Resubmissions

22-09-2022 17:08

220922-vnvtcscac3 10

22-09-2022 17:06

220922-vmsbvacab6 10

15-09-2022 11:34

220915-nppkeagfcj 7

12-09-2022 08:55

220912-kvgj7sche3 7

09-09-2022 18:06

220909-wpqrgaggf4 7

Analysis

  • max time kernel
    1714088s
  • max time network
    27s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    22-09-2022 17:06

General

  • Target

    Live_signed.apk

  • Size

    3.4MB

  • MD5

    af8c6f5c4c1edaefb17263649c46bb6a

  • SHA1

    96aecc877cf9be5472ebd757326feedbd9ac31b0

  • SHA256

    c39d000ab3bc8fed90aa713ea4ddaa24379a5bb5c995a12c43f4bfd033b2dacb

  • SHA512

    e73ac4720810935e3dca94d72a895e4ef80279640d684f288c46ea9a7dffd94c5b4b47939f8127b99a7575da57a5052563a1876992a90eec250ed3a20c694342

  • SSDEEP

    98304:zb8SV6efffnRcj7jGPJqOd7rCrgtm8OEl3:zbFXcXgld7rUgtm8fl3

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
      PID:4758
      • ping -c 2 -W 10 -v google.com
        2⤵
          PID:4912

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/ir.shz.shzkisi/cache/~test.test

        Filesize

        4B

        MD5

        098f6bcd4621d373cade4e832627b4f6

        SHA1

        a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

        SHA256

        9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

        SHA512

        ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

        Filesize

        88KB

        MD5

        7bd7e08b7c157fb7a04f9701b6965b65

        SHA1

        19ed78cffffd879509071b091ba60776c18e8d97

        SHA256

        c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

        SHA512

        a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

      • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

        Filesize

        1KB

        MD5

        62c00c7f57360dfe7ba9c173f48c7ac5

        SHA1

        cf0584d0c0a8b7e01fdef074d643c05bb3462bf9

        SHA256

        4b9ac27bf72ac30b581c2e760149f2a628504b98a30a645a5241f3b1d7026981

        SHA512

        b9e9cd28e38a5c509eb7aa948cc3f82ef532e51792b5bd3a65fa37e778cf265b9aee8f1ee3ddbb8e3609ef05f34ffc40a32df58ad72e00f45c4553ac0b027614

      • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation5173469314401642018tmp

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation7168209971609264916tmp

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/files/generatefid.lock

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        239B

        MD5

        3a7d2320515249e540a0dfff19dd6548

        SHA1

        ea8822135cd07145a9db95991b3f49939b7ec08d

        SHA256

        6d1c2fd90367f317bbc3b13c5e1d69c46fa958d7a2533d29c21f7a70b9b6c4ee

        SHA512

        5f9bde4b0b27041fdacdec90f632b8abe498cce362236fd169885f6182bf97abf8bd0264a52fafab68ed3a96f44f517d2d86894a7bb1e8e761e8ee254023a91a

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        134B

        MD5

        a51808f496725c92012df41df84d055c

        SHA1

        5652d417a169cb12a6f8c1ac83e2f42cedb801c2

        SHA256

        b50e7ebeab724f3644c9987365ce4857c16e39827738c655f1c50eb484b607e0

        SHA512

        9401959d57436fbc01ed1ab4ad3c14e71d80c18d3434a013322a4f502fe16396398e4c12f07a96bf492f9767044043192228967f7b626c0ceb1dd31e1e0f6c66

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        188B

        MD5

        d08729531fe9eda58fb29611f8505b35

        SHA1

        83854a932373c2f70ab2351ba0c96ccf6e128e00

        SHA256

        86d754279611717ea161960512cb7b91b076a7e71c15f669202a26693fd9d51a

        SHA512

        196a4b71db8ead39b4d7ca8be39efed8554c3d5e94c0e1dc534bbf1d0db4478d47caacb589414e9e48b29c4563933256780b3c94b3abefb611b66a2ba2ef78e0

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        192B

        MD5

        1fdc76e194fda8a41388cbe9ba1c0151

        SHA1

        09743732f192ed0b760453b0efbc00c08f1f3b96

        SHA256

        8151d849afa5acc337d1f188234ab9f0da677e30cf38c7f96a0da6eed3b63449

        SHA512

        b5e0c26b475a10a56ee1cdb39a5c775089948e1bd93b29b44612e505bd2392a75a3e13d392540ceacc863e90b19bfc4f5b05b34fbc1d114e97bb1f98b8ad9206

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        507B

        MD5

        34df6a82a90823897d1fb1621674bc00

        SHA1

        57e86de26c9c32d1584fb693600bb0a58573164f

        SHA256

        2f24326ffaf2f3f7c0cce6c15ccac77785185e38a6501d9b0f9fcc34e0dcf960

        SHA512

        954ed01f6d86423eae95cb33847604932a3f7a5bd3fd688a4ee173bf1a50dd3527a16aaa7a914be49b260648e1f0c2439808fd1fc5463f19d60a877682af6786

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        565B

        MD5

        9d34461d9671eca4cedf8384be997ae6

        SHA1

        d6767fbbaa801b4590b7313e01ee5086f7dcefc7

        SHA256

        ae6bbbbd7746d03b287598713c06c6aa1be2d22d2dfb9d8c85ecf5f4c334a596

        SHA512

        2ebf3273bd0d5ddc91bfa8a1ea4ad9f78230c294923715a4ade3d762efd85bae7f63aca141e343fe6d8db8ef3f39050333462dcbaa478e82984b57c007d27d26

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        395B

        MD5

        77a62e6795241c6689c0866cb108fbc7

        SHA1

        0b1753f98bc95fe5345fe25945cafb882e394e87

        SHA256

        695f46ef96580dd7e1184d6f76f2e33b671bee464a397d22c5be1f0de4a88f02

        SHA512

        0b15d226fae87042838a5cbecfe62463edb1a80bc391fa33af9711a6e02b47c5546e60693f4349c221a9afe32fa52f9d3ac40737f2cd773ecb12a7a6e74837e2

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        606B

        MD5

        7a31991e7ba3ce49aed73dbfed7bd5c2

        SHA1

        81a10c15e064715d9ed1125d21cf13f5d19d5c20

        SHA256

        1c5c0444ccf8f0511e378367022ade0d8df80a65e0ed7268d4f2dbb6c2bf657a

        SHA512

        a212ff0aca7eedcb367c3ee9f0b640793b26368efc8ee9f2a0a7ce210d377a4341be29aaa7e8d210f727efd9745b31600795bc865fa24035e9374a037bf58efc

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        607B

        MD5

        bdd5aa1b46be5b214a4c7648054417b2

        SHA1

        539499dd854db6d3b568b91fa2e358b328cf25a8

        SHA256

        5696ae7878b10381d34ce53c2e402ae2854b07212b5eef3be483a9f4c8f7a1b8

        SHA512

        51742d9744cda02b235631df01fd2ae566c4dc66fdc00f7040d6afac0f7a08116034919dd577b21fe6af7b34894701d954730ade58c8cd76789ec837ce5539d3

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        719B

        MD5

        10c71378d959bce2b95fe16a9a33170e

        SHA1

        89a9f8893e4651839ead5c80b0f1b8fa2b9f4fb6

        SHA256

        5ca43cf9ff93d1f22caae98abd5408bc60d1ba8381b4faffb90ad575f7f5a6d7

        SHA512

        a73001d6574d5a80e0ca51d1c769ccd26d666f3a17a9e4719fa149b3cfa2990de738a4da4c587e63aad729f4963a89ac26d00e689b83ce0cd9c3dd815049d267

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        122B

        MD5

        250b4caeba60ddf53228405750ba66ca

        SHA1

        422ab714feb34e9f3b4f1cbe669887bcd581ddb1

        SHA256

        2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

        SHA512

        373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        180B

        MD5

        875382e89f4eaeef1710461dde5e2a72

        SHA1

        519d447d23624d804a7ad1e8f2e46f20204643d7

        SHA256

        dc524f55d658a15959b2fdebd982605300527e63ef13a28787ec780e88eba3bf

        SHA512

        cc4108716cc548810b83dc13019ea5a405dbd3d71754c9989b5e8eb4bde5540644d4729617f7eaed872cbfbcb7e91ae31294f7881d5d05a24285bcf49545409b