Resubmissions

22-09-2022 17:09

220922-vn5csscac4 10

22-09-2022 17:07

220922-vm34cacab8 10

09-09-2022 10:36

220909-mm8ptsbgbj 7

Analysis

  • max time kernel
    1714218s
  • max time network
    15s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    22-09-2022 17:09

General

  • Target

    Live Sexy_signed.apk

  • Size

    3.4MB

  • MD5

    3cb25b33fa771650cfdff4c544528381

  • SHA1

    5532291652b2c6a494e1248bb1530fcd36a4e6db

  • SHA256

    a3d3835cf139b1700c2d2145afc911b6fa9345f2ecd3259d85169f015a83dce5

  • SHA512

    60539f7ef2d3a101120ed776ff1845b724dc348c4b861a80554e654e53208cd156631683b49b974f5781b8324983d5c3549858aac4317d6ddcdecfef3d54f295

  • SSDEEP

    49152:q/1UjSHe5UQtHy1fffEcy317sc1x7B3l0ZL7ZhJqzdNlSx7i3CrgzwMmePm8D8pf:giE6efffnRcj7jGPJqzd7rCrgtm8OElU

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4102
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4211

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test
      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
      Filesize

      20KB

      MD5

      89cd606d433241b0e400ec6e41988cef

      SHA1

      89b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3

      SHA256

      fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253

      SHA512

      f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
      Filesize

      524B

      MD5

      982d161fc4484524646986586b1aa8bb

      SHA1

      0c683ff522eb56e273058fec61d930e1f4bf5aa0

      SHA256

      f0b1dabc737d28db178e3ef4d66a3e1871ff5ab267b2f734c1627f069fa92b78

      SHA512

      976ee95ad49f4341caa77008fa5e722d1dad4618c3d187ac2ab87cf9cbb8b9fad295f3258ae6dd5d6a6aab4a19176d3c37851b0ecb26e62aacf35cab775dcfa5

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
      Filesize

      36KB

      MD5

      55d463d8fcbbf64462a6d76672f60c81

      SHA1

      696e17b1af1e8b11cf4d11159f85b12ceebe8736

      SHA256

      54475c0331864628cdc739f4e628315baf8b3618b08a1c61b6ff58493638ded0

      SHA512

      20349dfc1b65c3a7d7c67aa07f41592aaf3400500a56d514bc5a6c9ffe8faa76188da868222d448e632bbcca1faabd33455c95fe0b99f73397c71f0cccbbbdd0

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
      Filesize

      4KB

      MD5

      7d7158ed18f876735e141f2318929b36

      SHA1

      17399f8ccbe7a460502fb621617af57bb6734a75

      SHA256

      5e64cdcc1281b5d5408b074f89e49816531b21b9b5caa9f58cdd648eb2cdd5e5

      SHA512

      b5b4acabc01901c1406431f85cdf410b449e5b06aa1e0b43ac436eb6bca07943da193d01c332514e6c2302663c85a6bd6ab724765a12b63d2ea37769b73662ae

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
      Filesize

      4KB

      MD5

      37d6d903bfd6f23e061c4e89d422d2a5

      SHA1

      a945a65858ffe303d403c4447fa55d5a9d59e085

      SHA256

      9c52a7fc0661a17ea9e11b8a57a3244ecf6529e38c8f466442db1c50f43ca0b1

      SHA512

      931276b2e1fcced0be89764ff6299b19b508d77f58feb010d6a0036b13a12ff0f100b1f38bbf4170598e31c2a2ad3cbb78433819c9a7d08857197010ee1811eb

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
      Filesize

      4KB

      MD5

      289368e876aac899a9149884a2525e9f

      SHA1

      2eca819626b1eba39bbdfec62381d8cc50803bc2

      SHA256

      dacba77d201fc47dc455962b36d84d3205eed0ce14258f6a53d1b41d0accb9e7

      SHA512

      0584bd35ac0314c1de1a9245589947a27a27e57e2dd1d48ba9c488596c97b9b154e78061fdda1b573665f7363ca97b44bf87fc9c834ccf72aa5ae4bd2512c96c

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation6623799116363011049tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation8345495460562304379tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/generatefid.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      239B

      MD5

      bfd83a3cbc562d69965871e88371c4d4

      SHA1

      af64c9a44e010cf260efd413114972dab3f9db7e

      SHA256

      8a1818dbca5e107b8ef3373c2c07c69f66c9822fdc739d4e360ed46b36fbc7cc

      SHA512

      eca875732aec2b4e2777f289c02d62e3f113c84cefcf6ed12bbbf45375433a0d4ed35fd181dc73f1cc047fa2646ea50fa09487eedacf45742c5c7ea769ca653d

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      134B

      MD5

      5b357302a7bed6b7038994a747a98f5e

      SHA1

      a3724156c805e88d42c1b29d34c5500d1a8fd7f9

      SHA256

      883bdfa81ce29297dc72c2cfc4fdfcb2388a4da39c001dd44c5ab1e7f6d7ddae

      SHA512

      5ee0642e577410759acf9f2d8737639bc02c3225a6a71500dc8946057690ba90756f6dce5144e78f7b2bc39bab7c65e97a303dfffcb2874992706dfff749e317

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      188B

      MD5

      bce8ea107af9514887eb3b1618d7ef1e

      SHA1

      108a655d5d2ec52a45038a91f7f7a409ffa7c62e

      SHA256

      c7fa223622a7f19f1582be10416f957af72f45b8f0fad850126c122933710d0f

      SHA512

      9326937d4d8a15dd8c1a4c5d2fad289705ea1c2b761f0185bbe8676bcb217f861a6007209ccfd1117d31551571a0f999201305cab2005048531d400746c61521

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      192B

      MD5

      a819d02e6a264eeba09c8c47c0de97f6

      SHA1

      7a5d9066381d8e8a3b379d0d517811cc2a3db838

      SHA256

      2d482522ccf6b2788306b41ceea913495bf5ad8b93ba50ae7443b8b30e595884

      SHA512

      8cae71cd67866438fd5e1652b5ba2d75e7afbd702300113562e682e7aaeedc376a0f438a5c69f7ddf2838a8db69d790126f72bcfb9083d5bf5642093b23f2424

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      507B

      MD5

      5f2d218826259f6df9413dacc8141576

      SHA1

      6e2d6d1c762ef1c8496592615dfb61dad5d642d0

      SHA256

      12d49f8bdd796559f22a57958d5c77f68cf7db741f417c8e8423f6f26cdf1cf4

      SHA512

      e68d8e1faf10b0f45eb3667169060241e9d886215eaee51131a26c60c874e53adff6f077471c12fd43e5cdf1677b8976e54eaee7e011455d1f3fa6c75ca5c547

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      565B

      MD5

      430a1534c51da7d30482f2d2a4adfd1f

      SHA1

      3c1c821f844f3d478b69b1d89c5c341c03169f25

      SHA256

      539656517a190982970ee3aa944bb520de9e03dcba0a6da1af40d2667ebbedba

      SHA512

      a6692be303a43301126463b2a5372ac2af59e1a04ab1d313775d48c81c94cf40571068247219577203e1527691d285bfc063f3feca43ec897f434a4a0b90d2ee

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      493B

      MD5

      f369cb61c37f85a1ca02aaae8e412b76

      SHA1

      eef7dcff66ff4b30008396ee844d9aba4c686976

      SHA256

      04dab4b557b25a14663bdb59602f367a59c35f1516b550c8f446db143325eab0

      SHA512

      418c7967e451b36a7d736d323e9dd72a49e338a5a7f7d3ee348e48b41621de6b6f8dd32ef46968600f00f91a1cfa32fa1647c4997928e68eb34faba995f1df30

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      605B

      MD5

      d305f4f298b083d5f25b82468352fcb0

      SHA1

      e18aff0b961e762d052507135be50584ff987552

      SHA256

      40def0cb8955f6ee2088d77adf2a6b09b086a475caa80cb4aa005e108f70dea9

      SHA512

      c88020c2c7848ab28fd6c212ad77fb905a3c87c39793080f362789d8f366cfed5f87444db535050d4c53ba2c6eb8edc0ba13b8b23a98f1c6fcc0f4e80f87b5ba

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      606B

      MD5

      cc134235261633bfea05bc6d66c7426b

      SHA1

      d0b8c39b53bf73285712af554d027ac46bd00042

      SHA256

      2008a25e3d4a24880d0dfb2f7b37b4166eb36b202ee0bc9ab29a86f6bf820ee6

      SHA512

      1e63accfda6b6b5b8942d5e18d3148dd26163657aed8abecba0db45847dd0f9f2611f804d1e5b25f6738bc1a7021b800c6a286f621dfec9d65b27d1b5538ba2b

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      718B

      MD5

      f84a70f950cedf386e8fb42ad67d9fc1

      SHA1

      98b9164ea5a118c031d4c71f05901579fb263066

      SHA256

      4271941f535de7ba3dbdf634c0290acc8324dbb2f6942a54d6a29105d5f69e5b

      SHA512

      106e7c110394deb09a646d0f9f72e528bd5d147f9472f16969e9b8ac586fc22267388beb3209c722c47113cd842045de9530a5e90d09dc72fcbf7e80a4e083e8

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      395B

      MD5

      f788973594380fe330bfb16bddae96a5

      SHA1

      d096c8664a55074e952acd7ffb0e6280a9fbb44f

      SHA256

      7c260edc4206c19bd3f1762a4f0faa3b0e5640e2598d67a4d6b06ba9aec10c7b

      SHA512

      3c3cb09a5995c32181facd289a354a3a73fe0f139af9ffcf3db267eaeccc551bce9e81ecaea17574eeb25fbc8a6c8efdda0b52a57558fb91cc9ec880b2022d60