Resubmissions

22-09-2022 17:09

220922-vn5csscac4 10

22-09-2022 17:07

220922-vm34cacab8 10

09-09-2022 10:36

220909-mm8ptsbgbj 7

Analysis

  • max time kernel
    1714122s
  • max time network
    25s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    22-09-2022 17:07

General

  • Target

    Live Sexy_signed.apk

  • Size

    3.4MB

  • MD5

    3cb25b33fa771650cfdff4c544528381

  • SHA1

    5532291652b2c6a494e1248bb1530fcd36a4e6db

  • SHA256

    a3d3835cf139b1700c2d2145afc911b6fa9345f2ecd3259d85169f015a83dce5

  • SHA512

    60539f7ef2d3a101120ed776ff1845b724dc348c4b861a80554e654e53208cd156631683b49b974f5781b8324983d5c3549858aac4317d6ddcdecfef3d54f295

  • SSDEEP

    49152:q/1UjSHe5UQtHy1fffEcy317sc1x7B3l0ZL7ZhJqzdNlSx7i3CrgzwMmePm8D8pf:giE6efffnRcj7jGPJqzd7rCrgtm8OElU

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4110
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4190

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      20KB

      MD5

      89cd606d433241b0e400ec6e41988cef

      SHA1

      89b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3

      SHA256

      fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253

      SHA512

      f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      524B

      MD5

      af240fa1c0eb16173e2731c2e8b1c131

      SHA1

      6981c89c95071caad82a07ffd744de5e774eef66

      SHA256

      f2f4a43ca7459d804f0d91992f85a0c88c3a3e7c9d714cd6b949a7801a6a3ae0

      SHA512

      278018c9a4c390ceb90b6fdb03655f501c0348a4e748ceb90227f8a54c828a399a5aca20fb298c774a58ce5fc2cd080e4991e49420861895a1a075b5c071afaa

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      984edf9b335e2c6ffd034293e383daed

      SHA1

      cde2f9c81b9decff3eafdc6638624b99fa77ea2f

      SHA256

      4dbe2f3b95de29de3b7a9de2290b9814f153150e2f8af257ef442923bc3e3104

      SHA512

      99109d65f530f9e7a7de3a63a3dd95cf60c955c24fb367a87cf113660816aea205b629584377e3b54ed4e5f07a26727c912b5badcf25e0a27377942e53078bb6

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      5b08b2e8c4eb7c6aeae84dedb5d1ad6a

      SHA1

      0677d13fc151ebf959fd618cbb5c1a4e8f67b759

      SHA256

      37ad86b47715beff271cadf430efc24211e565b83c40d886240f2e491fd6845e

      SHA512

      26a5320033b662ed15d361014bd3425815ac42dc14709bcb6e586f0a4818b574f2199dfa212d1eb689cf38fe9925c3f60aab9aa5c0df218f18f9caf86f275415

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      1a76aa91c435a85dc253d63c6fa6393b

      SHA1

      5f45024454b2d19f756b8a7991dae62168439fbe

      SHA256

      697720bf51517fff14cf272e85fa51d6bd284b593b103f908b267c65a90f858b

      SHA512

      7bd847104ef0ca561a00ba66a66edef3e092dd596ba0f1d7aa02501fdb6da7ebad818fe3b5d21aebda9768747afdb0f8b5dab2347a1006608e3409c635fe7b6c

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      f5ccb3b3b332a357ff9976cb08558d6f

      SHA1

      64384549f11b2c81dcb0d0b72dcea433d7af51cc

      SHA256

      802cbb356ccd6a99bb2718ec86089123c73771f8cb950aade7acb13b06af0930

      SHA512

      51c99dbdf4cd457703d5b6104d6b2f6fceee452049109ea8d89b871faea42f43b3323ca775b72818b2baf15730577c7ba0d2daf7091675e041e6db5f700d588c

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      3440f673f118f200a17f2adf6bf27ff8

      SHA1

      9742442d1d38c1dccd354b42dd01ed4359d7cf17

      SHA256

      2eac7236ba2aa3410bf8b42bab83f0eb5003fb878608967c64ae45211ba58b76

      SHA512

      23b0232b590780e82ce3e9f1e0b245ac4c3eb20bdda1448f36ed8a3212ef9ce1bdb0dcda5fc337299ab50c3b47f9cc1150ff5093b79916207761df34d6d1883c

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      2f05404731c183b5346f017e752036f4

      SHA1

      abe1e0c0dcd97357501118b324fb1dc6742e6845

      SHA256

      254110fcff27ffb6e964ff3ece484fd4985dea79b1cd15a292799e8d41732415

      SHA512

      48a6d08ba6fbee16e71fb69caf97f479d76a8291535977dcbee19676c5d8429378b798de92f8d6bf77244af588ca2f3ebf9ebba8a9da08b03afbf42aa7f88908

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      134B

      MD5

      81d688c2e2a28e34d17ecfe7f4d02b3b

      SHA1

      6e9ca44e8cce7adefabc8b8c03647dd15df1ef03

      SHA256

      ed287f9a95ae9eae2a39599545a802f95d0d15b9931dcb9b2055aebfc5920286

      SHA512

      c37455b36ed65654ad7b12522ce717f7148bfbd0d0f06b4916282fec9d4928d6eb7effc16b138ef0d66a9a3aa9b5c082140c7237b880ed74bcdde0d7b5f088ca

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      188B

      MD5

      239e4df18839328e8a8107bb196af77b

      SHA1

      fef17b526280e534eb8ecb539899b5d80c5d4c44

      SHA256

      58bfd70de529e8800adf5932c03d5ba1599545139f9d4043400d49fb154721a2

      SHA512

      c7e34f73b7b73ef44fe3f41737e5e64d22dc8cc547c7c66856fb3589f91ce2bfa117fb3384d665c209ff437727c3c60647fe53de79633f8b993a92d53b99b17b

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      239B

      MD5

      8b8d405887f52c4178e001ba1d9c837d

      SHA1

      8dccb8b577927e8639412bd5f3ed53d6b1c74a41

      SHA256

      f77dbb605a3f6182bf95c0d49e165f615b240d108c63c64a43844367cd9dd482

      SHA512

      fc9fb4f1800f2f04b467d0449945d12d89864a25e1281872fd29477daa2d86972fa7eb4b9f234711fd91182d637acbfb3c82f039042fe7ddfe77f7c325c8f275

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      192B

      MD5

      b9ded86b1c6cff58328dd01b0d6b179c

      SHA1

      60f20cbee34e7b618226918aceb3f9ed7b2a158d

      SHA256

      94dd1cb053dfe23bb5e11e2e886825301bd836ed8d2ab516210fa81d95144073

      SHA512

      6bcdadd3f72f63958f3b2eed663ef321a20730ea8f41930da271659f8971144e657675a9709ee10de2f9e5c35cb57123f8185270262035db2de9648bb343d303

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      507B

      MD5

      42a0f636dea267de1cfb2b4a521b48fe

      SHA1

      00657f6e59a51ad2ff84fb9d81a8aeac6387433e

      SHA256

      ac1cbe81ca2b35937c865623d50a15e5aa7814433d3bed38d5d9c1a4b9cdddb0

      SHA512

      68c18d1212362ce5f494ca9c7aa8a5ecfe0e728b000ee137c0b799a5bacb0e011ba18b196fc3e6bb0ebbcf51cf89b42b5a076c28707801bdceea603ed4bbb409

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      565B

      MD5

      0c5fec185b5cc2ef42d5842ee886d669

      SHA1

      8e35faaa5ea19f32b12eafe23fc95776dcb15ced

      SHA256

      81704fec04d3a6edee6161b552ddeb7d30fa04101816e8e82cb42aeca5999786

      SHA512

      8764633999a9678d8adc93310d5797c5b5cf828d72834cf44f95204b01e6672c3d7534dd3a4e7d76ddc5ed9b9022f7e7eef5d561ad1a57985d31baac9c6690b9

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      558B

      MD5

      2261c671be4ec9d684661f989b710d88

      SHA1

      f40b0b99e8f62c51ef788fc253fc9a3f0a6bbb86

      SHA256

      2fb05e98e233bb978208c40871117760b67f42f12281a6a2ab490f3e821d6ae1

      SHA512

      59508becc7a71042d5f21f9cd1f3994040043b3292e11398d311540d41a31208f9800389df67711700fa04741587e97f717656f0979ca8a8aa9fbc025eae3471

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      605B

      MD5

      b77c7d196291dd996149ab5dcf8c7bac

      SHA1

      2cdcb2de331000ae7c1cdd023be374ab4aa44c79

      SHA256

      4cd40cc1c0488ccfa47d1273936cfa5dab3f2180912add006290b121907e8941

      SHA512

      a3d347b959617619a941fc11ce45f364ca8f583d6a9744dff8cc436f90eec558b4fbec49d501b62045b714328ba429bcf6b90d0ce70426e5ca1b6ec1a69e6a56

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      606B

      MD5

      3e33ede3892fb6743e0ddc282ca27341

      SHA1

      d4e3fef2b255319848ee51214f4a0c9548c68af8

      SHA256

      c268c5fd621d7a30c3e7ef74c7f8a093a09a75a77332ecac9e08a7a4add2edee

      SHA512

      c95fc17f901c5237fd8f38dca12d9f8851c942fd676793de983243328fbbd1d3823cbc4764cdbfea6ac8a0e995bbfc3367e5fdb98146430ee3b4bdab6407fa81

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      718B

      MD5

      fb6404acf93338517355540062c5fff5

      SHA1

      7bc93f5645f16fc99b6ac74e1a47a8f8d6f511c0

      SHA256

      eb305174118ad096591c902e61349e0ae5d2559f1d485c476f204ad4fa96819b

      SHA512

      18e01ad0e584a819751ebb67ed55b55bbde7d408f87f031b5e3694003e4e24563dd8f494f95f2fddb6b540be0e42f4a46c8d3b7be50eb5c8cb2352dcd9ceb883

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      795B

      MD5

      520e77316e319b566629fba7a884b213

      SHA1

      5eaa60a65d9519012d2411c5fee949e643ad39ec

      SHA256

      e2177681929340757be7072e99459f9b1ce9fd59ad58dbc8642707652eeed630

      SHA512

      05f1453d1bbdbd5dcef0293fce2ac9c89ca9e0060c0c9e2b43f42566460a17172dc7d45beed0a1970c77c88fcf1602e415ee2390c8b543f86d40ecee2ccc4270

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      395B

      MD5

      11f9117d8ed8f0216c2bbb0e3426ac65

      SHA1

      7034b89946004ba31283817fbe65d574b097b6b1

      SHA256

      17d5a054f5c70854dcbc668c566d167e28b89aa6b25ed2a58f3555499a3cd4f3

      SHA512

      615f492ade236eb5428073f9d2e2e0ea0f900a7e36ae8ecd96b2fc60bb7e01c91c7c0d9b480700ed79031c7bd40b903dbbac210b66339c78edde8f6c4ea5fd4e