Resubmissions

22-09-2022 17:08

220922-vnvtcscac3 10

22-09-2022 17:06

220922-vmsbvacab6 10

15-09-2022 11:34

220915-nppkeagfcj 7

12-09-2022 08:55

220912-kvgj7sche3 7

09-09-2022 18:06

220909-wpqrgaggf4 7

Analysis

  • max time kernel
    1714227s
  • max time network
    144s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    22-09-2022 17:06

General

  • Target

    Live_signed.apk

  • Size

    3.4MB

  • MD5

    af8c6f5c4c1edaefb17263649c46bb6a

  • SHA1

    96aecc877cf9be5472ebd757326feedbd9ac31b0

  • SHA256

    c39d000ab3bc8fed90aa713ea4ddaa24379a5bb5c995a12c43f4bfd033b2dacb

  • SHA512

    e73ac4720810935e3dca94d72a895e4ef80279640d684f288c46ea9a7dffd94c5b4b47939f8127b99a7575da57a5052563a1876992a90eec250ed3a20c694342

  • SSDEEP

    98304:zb8SV6efffnRcj7jGPJqOd7rCrgtm8OEl3:zbFXcXgld7rUgtm8fl3

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4617
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4676

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      1KB

      MD5

      5315bdd5b6bfc3f127c9db20e693c190

      SHA1

      e4de6c874d4bc30f0394ab844947237d77043a8d

      SHA256

      12da196da48b0ce01456e693f3e1da560ef09e5d6ac76a894c9035473ab7f2aa

      SHA512

      0798fd4d628c4798e22a175cc2b23a71ea443848637b7fcc37d0283c166ced0ecaf791dc70dcf8c33dfbd66f8b7cd09fcaed1f84ad6109892016face38ae4e2d

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation1712137617697408204tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation5463443107083299005tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/generatefid.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      134B

      MD5

      0085dc5bb906deb8f783729c5ddaf7bb

      SHA1

      f33d2478b192517448a5ef0e819f6af2a6ca59e1

      SHA256

      b60ed3cc1d7630503bec3f71fba5777061643ff953e4c9885213c616f8c0e406

      SHA512

      a8d1d4e70af34fac19ce9c7a7729f20221283b668d8622d3d7964c6a08ef292b0bd44b04215b991f99854db9ff5854b831c97bf2507392f33e2e752874c5dc6f

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      188B

      MD5

      df038a052b6d8b08512776451b68f347

      SHA1

      5e74e16f675138f375de43b0a7f499880dcf0031

      SHA256

      177e64f5b90cdb4a6145a9c800a7c25b606ddc9ce37c0cea4ccff3e45dcf7c12

      SHA512

      e28bad3444c9a4b2b077a619c6b27d53b060f434c7e3e49c27a66bacab067999f7de90b37784a54def7c851c65dcc113f4c9f55df55604c236c827ecfdc8cad5

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      239B

      MD5

      15a213525a17d03c2cd2e02d6dfb90b6

      SHA1

      0710209eed5af91a248ed6cedf4416d521ffbcaf

      SHA256

      26a7a72b28ea9e34988789506b10fec35ebf2519921b2261a598e1b5fc241a17

      SHA512

      0ed0d061085b28e1db248742580d423fd446e1f2c9cc6b0317e2442d4b6c3cf3fc6ad7d87ba6335483106026496dd1b549550598fc28ca4a001d43ae9282b1c7

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      192B

      MD5

      1bd48e5d243186ec7ab2bf15e682ab9e

      SHA1

      b8c352717b37e6d94e5d7018c157b82c5a21e2a0

      SHA256

      e1d95250116f630d497ad65bca82d7c1e821af75f5a1e63e46f3d9fb5206ba28

      SHA512

      f6bc19045ff26ce28d0979882a509eb95d68e48664445b679e9b14e7b883dd07b39c0d3f9422d77c889ed1435388ddc0cf4ace5d71676a6de757b3acd4eac891

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      250B

      MD5

      2fdeafd52896ab58ad38f5f82549a4aa

      SHA1

      fac04a59433934f1827b3cb609c77c297217e01b

      SHA256

      eacac470f0ca5f291e8b6cbbad5461437a4cb6c0d5fd693df2d8c22b7cb8826b

      SHA512

      072ee3878cca32d147ffbb94be8d0a2eaa7e54234929e57a09a87867fd9021b47e9844d147913278746c862bf7ae6df3c5441cd73bf43fd2fa012008497dc9d0

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      565B

      MD5

      87bd74c9c5a82b018d720155ca2cbb3c

      SHA1

      8445504faf8c3cbeb92b6c69d21ca16e5df0b245

      SHA256

      084bd27d9861a1500525f4e36ef419fe229bcb4a97ce1bcfb77528f46d00d06f

      SHA512

      9cf06ad30ea4143fe4127f0b852198c71500d6581d34090975bc53271de7f4e2a2b0f5341e20d5b130ec792eba57c0c5118a62be26c1e07bd4529ad1df2bc71d

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      558B

      MD5

      bcff762762eed4a3567ef1fff522591e

      SHA1

      a7d6ad34b680278b2d917850d5369b313c8208b3

      SHA256

      56071525c1b5451f17c7cce9f8f58aa9a236998e669cbb33296d53133bba22e8

      SHA512

      ca6e4e40d04c44901439996610507c15f3081d62f84a2c491c0add5fb50623ea923076d44cf93cde6daf3dc08abb0d91774d37b0bf0f8dd84c4a79a5c89efe81

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      395B

      MD5

      29582ddbd833bffe807281916e0ffd3d

      SHA1

      27a102d8e58eb25b1b7df422b7b26636049fa505

      SHA256

      5fd0e6ba0f2af584e81d111c605100c66b8d4a29ab75b9b13952625241a495bc

      SHA512

      9525d4a2ff58e6fea47a7025edb07f8a46c7778a7a6746918d280a67e575f720d555346080b264436db0266cc9dabfee427de7d33b16417be50a7432a8e29010

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      606B

      MD5

      a2fe40a223d8573411f6ddd23c1445c9

      SHA1

      23f9c401c2dabfb3a1f1ce6066d4e8cf974ed037

      SHA256

      7e70018616999ede9d5966d627d832bdf4d82275bfeb579cb2d9a4248d2dd73f

      SHA512

      35aaef7f5ed6303496431ba57c40e467a171b127c3d56b9b32f12943272148130fb8251a7257c4f41114a5af2d3a518288890a9b34207801797714f1e718a5f6

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      607B

      MD5

      8b0c51b2962df02374d322117fac0821

      SHA1

      170cf743ba85ee22badb45319857f2964031b80d

      SHA256

      c9f4c4c6d5563d6ac78709a412c293e71c620160ddc802f48f224d275c8cbb95

      SHA512

      8cd46f247a63c46a7b1acce5b9021a58f8596cdff1ab9b9bf36010ce8243dd5e4b19e76de4fcaeb2492754dfa7f003f01fa5eb5d73ef681d7e5b8e465fbf35ca

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      719B

      MD5

      1a50b72962ec6a7b2f529a4b7f05e37e

      SHA1

      8f41a463509976ce53389ea51796b91e1df8115c

      SHA256

      19dbc2737ef779303b830cdbc59f080aab6f26167bc36b44ce0eb1d03f3df2da

      SHA512

      fe1bb2d72b5cf7350c7ee6f999bc8d23be783adfbd99d2c14a80869c28445b6d547571681b20286ec90161c87e70f3a3ac64d82957a6d916db45e07aaa9ede5f

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      796B

      MD5

      6e8fc03207ff3284830eba844f4e3be3

      SHA1

      902f86d9b86c6ac64fcdc884ca94863d609086d3

      SHA256

      26d35013bb378dd8e809a9942b5b0ab918bf7fbf1594a25747c2e75e6ffd9e6d

      SHA512

      75476e803fd1a3615c7e3355abf76aca9f8ebe7ce883ba8fd76e012aa679d567c0298006c506ab9aaf3117dbc6523fc89e22119865fa42a0b80775169d663ae9

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb