Resubmissions

22-09-2022 17:08

220922-vnvtcscac3 10

22-09-2022 17:06

220922-vmsbvacab6 10

15-09-2022 11:34

220915-nppkeagfcj 7

12-09-2022 08:55

220912-kvgj7sche3 7

09-09-2022 18:06

220909-wpqrgaggf4 7

Analysis

  • max time kernel
    820670s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • submitted
    12-09-2022 08:55

General

  • Target

    Live_signed.apk

  • Size

    3.4MB

  • MD5

    af8c6f5c4c1edaefb17263649c46bb6a

  • SHA1

    96aecc877cf9be5472ebd757326feedbd9ac31b0

  • SHA256

    c39d000ab3bc8fed90aa713ea4ddaa24379a5bb5c995a12c43f4bfd033b2dacb

  • SHA512

    e73ac4720810935e3dca94d72a895e4ef80279640d684f288c46ea9a7dffd94c5b4b47939f8127b99a7575da57a5052563a1876992a90eec250ed3a20c694342

  • SSDEEP

    98304:zb8SV6efffnRcj7jGPJqOd7rCrgtm8OEl3:zbFXcXgld7rUgtm8fl3

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4113

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

    Filesize

    20KB

    MD5

    89cd606d433241b0e400ec6e41988cef

    SHA1

    89b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3

    SHA256

    fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253

    SHA512

    f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

    Filesize

    524B

    MD5

    558abb8d19f5bb1f711b933edc755a55

    SHA1

    50aec1ee77b172c6715f644828c6f3e82f2287ac

    SHA256

    9731604a6fd63bdb7ebaa717c8fe11c2c562bdf18d66adaff8fa0795480cc8a1

    SHA512

    00ced42a4043e5033a9b452afb49060af8c83c7f9c69c8931b8af7888a2fd58ec9802d01a42b7186273dd2869dcc2255d9c5256c42c2178e28780aa1e4bc6eb3

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

    Filesize

    36KB

    MD5

    d27de68b1161bc8ce2a9bfcff9bff678

    SHA1

    fd4e6df067e2661f4262d2d3885ae7ffa949d869

    SHA256

    9db9054f6d26f206a62a1262222d5a66099b768878120170a454f777befb77d3

    SHA512

    5d645a480983ceda8e6a29054955c84990a7c787d52379ad70f3072a16755086ed6c9f655906bc4f213854ba6d6a503eb1272e9d8e21b1e7f2efaf4d6664c4dd

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    41f5ab458b9ecff8e84fa82bdb060052

    SHA1

    04e26f79710b557ccbc140e061248f78d1e9d597

    SHA256

    477c0da13d212135978e973150c0d28c2e7f7eb424daf0139e8e0c8b907f26bf

    SHA512

    e577a5fe05768d3a8bb601202a93d575fa784243656cd9ded31664e7758fdf85eb5d9a8ddea5fad989201734d65a6f7d5d256a99e18e07be1867a4850af0fcab

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    f9f06f3f6fcf10c4ce79cb2937b4b0ae

    SHA1

    adf20c1e71e853f60b3bd8f363b85b155835700c

    SHA256

    4fba3b077195cbdff3a54a9241f1f04e961ed52a9be9cbe0ea1236844f05b4aa

    SHA512

    be35ee538e28e7e11e8f8dad99013677677fc27370d57ff986ddc28db1813d1a28df4388b5b1836199a72195a344486b1356066d1a95930b17275c5f8b86ecb3

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    6fc3f8b85f0e84a2b3fa923f5bb2b247

    SHA1

    4fec944819fe03823d17e6f423af989226c62cb5

    SHA256

    d2fe4459f08ac18bd29d0e803bb264a56174aa0e67c5a3071d0aa44e731b0eaf

    SHA512

    f9609cd8c328d45d9d9de4a9c4e5a4cf347b689d008fec33ac7713c8e153f5bd3d22d95bc55a8467205b2d463ca75cdd2d2512c499484b80273d2d9ae405cd3d

  • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation1315749190216368991tmp

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation2416529565061340505tmp

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/files/generatefid.lock

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

    Filesize

    239B

    MD5

    a53c0f265eb82efed69718739a82c9f2

    SHA1

    e35b7648cc7aa9243bcd64fc79d6b54337a4c66d

    SHA256

    9a2214bcdd3f92eac32f660973d8ece418e970f2af07edc49497b6c33a05193e

    SHA512

    e674deb285dff49aa36769df496bb19d7b80ec350b865570386ee834519fba53b2ce8cdf621a9426d18758ddea8437a82ffc65a5f4920e8cfa3ab55282b7a5a3

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

    Filesize

    134B

    MD5

    4fa63f05aac4b859e5b5cf9f8a02712d

    SHA1

    fafdde8250e8385ffec323ee9237dfa81c68fa09

    SHA256

    3b80af46050dca0b1837802440cabd5bead75ec1924623f8c67082a64ad1365a

    SHA512

    0c9d77e38c1010befc6906e5d7449649381cc0447c13d4a45918c818826bde3a06dfd01db0e2f24a9f8b24317bc72ab60211fca66012db12dcc599332cb58237

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

    Filesize

    188B

    MD5

    c31cef810177b2ee9769703a0eb5c737

    SHA1

    06ca40b0d4054487fcf5ac9716eb2b2a2a9e3614

    SHA256

    c65a9d9d1a0a3b7e1765ddff30f1f291150b70ba3a2c51624392eb9b22819ca7

    SHA512

    7592cb6498293410ea94b77be9a39d368f2827688937a792eb9b6fc4cb17b47e95be4ebd0f1cbcb957d3c832547abfeed5c13bd8b95528bac5383e728ceeefa6

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    192B

    MD5

    4a139cee287cbe28a751f811a91d067a

    SHA1

    b8c44b4e6f7db31667345e653a868c45b3cd51a7

    SHA256

    d1d2e070b90c4697e381dae4cdeaf85642083e00a43131c886d700d1299acbe4

    SHA512

    5c93d61c60dc42c0b818ef06ddaddb236711fc320bcbb9a56b46f0f03f60966aa02d9ddbb37534e68824c3d387d7ad338dd164a30054bc4aa359f879f15560b7

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    547B

    MD5

    1ac404155a2183bbd823130c74565a6b

    SHA1

    6f490934cc8e5f8217ddab0f5d4252d7fdd6ef39

    SHA256

    84bebc9be277cc289ffbdfb9e5a19b5fdbe3e3c3c216dd710b03d9567308a54e

    SHA512

    02854f0ab7074ca0e4dfa4463081984d1731d9e46b3c9eeef2562e3c43835240a37e7f9549796a18ae343e305f5a214b8efb29f9d183cc9e2892fdd0f22cbebe

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    605B

    MD5

    685214cfe40ae0968fd3824b28b1d0db

    SHA1

    624a5e6e4b2bb1339ad13ce68e080226283c41d8

    SHA256

    f7bec0b0a0dee381aab06410ab478c420d378111b008af9c5c980d28cdaba39c

    SHA512

    a8fe0ff9ac3cf3cc8cf48852e8049cb60239b5d485590b5a818d52ffa786df1f96826ad43d7d067d337f5b558f581f0b118111f8adf8c0d6b5b8b0208289f35c

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    606B

    MD5

    fb59038af19f34619a1135d05c14cb49

    SHA1

    4ddd1f2757cca099d2d187b56359d0a018063225

    SHA256

    9a3aeaa2caa8aec578c9e8b48678cef22035d244f94253d9519f3d7f19dafc45

    SHA512

    b5b111020e128216615dcd9578bdd9048a7338ec3b4e82a0373e962dd16f2f3d54f4493ec693f520e771d4963512285d5077e8268b990001c26507d29acc21ef

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    718B

    MD5

    322b8586302501bd23ea957ed16f10c4

    SHA1

    52298362875ebc3c59be9108fbb6ab7b6b22360a

    SHA256

    62b1a0e6d5ee2986c28dfc62756ea653c07c004e803f423a01179734c4e8a04b

    SHA512

    1b3ef9a45e9f7a61c3240bcbbc2ce1d90a7f330a43300051df41d694c945f23bdaf26c35203bb9a5657596c9452b96ad69053eea89e11625ad30b81e568e7b46

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    395B

    MD5

    afda8bab2be8a5c12ee88d68aa06a104

    SHA1

    7694711ac892d128e9822e005a62d3cac05a5cce

    SHA256

    bf65fadcc540fff4f1d2aa7ab328f5fb9e97598b8211fe1186a59d27814431b9

    SHA512

    cac5bf8321aa0c0aed57bb400442986e6fec768525031f938c21e6d2bb0ce99e99ca274c9b2a3cea22662805a95688e34f7ca552d59daf26d2e9e7cdad423b40