Resubmissions

22-09-2022 17:09

220922-vn5csscac4 10

22-09-2022 17:07

220922-vm34cacab8 10

09-09-2022 10:36

220909-mm8ptsbgbj 7

Analysis

  • max time kernel
    1714226s
  • max time network
    25s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    22-09-2022 17:09

General

  • Target

    Live Sexy_signed.apk

  • Size

    3.4MB

  • MD5

    3cb25b33fa771650cfdff4c544528381

  • SHA1

    5532291652b2c6a494e1248bb1530fcd36a4e6db

  • SHA256

    a3d3835cf139b1700c2d2145afc911b6fa9345f2ecd3259d85169f015a83dce5

  • SHA512

    60539f7ef2d3a101120ed776ff1845b724dc348c4b861a80554e654e53208cd156631683b49b974f5781b8324983d5c3549858aac4317d6ddcdecfef3d54f295

  • SSDEEP

    49152:q/1UjSHe5UQtHy1fffEcy317sc1x7B3l0ZL7ZhJqzdNlSx7i3CrgzwMmePm8D8pf:giE6efffnRcj7jGPJqzd7rCrgtm8OElU

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
      PID:4775
      • ping -c 2 -W 10 -v google.com
        2⤵
          PID:4929

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/ir.shz.shzkisi/cache/~test.test
        Filesize

        4B

        MD5

        098f6bcd4621d373cade4e832627b4f6

        SHA1

        a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

        SHA256

        9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

        SHA512

        ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
        Filesize

        88KB

        MD5

        7bd7e08b7c157fb7a04f9701b6965b65

        SHA1

        19ed78cffffd879509071b091ba60776c18e8d97

        SHA256

        c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

        SHA512

        a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

      • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
        Filesize

        1KB

        MD5

        70bdaa5f92adbc09404e0ab1efd37704

        SHA1

        15ed99db298e7b45b2fc325d2fc3b3cc29cdb953

        SHA256

        8f8a0c9ce869b69744f1da85bd937c6ac9125c70b06713350d05d65e636e65a2

        SHA512

        d1facc8a1e03c537cfc9d532d4247b039c68fe22fa1a9912702793b0ed6de30060d780bb0e23e6b2ab55c0a9896921c37bd4152c9fd56138fa7e1dd0aef1a75d

      • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation4402417661399517056tmp
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation4415051360571229081tmp
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/files/generatefid.lock
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
        Filesize

        239B

        MD5

        ce8751311e0dfa90d899c90081aa76cd

        SHA1

        b949149b2aaa149c19e99b0b67308a2e97aadac9

        SHA256

        fbc00a94fd1a2042e5deaad4bc94f836bc85ac9e61b90ab9c23ad33fe8717b39

        SHA512

        7b3641503a5aa3a2ded28ec3044216e89c26965aaa782c730bb679baaab3009d0f00da6277d0636cb1ed5586e433975a9cb9c25f96f47cffbedc49895ff83da5

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
        Filesize

        134B

        MD5

        ac91aff98f285564319f741674063ed7

        SHA1

        e54a8715280a685e6c09fd09e1a2f6877f50c04d

        SHA256

        c6d742c012004a582645169f9427de7e65a0a0062af179a08c55b62813410a42

        SHA512

        29b72b76f5b61df800f633d7b52090d4aa9085049f05c5458c2713670332d15e671305d461fd224021c6714cb0b97ca1ee6fb9d30a8c1825a60c7b3f0c3f2d14

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
        Filesize

        188B

        MD5

        440c9b585de52b123e0c4ddffea42af7

        SHA1

        a99f39b5f2749a4f71698df9da50c5cbd1b201d4

        SHA256

        b191dd7e602a345685de963cda27551a819e6dd460bdc95188440ae9598238b2

        SHA512

        151795923b866f3f0b61778d39411e0bc71cafb2d5733c626ed05394e861ee3c9bca8b30dbefa8cd9eff78ce67c39e5d444906cce7d7b61fce95578eb5f18658

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        192B

        MD5

        34d6b64c9164a72e31bc8ec4020e3934

        SHA1

        892d3edd50035d5ed0b182d0a6f551fffe9ca448

        SHA256

        d595b6a0904c6233d1f131a31d1e683541152d2eb4e54bde9a054d82db2302ad

        SHA512

        24b916b0d0d508804f73903cf86fe3a61fc40672ab2167c0b187a55a4f82adde83b308181d6b6aefa0af0852586ed0c98c61d43d3832ca08400729caa59d3218

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
        Filesize

        250B

        MD5

        35db51c5896b40346e8ca66e93510b47

        SHA1

        311554e21104fbcef6128061caf7c275a5dee10c

        SHA256

        1814eebec53406321d28054008af8186d27af65d056f391507ac77112fbcebf8

        SHA512

        3dc9d557e013c1db86b85359ce9ab015c6aa57194511d7f84a1ab681e4a5e6c8b3e078f7c2e785a4fab5b84f2b584f4b077ad47898dd239fa54dd7879e58cf9e

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        607B

        MD5

        97cce4b3e25f9c65af217bad7c0196d0

        SHA1

        b0d3d47d59ebde989e1f884f9c4916cad2ec533d

        SHA256

        a0cd7147693539e9539907c4588d9e3397346f869409e8e4c0cae8d94f5bab78

        SHA512

        017134eeee0c0cba08317ca3efecd557793d69fddedfa8e5bb6802876bfd2453b75eb2ef41f36efab2cee3ddc6f868685c21a062c5034237c440a28ea7dcbe7a

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        719B

        MD5

        5b9152347c4405c0a18acb66c749eff4

        SHA1

        1fff96cb66ec0d7e76c850ab9d59265fd0d35572

        SHA256

        d98124ebb2b3b173051bee6ce74a8ea73c1fa7400ecafc1ba9cea4bf2105df7b

        SHA512

        dcd7abb4aa61d3111471c3c0341e9f0712179ea7ab26bb4f16b6a956d501f2739e0c79fc4fd2874b3e5ec26792e46d468394c1f2a348f32db039c48e6e963ced

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        122B

        MD5

        250b4caeba60ddf53228405750ba66ca

        SHA1

        422ab714feb34e9f3b4f1cbe669887bcd581ddb1

        SHA256

        2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

        SHA512

        373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
        Filesize

        395B

        MD5

        246faea3f16012a9cae38fa8bc4dcb5e

        SHA1

        c5bf3d07f3dbdf6af5d8c59f2d36487e96c6f9d9

        SHA256

        d1da3162ee7581cd83da5e1319ee709aa65a8cc5a9317e58f25addf0a4f0511e

        SHA512

        5fec58f76201263096725c4064d417b4899460a49ddf820538b921892f71d621935656882263b908200534daa069a7388792c5141e59bf4b450951f0b3215830