cae647

        SHA1

        9982fd4805dcf1317464b2086ac484b5c8fcaa34

        SHA256

        c689ad050195e78838cc5518d63434b064a2cb6a9830b4e4db2d04c625dce939

        SHA512

        a956016ba5de8f3831d1ea8198cbc8e266a74621ac036c668f41fcf45021cf0816ca0f59f42b35f195dc71286b88086d8e2862b5694bc89bc9a73327e93c8fc4

      • /data/user/0/ir.shz.shzkisi/app_webview/Web Data

        Filesize

        112KB

        MD5

        b663831f8cc130493476d94f2d7a5330

        SHA1

        043a1956ab8e40821d67043f8a9110a8eb36fb93

        SHA256

        c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

        SHA512

        e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

      • /data/user/0/ir.shz.shzkisi/app_webview/Web Data-journal

        Filesize

        1KB

        MD5

        6f39c918d4ba2b6f740da9459d19fc10

        SHA1

        202e8080828db38d7818919d68e1aa94ac6b4c38

        SHA256

        6ab81183094fca78030b5c94bd34c0e832aa777187168de7becb3ec84bdca8a5

        SHA512

        05b2e678abb1b44f8f2b641a9ea7a34768fd35666dc71a039c0249358d59fae04c756c51eb6448613a9982ee72680b8ba87422a8badae8aea2d6f177217fc1d7

      • /data/user/0/ir.shz.shzkisi/app_webview/metrics_guid

        Filesize

        36B

        MD5

        379b115874fd0b262db3b2787b575452

        SHA1

        f34b6bcf679ba4587d4d0b58bb2eec857b72e966

        SHA256

        44a17c67c756f81eda595a4e97a4be365c5f483d5a89cbfa7d294c8a3b43254c

        SHA512

        c760e0c1204a32bb5f73a016149f391ae6cda6db06c73a10cb6a0816f8f3dfa45e60b937a7beab13906e077beb7b19849c4698a518d4aee19f195b4bf56f8bf7

      • /data/user/0/ir.shz.shzkisi/cache/1

        Filesize

        33B

        MD5

        8f9c9aa1aa634b177b4447af120e341a

        SHA1

        a9e4b9f73e606f8593e6915b5b6622056a8d927a

        SHA256

        410fba6169a54ac9995d6814b8c7b101330232558d7c834645294e6a35dc68e0

        SHA512

        a54b0698cb817a71e61c8234f2d7b55ab5e8196db1fd3adbb45afeb1b2e3b68e862b4637509b821dede04d27c771ff4d2e8cfc0e1418b820beddf03be40dc533

      • /data/user/0/ir.shz.shzkisi/cache/WebView/Crashpad/settings.dat

        Filesize

        40B

        MD5

        416947b39eab7c388bfd24814711e2af

        SHA1

        d1b7c2c8b207d08e76e40bf1fc1b07432970c951

        SHA256

        f18857bc6361ce7f28b4c1d86c25712073d14d8371ba9842a8ecf2987336118f

        SHA512

        b734982413a7f1997b4b2d1f3c8d4326ad3fe69d9855c74739c83678510d552cda08661707daf2522c453c839996e9198b53da4c3c9d2669ea2c2602e020f90c

      • /data/user/0/ir.shz.shzkisi/cache/org.chromium.android_webview/856f603ef7b9e4a9_0

        Filesize

        9KB

        MD5

        2cf1efa7bdefe99d413e7b3466d99ea3

        SHA1

        27a05bb64b1269b8f1b931798bfd3ea9b125d0fe

        SHA256

        245c3c321c8eded2c5f83e96d586b6ba82987499a2ef7d1b1d37b418c01f6e8f

        SHA512

        4a4af173533e1cea3e5daa4b0adbb960e7b3abb6f1f13d645e6003296c786497b586f544d581321fc844cc2055860bc3bce309edf1c7a47040d4adcd02069a3d

      • /data/user/0/ir.shz.shzkisi/cache/org.chromium.android_webview/Code Cache/js/index

        Filesize

        48B

        MD5

        6d7d499960179766cd4261d12dacc411

        SHA1

        e6f8553b0015e12b23cc551afe98763f3b1c9bed

        SHA256

        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

        SHA512

        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

      • /data/user/0/ir.shz.shzkisi/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

        Filesize

        96B

        MD5

        8b002e7ed770fcdc79b60c3544494143

        SHA1

        343f23dd8e0198dcf731e43c69c9d6eca17ce6bc

        SHA256

        428eeee25e06fbdd40427c183c24a056f354b589ad0d8f366029f4b2236ef9b3

        SHA512

        bbad5e3d5bd121e78e00117ad9dee834d14afef59bf216ad6b90ea945eacba022060bd01da7b9742b5116b7723739da8367c3964bd30065d5b6f1b0cb7aab628

      • /data/user/0/ir.shz.shzkisi/cache/org.chromium.android_webview/a56df6c564443064_0

        Filesize

        270B

        MD5

        16484a17d9308dbdb9b346ca3f38a00f

        SHA1

        b52d38b4379490d0a1bccb42e9d37973c400fd00

        SHA256

        800c5d723849935b313ecd3df1349739a3d8cb6c3ac94803c61e2c3aee6d545f

        SHA512

        bb2799697a03c530a7b1ce9e5b76bae21dfac379d5f3b3a4d339a8a2416e92bd1ff1672940f4e59e1222d1775c4a47cd092907dee42648eee26dba79b22c17a7

      • /data/user/0/ir.shz.shzkisi/cache/org.chromium.android_webview/index

        Filesize

        48B

        MD5

        6d7d499960179766cd4261d12dacc411

        SHA1

        e6f8553b0015e12b23cc551afe98763f3b1c9bed

        SHA256

        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

        SHA512

        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

      • /data/user/0/ir.shz.shzkisi/cache/org.chromium.android_webview/index-dir/temp-index

        Filesize

        144B

        MD5

        4970dfaab0e1e2484727782e0f9d2a87

        SHA1

        f257eb1394437abd3a4cb15aec75447996c11143

        SHA256

        f3bfab2db639099bd258d0f1e510af22e9317f11b4c3a03a94fc6b731e55d67f

        SHA512

        81216c98b895d49469898122cb25b1ca2cb26c34e3958d8a931522056d622fa91a0ddc8fbd70433bc50b804336aaabb4e7f1f61860e7e454ff9454c0a8fa48b8

      • /data/user/0/ir.shz.shzkisi/cache/org.chromium.android_webview/index-dir/temp-index

        Filesize

        144B

        MD5

        585d01db085404cc5ad28a2880a6ff72

        SHA1

        b0d482ec80fc910f86cb4a4d04ad6e047d14a8d3

        SHA256

        7ac27595e5f92d79624999ae913bf415a1c6f14ccceb655bd3c67f01cc9eaf8a

        SHA512

        ab2a96de7d0b5792f47db0ac474efc97971c6939b50ad248f559c55ddddb5842a48a0bf623429929eb6bedb4fe045be4831e01c58e1ecd53f01e06e9d58f052c

      • /data/user/0/ir.shz.shzkisi/cache/~test.test

        Filesize

        4B

        MD5

        098f6bcd4621d373cade4e832627b4f6

        SHA1

        a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

        SHA256

        9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

        SHA512

        ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

        Filesize

        88KB

        MD5

        7bd7e08b7c157fb7a04f9701b6965b65

        SHA1

        19ed78cffffd879509071b091ba60776c18e8d97

        SHA256

        c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

        SHA512

        a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

      • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

        Filesize

        1KB

        MD5

        b2a1264bda9eb605d195b411997fc6a0

        SHA1

        715963b9b1b58018aeb50b1122d22c7b999517f7

        SHA256

        d1e0d0e67cdebb02237d00efa18fb82273912b8652f53f2dea8c0264897da4c1

        SHA512

        8ef24aa074724145060baabb00f2f799944fe7a28d0433ea7447e6ad92db784a552e052f706977b2ed74c9b7bfd86e3ab0632ff89038b67a3723371cbf688afb

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        239B

        MD5

        d7715841e8a46675bc4743fd495c6513

        SHA1

        0593400d1d6e4d8a9f17c31e548afcbf30e05181

        SHA256

        d72ec6afe26f5d24690bd2ac71144b8625adb184291007d56ef8a88ef6c3daea

        SHA512

        c1bf0d7421619640b8c0da4d228c7b973193e53df998138b68db4a8089f86066593e0ad1346a76b1b7181031f2b99e02b47e44b1eb3ad8613377f04cc814f266

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        134B

        MD5

        7bd343d3ac6c752484976624798e741b

        SHA1

        d239647d54fdb5bd6338ce23644a223fdc080ff6

        SHA256

        d98b68d2e2863a702fda9c3ce384581c33b0ea6671ccb4b1b7134e92e734032e

        SHA512

        402402dd1524cb97f0c8e0200c75c48ad62fdd37a464bc0bde448cc185b7ad409427f3e3d441e18d41d5fb2d861c0326af3dbad28f15f98a6d2d9401e843ee98

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        188B

        MD5

        c1751b8229a9a57b8097548dbc01bdfa

        SHA1

        bcba8012580cca1b56c23784ce0ac9b733afd802

        SHA256

        13598c2782fe5a89f225b76618db6e95e1af83d69e1b86db371bf724be94e078

        SHA512

        34444f2156a3f28331b42215592171b8f0d6667630153c17a846d0ddd92ae1ceca73d89ac29853adf96ecca1c222702bb488d19ec5ddd3c727f3463b15a02b1b

      • /data/user/0/ir.shz.shzkisi/shared_prefs/WebViewChromiumPrefs.xml

        Filesize

        127B

        MD5

        6ef709b8536878951e87c29a1518fc2b

        SHA1

        24376c70b00152501b3d98df61fa7db435339172

        SHA256

        10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

        SHA512

        96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        192B

        MD5

        1d58cf1a08fad4cff88f9b501db07944

        SHA1

        400fa2f7a97f2158b570a92641f59c309005a224

        SHA256

        bd399a26ebd7a489cc7240816dfcc81300b6249b71b5f321250fcc19894f3b12

        SHA512

        923ce8702bfaa2e2228bd472f8c7e73811c10ff58302dac026a4227d37ca44d2278a892a7626da3efc63df9a5e300e0e3c034a970e804fb1bf12091ed8b48c26

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        507B

        MD5

        79ba5f4c0005f75bfb9c53c2c56560ff

        SHA1

        21c72d3e2217077bfd37265d81edf2dfecc6de4c

        SHA256

        11681594b95d9423e31a274553008118e48c230e2646bb1ca2be482019cad841

        SHA512

        efe985f8dda306f031ee9f343c951011d222fbcf11a10453d601e13b65f8f2b0a38120301857ce8a57bd86994ada36f1d63e86c43a99ad32dcc1836c7d732e85

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        565B

        MD5

        a6c1c4953b46a407fca5db033a98b9ea

        SHA1

        6fd91ecd9f36490d67d5089858990102c424c4f2

        SHA256

        9ac6479fa082ed14841fec9f7e1c70d72addd5fd46a2160cca61d64faefc86aa

        SHA512

        7c4d73749dc29d2b35a3c47a2125ab122ef6cdccdc1fe7ce61938f3bfde493350f759798171a5e28497d1f1cc745da7ea98fc91dbaed5ad98609e6095e6b4acb

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        558B

        MD5

        79e0492bcaaa223953d585300f786f05

        SHA1

        2202ab6d933e5540870b13b21ed7ddce6d1c8236

        SHA256

        e3dce5a91bc067820d6ec8ad5b2e20c0806bff118dfd3af0ee3bcededca7f3a5

        SHA512

        baab78597661acc79c210467a191170c6c39fa9e77e7ee28954c69a2cc750a869d07ace0b8d7670ab390444495cc349a10df72edbba1ec7162cd7adc143d00ac

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        606B

        MD5

        a0125980db69c51df455de359ad882cc

        SHA1

        3cd9593b85d0c4f6104589f8c843788f82856983

        SHA256

        820cdb97b0d8b2408cbca36b0a967686f8127f6994b29315f112a49e640b7c7e

        SHA512

        88962d369756b8640253e3133f10dc879ab86881f0672e6d764492833e735463dfad516459bb40c2fad7e6223112a17040bbe38498996168cbefd1d63c037f8a

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        607B

        MD5

        a189adddc80cb078d3fd7f7064e5cf9a

        SHA1

        8d0d04f5c2350ed558641dd8b02b9bdf79bfcbf4

        SHA256

        6461d15913391b7431bf7f14691b9adeec496ba682953cd325f0723b8801562a

        SHA512

        551b0ae84dc22592c9aeb39318f1d873d7117ccb930d412c05d186cdedc0913aa1b783bb62ebc8a16cf25c3085de75d77fa1399c7c85b0d549b53d2981e61fd1

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        719B

        MD5

        a4502912d2af904bf4a7f64e715ab93b

        SHA1

        0fbc573d7d9d0b6cf8cf60e1765225cc7bbc22c8

        SHA256

        52a1f43adc002e19fa2e2d3e02e895cb0eda2109053f4e5e464f6c515a627f62

        SHA512

        c385a2016d6a7e7b777cce31412dcfb1b718be98268e77cd0e1dc90bffaab14e8b23cad97735c6a84f1aa61e39a7962f5ecc67f09d49e5ce613e5e919d232b07

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        796B

        MD5

        56059f72e1ac4d246d12a2ff157ce28e

        SHA1

        20155f94220b96eacfa19d8b5b4549aaed8f8f56

        SHA256

        aef3b092d66207b99e3af399dc3eb50f86148f1dcd0b0b3e878818c1da14c98e

        SHA512

        00537b5e4d6ed6ff6b1c4c7519fdd6ea3f11f74654521717c45813c204e9d8f6239d57a87d2cd1795d0b9f3a2ba2fb013b38d8317a1829c36e76741787f61ff3

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        122B

        MD5

        250b4caeba60ddf53228405750ba66ca

        SHA1

        422ab714feb34e9f3b4f1cbe669887bcd581ddb1

        SHA256

        2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

        SHA512

        373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        395B

        MD5

        1aa04d0db8d13e060c01851734e2e536

        SHA1

        2b59308bcbf2ff35c17fe3022568d9357d4230a6

        SHA256

        8afb9993dfe9e426e255eae01d2137612d793ad881a9530aacc778f6d26c2903

        SHA512

        cd1eb1d5671fee8ddb97f4ac8cc6f4e9910f99f92ff81b6f6c0d63e0245e3324f31c83f02d212a11ae4467be6a30cf636a92f83b632e4d8f24c4af6dac7c903c