Resubmissions

22-09-2022 17:09

220922-vn5csscac4 10

22-09-2022 17:07

220922-vm34cacab8 10

09-09-2022 10:36

220909-mm8ptsbgbj 7

Analysis

  • max time kernel
    567577s
  • max time network
    147s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • submitted
    09-09-2022 10:36

General

  • Target

    Live Sexy_signed.apk

  • Size

    3.4MB

  • MD5

    3cb25b33fa771650cfdff4c544528381

  • SHA1

    5532291652b2c6a494e1248bb1530fcd36a4e6db

  • SHA256

    a3d3835cf139b1700c2d2145afc911b6fa9345f2ecd3259d85169f015a83dce5

  • SHA512

    60539f7ef2d3a101120ed776ff1845b724dc348c4b861a80554e654e53208cd156631683b49b974f5781b8324983d5c3549858aac4317d6ddcdecfef3d54f295

  • SSDEEP

    49152:q/1UjSHe5UQtHy1fffEcy317sc1x7B3l0ZL7ZhJqzdNlSx7i3CrgzwMmePm8D8pf:giE6efffnRcj7jGPJqzd7rCrgtm8OElU

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4422
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4481

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      1KB

      MD5

      aa9e36b3dbad114923bbe88647fb0a54

      SHA1

      1ac33f724d134b27ea829e12664ce9751f4af300

      SHA256

      3259e0b049e5a14f48a1c717b24e11cb3060f521f5c3a502b50fcbac0cb47a2b

      SHA512

      6e185330849bbeee5f9fd177ca600d8004c4cf8b7dd3ea83e27871321a2a28c92a547a28f54d5b6904ad68fd6d3836f7416824971565b0b449b51a4571ae1607

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      239B

      MD5

      d7c24089f0d784b5c3aa845b14463189

      SHA1

      4b0b1693618e0b49c08cfce175ab2e849f0f48a7

      SHA256

      f283d9e0d684ad30630ba3f3d04c81ea7047df542195397013ef4ac5209e1fb3

      SHA512

      13726f95d7495dc9911aa87d36cc1a5c654ab6189bce6d9e088050f7a3ae3026c590718c1db64e3c83c790c15621a5216b84984b45a95c8f449e38b36b0308f4

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      134B

      MD5

      08b280951eccd8fda192d6374c24fefd

      SHA1

      c1241e39992cdb8aa6648afaaebb2b34f8de97c6

      SHA256

      3d84557597afa11294db286c94c65197f37cb78ebdf2cddfc91d8f04895e5fcb

      SHA512

      a58700c1a36bd386f891ae1ebc5b6d8bd33faeea444eff097d4665d91a8185e9637922f1f8caa3976e2acf4d3e00739cc5b46e1544289bfcc746aa4340b3ccd4

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      188B

      MD5

      38af1b4353b7919d2ca53bee7d20bd02

      SHA1

      ccc08f6c0c2d8530330a61ff50943478f65f22e2

      SHA256

      466c18e1c9cd8a1d2d27599645ccd3e7d41dcaebb50729c9c8b763d3515de018

      SHA512

      096ba9f769ce3c30457c7a4b2de7b2d9da2dbdc8b76534f452c80b0301a10248afc2982e6a8f58e664996254710f12555e306c1bc9e74ffd629ffdce8c25e7be

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      192B

      MD5

      f3bddb5fde1f16acd57f4ac70555ca29

      SHA1

      0ab37964179ec61c1068ea36d88a8cdbe836970a

      SHA256

      3fb58c5392288d82e949144b7ec241e9737415cc645c68f54c58e758793c0b35

      SHA512

      97315bc5892e44c3aa3efe845de01cf96dca217643ed2992a83e2cf7e7b341ee202faeabe6c9b6bede7a0ce4614b3d40b2f106eb48a053902110ff14ef52c36f

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      250B

      MD5

      ea98d3391378d9bfd1bec1c385a991a5

      SHA1

      295d636526a661277d0c4af72b31b89999934762

      SHA256

      73f318886d4e5512edcb6cde02c9c6f775c21b845939000d578238f4af2ffbe2

      SHA512

      78a5cc6d1ef766fdc437be44767566b6c28c7f4f89199f9a9850df6ca680c5364d4b49424d717fccf8bef63ee8029354fac7c2c570996a4be0edc759b12273d9

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      565B

      MD5

      cf6d870ddf408018b1a1d33145eac533

      SHA1

      7d59a3bbdb54a0684fa3340d4bac8c6ec21860f3

      SHA256

      3913a12ac7d19d7226b3eda8bdf517476d89543aa4be66044b3e4bdcc97ba9d8

      SHA512

      925bf1d7e6d105ffeac6059af529d93ba3cc4367a2627fc12acee27115b3af2bc1d38255ad581a99256caee47a4842b8e601b5063fffd257294083158ce6aa7d

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      558B

      MD5

      49cdad75ae172bfc889eedb84f0d5f6d

      SHA1

      9cf461ce15b712445ddd07452fcb30c388a079d5

      SHA256

      c55510eec393692f659908f976add69013fdc5677c94df344133357e95da0510

      SHA512

      5b867041116ba28cf9a1b550914bff0b3bd0b8d86c98ef78c46283d48b16486d447ecfef7cf8fcb450ca900241b7f83d19eadf016025d0db7686f427c618f71e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      607B

      MD5

      d0326c57f429e375fbedf1acb25c37be

      SHA1

      edaf202f992c255338c81f95584b1ac5aa0a947d

      SHA256

      82f21d0645d06d698689f214f12d689fb8893f3337de98be9c2fdc2defca126c

      SHA512

      f3672f55f9f3effeff7993a24392d73389cf4e7a7214814a8f2a1d7f8b90da4d55f7baac5222bbe07bb17790e9fec23a57903d886ae45563ac20692fd2a92746

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      665B

      MD5

      e08ff3dbaff7a37060e7ffdd8ddada61

      SHA1

      9cc9d34d5a89a79064edc413561edd0be6e1e266

      SHA256

      361f585068bdef3187ac3b48de04e4b1d9e74ca80ff835f4cde0c97c7a3eafe8

      SHA512

      18b2b03b32833028ec98cceadf40234698a5b7601d57315905ab66be4b6e15e24fe1f36e3dd0c45534f4688364b214d1cecd83151f035195c9f9f5be0dbc645d

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      719B

      MD5

      0d4f806c4d524bc069a09820d76e8ff6

      SHA1

      db33e3318893acbae0776f33b0a2fce2c307c032

      SHA256

      629ffb86af3ed5701fb160f9e119ccf535d019984c44ef95337d314394a8f3dd

      SHA512

      1ff3ad171b9e20a4bacb04bbf681a06305bf6e3862beab31cbc806e86e43ffb5e8db0ec4fa08162a5cbcc6c5996df6d0f4762e13c71ea32875697478644daf93

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      796B

      MD5

      d89de31368264989cd1a2a8f0410cf0b

      SHA1

      8cf9e71462f0d2064ab4391f9825ae500041882e

      SHA256

      cfce20c0caa0dcf4702ecda0e262abf8cbf7642f65390194fbb08ef73f36a93a

      SHA512

      65b39a6e89d87d2f45b032bf82be4cd2cfe23e3622fdec9cf015b68ea54b8b59d3de300958771eacc310a7a269ddc80978e43fceee97fbd63d4a6c84570d0965

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      395B

      MD5

      0cdbfbaf28c8d30cc4e873b8ec21f4be

      SHA1

      28af839bd0a5fc4cc047b7c63476e3cacdf241dd

      SHA256

      6c727ece598d89008db0c5601acd3e974f050c80116f84fe8f3854deb82ab443

      SHA512

      03f67542fa00f4082804da5f335e90960beda61024cc174165c61c180ee032b0d062d9464c291bade46f3fc7832a58bf607fae8db6f4abd5ccf9477aa95ac9b6