Resubmissions

22-09-2022 17:08

220922-vnvtcscac3 10

22-09-2022 17:06

220922-vmsbvacab6 10

15-09-2022 11:34

220915-nppkeagfcj 7

12-09-2022 08:55

220912-kvgj7sche3 7

09-09-2022 18:06

220909-wpqrgaggf4 7

Analysis

  • max time kernel
    1714274s
  • max time network
    105s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    22-09-2022 17:08

General

  • Target

    Live_signed.apk

  • Size

    3.4MB

  • MD5

    af8c6f5c4c1edaefb17263649c46bb6a

  • SHA1

    96aecc877cf9be5472ebd757326feedbd9ac31b0

  • SHA256

    c39d000ab3bc8fed90aa713ea4ddaa24379a5bb5c995a12c43f4bfd033b2dacb

  • SHA512

    e73ac4720810935e3dca94d72a895e4ef80279640d684f288c46ea9a7dffd94c5b4b47939f8127b99a7575da57a5052563a1876992a90eec250ed3a20c694342

  • SSDEEP

    98304:zb8SV6efffnRcj7jGPJqOd7rCrgtm8OEl3:zbFXcXgld7rUgtm8fl3

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4043

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
    Filesize

    20KB

    MD5

    89cd606d433241b0e400ec6e41988cef

    SHA1

    89b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3

    SHA256

    fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253

    SHA512

    f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
    Filesize

    524B

    MD5

    d78fdd4780a44fbb5a707fa77ceafcb0

    SHA1

    fcbd3f0f6fde13ea1abe6b38d93b3ba75d0055ed

    SHA256

    a74588c3e58ae7360c2cca02a7736728382984d45e1d04afc5b07d3c1f276d69

    SHA512

    126a37146c5105c91ac8ad76c36495aaea1a2ce47420dcac422bc5b454fd6a36c28194fc443f61c0364c3dd04d358d83e5b4c5c0094bafd9285b56624ef5f603

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    36KB

    MD5

    8fe20e0c3867b3f255ce74a1a1d41ed8

    SHA1

    06f145bff94e5e1f071bafad8325a45fa14f68f0

    SHA256

    cec03d31fcedc3a1a3af73fcccc21007ff303056fb382f1035a8fdc09c6ac850

    SHA512

    973ef23c3fa37c08b3cf0d719778e6e5c009a4af5b28e78161b43c9be493fafd186290777b9556a2918c3d647115eb9a2a23b71ba48487d8c300f1ab9604b39c

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    0d5b508dbfc09437deecea4916306e28

    SHA1

    34c1780eac416e09ae42c76c7ceb255ec46c8637

    SHA256

    c5636d824b085778cb496d30f4d766b2c9a37f13565154fa623897e002175ea4

    SHA512

    14e8508b51f8fb77c2fac76ec1ebec7133c1c4ae0e6201af6bbd592b60188634c3d31e3641e02ba4f1c64d940e9e2cb84bbb78c6c577e54353a1227fd076e802

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    95c92c38407776d4f2d16080df96e879

    SHA1

    e12bbd49ec23daf7f5fab194b7beca122c2d8a7f

    SHA256

    b1d86e0a68f3acee2e359c95c21e3c5abc433d47fbe1e932dd6799ceb4ab72af

    SHA512

    12c6a270c363226709d989fbf028e6a248c6c4b1d10ee7804eaa495de058ed6a5643cd69fe7b3bb112714701b7884e71073ccab3bc8f4673bc6ead99b3ac66e8

  • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    1611e87ff0975e9665e9989b527f96a4

    SHA1

    ddf07901615bf892526185ff8137524c7768a2c9

    SHA256

    17f35d43768ff811fcc817f5cf27e905c3cfa95d6a4695e6d06b61b2bf5c94e1

    SHA512

    e34b9312ec049582534ec3ab04ec03f0d078068e2347d8659982b2ee5e2bfbebc0bf5e2bb6af45ab8d6c3d71814a9feda8fa599e03e89799a55eb83ced8d1354

  • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation2763579262205658409tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation4003780310127381117tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/files/generatefid.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    239B

    MD5

    bf9f1bed5e65672949b14998ab28b8c0

    SHA1

    ba03fe6e1354c854cab774dce5d39f738cedaa0a

    SHA256

    2c80a676ec58459d351b5314078cf3ca9d9a922bcc5aba12d4da64461a3a4e2a

    SHA512

    0c0348d241dc1aac73e09e9daec6084b439b587414d2935c8364a68085b3fd80459e594c44876b64d12de797f8fc96918e8bae754f508037d9a1621a1de6954f

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    134B

    MD5

    981746207da2f34e679bafaba1c7a2dc

    SHA1

    f5a139fffa683e4b88f5d37527734b9055cdea13

    SHA256

    d493f513c43f73c80a43c789d20de5d93d5d8ec452aceed748b0c123326c4cf8

    SHA512

    232cef5d1a462c91b6ca7c63c5e4af0e3778c5b89b771f16c60a781bc1b8ec9bb8b984c7b75a0a51f00063f033f33fab5b39d71762a4da7ec00348c45a7352fd

  • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    188B

    MD5

    97e207ba7dc602ea42dd83242ce29030

    SHA1

    3d90b815b1e72b385e5539735d0c238a33d71e9e

    SHA256

    f876a77561b1731a4639d2c39691c08101fe5903199ecd44d40c386ee527f604

    SHA512

    68118b2f253cf5467c7cb364526ccbf3f170b6fada56930f72840015f0ad763f1ee72fa5d7bf0757af25507722ab840d3a60049f3507b8dbd1a790de5839a90f

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml
    Filesize

    192B

    MD5

    6ccfee5617ac023426795be82e7ab082

    SHA1

    91d36809785105cdf113c259ca1ce4f577dd1f84

    SHA256

    fbec5927333281f67781a603bd7dd8ce2302dd1d7ab6dc981087edd5c34aad71

    SHA512

    be949781a67bbfc2c7e9a531263f1b21055cab0a17d98bed05ddb213ef9b34b43c76f043c88808a425977e7ccc129458c102d46e40945a40001618b85b354cfd

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    443B

    MD5

    20a6eea2f928d2685e41359b5ff3dfe1

    SHA1

    0a997c9154d9ac61b9b754cd0b5f538bc7a37b66

    SHA256

    b461380752caa3943bb5ebf6ba1f6f24e7c4d017a68fa11f01a6a697fd18509d

    SHA512

    6fc875ec4ec0d6ff04c77daf006053a58f131d91969c6522504aafe8a0ed6198b124b7b526cc018a2ce91bd0a3a9f92291f7ee21ac2b1afbef76d62dcaf7a8d7

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    493B

    MD5

    2df879cc415a64d67bd89dc418ef3b88

    SHA1

    dc65f4f583512e2fcd8f41838272b355f0d4a3f4

    SHA256

    8003e84f4f7af4654cb8ee55b7d6ffca408f09e4336f8d053a1de146a3abefce

    SHA512

    a4301a05fa4e0293e3326253686458f0aacdbe3b1fdd67f1c40ad23d0550ef9aaee97b7879056a4928927e5ce8864c463eb52ca8b3cff3d0c27481f7df8c33a7

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    605B

    MD5

    21a40c9fe0e8b71763b7875ea4b4c36d

    SHA1

    643c7f9db4b8001e1b269220462c249a729165fe

    SHA256

    fa4820b72b4869d4a351e7c38580f683417ede9bdf85196c7200667aefcf3684

    SHA512

    4636f17341142f2f0247d899621f120478ce9e86e195f5a70608338b2ecbf66f9b1de2f71dfbf702aae52ea514b29310a912ab398c71eeb63107f57bbf0e99f7

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    606B

    MD5

    4c845c48ba4ae5a7152235c615738941

    SHA1

    555a5555afe0bed41d087366323c2ffc1e128bab

    SHA256

    caf4a027c0a477f5a5e520135bb4c8de63e36c3418f495a355fd0e00885ed7f0

    SHA512

    a31e05384e0c0395d30f1cb368001997da3d218f7d37a4dc5752a114d107c0bc0325688ef30471837f18bbb4439654a96915f3538207115288e1a1e14529eed9

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    718B

    MD5

    cc82fabe8073fe1a1e16a3dc157ee237

    SHA1

    f9d9ed176e516c32c9ec9ed2aa7be58371408566

    SHA256

    c9913fd904abdb93c00299d03f89345959e9cc2aa3b5f866b095f6dfd70da9b3

    SHA512

    0b84741d4a09db22972d3ab610de2fc9e9956b6f60e3f810de6d0c51579ac5b8ad0159bf451b16c375826c340514548c58709fe9f9e9c3e99f9fc1721d0e365d

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

  • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    395B

    MD5

    712f14d59e8e33b50b0762bc674118b0

    SHA1

    ec5438def2c600c8918805b9768c2ea24217e918

    SHA256

    cb23b1445a93c4521e63bbd0ac2120d43b6b6a2d8df0adeeb407fc9c80448272

    SHA512

    be63e01694b9182b396c425adb2f7b114a47a7a3d2e95e477b68c219e41639e2f57384378f2eede352ca2cf6104ad71619026f725c58cef46a951995c7374ceb