Resubmissions

22-09-2022 17:08

220922-vnvtcscac3 10

22-09-2022 17:06

220922-vmsbvacab6 10

15-09-2022 11:34

220915-nppkeagfcj 7

12-09-2022 08:55

220912-kvgj7sche3 7

09-09-2022 18:06

220909-wpqrgaggf4 7

Analysis

  • max time kernel
    594520s
  • max time network
    147s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    09-09-2022 18:06

General

  • Target

    Live_signed.apk

  • Size

    3.4MB

  • MD5

    af8c6f5c4c1edaefb17263649c46bb6a

  • SHA1

    96aecc877cf9be5472ebd757326feedbd9ac31b0

  • SHA256

    c39d000ab3bc8fed90aa713ea4ddaa24379a5bb5c995a12c43f4bfd033b2dacb

  • SHA512

    e73ac4720810935e3dca94d72a895e4ef80279640d684f288c46ea9a7dffd94c5b4b47939f8127b99a7575da57a5052563a1876992a90eec250ed3a20c694342

  • SSDEEP

    98304:zb8SV6efffnRcj7jGPJqOd7rCrgtm8OEl3:zbFXcXgld7rUgtm8fl3

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4124

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
    Filesize

    20KB

    MD5

    89cd606d433241b0e400ec6e41988cef

    SHA1

    89b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3

    SHA256

    fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253

    SHA512

    f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
    Filesize

    524B

    MD5

    8753abc9530b1a13287923ba47ddf706

    SHA1

    7a728f1b72ef34eae95d1cd23c4a0e3140844ac5

    SHA256

    f05023a2948eb11a53fdd6d9fe0a757551860811fba76ee5ca377aeb8afd091f

    SHA512

    2a87634783d3011ce38b45312411b35ed15cd2052400cbf9cdde974918351c9e18c276a7db8830387fe66cb30b7bc59489ab1235d4bac8f9dd00364073692d12

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    36KB

    MD5

    994b18dbc36427e343f9b04ee069ada1

    SHA1

    296cc5b59834b58ba68f0a8917babf9233d5383e

    SHA256

    51622c24042936f373665ace7bcd72bdd35d0ae2fa2999e6c61f3ef8513a9f67

    SHA512

    7d06c009f83d0ff8766adcb61de9db846764962e2e8c3944a73cb3e1a0574c067502bc7b42d46cecfb2d680f0095aa658946a16afec7bc8afda0ff552b187a9e

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    4add5e69897251f4e1964fb3feb54f25

    SHA1

    e3fd6c13dba2fbfad670150faa26958a42330c31

    SHA256

    a58785c98972ddcb3eab4454f513e106e3dbfc9006fb40e099399a2cc4498ae7

    SHA512

    10dd58eebfcc42bee64a50d7a4e9636351fc631442ed41556e8a5e13c5e54e1edbfd5723eb4bd65cb0877a3d8f5804bdc5959ce954cf92c407680cf14a07924a

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    9d4d57d40a183281d237d534dc5b4657

    SHA1

    7f3157dc8b0423c8f99e9ed99a45a7edd38651bf

    SHA256

    c31135ccab0d6e5d736b311fc9fb8e8b3a59727ba14ba98923d17608f6a21aca

    SHA512

    b9343aaf72ece1578dd8fc3aa994608f06f424833aa302bf8059de929566a3ac3c8363a5f0226f09f5605cf74d8df0e6aa750ce96d151e387a565fca754b3da9

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    16347a9347c30a49c9e1fd10f7e4f0f6

    SHA1

    1a631fc0860b5a921064fb4b7f4de1ec71f84d4b

    SHA256

    cd30efd5c91086c8e1cea7745b60fa273ef300bb77fab57b2f50ffc48ae0d99d

    SHA512

    be2689fa44252076eb625c594935c281eb90da4c6e6a3a15865eb4ddde267cdbf053a277c15556cdead218c665f61c2d223cc3cd7c0c89395ab57e7b015b8098

  • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation2150379641818673989tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation4610058037856695744tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/files/generatefid.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    239B

    MD5

    1e99404d9fa0cad09eab7b4100a2e8b1

    SHA1

    9dd650d039401effd4033872aad29ef4a47920db

    SHA256

    3b7e2e0217ca84f306cf480b87b469ba4c85607a5c914c32a433ddc6b79492c5

    SHA512

    d1514962071a2e2c885a3a6dc0cd8ef185f0de1b06ef1be78c3c0ed9a7dd7537beb6eeaec3098215abc07d0136e515e2b54b0c724fb53114fd1b1b142e6976b4

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    134B

    MD5

    e23c5b5a460cb10ccc604d414c751f57

    SHA1

    ecd7119051858ff98ce9c5a27c8458c7a2fbfc30

    SHA256

    23bb7867bb4a470a0652111ac24c0e0f2005cba505f9472dd591dbc0682cc1ce

    SHA512

    cfeabb54b39ba2278c638798b4f98e7a93b0dcfc3ae87283495af9fb57d93a34201be4dd5f01d022ba0998db14dfb549376570b005223e6ddac72f7150e6ca13

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    188B

    MD5

    4974fb5ccb808c284181e4283ee77051

    SHA1

    13d0ff9d038e409b39d7bbdf49e9cd17e40d1b1d

    SHA256

    42b0b5c3bfb564b544325c36c33a690d344984ceddd34e37a34c940f48501f58

    SHA512

    6565942bdc14ba4207bbffff9ca37d31d170297aa7564b718b239626f95c876791b4c30b368812e71ad79df03ac63cfa0cb8600b3aef71166560046fd781f4f6

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
    Filesize

    192B

    MD5

    f962ec6250f9c6c6898cd4cf14719c91

    SHA1

    7d463142a74b1a757ff23a53c29b510bd7c46a71

    SHA256

    b44aeae1dd8d9ef9ec8c1f8dec4fe429e974322f1fd5ded35b374bb8803566d2

    SHA512

    a197f01bb1ce1254ac13683350e44a6b43e055da1f4e3e7ff3ad60402e73adee924e21871ff8a12b91a456c699fe918a063f01585081a8a65d4408a2338a922c

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    395B

    MD5

    590bfbe2d17067b1c85e7af8be0911ec

    SHA1

    53725abf1331a98f451f0017e4ed8be3c4297430

    SHA256

    66870fc9ba3e2e4535c50631882dd7ca17efde6409893f903d7d54a6f8f634d5

    SHA512

    70b33ac958e22bd00cdfe0f4cce88e37efd00e6a72d7000d3b2703ec51882e3a94fee9281b60699c3253246c549c3830fa565d36b1f3dce8a33b56538e714e43

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    443B

    MD5

    5280ad83443292aac8d7e42f0fd19cb6

    SHA1

    1d80474eb3794adc3c470aee1c1667ce75a0adad

    SHA256

    019303228d0c7377dbd9d2556e9c54aec3b9d781dd66489a8ec2925dab590347

    SHA512

    abab3d6b2c3d001db5d619ae6f10adb708498d991bc690afa6f8a7e55da4f7e9e9f89ef83d5844f0dbd93c210b65837a13182c536a6a0aec94b42c81a436a0e7

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    605B

    MD5

    b8c8e08796d031800365df89cff49598

    SHA1

    1704fd95ef20aa8ff3c29338aeb4788445b2f3b3

    SHA256

    07ef889ed6f299e0ffb7ec8d3c26bcf2335056bf7f39c9adadc24e4b05df30b2

    SHA512

    5a9fb9a6b44f7b71a4107ffb6b2b89738cb1f98e92db595c3500a54244240cfaac1718eb414d7453c12fc0fd213250eb48c6b2d310e0f80c8497c0ef8fb546b7

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    606B

    MD5

    4451c0cef96061b9697387287113d1ca

    SHA1

    5bc1b10243d8b83f63778212f16b28c5129448de

    SHA256

    70a54b1bf9e69e28780962eb89cd9a20b1bcff21a77f9030c43335ed228ac581

    SHA512

    7b34fa495436c227fec7e9920b4b55e491cab42b94393bde413fe65b4ade0c7a8fc7d97d76a4257403fd71327829de03dc8083a3cbe73552fd43eda316c6f97d

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    718B

    MD5

    c0597f3a42cc159fcc4db6032aa9413b

    SHA1

    cf11095c5393801cd58dadce34ac3352825656e6

    SHA256

    c241d3172e288743f3e608c261127c141d628b442fa512ad6b95305a1b560c5f

    SHA512

    8d26d4517a3b81e20029da99b272c71a8fb936f25325c8900ef3e6940ca291fd0372f72e785a3c309b124b176fa1def1b3c66840c209044c85fe8eefe81bfffb

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    265B

    MD5

    029eb8e5277e1237fc4964d684cd06e7

    SHA1

    e4d3599d0b997cc7a5d22e58efdcf711473f6af6

    SHA256

    8af290f359126bdbc3a9da084c9f7481020b2fb6ff7f9a892cde1928d96453cf

    SHA512

    7b6c5007b4a6fc65f0430b2ff315dcf37ae83f19270fe1c0882ebfb851990e09f8425b816d385d501bca9b9f9ff90a43e46d423a42b3c998035eca1c50065c6f