Resubmissions

22-09-2022 17:08

220922-vnvtcscac3 10

22-09-2022 17:06

220922-vmsbvacab6 10

15-09-2022 11:34

220915-nppkeagfcj 7

12-09-2022 08:55

220912-kvgj7sche3 7

09-09-2022 18:06

220909-wpqrgaggf4 7

Analysis

  • max time kernel
    1089344s
  • max time network
    15s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    15-09-2022 11:34

General

  • Target

    Live_signed.apk

  • Size

    3.4MB

  • MD5

    af8c6f5c4c1edaefb17263649c46bb6a

  • SHA1

    96aecc877cf9be5472ebd757326feedbd9ac31b0

  • SHA256

    c39d000ab3bc8fed90aa713ea4ddaa24379a5bb5c995a12c43f4bfd033b2dacb

  • SHA512

    e73ac4720810935e3dca94d72a895e4ef80279640d684f288c46ea9a7dffd94c5b4b47939f8127b99a7575da57a5052563a1876992a90eec250ed3a20c694342

  • SSDEEP

    98304:zb8SV6efffnRcj7jGPJqOd7rCrgtm8OEl3:zbFXcXgld7rUgtm8fl3

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
      PID:4890
      • ping -c 2 -W 10 -v google.com
        2⤵
          PID:5012

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/ir.shz.shzkisi/cache/~test.test

        Filesize

        4B

        MD5

        098f6bcd4621d373cade4e832627b4f6

        SHA1

        a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

        SHA256

        9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

        SHA512

        ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

        Filesize

        88KB

        MD5

        7bd7e08b7c157fb7a04f9701b6965b65

        SHA1

        19ed78cffffd879509071b091ba60776c18e8d97

        SHA256

        c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

        SHA512

        a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

      • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

        Filesize

        1KB

        MD5

        37537e12988ede3f3ef0faf173448e8c

        SHA1

        78fcca2ed1918af6a909127f68cb90576ad14211

        SHA256

        5a59c52ab722981c1069df6cf76c4942b20225c978b9d80166bb182c4c9f85a2

        SHA512

        f8554cf108532d17c759da995d56d7b7d3e36e894c1b605f94a267d1f425ff77f7a085d974aecaa69539d1ddee750f6245b17f1a94069e2672261136692b2763

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        134B

        MD5

        ed76f0d178cd150b31d3234b86a8da0d

        SHA1

        037b9f131b4a4fb09d9050512199f34c033eed04

        SHA256

        fd47f02af331033aca6505d9450659ef9fb9d61901d0164adf654134338ead9b

        SHA512

        30773af05510c0e78d0dd09c57b366c5c5953bc518090bcfdaec420f2e0b3df2c231f4bb3c5273bd2e5f21d862f7dc6b2ab8853653a3df86236d8e4d55e2f2ce

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        188B

        MD5

        12f52313e451fa5b6bf15517e33b2759

        SHA1

        bc68bb0404a1035e7a065cdeb63f6acfe06e5620

        SHA256

        f367ee67faa84ff50a25bebf91a1cfd7273aeea2d8f7b4baf047ffb594994bdd

        SHA512

        3f4e714a2f3625fb3c4128f84a27469ffb7689d4164ce5e2a38d28386cf19dcd46a17287d3da4c996d4a75ba6e0018143e798e0ebe0b16af1fba1a54c3cdfc57

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        192B

        MD5

        037253b0ff4ae8130d2331693f02324c

        SHA1

        cd8c5c58dc5dd973ea1df3dd09f30fb42119faa6

        SHA256

        c31ee573e638154dc43ce5ebf6be5e4c786f4990d49a1ad1d4e2e8ef6f3a9082

        SHA512

        ad509aed0f5d1bf56acc7b5a9ef39c1d622f95fad9fb41758144c3a1f02054719a695a6192e99efc38a6433009f91b70f3852b013983a2d11428f447c56d59bc

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        250B

        MD5

        10c0b6732e73b95d7ffe09189f1f440b

        SHA1

        88b5b1fe74b70d395a45ca21954bef1cd1db8dbc

        SHA256

        3ebedf424c95465fd6102b50af61e4059054c33ab8177dbc219494af89a0a043

        SHA512

        0f5d16c236bc75cfb2a67432b4173ad6ec1af4a52cec2a5ea0d926aa1874d35658d07377d32e292312a5d4629bf1b893a46a3d032db2239e54259ad1cfb27f92

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        606B

        MD5

        ae5dabd81d29f4b958e0203df2abf797

        SHA1

        aa78cd030876cd1a3b31d1bbea2ba5f7f1e1d78e

        SHA256

        1ac2063f0ca42baf8045f4008aec5f1bda3dc3744dd37cc994fa4ccef88378ea

        SHA512

        3b9592f4513684c7530affa3dced38819cb1021be3a413e17c92d56fbefeb7e4a46634d137c52046a9f14ec89fbd069cdf3b9b33a7b2808a9e3f7862406d5dee

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        719B

        MD5

        afcb209fd5017611beda99d49e84e1fb

        SHA1

        18ad5d16550f974364c442206df181ec097fa8c3

        SHA256

        b0534b2f257483ef3b3ad4032e4077bc22c78d2231795156608a574f5a21707a

        SHA512

        f72c715ec067a22599baa601eef27a60a4a7c1680e1e7d05298a6a65551ecb5d324da5ab899b43e8abd150b92481faf058dfe5d4f2aa12da774e10a2528a9d44

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        122B

        MD5

        250b4caeba60ddf53228405750ba66ca

        SHA1

        422ab714feb34e9f3b4f1cbe669887bcd581ddb1

        SHA256

        2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

        SHA512

        373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        395B

        MD5

        a732c1746aae53ba4a18b434d1725a46

        SHA1

        ee5b7f2b5c6563a2117d6248def5caf817e9f5e5

        SHA256

        d29490917d111fb54be8ea8eab3a14d301859762778f3e1a0b5a4b9258f0129f

        SHA512

        cac9d42c243d3855319a0d388a3c0d143d1df4d45532e71a699986a6af06aab15e2f7ee254ef10d274f61bd2be6c48cd4385f6659cfbc98678066850a0ed9245