Resubmissions

22-09-2022 17:08

220922-vnvtcscac3 10

22-09-2022 17:06

220922-vmsbvacab6 10

15-09-2022 11:34

220915-nppkeagfcj 7

12-09-2022 08:55

220912-kvgj7sche3 7

09-09-2022 18:06

220909-wpqrgaggf4 7

Analysis

  • max time kernel
    1089486s
  • max time network
    154s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    15-09-2022 11:34

General

  • Target

    Live_signed.apk

  • Size

    3.4MB

  • MD5

    af8c6f5c4c1edaefb17263649c46bb6a

  • SHA1

    96aecc877cf9be5472ebd757326feedbd9ac31b0

  • SHA256

    c39d000ab3bc8fed90aa713ea4ddaa24379a5bb5c995a12c43f4bfd033b2dacb

  • SHA512

    e73ac4720810935e3dca94d72a895e4ef80279640d684f288c46ea9a7dffd94c5b4b47939f8127b99a7575da57a5052563a1876992a90eec250ed3a20c694342

  • SSDEEP

    98304:zb8SV6efffnRcj7jGPJqOd7rCrgtm8OEl3:zbFXcXgld7rUgtm8fl3

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4520
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4580

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      1KB

      MD5

      eda931bfadfb8b245b5ef95adc87aa97

      SHA1

      7357fd94f92ef85de88e7ccb10acb0809313403e

      SHA256

      28bf5952e94d77b153d59f2c94ae85ecee0026204fd7eace43ddc4474b42c322

      SHA512

      024b332d6c803209886f000633db06701e87eedbbddd4dc29436418aff8f00d1a53bbb86a5b76e67194d684bb15574abfd6b9db827cfaaf99e3004bf5accf729

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation3298801685146458226tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation4492909702672792911tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/generatefid.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      239B

      MD5

      53b903a1912cc24af84669b8c9ca1d0d

      SHA1

      229af46214cc642019532677b7712d1bea3667a8

      SHA256

      ce98271d152fba60b4d7fe9f3988c36e40652976477582e93b8c77d18b206b22

      SHA512

      912b1024d8242af917a4cc7da834400e0ca37da17f1e7af7c5a5ef8c8a4d389b0196df03273bb739de38219d42e012f15a7df81b8608d16d88d6c06f2eb2d8d9

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      134B

      MD5

      6ea0c96d4c5e371be0fad08a645ef937

      SHA1

      e8c56e01f7f1185755012e80c888376b20bb8ac6

      SHA256

      927b8ecde1997ccf2d60e97decd09e5ea50871a0bd95a8d45caa7641071f4d95

      SHA512

      20a77b10206051a743da2282a2386608a0312a6f46bb62a904c53c56d909bd1167969e981d2253f88bed531885da8ea6e6828cac8026e15ec3c63664fb1654e6

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      188B

      MD5

      3f7bb06bc3cec945b77574123dbe274b

      SHA1

      9614def44d1d15886752388e2e683660b213d51e

      SHA256

      508835f23a9fadd1f0dafd3a65478608a54380dd043851a86efaa1d97bab34c6

      SHA512

      8dc6347b5ec9164d8d33fc457a582f5d54491396809e087ec42a218b8b2f0ba55b0f07c96da87e3520552853ba992f3f3d952ce72b701dba8b32a834bff22f39

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      192B

      MD5

      fcdf294acfa5f3d76b2ef3bb0890a35c

      SHA1

      4c5c682b7d1e766b3df0f13936a786676274c9f3

      SHA256

      c252f5d6bf2e957fcdc940e5d82a47a71db0ab5bb3cfbb61f010bf1bd434a597

      SHA512

      38fb36146f84c0f3a1b812eac92a6b143f129c7254eb9eda51df5f04212108fcb1233cf1640609dc74ab3cfe82b6c23ed48e3bb984d1a02436454adf32c588cd

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      507B

      MD5

      b3cd44bf8b5f7dd93d647f28c524c8d7

      SHA1

      40baa553b2e4182372f348ccc070100cda042d35

      SHA256

      321b414b61466fd4cdd92ef91ee24b9651412207ac06db21e30b6201a8ad5ab1

      SHA512

      4a8b0dc5d7fba5a8db2ef3d9a68bf03bc457b0b243eda892e91ae96c112280b4a7ed3834718d441cc0dd66357a874356426d76a929d354ff0fb3cf0690ad5444

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      565B

      MD5

      00c85e9dd3568934de9479f3cd421c49

      SHA1

      a40709f97177d816ea8cf07e44c604d3a0aecef1

      SHA256

      6aee202bcd4bab5c7a0f0afd9a22ec866a4f6d97a18c6d583725ba7a633b8f17

      SHA512

      4de3f177ca99016948d211c4763aabb6a2bc69c3ac2bcc5157bc18a3411aa5fcc71fc8e9684e9936f732b25fffb6fb1e7ec255940e9afca54a01cabb6c77ebf2

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      558B

      MD5

      fd6f13eaf32e988a86d39df8d99b1a3d

      SHA1

      5b25ef5604bb8a3663ba042b00dd42826463bc96

      SHA256

      014a9468e3e7e509744ddf091e6725670e2b0e30c092165bfea362f6fed8cf72

      SHA512

      308681213fab6cbcd5843b2cebd9e994849079e7fd2bb7dae6178b26cfe308ad625096acd3ec27592def882b08f271c0373e31714e74454552d41e90130341bf

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      395B

      MD5

      d472fb5b3917efc3f6a2d461db944c7f

      SHA1

      d27133648fc05c20b9695f649378e2468d1c4e6c

      SHA256

      6017c40b3b2d7a499e44b1b67a3596c957a51942d42bacd8fbd3206cf1137782

      SHA512

      2217f6419c5cb1cf8431639ad2b0bb40bebe3594dae0c88671370b4aba062cdcc284ca289033eb5be33a743947ae5e2be8014b8216e2e93e879154b98836b724

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      607B

      MD5

      fbfd7c9cf05b4cc067e0599952bb8ab6

      SHA1

      b8a2f2c663ad81758f715325e0967d42d3407bc3

      SHA256

      dfe01386bb3fab8f6a91456acd17bb71a1da80d39dc6f403bafbbdefc0de23a7

      SHA512

      545b59512ad23fe6fc1141b61098083aaefedb23322ed1450350a8fbba58d65e776aad530c73276c7b86675c649a070d017984d650da1f5d764a78800b6dd029

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      665B

      MD5

      4e45898dbb5855d65d2cbbbe87aba6ee

      SHA1

      10b5919fff5da0c91c1a752fe9aeef17050ae932

      SHA256

      e12152a341942e926443574f1e4855770c5082c77b7facce611533aec7836e8c

      SHA512

      292484a54647964d81107aa5774983e20cefc66ede73d28fbcbc7c4ec11d367236af08a69bc1a78158c185de66614d15eb00f59cd421382bd520d7bbb6ca8f3f

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      719B

      MD5

      360f6b318ab45d304ff28f856859a533

      SHA1

      be0f6f4c6decc47138620508a8f9aced80216149

      SHA256

      fb7ba17fb8134ae3827ec6af33ab9f4cf101634bdffc49871bae6691d26912df

      SHA512

      e71cbfa20d08bb4c2b2e4cb06ebb35f85c936f37b6848685278f14b652295fe5d8207caa3f6b67868b98cb297c81ce09686e7ea4ee877ca78ef937a768d06a3c

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      796B

      MD5

      adbfccd4b0c53f40de154e7c6276eac4

      SHA1

      2b38395598fcbcbcd3689214aa1497d202ce22c4

      SHA256

      4a7fd3c07c8b643fd926c20643ae96887ab81210c731092fe598a7a24b3450d3

      SHA512

      23deb1476807c079fc4ff9150ce7b0dc02c56404c33bf75fa2f9838b24a47a306048e2902716468cb6dfdc0c7b65560e6df74a1537606e7be2b4b9cddd43a953

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb