Resubmissions

22-09-2022 17:08

220922-vnvtcscac3 10

22-09-2022 17:06

220922-vmsbvacab6 10

15-09-2022 11:34

220915-nppkeagfcj 7

12-09-2022 08:55

220912-kvgj7sche3 7

09-09-2022 18:06

220909-wpqrgaggf4 7

Analysis

  • max time kernel
    820615s
  • max time network
    48s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • submitted
    12-09-2022 08:55

General

  • Target

    Live_signed.apk

  • Size

    3.4MB

  • MD5

    af8c6f5c4c1edaefb17263649c46bb6a

  • SHA1

    96aecc877cf9be5472ebd757326feedbd9ac31b0

  • SHA256

    c39d000ab3bc8fed90aa713ea4ddaa24379a5bb5c995a12c43f4bfd033b2dacb

  • SHA512

    e73ac4720810935e3dca94d72a895e4ef80279640d684f288c46ea9a7dffd94c5b4b47939f8127b99a7575da57a5052563a1876992a90eec250ed3a20c694342

  • SSDEEP

    98304:zb8SV6efffnRcj7jGPJqOd7rCrgtm8OEl3:zbFXcXgld7rUgtm8fl3

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
      PID:5023
      • ping -c 2 -W 10 -v google.com
        2⤵
          PID:5184

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/ir.shz.shzkisi/cache/~test.test

        Filesize

        4B

        MD5

        098f6bcd4621d373cade4e832627b4f6

        SHA1

        a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

        SHA256

        9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

        SHA512

        ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

        Filesize

        88KB

        MD5

        7bd7e08b7c157fb7a04f9701b6965b65

        SHA1

        19ed78cffffd879509071b091ba60776c18e8d97

        SHA256

        c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

        SHA512

        a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

      • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

        Filesize

        1KB

        MD5

        83f3ab9d623fcba1a42296ad910d7d32

        SHA1

        73f5c69cea23f3a776a036245fb61889fa2f5c60

        SHA256

        526a20a1942a9f41a46e5d41b63304922c519d295470774a9a3fa42a6e03de5c

        SHA512

        59ed79df310b9b8ae7dfef784c596e8b130203c8430220d5a655b60baf40192eefe2d0601cce49dd3573d1bfa9bfff46f335b2c60c533e6d26ec97bd2d2278f2

      • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation2168340846037691630tmp

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation5739674774102002634tmp

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/files/generatefid.lock

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        134B

        MD5

        2f446979da2ff872ba44d17383200fb7

        SHA1

        de23eb23394c43b9155cffed589f9d8a3d76a642

        SHA256

        a63f7214eb20e1d75a64ed6e7faf2e27a8fdc5a098bec39395a2d56f704ed8a1

        SHA512

        6db4e9b919f271391dc394414b704e8b9e922f67c0da8c0e90d6bb9544b3da5ccf356256917daeb8b948eaf8b08e1bf4a35ba0623e8374e4982daab7d0c04db2

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        188B

        MD5

        642276707819a32ce3191779ed71c456

        SHA1

        cab91b816dac530904f2544289e14c1e2ad1b35a

        SHA256

        078ebb220a2f578ff0e53b7d30965fe0ce3d18ee4b6673136ab40bfa95a80ac9

        SHA512

        f427b25cf191763f743ebc27499d9f661742ba080145b3ee39c2d4792b61099a94c0ee1c8e69362ac5abb70209f66aba981c41c83d0ef39d231e56ca22b5f3a1

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        239B

        MD5

        aa4ed02a2d59a18d7f76de2eaebcfa95

        SHA1

        a51cdaccf5fb521cf194ad072c02a36d8f756f9c

        SHA256

        5c0f0c6df33122dd542bd4d97d86fb0a695b089dbef1f09e93303dd7458e59a9

        SHA512

        d767dd11e2971b5de636788c16637eeb45b08a8102d47844e86cacaa6ab22e3e60bd8264b5c68a60ac805d67bc78611f18316369aae5f8627d2d21b780c7ce55

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        192B

        MD5

        7d4260ef6a4a695f9f83cb06489b0946

        SHA1

        22f5b65f87bda6906e1bffed288f0881192e2286

        SHA256

        7d97eadfb56c69fb4be387cb1c253fc21b6df042a734053682520feee52d6f41

        SHA512

        2f19c3ff850a33100f3711b73b53e43cfe0c7231dc5714208731b1d734993de1385f21382103b94079a72cdf89e940e1d08557ccb3f7e923744942b2e2780e2b

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        507B

        MD5

        0fd3e3f6fabc25e10885d1003e419bfd

        SHA1

        57401f1a8fb6691f09fca461301fe54ed779d747

        SHA256

        47584f636e077d53f514e6178df86af1ee0dfcc8ceda7132c31e3e077aeeda47

        SHA512

        0f30ee22bbd7b9a02e8b7e8ea9df553cfad98c8f595a2ba7a9c13f935b854df2ed9c90843492190920c227c9ddb6dcdc595dbcdde6a5ed05b1722429443cf2f7

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        565B

        MD5

        d73912118162fe3eef862011247b1622

        SHA1

        7a289e2a68982e3a2ac42d2bd4e787649d433500

        SHA256

        573214c914ca405a8beed44e1eae8c0d7bea91c46160f36878ff1d6fd573116f

        SHA512

        07b46aec1a41a1a707ac13187df52fdd223bed6401c4098216d8239349ead784538763df1ada8692cc38362bac8199c46a01524c4bc491563b1be351b47fda8b

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        558B

        MD5

        542401fb5cd28f57fd589b5cda4a80fc

        SHA1

        55b9b28e5e23d9ff152f362c46d4cf77eb2d24fb

        SHA256

        a5476073e4fe152f8ecdc5d557ff2b8b851957148cbfb5a36ab894353b9cb35d

        SHA512

        a9971991cf0ce3526e57183ec48901d7c15bc61efee3602741d03ae5f14f28bda0eae1c218c1d3552f69d773dc89c29deb6106f7b74d61e1510c95dacbf3461a

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        607B

        MD5

        1b806c30a8f451aaf3855a2616145c4c

        SHA1

        0a6d6acde0e037aa0ca93cdcc5d8571489c09f58

        SHA256

        4179ce7c1d8453b2891f3a0b372ebc909a64954eed710fc4c34f607fdaec84d9

        SHA512

        4117ec7bbcb94178f9ff0095d167a04e3dcc5fe1e586f63aa82d8823dfe92f2b6a56a55c2805b4f67045815e6e407974d1a3d737ccb464becf76725602219270

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        719B

        MD5

        6ef3fb495fd6aa87bdaf3d31fd1536d7

        SHA1

        928bb27a9af8a70e6b75961eecb0819266fc3db7

        SHA256

        ec7fe584dfe9f4271044daa4cd075bf3c02dbf016c59e69c6949f5321ca70566

        SHA512

        c4ad77cce2f2a4b7dbf6666dbffdf18d2d64e8a8607b2f44047580bbe431e4717aea3e569880c44c75de2200a56453e10aad9d63f9910e06b3a5d5e1a4df57b1

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        796B

        MD5

        60a92d528aa0aae5698cc52519ae4d34

        SHA1

        53cee31aa984a628c4d4ea731bdc836803e28fe1

        SHA256

        13e8c09d5631b39b8fc22147d8a0dea86152d6d196b40b4b8adec87381d13117

        SHA512

        476a533089531d855b32c4da44bb1f60146c99db4ed22a668fecc337d2eab00a8bb221417d61f14b22d9635fc2af2be2ca28fc9351565b9cc71582ebd1e650ee

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        122B

        MD5

        250b4caeba60ddf53228405750ba66ca

        SHA1

        422ab714feb34e9f3b4f1cbe669887bcd581ddb1

        SHA256

        2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

        SHA512

        373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        395B

        MD5

        1d627ac8433c0fd57dddc378960868e9

        SHA1

        632a2b02c8bec4dc23a2ce14fc25dfcd61f012f3

        SHA256

        e1c1740634f950b6b7ee884fb8dab78009d9cec8f538b1d3be1b6c3766661d18

        SHA512

        d09fa8fd21d870749e034d0e7b821f087cdc232f50ed0cfe5546d1760cf3765c73a0f592fb3d06d5802ae4436c73ebf9748372e2ad9ca23b7ce0151b8fff9362