Resubmissions

22-09-2022 17:08

220922-vnvtcscac3 10

22-09-2022 17:06

220922-vmsbvacab6 10

15-09-2022 11:34

220915-nppkeagfcj 7

12-09-2022 08:55

220912-kvgj7sche3 7

09-09-2022 18:06

220909-wpqrgaggf4 7

Analysis

  • max time kernel
    1714163s
  • max time network
    133s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    22-09-2022 17:06

General

  • Target

    Live_signed.apk

  • Size

    3.4MB

  • MD5

    af8c6f5c4c1edaefb17263649c46bb6a

  • SHA1

    96aecc877cf9be5472ebd757326feedbd9ac31b0

  • SHA256

    c39d000ab3bc8fed90aa713ea4ddaa24379a5bb5c995a12c43f4bfd033b2dacb

  • SHA512

    e73ac4720810935e3dca94d72a895e4ef80279640d684f288c46ea9a7dffd94c5b4b47939f8127b99a7575da57a5052563a1876992a90eec250ed3a20c694342

  • SSDEEP

    98304:zb8SV6efffnRcj7jGPJqOd7rCrgtm8OEl3:zbFXcXgld7rUgtm8fl3

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4055

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
    Filesize

    20KB

    MD5

    89cd606d433241b0e400ec6e41988cef

    SHA1

    89b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3

    SHA256

    fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253

    SHA512

    f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
    Filesize

    524B

    MD5

    06d0fb4af791d0882fb2a51a7e62f113

    SHA1

    74d6d98f35dd05df512501fd3f0e35dd141f31cc

    SHA256

    8057bd070c6d32f290c88c9745dbe13820e909f697fe4f0635bc28013a2a0dd4

    SHA512

    b9bc867f9fbe2b0c76748d3d7a7f96a8183541565bbbc85bd9c8364aaaf9c7e40bcbd2e6c803af7c50a234c0caa82b09524283a721477a04da41a885bf21733c

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    36KB

    MD5

    2ae3bd050c47ffaf609a1adbcad6d159

    SHA1

    db909ee260b9aecac527201cdc345af1230c1f59

    SHA256

    5253b4860e52cec1750c40cebfcaee68e9278ff2a5054c31560d7b5a092a6baf

    SHA512

    a10ab15c1cbe42240deba1c942b508bed63c6d3919401db9b69573e25dfcb9ddae3d290cf00e64e06c57ad54b3a39b4a16441365007f0ae424437be68f35e937

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    8fbe2e727cd8f4949f185a81c32d4161

    SHA1

    bfd8687ecd2961b548ff6430f41e29b30a6a4c6b

    SHA256

    217bf43b071930090d3274ccef10c7a48d22f0a91ab0cfc4c4b164f30612cb13

    SHA512

    dd93d567335bea72c969efe44116219af7041ac2d08fe47177a31b280170eb2635f74b462fc6fd3b39f43f11990da9a04edde6acb693c7c8693fa08b7fea4209

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    e06fe7f80e4352760f2720f980169f82

    SHA1

    fcc0e34f26f7568959454453bf4912e41b5f0e46

    SHA256

    5e0d90b3d1f1c22fb2c219a3125a1ec6a1e07284f216988ea530cc79eb4451d1

    SHA512

    e16d2bda68d16ba41623bad94db37c18ecd251ff9ff7d05b747a9823890c1cb3a1e6599c560cecdc641fbfa66f9753b7e1fd1db03e24e3b0c1e5ff31f2d4a650

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    c25dfabf80cc36d8b461c07e4b3dc957

    SHA1

    9b251cc7b0deeabc8f2cd60d91b9f0884a12878b

    SHA256

    a488d9145a356b67fa8b641a7eca9cf21ac1af4e5736546233b87529865380b0

    SHA512

    5c7d90f9988f685ddd53072c0e365aace6df6edcc51813cf6913e7f75f57449582c0cac41841ae50df45b70e0bec3eed30967c8eb1e9bcdb39c7dbcb9bce5360

  • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation6389274433334571292tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation9150134782708259255tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/files/generatefid.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    134B

    MD5

    29ab8509b5abd9dc57d642a03ab78c79

    SHA1

    aca3dc03c4277f4b66255f5b37f9a20c206975d9

    SHA256

    a9551e1b79b53492fba7166c810c7b081b4112618370e1dee0b2dd66800aa8f8

    SHA512

    92b9d4636b5ca3c1e3fef4929d14d4680b8e41262f9937fef94c65522af90596faf4bb56ad4045bb8e951287f9971a28f2f12badf319314c270037235acd16df

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    188B

    MD5

    a7deace06649382220888f6d163e2c3b

    SHA1

    266fe6dceb0f588f51b4b94a4e7428adf49a5d91

    SHA256

    4ab8a9fda2df315e074e89063b54c4c5c842c6c392c7006f639ab40fed4e9ec0

    SHA512

    a96c64bea388577cf2c733e798637c376c2ec87891d081a24f65fa21b1b71f4796556504840e9cf1f98e8e572b7bb82cce6f88943da89464c86b6340db625db7

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    239B

    MD5

    cf476edc2094ae1689df9b142c3b782b

    SHA1

    6523b0d603e3c69f5c54ee56081fb59191cae6e0

    SHA256

    a61c45307989644c6045b8c4a0c4a37556a162b79c13b4e179dc687b44f41590

    SHA512

    ab447f01353292be898d3296867ea20a656a7464ea3bcc134c52651d8141fbc1cddfdfb1e63aab28f9d7ecbf31049ceb9622b14ff3aaa73c699d24cff0c25287

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
    Filesize

    192B

    MD5

    7fcd3eba08c7e4a0746cbc1e9a24c1bb

    SHA1

    b522325d2222834dbbf014a3b7addc219803892d

    SHA256

    4aabee829c9b580f0a298754372dde134589338078832fbe6499cb9148efa014

    SHA512

    b1f4e96b7c9b7e88a88e30582a302af89b17faa876aed6806035ba31d880862852acabacffa49dc80bc591c1e08dce54db11ef204c02898bc32bb0b7fb8d7a24

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    493B

    MD5

    f094bd7af7413a7675a437b236996953

    SHA1

    a5b261884cf3a061c6a885e59e1d46080f0a5a6b

    SHA256

    3c051de51fb726a1112ee4e59874dff2828ed1871cbf3027def5ef3cdffd8aec

    SHA512

    4dca6eaeef9095a6033a97c5760984c046f1e0599d520efd7dc003581f26c90f71921621ff1e95d3eb0337fb3bdd7fe0a87c2648bdd4449e41b81342658b4bfc

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    547B

    MD5

    078825f0cc39e80f0196a510cba25ed8

    SHA1

    7052bc4c4eb53c17d4c365694fcafefac7bf08b7

    SHA256

    19a101d9a59b55e2b068d46f5684114ddad30dd270c82b016a2cfd998d684a36

    SHA512

    e018075b60c89187539da56e96f82945abc07784b63135bdd00ba8450e80d1e7a533995a3696900ad1b659d6b65aa3aa45bbcd34a3deab56a851945e860d6e5e

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    605B

    MD5

    e5ad3206d7cd67e57c1e28299e8d11bd

    SHA1

    9c3ee6e7e00766025478dd60663e04a4fc196808

    SHA256

    93427a78662486014a455baeacdee4012424a54ef02b541ef300dde30886a49c

    SHA512

    cb8702e0a82f0534fc479925469bd0f3d69cb6d01d32c081b4a3a3a781a2388a67e654255b3cd849ba515f32bc53b321e668bcbd986d97f069f5dd8ead05caba

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    606B

    MD5

    99aba086faaf7614faf04280c3cb0c30

    SHA1

    164b889f3ffb571cd41b36fa05870d5657ef78a8

    SHA256

    ec268ea92f558c34db3c51a14885f6da901b6ef9b4d603a16c96e12c2284699c

    SHA512

    25d88933c2de989833b416b2f60fb421add22727c2486ab7842b1a743c06b16552afacd4c3b2237d0bb4c3d94fd231409a79c7d21694f3632e71eeea9411f2e5

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    718B

    MD5

    0a776b9c0115d95b31b7f7f9ec4936b4

    SHA1

    8612524bb673d129263b6d1a000372870ba117e4

    SHA256

    ebe0e9be0f87665682dfc8088068147e2320f50931d82e1591808ea6541cc5f7

    SHA512

    ee5cc840e12a46e59a5fddb8944c63d0df5cb7371b3084ef3f5421ccd0c1616443cbbf486b8f424cd342b397a10a371d35fff15f8e7512685779fe5274531123

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    395B

    MD5

    72b3ce7b6ffb10dcdddedbef8094414b

    SHA1

    2f04afbe3e1fdbba7d9ac7e9a9ae86ac3ea29617

    SHA256

    c0ce80c5d704e6d22d9f0fa3669828324213876d8151fb51bd9166c0a91c5368

    SHA512

    f1f1ee42f189af812ac6d37d2af8acf64fb544b288aa702b7e7fa94a2f83ebbfd20fb09477dd266145dc152b57abc97dbfa71c5d6d54122f43aaaf63c80d2350