Resubmissions

22-09-2022 17:08

220922-vnvtcscac3 10

22-09-2022 17:06

220922-vmsbvacab6 10

15-09-2022 11:34

220915-nppkeagfcj 7

12-09-2022 08:55

220912-kvgj7sche3 7

09-09-2022 18:06

220909-wpqrgaggf4 7

Analysis

  • max time kernel
    820594s
  • max time network
    27s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • submitted
    12-09-2022 08:55

General

  • Target

    Live_signed.apk

  • Size

    3.4MB

  • MD5

    af8c6f5c4c1edaefb17263649c46bb6a

  • SHA1

    96aecc877cf9be5472ebd757326feedbd9ac31b0

  • SHA256

    c39d000ab3bc8fed90aa713ea4ddaa24379a5bb5c995a12c43f4bfd033b2dacb

  • SHA512

    e73ac4720810935e3dca94d72a895e4ef80279640d684f288c46ea9a7dffd94c5b4b47939f8127b99a7575da57a5052563a1876992a90eec250ed3a20c694342

  • SSDEEP

    98304:zb8SV6efffnRcj7jGPJqOd7rCrgtm8OEl3:zbFXcXgld7rUgtm8fl3

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4661
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4719

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      1KB

      MD5

      441abd068033e9b80b62867419f90959

      SHA1

      a8638282b85eb1f299d3749215bfd8a5194c4cb7

      SHA256

      2a3c8df98da33e1c90bfbc15b0221bdd394dc83d31ab3b3bd843a836e3daa216

      SHA512

      7ada731b8764014a4b519400372ec1249964ab80a22fdd4b7848448c7d3d6e503137c8e8bd3fc08d3f3659ead75d4dce2bc9da83c180208aab4e7833e8428d59

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation1327542648525130270tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation3669351558824920026tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/generatefid.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      239B

      MD5

      df4c3d527cc8304fe1be3a6c5dd8dff6

      SHA1

      112d0799261659fb7afa9abac2172c1dd7229871

      SHA256

      e01eac789723598ae08560adb67e027becbb4d6360e82b7ef1b818291be529e9

      SHA512

      ebd9a514032d2cf404b7f2f18b7ec11c4806a4e8b9350b093c927c924d82e79684327e912d7ab7a853dcfbb5171d95b6beaad512e918ea3282d1bc43970acc19

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      134B

      MD5

      7b7d5b86af03eb0e3f4b88262b71a86d

      SHA1

      ba875a0b5fb168305e6dbee74d37ece829d0ae7f

      SHA256

      6499737d06a5dbcf7a22673f05ddc41e1f7281f592a1ada6be9f3b1eeb9145ec

      SHA512

      acd910e276cc89b49cf74e65425808fe2e7a521ee7b19b1edd5cbe4e7fd2d5399f0137b59259d01f13ddb32804010ce7daaf2294d3aae83b3c19f1e6a95909d1

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      188B

      MD5

      16a004219a184a7c993b6f42c0ea1b5a

      SHA1

      3e6b66b81a4b167975fd18630f4f3b7c092f8637

      SHA256

      fc01dd7b9e61aa73451645ba18550363fef4448d7eb89c044cd1da012aa6cdad

      SHA512

      adecaea6851bd47e759efbb137d7c08e4c442669f625b21b3a02fae1d0e162c75263c46d4f5da96bf64bfe1c66b10fbe83e309c7a543f8e066b1394f2263f935

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      192B

      MD5

      edba55346e49cd09a823c3982f762a4e

      SHA1

      dfe5685b39670a023aca6632812bf5cee9a63ff4

      SHA256

      aafa3eec150c85842b53142f94eddff7f9ff5abfe18b9373a4dd780e67212585

      SHA512

      21dbfb32616ba56600ecfd038ce41881a989672dd621b8c7a366ed01691deef053813aa862cee220d2a93574170e7f3f3bf1f4cad8252f4764453bf2d69788e5

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      250B

      MD5

      edb28aad5475fdc43a19aa0fcaa12f31

      SHA1

      3eece63710b3d3e704702139eeeb55642f780a58

      SHA256

      5927dd0a3de58895a5e40bcfb3eeeadc2f2b376c51f9e12ae481cf46dd4dcc90

      SHA512

      3ea4d030f16b3e070a7f66c1018f89e46d4c1c0ef8266d0666bcd190fbeea546dde9c54ac885078adeb8aabab5d2b67062a75446b69ffb15ea9ffed1d6e19eb1

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      565B

      MD5

      71456d3e2556fbf5300481c482de274d

      SHA1

      eecc15abc87974d79018393deb78ed7dd58eba3e

      SHA256

      ad06378ba55ea6331a9159de7b3d2b2d9594d730e50d49d8ac1bb19389eab8f1

      SHA512

      8aff6e8c1126f51c2d1154f3d9c2a227b902367b76f626531fdfa4e50d850bd14ddee15eafde05c260bc62ccc46113da08a1120577dc106491b167f7a8f84a2d

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      558B

      MD5

      84df1782e510580dafee22d57eecdb03

      SHA1

      2c38ad979b87f1520a546ba730c31da9d84304ad

      SHA256

      a07f3bf65a9e7a31d13c2b43fc3de9a46b2d9667f2183962b0118722e3aa598b

      SHA512

      75bc834f874e08125f6718d3c41a65adc79d7c0f798bbf1914fdb440842c83fb61dc997e341b6dbc4611bf583df6d72f6abb401f884631d8b33006acaa5ec21c

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      395B

      MD5

      9581723b6e4b7d0086df672445c43ce4

      SHA1

      47221f5a1a3219ddf3cc6669fbce544f7ea19772

      SHA256

      bf2e975dfffe096ced6773aee7a7e9f4daf2b73358d728c25d8699a7c5cdf9cd

      SHA512

      95a5e6ecb813d76a46bdbca87681ef3f267b80cdca4f34489e0633db0f3f0091716d3ef1d156229c14e414154899b4810488d40a3c82fb39c19adbfbb9b724e4

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      607B

      MD5

      379de330e4011d477fe7a9cbceb55f7d

      SHA1

      efa9c526347e4febea71443cea400123bf980687

      SHA256

      9d4ee9464d9a0ed6d49110eff089805015274e1bc446664445bd5f5712d1da35

      SHA512

      d02b073cb71885cc2ca49950b41bb721b812b14e05082904cbea88fa1f0b2dd96efd4e20d3d50048d950a74055112cef79ef0291d9d577b9b161a23068312093

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      665B

      MD5

      fb65f93e21ce1f6538b9f4fbc83bab46

      SHA1

      2f17abd18df7489eb7032fb3e1036c9f717ff121

      SHA256

      88e5046cb34409a7f42cbfcc250daad27c23c3613d5f6bfc2add5e76bdda8604

      SHA512

      0a2ad1a5da50bbdbb022c080dd0afe1b69d20006d29b318cc99be25c967a43e32604167c0fb392e1d3dedbd44e01fb8d6f1d06264eec5d6ac57a3b96548da520

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      719B

      MD5

      d3215a696830f653c0b6825c438a7468

      SHA1

      a39491b42bd37afb66743bc483f9432cfd479319

      SHA256

      d53dd09f34e8b18c1aa54d0d7893523d181d4aa5abe27319272b616437775253

      SHA512

      4d26456fb8dfa480aab8db4448fee3ae518ed7215185babdc8bf69d90f1dc89d54dfc2515933e61dda70204508b53dfce9ceb830bc180bc00b8804d3e3cde433

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      796B

      MD5

      e321441bafe1dd9ca39224c065702357

      SHA1

      164feed8feb10f1aa4ce3afb7a0c949d0785d1b8

      SHA256

      67c362756046a0efef5429c44e4a70e259d8828d7cd6867b7d24771121523ad2

      SHA512

      cebeff28e6fc69e6ca23f9c3c76b51f3c28a3199aa69ab56a15e6815cbccea430f51ff2ea272c392150642c4b9621c76986f54373af3b646dad2a4baf4a921cb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb