Resubmissions

22-09-2022 17:08

220922-vnz33sfgcr 10

22-09-2022 17:07

220922-vmx74acab7 10

09-09-2022 16:13

220909-tn3crsgeg2 7

Analysis

  • max time kernel
    1714237s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    22-09-2022 17:07

General

  • Target

    [لایو سکسی].apk

  • Size

    3.4MB

  • MD5

    854bd2ce5c997872a03927abcb048e56

  • SHA1

    603bfe50c21a2911de573d639c5bb85e1b0714d5

  • SHA256

    3cf954003a8aec7e0a08fb5926975cfb45a0bda948e75603fb570d6b89fc538a

  • SHA512

    5ac824b0ef7c2ca997e2aa4c8bf2feb170c753015c9550d72223f97cdf1f3f66c52b3c99caf222ae08db916d0f9d18c0f9433abf02875878a200404f58672101

  • SSDEEP

    49152://1U8SHe5UQtHy1fffEcy317sc1x7B3l0ZL7ZhJqOdNlSx7i3CrgzwMmePm8D8pm:XiV6efffnRcj7jGPJqOd7rCrgtm8OEl9

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4413
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4513

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      1KB

      MD5

      b9c9673c65be99cdb7bd1316bdba2976

      SHA1

      76e7b29d1e7dbd2b8b270252838c6f8907187554

      SHA256

      dcffd017e2a5165313e45cfee9bdae0b49f50f436f3fefe20d33f18851cb3b8e

      SHA512

      61129af43b547f8ff5960f99dcf3be488a34136da5e7c3e267f5887377eeb8df6c1d2bf9c7efe3e8faf558296d2fb9e116ad999bf064a521c084cd0113df00da

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation1077619083335589085tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation6828592399755922211tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/generatefid.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      239B

      MD5

      e2a049847f2ba799a584dba2e9c3682f

      SHA1

      1dc857c8daf7c4e6f980c57a906c50a1ef10ea2f

      SHA256

      627b2410916bdcb73938899d87d855275b770cefae7970520f7d118baf2de169

      SHA512

      30228e6b84dfb08b6e2e68e434f314134d3a1488b88c0260f15c028302bb4a8e0d34b4dde73896d7c0c754d77418a1a15f3111fe2d56be388b68946ea0fdc0ff

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      134B

      MD5

      a448f0760ecacb3f89b600162772fd3f

      SHA1

      362304d4cec256a05c9052257b02ad3f6767ee8a

      SHA256

      04d69b6bc4c5700f661dc615bf56c8cc5fffcedde3ec8bbd76d92e165a636148

      SHA512

      e87307effc70cec8dca6ec14c755d13edc4bac0ea597b3663ab19237f4f311e70734488a573eef655efce9a9cfc7b7280ef446f3a413fa32a287282b761900b4

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      188B

      MD5

      ffdffd894dbcda2781ef1b204ea04e18

      SHA1

      de47e0b5106e634205b47330b03ae07692ac7f31

      SHA256

      c74295d05486ecf851e4c66ba4ad44a871ffb15f30a70a88a3478dab4ec5e9f7

      SHA512

      83b7723bb9cea1333ca2737e7346d29a8902c9881591062b7f3fcc2c54b98102b6aec95dbaf7cbe01648f6d5ab20e014c671626e44f3ba98ef93cac930185321

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      192B

      MD5

      180e99dc1e14a4ba4932b4c874cba779

      SHA1

      5976a13c5f51628a5b129adf3a24594d9e2fd9c8

      SHA256

      83716cf9151c545905c3ad2c363bc2d79df862eb6be34c4c5c7dfe72942689ec

      SHA512

      5a6660d03066737edf22271aa112e7eeedfce7a81ca625456dd5d77e1938b5dd0c080d02a5bbd537b2cf0dce86da66b56caef2472f5b372ff7d2a6894a8719d8

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      507B

      MD5

      82bf0c49bd741879c21b5ff43ac281e6

      SHA1

      caa9f7b104f335f0ee79f2f9aad66f1a3ccd8466

      SHA256

      2bc2beeb1aac42cbcffc27332592049ad37b7045260040056f022e2a43cd091b

      SHA512

      95dad5cbd609de221dfb61f0153066ebbe75657517755d9d38843061774d905207e29ac025276eeb09414addb266ad2789670002d853bc03dfbda804fa260776

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      565B

      MD5

      2e49f600ad20b31d3b3f281032b14139

      SHA1

      2599a18249f782967ed94bc872671615da17a779

      SHA256

      5f37c4a7baa869b599fac6eafc23ed96aef61fc42ff3c5005b18b16d24929660

      SHA512

      fbe86a903dafc0b039d5d7f90eff5d43d17e52fcb02608a802dddc1edf07e0a1acac4b2d79999b1e47f3e7e8f871b405436782f6d185a83ac0a60eb1d64f6940

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      558B

      MD5

      8d05608ded207d68a82945bf784c95de

      SHA1

      ad76a8bfbf5823df537eaedbb67909ce01586d0d

      SHA256

      d3485cc0cfdc8bb0c0972bfb8ef9d87a1c28a37f843689d7c3254e1036dfcad9

      SHA512

      e7c7f5c7c8596050e0abd529f4b02c2bf1d7b77592ad268824b854f0018e32a507026d8c00963733cb730e5d95d96b58bd11430d83140bd501af8d48b3232072

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      606B

      MD5

      48ab95522937c8aacfaa623aa815c64e

      SHA1

      1f29d833894fcce4e5adc2cde9fd723c468ecdfb

      SHA256

      a55d0e6e7290588bf05378ac56f1e37b28db0d91d3bcc576d22235a10dc5a077

      SHA512

      c44a19f06bbcf3000fa32cfd6a81080c898f346c700be96320c85020dde20afc88b0a346f6912d1e23568d97f0585e448032064ea61f082c8848683907f02162

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      607B

      MD5

      1d7ee15746f4d531b297451b766e131c

      SHA1

      69871523be77f6e9aa960d5d33fe995e938fddc1

      SHA256

      aedec6f25b0b81ee376f56fdaacbf4b60d59ec53e3b99e816f838b8f9351a721

      SHA512

      6d8fdd848c4c76e8be3387dcebb40a3e2149aec356bbe29d670b81d8ad94d6c4f67cb24a68ac649a9f0756fad5c945acd8f4b59d0b26a376fb3bfb42d940a1cc

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      719B

      MD5

      f326a92454cdb82bad1e633721642d1c

      SHA1

      f9ff34b3606f0a0b8922a1b3e511dee0bab8afc0

      SHA256

      c179b6b229f5b838e21c12dcdbeaf33e04a86bc8c601da7aee9a48dff0adaf51

      SHA512

      05fedace18b6404a7c7d7da0973b196a4b5b33d1e55e7602fb8b3265f42383c15be15c700786481a4a5730ae34bc0b56bbeb25ea342a4968874b890f2c370501

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      796B

      MD5

      1b8fbe6d8f2baedbfa11f1930e9f7305

      SHA1

      2e6176c500bffb3a9f61f3a4ecbc5b3f060d2c75

      SHA256

      d5108098a977c14187aba47339e2bd33bd98851c6606aa2e152ea836840f831d

      SHA512

      8f29910bd67c3734f80d036b00f9bb63c16891787c5ee8a3187a66572ec0e5257e6d43cc7b4cae22c243c76b819725b4623f2ce0df98d67e746520c72a3eb2dc

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      395B

      MD5

      20a137854530d4aa5f7b2adb2f8a43cd

      SHA1

      d21298cf5c0f7bc507aaeaeb8ca989d7f372b89e

      SHA256

      8c0b091d3aaed5e1bdf49cc5ccfd32763a595e9f8680c52f2dac7bc24a42bd25

      SHA512

      e2275198272e5bca6f7f3a842623d1af3a929d9e9970154c51d1f67b06aef1d5810bda685f6e3319eac180e6bbaab3c3c99d58988383bc0321ed438af7cbbc57