Resubmissions

22-09-2022 17:08

220922-vnz33sfgcr 10

22-09-2022 17:07

220922-vmx74acab7 10

09-09-2022 16:13

220909-tn3crsgeg2 7

Analysis

  • max time kernel
    1714094s
  • max time network
    15s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    22-09-2022 17:07

General

  • Target

    [لایو سکسی].apk

  • Size

    3.4MB

  • MD5

    854bd2ce5c997872a03927abcb048e56

  • SHA1

    603bfe50c21a2911de573d639c5bb85e1b0714d5

  • SHA256

    3cf954003a8aec7e0a08fb5926975cfb45a0bda948e75603fb570d6b89fc538a

  • SHA512

    5ac824b0ef7c2ca997e2aa4c8bf2feb170c753015c9550d72223f97cdf1f3f66c52b3c99caf222ae08db916d0f9d18c0f9433abf02875878a200404f58672101

  • SSDEEP

    49152://1U8SHe5UQtHy1fffEcy317sc1x7B3l0ZL7ZhJqOdNlSx7i3CrgzwMmePm8D8pm:XiV6efffnRcj7jGPJqOd7rCrgtm8OEl9

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4113
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4218

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      20KB

      MD5

      89cd606d433241b0e400ec6e41988cef

      SHA1

      89b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3

      SHA256

      fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253

      SHA512

      f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      524B

      MD5

      4ca7d820105b0900cfd5b8e9932735a7

      SHA1

      ac68de3f1ff09d0d4978fa196d56f0f72cc74d51

      SHA256

      00f3e11d1d748d9b4f554fba12e2e5e8b26fc2de6a22d11e2e4eeb835b176438

      SHA512

      7fefc4322ac6cc371ad52cb2622d76c23ce0e345a6a77960709a52d702a4309fff4495c8a256b85c647feb9ec2fa223c01888182238eeaced33e991495340907

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      c29df5ee6f8f34e1a25d11ce7772270d

      SHA1

      141c8f03ca52226342e5c0d10ff7d61585e9bf5d

      SHA256

      8fa51672daf5fd328886825293beb71a7b923e1caec2d57a70bbd16e64e54db1

      SHA512

      8bfc23024b4074b33152157bed2fd1578cbb3129bffad48f205c1512886cd11880295aa2439b683767f54ae42846b26a7b93a02300805bf9c3e59653b853fcdb

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      dbb3b7e30fa16ab3f76fefbc7731d7ce

      SHA1

      119f41673af93e302e172c272051689f1d45d24a

      SHA256

      6ab76a8867d65ce9842f54aebe6dae18f3287cec45c664977dd9190eb6e4d762

      SHA512

      2ed57d2f2f1f2ae8822aef2ae3f74730823856c33a66ab835a5609b1a003bdae5d559c400eb8b46e32551807b52db666104a61fd150a58fa5e2c6e1b88da8ba3

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      739a860eff807db5072c9b9a56e226dc

      SHA1

      7abd01bbd94ce0ecac85dc383a51631fbf0a9dd4

      SHA256

      825c2504561d6c188e103d8dd658ecdae9608bb1435e882cddac391ba7584709

      SHA512

      dbf2167160df9b2b12ec6b6d65611d12a369fd098ed0b480d7159162f97802c6ed8a77d47413f2d24d6ce8201eea6daf047f5658276bbb78e5b1733b468faeeb

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      b3ac24a8246a45d6fb734dd4ce02f7ca

      SHA1

      0122c5975c9827ede7854989f28cbea66e53b303

      SHA256

      745a4ef04093eafb113605c5282d39441734692d20b442b7d09b493d857b81de

      SHA512

      812a146110aa68cc92e50881b75b014cffc922546c7e9579caf50ac76acb095914925555f9a4f1076ed6ebb45242b4963c4af0a582cb470c1710db69b795050d

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation160490498643939494tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/generatefid.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      134B

      MD5

      b5d31686a2102168c840c67d2ac31bfa

      SHA1

      0d0c355c6ff32fef116dc1511a725d54f5a547db

      SHA256

      da09d4b84d7535881162782618e0e747d98277ed5cb322417cdc9ca84bed2879

      SHA512

      26d793639ed55c4150fa5dee547b3dfc18cd787fec1b5cdf901def36ed623b61ac330e0fbb7bf42beadab19f7fef3ec281000c100928e88cfb9b5bd459037b93

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      188B

      MD5

      31ae6e6a1ad7fbd0b44682ed095bc191

      SHA1

      a0ec94479b89f2ead9a83b247a0ab42bec962543

      SHA256

      6d9f26088fa895390ba96f26c865a37beb4e31eb09c89f673dce057f96c7248d

      SHA512

      d87807083e113a95102bdf5ec6c206f4d90a5949136c030c1723cda8acb740dd0eecfa644ca63cbed43862fb9f3544830f0edd119b2552b4c954d69126d9b9b3

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      192B

      MD5

      327a1c1f9988e95611388d1e16ae7cc9

      SHA1

      af9273ffa094708ee3788317506286d29152c008

      SHA256

      9e026dfc71b96460f17897697286b840a6da88ba5cbb00d31e6a0d7126d0f645

      SHA512

      c9d96a0152fbb68e0908036fd8febefa4fc3cc67ed268f3607ee1807e6a6f3f19943c3a709d5c082a1518b82ed31a87f8761c310c8505b200cef10575c0435fa

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      250B

      MD5

      9389bf2451f59d8b591e2a805bfd12d7

      SHA1

      d5e8a58765bedab73a2b841fb38c125224bcce69

      SHA256

      e9e88813dedaba23fc461f08550c2463ee54e0fb0287c38108e1286a7651d730

      SHA512

      cacae5a5563b5bfe3465273d54d405c722288065fdc241a18a07dcc1aae2faeea08973df50062f3b3502e4a4964edcc207b12a2159e7d893a9e11c5ebd6d4a45

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      605B

      MD5

      5a45700af7cb4399145e36183ab08f8b

      SHA1

      f74ca90689cd5f22e817ee9b6790edcb1489d6b3

      SHA256

      6f1d50b4758dbbcfe0f268f9ebabef118f526d4710aef8d911b1fc127eb1ad10

      SHA512

      8796b404fc37ac9607a2082e92b151586ca4bdcbae7448df277fb043ee9926fa42a2ed9c95a86a4d37f3456b7cfabba6422dd03ba446c08ab19017f54d088b0e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      606B

      MD5

      f4a6784761d1c49f4cdfdf846e2e023e

      SHA1

      391aa0390dce4aefc758506c0d041eba7f132013

      SHA256

      66cf7b978bc9fc5a58c8d8a5155262004a6ca3eb873d1aca1e0d7400ff019ec3

      SHA512

      d4cd645b47ee6b35d89d9053e21bc4eb710416fd25273ae0889466f40c069fad265910b2d3de59df5916be8f4712a8635b4e9a4d5c61a9e581abd1faf5cb0485

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      718B

      MD5

      9d5629fe4de3d99ae4cab9173127bb60

      SHA1

      68cee27e019b2be2d6c19b04f037d31f65954e7c

      SHA256

      44ebcf6d516d79566391a30164807b176704a3da8493afa63f2b88664c04937c

      SHA512

      72e314134d1f5b513ad3ed58bcdb9d9508cde918d02b65bdc9b377e149d68ef3ad3e07009213d583f6e3e97152daca0b436f7b1e719e03faa1b7309415b8c5b3

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      395B

      MD5

      adf1d9f9afed0495ab540bbc50b49b5d

      SHA1

      dd2f5f8db5ea6b993ae4e633cb8600f17f4cb627

      SHA256

      e03b1d16aa38b942970ac82feb2f8333c669831e967158014ceaf2a2b9638c05

      SHA512

      e53cc549b18bf163d950b526296d02fe3d7a8b1f3abe8dee5cc76f93a824b28c51947e3ade86eaa773456cac6a6a905beee5ddb75380b8fbf5a1db7ebdb4fa76