Resubmissions

22-09-2022 17:09

220922-vn5csscac4 10

22-09-2022 17:07

220922-vm34cacab8 10

09-09-2022 10:36

220909-mm8ptsbgbj 7

Analysis

  • max time kernel
    1714260s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    22-09-2022 17:07

General

  • Target

    Live Sexy_signed.apk

  • Size

    3.4MB

  • MD5

    3cb25b33fa771650cfdff4c544528381

  • SHA1

    5532291652b2c6a494e1248bb1530fcd36a4e6db

  • SHA256

    a3d3835cf139b1700c2d2145afc911b6fa9345f2ecd3259d85169f015a83dce5

  • SHA512

    60539f7ef2d3a101120ed776ff1845b724dc348c4b861a80554e654e53208cd156631683b49b974f5781b8324983d5c3549858aac4317d6ddcdecfef3d54f295

  • SSDEEP

    49152:q/1UjSHe5UQtHy1fffEcy317sc1x7B3l0ZL7ZhJqzdNlSx7i3CrgzwMmePm8D8pf:giE6efffnRcj7jGPJqzd7rCrgtm8OElU

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4549
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4644

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      1KB

      MD5

      ecf625922b0b2c1713917d5565c62559

      SHA1

      c029f65fd42e6aac9695e1ffba6c6181c4743df5

      SHA256

      b591f6364ca22138beec099e894d8362b75c6e15af519554a05c17474e738db5

      SHA512

      b6b1fc9e2e23c8d1e93ae8303921ae562a659cee4378696efd12b5f0661092459028821e62af371310cb2bf49e3442cc4476bdde6ec59d62727064e1a635e234

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      134B

      MD5

      46386798f7d88e02ebfade2b4fbf2216

      SHA1

      92c970d099dd42d4bc785f1e7eb07b788c596d6d

      SHA256

      fcd960abe26020f844ba78ca6fcead69c320676e134d8ae771c239ecbd474081

      SHA512

      54419dc436eb05fee82a9a9134ce4d9aed6b21c663bd4629543106ca888a5acf93621959bc520d3b5ff76056a502516da0d65932a3ff05bffd9459a08de3d1a0

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      188B

      MD5

      b7a369d0c021de418b5e531cec6a6847

      SHA1

      35d741c12204b9abdad25fd71ff6cd674efd4151

      SHA256

      6a95d770ee7d8a67f1ecc775ff1494f7e9cd10ea249499835bded7043365d0b5

      SHA512

      90933bb05ffd172ee1f6d16a807ded5d281bc763809f364f04149675d7916855e518e83fccb7ba6781cca0a9bfc2c79fdc31fe755ede6f47460255b02d39376c

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      239B

      MD5

      79a299b9c38ac6ed986512ff6136c2ff

      SHA1

      31e4bd4f30609df66e6b25962adb03e4a70e25de

      SHA256

      ed7c842c27a4e48a758014be39e7a01f0cc374aecc5caca1840419a7e9fb1fb7

      SHA512

      1e4abd9bed578fa6a7acfe59989a7119848cba7bc4c823163af91f147aacf97fee6213966b9745c3edf9dd46eb26cbda411ce68af10e74329c3fd61513928d91

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      192B

      MD5

      1111ad52f88bda756958df216ed363a5

      SHA1

      fb23468d9fba0e96193c247ac0854a25f0e0b5e1

      SHA256

      be2710460ab1569e4ce1a5a8f55807485a990b07d1c01a0cf0deecfd038d0b25

      SHA512

      615b9eca7f60c9d031b3e331deca83bbe898591d468a7fffb2b5a000982dd043bdd9d22b71a85267cef9f3ff65840afb62a223d9fe8224b9ebf250621318c68f

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      250B

      MD5

      90301e5cb4aafd63e0550f6b1b0bc105

      SHA1

      8f8a9b03c19569559878ec9a3c231e2e72c86551

      SHA256

      ae29d97b55747e4210ec8dba667ad247993af469c462d367526163515357c5a3

      SHA512

      3daa2313fa236151f0915307d133145bc1bb020306d0ea1aff3b2054f5eb047e6933d38801071df121f1df6e7c0c645e541e6d79b0fe9b8f780887dd45b5fbf5

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      565B

      MD5

      9c81e4c1fae1f0f61c8cc0d0df858b6e

      SHA1

      9fc7ca2316df674f8991e82651b6bc00514bd16d

      SHA256

      29eb6b0d5d295a78b58ab61ef88501e28096c3e0656cbafb0e845d4e96153c07

      SHA512

      e773c768c25d027b95dd93c1672c0f84e26640e5a6d9fef2bf49c2662410ed1c199eef32f2d53a6f4121c8fca4bd360ae24792b40e96972835de82b3cab897c4

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      558B

      MD5

      7779f877f092f1130ddb9b8485b195d3

      SHA1

      1924d5d972a5311e47f4269009977e1869609763

      SHA256

      cb10d79297babc566f53f55dc8656de7d35208b4b54a4ebfe00587076139ef97

      SHA512

      7f0ae7813205944fe4f1f7c99cf5265c153c5cc78e776a125fb804a8cbc44e22f162011be3da1c27bf16689138c9e7bb3003ab9866882a37e0c94697eb208c70

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      395B

      MD5

      05225495532e6a0e90f4455bb16f32dc

      SHA1

      d8d5a38fd14f17563dd1556ef396cf3e8bc06352

      SHA256

      3bf639ec98a5e60c066f381f3a99671e622fce72312133a2c557ed1859a3edc4

      SHA512

      973cc97b78ec0dd51657f4c0ef6eb84a3fbfccb861f97041853f91b33df45b46e1c186f363500a3a6f9553d46406723967df486eea8cd9c538c3f200ad7a5413

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      607B

      MD5

      bd4490e7d654599d1e4fc80150e6457c

      SHA1

      34ae1fd7476e7243ae12a05d712fd5561672fe17

      SHA256

      869c5d1d1c2505302e6355674c14b4a62d1245dddcbb57b30bdb2d4158b4ac2f

      SHA512

      1c8b092237a2d2eb860eb3f829bb705b0b3934ff6fb06f45461e09ea82569c9b7432a48a9ccedfd0005759e89b21bb7e1bcf5dddf624065eb5522dcc6ff9bd98

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      719B

      MD5

      14d97b3960ebe5739304e5c03ff16bd2

      SHA1

      d93e38a88cb245fd59f15d59b9bc7e43d1f8af85

      SHA256

      abc287897589aee06800b5ed0e5403fe497863b88b11b0a65ac3e553bc525094

      SHA512

      7514a23d7969114cb6a29c5817f720dd058dbf76eda2a30419928304f54abe6edce6da25bf3c93a487ce3368298e33d13499d2658860ba286b43ff31757d7f8b

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      796B

      MD5

      8c19ef14f7359ad02ed72400ccd7d0ae

      SHA1

      91d79e7c5a48ad21b4c1f6740699d9ca8a5c2e72

      SHA256

      5df361f9da7bf5d38a470285b40b971f2bcbc5110c6aa3e2a1b647625a10b770

      SHA512

      b089e398f7806df502068faaabad81e00a0ef88f3a773a12f22aaf9458737c37b02e2b001ae304784ccbf45331ee5c24c37acf68d35addabae33c8d7353081d8

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      180B

      MD5

      52d00597cd467ed70239d1690fd64439

      SHA1

      da272741614d73c42f9db7641af79f00e349c4ae

      SHA256

      dd7d26bd089b94f572ba634d6f95512bc73109029317945a7452f1a0a3977c15

      SHA512

      fb417f385daf2b9db8dab30ff25c0891a63bfd57f7fa238260bf4ac6eadf9293e0cc4bea53d4f4d548996efab8f058297e3147fd5d377ae1dba6a9abc8f02323