Resubmissions

22-09-2022 17:08

220922-vnvtcscac3 10

22-09-2022 17:06

220922-vmsbvacab6 10

15-09-2022 11:34

220915-nppkeagfcj 7

12-09-2022 08:55

220912-kvgj7sche3 7

09-09-2022 18:06

220909-wpqrgaggf4 7

Analysis

  • max time kernel
    1089400s
  • max time network
    72s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    15-09-2022 11:34

General

  • Target

    Live_signed.apk

  • Size

    3.4MB

  • MD5

    af8c6f5c4c1edaefb17263649c46bb6a

  • SHA1

    96aecc877cf9be5472ebd757326feedbd9ac31b0

  • SHA256

    c39d000ab3bc8fed90aa713ea4ddaa24379a5bb5c995a12c43f4bfd033b2dacb

  • SHA512

    e73ac4720810935e3dca94d72a895e4ef80279640d684f288c46ea9a7dffd94c5b4b47939f8127b99a7575da57a5052563a1876992a90eec250ed3a20c694342

  • SSDEEP

    98304:zb8SV6efffnRcj7jGPJqOd7rCrgtm8OEl3:zbFXcXgld7rUgtm8fl3

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4045

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

    Filesize

    20KB

    MD5

    89cd606d433241b0e400ec6e41988cef

    SHA1

    89b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3

    SHA256

    fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253

    SHA512

    f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

    Filesize

    524B

    MD5

    f5dc8d58d23759b061aafecc59db93eb

    SHA1

    ac2f6246fa40fd32e5d24a90a4ac9545a53a4d64

    SHA256

    55a0118238178b8c227a876463e7c5c1b8b03e91f680534ac8a67190e5c92333

    SHA512

    ecdef4edde969786481f97119c3c5e18d6e688f496ebca2fd9092d09e4cf04ec78584914503024654e7721c179c02eac9b6f5c1f02784d80007598a1e3d7c324

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

    Filesize

    36KB

    MD5

    fce042afb8c693587013c1101589f33d

    SHA1

    fca6f4fb0a8a9908db3bd7f8f41a963af08bb377

    SHA256

    941a27f17e437a892d505d9104da26e91d610e1b2ead0315829a0ef7c4668674

    SHA512

    eed201bc75337b351dcf488351f4723624a2a1f2c923ce875e323e2e6dd722db1948d30aa4f5cf2e004feab021625aebedfd94b06448b444f2098727c68afea1

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    0e9f428bbdb69157437732ccb74c9252

    SHA1

    dde4b9a30bfa6212decec34f3d21f29d9ecc8fb9

    SHA256

    bc4fe7ff5822b5bfc4c4c0d3673d17b1b0e29fcc226b1cf3880ac864dd038c2c

    SHA512

    d45f87e9c23eed75496734a41ca89cb72452b60b3caf7dadf364562ec361514addf1a6d99fa38514a74a8d3b48b8079cb47dbb1fb5b9fc0eb667d4aa190d21b8

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    3d7f7c7ca5fcf590f0550d104a683ba1

    SHA1

    72e3baa3d57462e3d9d6447c792cecf54648a6c0

    SHA256

    462d0d844b2e4e9a700c1ef28682b8c52687b6a5dcf06b2b6dc82771b7b5009b

    SHA512

    ce3ab48737893539683d1b7da612eb492686b4f2a42a23635ebd109fd683b6cb480cd5a76be8e57f1038b1882a7e71643ad7a473db747b40f87e617900f7b646

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    405f3c50176be6bf8c923c9c3213c43a

    SHA1

    4ad9e6cf609ab4e15ff2cf2051d4520ecf48a5b2

    SHA256

    44c6d1d0c1d44529eec865064b6bf6676dee53d30a462748d662bccf926002bf

    SHA512

    c4baecb7f36bf3e2e3ec1591baacbf2f6c967222fa0530783bb9e31498e44a2a58afe3c4535ab7e3b76bef014ccecc1602511fc9673fdf19a4463e9e5d6578f8

  • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation5801407094501100266tmp

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation5971522066636365670tmp

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/files/generatefid.lock

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

    Filesize

    134B

    MD5

    bd5a94f2ac15ce775935426b39991b9f

    SHA1

    c5411db6cf0eae3b6a6f5792e76465451b043dc4

    SHA256

    eccea3b7119b54864adb9f701c83b3b743ae1cf7a6e9ca53fd9dbf27bdf21f95

    SHA512

    c7fd9f52ca39201eaddbf6048ea7bfe13deb676e90ea6a523f28976f6a42916898a35bb16dde2d2d2acf42376a9be5cd17b2047d566198db9bda44710b641e93

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

    Filesize

    188B

    MD5

    799ab1f16815e1abc08e8bdf746c0014

    SHA1

    b0e4c2e8264798668eb8f0e583ed8158416bf293

    SHA256

    1aa9ac61bc0d9b79889416b2f21b73ddb38d05e55457fe27cd00c99dec83e1bf

    SHA512

    ab01f6d449aa7af2b6c6a54c996d23fa0d9fda6a7839452b1af01b5f297744714b3f67de7701ae46070d52b32a7717a2468aaf3e17686d04c8f4b85d4bc09a7c

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

    Filesize

    239B

    MD5

    d47e9c04deca025e0868eafc1ce954f8

    SHA1

    bb5751bf4e6f5b2a08446a48ee718346c57701b5

    SHA256

    465e6a4731cd9819f94b4dd663e6ec4f67a691a404269b412651528c18a4ee63

    SHA512

    79ddd3a3c0ab5d8a7776d34f7e73e2908034a9ae5b1debbdffbd024c28119e0357e26a62d5b61d761cd1169cd63b1d384a4a855b0fe34e76da8bcab77336f900

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    192B

    MD5

    949ce711717d8790555dedb600b2af2f

    SHA1

    4e7aa24c3f6e133210e423990ba0be55f7137687

    SHA256

    b54f3dbb029f008ffe5532eefaa3f369a01dd17b8a10a893b96cec241a1b8208

    SHA512

    38769038a5f81439917746f86d8e16b4645b041bec4797ca7b439a7ab85139ecfc7ed5e404631a86a02643f37b69b1e0c17faeabbb71d0af199e0e48382fc06c

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    395B

    MD5

    d33e1a2e1ca3e16f0c80f93b5f01c8d5

    SHA1

    ab30a0135b628213735c59735a8efbcc3712fc9f

    SHA256

    6db077380e24def4155ba74d7a0791050817ee49b339470067e725711cac2cf6

    SHA512

    236f017a86afa9fad329af49c7dc71d27723eca288d126491eba53d59f5f92acff973d10e38cc32afa7690838ef9f23d41737877c1f8073cbc13e02def6defe6

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    606B

    MD5

    d57838531be48fdf7f5d854ee9950f48

    SHA1

    78349f86366964eaeb51e2e73197286abd593ca8

    SHA256

    54f791d339810b3419389f5107377c1f88c53878659cd69407fe39f52fdbb8ee

    SHA512

    41f7f92d7aa8700a9a0cdc4f5b4ad78158f3dca983f8c6c962fa185b53ef4f98e5bac29ad1bb2d8cd2e5df39ba77daa15b70e932095d13903b3f5c6b6ad89b63

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    718B

    MD5

    8786a1a0756eb92fbbc8b7f388fb1f5f

    SHA1

    0da0433026d4ddefd9a770cb99f3c844a043a78b

    SHA256

    69bc5df589bfdc3dacd77eae4fe3da8fa140bf1001c676315b9a85b13cda1310

    SHA512

    d22a1606d5c7d1bed0fc212e2ce9c21845807374ef9760ec9fb0283b313e84fe9c197203f2a09efc274de8e691a0af18f8fb99e09efd474eca0ba2fcd5837e4c

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    265B

    MD5

    d7f579f75ddcfc5f62b5fc1f2cd825f7

    SHA1

    cf5957282790830af1a446043b42e6d227cba196

    SHA256

    9b9b19853e4ea20e2bd1eb317162ccd00e02512304ff863b25e927269863729d

    SHA512

    3e966122cdc0ce166de063c6d444fcc5c2c18ab9d546b7bc9f1597780fa353cfc2eebe04d1167d6651b6664961e99af2a1470dc1dd5b78e7d37769270ba1f752