Resubmissions

22-09-2022 17:09

220922-vn5csscac4 10

22-09-2022 17:07

220922-vm34cacab8 10

09-09-2022 10:36

220909-mm8ptsbgbj 7

Analysis

  • max time kernel
    1714216s
  • max time network
    15s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    22-09-2022 17:09

General

  • Target

    Live Sexy_signed.apk

  • Size

    3.4MB

  • MD5

    3cb25b33fa771650cfdff4c544528381

  • SHA1

    5532291652b2c6a494e1248bb1530fcd36a4e6db

  • SHA256

    a3d3835cf139b1700c2d2145afc911b6fa9345f2ecd3259d85169f015a83dce5

  • SHA512

    60539f7ef2d3a101120ed776ff1845b724dc348c4b861a80554e654e53208cd156631683b49b974f5781b8324983d5c3549858aac4317d6ddcdecfef3d54f295

  • SSDEEP

    49152:q/1UjSHe5UQtHy1fffEcy317sc1x7B3l0ZL7ZhJqzdNlSx7i3CrgzwMmePm8D8pf:giE6efffnRcj7jGPJqzd7rCrgtm8OElU

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4429
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4488

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test
      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
      Filesize

      1KB

      MD5

      07eabd20665887f692075de6fb0fb33d

      SHA1

      555f7ca4b2c4434627b8f334ff01607c12dd9875

      SHA256

      e1a0c75bad7742a35b694fa3093959a60045cf30d11ba2f0c969fc121560ca0b

      SHA512

      2255e21282bd791f000292b0de6af200553d6a4e44c1d2e89413d2b1466d222436684eaf771bb57d78f73ce563eefa12ee84828a0f58bd697b149c057f04710a

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation1838148564797618736tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation8546261223347682686tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/generatefid.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      239B

      MD5

      7844ea07f532cdaea0451254a70a5beb

      SHA1

      17ffbe0aaf33f515f861b99765c0fc46e8c95e16

      SHA256

      f5ee0b2f84d5bee555482985df5ceaabafed6fae037818ed1f53057fed7450c7

      SHA512

      3e17e886c51e309fad58cbd91acd400606a26a6123d2e734e5ca571f72c8c802d038cb9c10f774852954f634384c21de8cd919ffe948a32e1d4a627847cb0ea1

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      134B

      MD5

      f8b1b04e637b82c4493cecaf27072719

      SHA1

      27da76f9339f6743d22483ce043835ab41a28de7

      SHA256

      2d8bf3df6d34f3529f54650e4a73ea068619ff6e475eb75ed78729ae12615c30

      SHA512

      dcddbd48ef651287bfcd557dce121abda691a735486f5dc9b72368aee6997b2165f359afce30ac57c2ac4e7ac20a0455900655a5f739f6d5b50735e877ff5403

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      188B

      MD5

      5298275f2147b70c7e4c141c31b6c6eb

      SHA1

      bc1f830583ec842a1422a317905b9c531877cb00

      SHA256

      9130c143c7aa88ceab646efe691e3b9813ec1e476cb2ecfab7b283aa992bcb30

      SHA512

      4d4415107f56e6223726c9f1ae49fa6ef96cae9c023814c0e8e08cd39765c69020e38981f61b997c8cd78466eff73b4e146f865e46b532f23b2ec56624beee9e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      192B

      MD5

      d21816d885de989ba9717fd777e717f4

      SHA1

      34c41c5a6377c64ad443c8efff441587e2090bc4

      SHA256

      20e0323bfe6da6e395e39b2a2e6dafaad2084d968933b447d90a430b1d5a728a

      SHA512

      9cdcf9cf571f52cc3e3a9cb66fda4df6a2ffd4e7611e2083a2e657254464bee0022330e1bb45fa4d9cb4bce60e746b74e1c222f72f375e1b594ffbcbda27889d

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      250B

      MD5

      3f96b041eb2adf1303fd0e2969a22d86

      SHA1

      903b6690b673acd5645c0ee14af89805601ded8b

      SHA256

      9c0d3376f649d7c81727a8fff11178841ebc6c1730c1ed392c457b472f53e070

      SHA512

      412e748337e119511b38e3cf9da2a8c60d482fdd31cf89e52684dafb74ea0c09ac5d9c4e86dcf1a1f9606731437e95d32ff94b83a610cf4ff6195af7f72ae6c1

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      606B

      MD5

      e9e322d40568cce15b3b529e5122303c

      SHA1

      6e2650d67bac9df2212fa1c4409ee704bf60769b

      SHA256

      4510a408149b9d8a8f020ad8173348e742814766cf511978a5392febe8f35ed4

      SHA512

      4edf7b18d1772537bfcbf69593d57336e7a6f6d8f84284445fb0d85bf0596787689af3a15b1fd2d64f226c5e1a44b1702c4c55db01dc1d675f43d6cfa39d078d

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      607B

      MD5

      9b5ed37a48bb4e7a7948ba480f91142a

      SHA1

      fce17a0598a230686f59d29edd4d189c2e947d57

      SHA256

      001b8d63ad13c44f95f87060ce3f2af24cd6aa9331285d904eb653977ac1b4ba

      SHA512

      97ae79a96d611ae1e4b4d08bb060ba8d55324b04ae554bb05bfcfa9cd994803739df82e51532ef061525839acbe9cb540e8dc256e0b314e75d517b36567664d3

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      719B

      MD5

      8542fc7093f01f4351cfc41db752fc5f

      SHA1

      d5fe703e6878cf2134f484a5fe0bda828fb5ebf2

      SHA256

      f483c6e15346fea11cc4dca7cbf10fd852192055deb7e0c8b48d01d0be78f1d9

      SHA512

      529b9a776ddd374b941e384bca044295387d183987bf1ec2e210d71c26d1bd89be7cb6daf85d9a8f0d14f35e487dc4d55bcca42666176c17f3c10b69d04db421

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      796B

      MD5

      937db61d531e401fa9aaed7411ec016b

      SHA1

      f810e2ca57fbca792811ed4cd479e1b5f6b6a23f

      SHA256

      8eb6f9bb9ae8d136f26fa9aca3c9b0deb1cf8b1b6d9c857bf26ecbd048a83b6c

      SHA512

      60bbff6975d700020a59787a9e05b78fe23058867b3a0d122d627be56a6e0c367f4788c41d13ff4fe13840b2c2e8a880b788fc3c2fd929c03786231bcb2f14c2

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      395B

      MD5

      aa55b6a14cdb296dcfda0e9f301003cd

      SHA1

      4b4ef472204b5be24b8910fd6873c0fa435d44ab

      SHA256

      da085af80baedbaca7f2aee951c91d929a5ba8b5ffdc64993e4971e5fdfd28ae

      SHA512

      817317f5f66b97d9f55c124bf93847510af9fd3c7c6e30991b02852bcc3d213698b8e042d7dd753fc83f62dbfd6a31370aba025ff56f004fbac08762309fb97d