Resubmissions

22-09-2022 17:08

220922-vnvtcscac3 10

22-09-2022 17:06

220922-vmsbvacab6 10

15-09-2022 11:34

220915-nppkeagfcj 7

12-09-2022 08:55

220912-kvgj7sche3 7

09-09-2022 18:06

220909-wpqrgaggf4 7

Analysis

  • max time kernel
    1714334s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    22-09-2022 17:08

General

  • Target

    Live_signed.apk

  • Size

    3.4MB

  • MD5

    af8c6f5c4c1edaefb17263649c46bb6a

  • SHA1

    96aecc877cf9be5472ebd757326feedbd9ac31b0

  • SHA256

    c39d000ab3bc8fed90aa713ea4ddaa24379a5bb5c995a12c43f4bfd033b2dacb

  • SHA512

    e73ac4720810935e3dca94d72a895e4ef80279640d684f288c46ea9a7dffd94c5b4b47939f8127b99a7575da57a5052563a1876992a90eec250ed3a20c694342

  • SSDEEP

    98304:zb8SV6efffnRcj7jGPJqOd7rCrgtm8OEl3:zbFXcXgld7rUgtm8fl3

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
      PID:4734
      • ping -c 2 -W 10 -v google.com
        2⤵
          PID:4858

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/ir.shz.shzkisi/cache/~test.test

        Filesize

        4B

        MD5

        098f6bcd4621d373cade4e832627b4f6

        SHA1

        a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

        SHA256

        9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

        SHA512

        ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

      • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

        Filesize

        88KB

        MD5

        7bd7e08b7c157fb7a04f9701b6965b65

        SHA1

        19ed78cffffd879509071b091ba60776c18e8d97

        SHA256

        c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

        SHA512

        a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

      • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

        Filesize

        1KB

        MD5

        4b5a6c25b2eabfb1effc6e4b3b598fd0

        SHA1

        4a1413c91bae558e498d8f68602b8b1abbe204a1

        SHA256

        a85546d31a3693e49cfef38f5c149431c80935a2561a183bde768dbc907abc55

        SHA512

        dbae313d83e67c74d8752b14fb3bd0045c6eb50119d325b515e50c4bbf40c617dc1ed1153ebe514b90aa3a533bbb5f503a867f4e3d36a31400b7cf0fbbe13908

      • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation3590659325567722675tmp

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation4358691458906462594tmp

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/files/generatefid.lock

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup

        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        239B

        MD5

        64416c7253e99470a074ced006702c9d

        SHA1

        aa339051bb52f168207b506e79ee0b3490350c1e

        SHA256

        5a62bba41e560fb335afa3184f518df4404ba5ef58ccdf6cc2ade8b78bafc5d6

        SHA512

        a3d0badb58caeaf3ddefee2e3ab8509d5d4758b4e2f60539d8942c4fe2881fb5f0365c54ea8ec0e10a3aa6d4e1641ebc2c2814c5476d7ebec7fb9b3a48b0bf63

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        134B

        MD5

        4baddbd8421b1726762b905d2aa2f951

        SHA1

        93598e3b2a02993d98050da805f3821cad8cdcbc

        SHA256

        bea2aaa35e007364f532735577d11adff3426b7f362ba87554c6d192fc807a71

        SHA512

        1d3570db03de2e62f7f4532bc23d906bf2f954fd09d4f3cdfe8041ab2f4a9a434cb84eb6295bdec10e09f0021ef3da5c3f3eb8fd9d5a5709c9aa04ad385fa291

      • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        188B

        MD5

        6ab8896aa9a7e5f02a6541ab877170b7

        SHA1

        2c5f0845e65a4e7efcefc6e633d61b445f5b70d9

        SHA256

        1bdc1d7642cbe6e58c88292d0116d6ead4156bc2e65ccd915c5dbb789d65f4af

        SHA512

        1b99505897d3cd6c9bd63487103b7f3734b285adeb432abdb5af750a6a9e31274e85a57bc54467f4e173c36144700bc9ef9b1908da1157e4d6456424025e2af4

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        192B

        MD5

        49844b39b624d30cec049a8766aaf8e6

        SHA1

        bde8f6f3e991e999593264a418a8992c304bd628

        SHA256

        eda847f3674078338e323bd8a6263dfbe4c608bf37ac25e52df3b56fbabd79a9

        SHA512

        6bc03d9c931de14a7c917d82b5c1cff27b45703c9d8aa2225befefb6bf4bc7f7f4485fae37f90c531ec59d28b47180d25f246b66d3efac6f1069bf49cbcfec8f

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        250B

        MD5

        a22a20356b1e79a44dd778a25f561f21

        SHA1

        2e1d75e28cd62cbb11b87b4d9ff214eb98a66148

        SHA256

        dfa49cc6470044816d0550615f1c0aeb5e404c5310fd4f3eb87616e6d3256d3b

        SHA512

        3e39dfca4ea0ed010b206170efba07e4b651e1cb75f4631f5e953d86707c087a705514d9e5e50914e0cb571de3861d9889e9b6b59a9b6c6ae86186b5ec5492b7

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        565B

        MD5

        002ab6b4e5f05260a88639ab6f8c1e59

        SHA1

        bd42cda1c8239ce5c1c89d492f8ad926a11308ee

        SHA256

        1d220e842333da28f5f366edc61f1ad4348e12cb0c4d7a80f6c0a048749e866d

        SHA512

        2f8d9128ebcd6b0c06507fd32fa78bd0fb29328c6d1ad38ea82b95cea83d1b891acc83c3cdc3acb8ef52a15fab4e16615049f12b3bfe2457673f99ce480e123d

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

        Filesize

        558B

        MD5

        cc1ad0e61d73b6b028fe56b905253367

        SHA1

        cb792a2e9f95cee173ea317dbc96ff08f1151700

        SHA256

        0450ab92585ba36f62555805b5e16f39b4eafe1a3aaba049cce4527508039709

        SHA512

        d76367932f6e9f7d9258d0a6e6f797ba7deb8087c3c043c8aba185ed39c7039050ace687e41763313d4b290d80758d8a9409536742599b0bc6f8b9e2ca97442a

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        606B

        MD5

        796b8057cf7dd20689784a94496cc38a

        SHA1

        3c7afb3dd2039b316f5044157ebe510d47bff875

        SHA256

        313d36190c8c828febbc65061cabad3e4e275492fbf875e8d8398d73460dad98

        SHA512

        38ac493325e55c13485ce3d924cc2e1a5f251ef3df7c35a12443d649aebfbf527b87d8f4b4d2bc45bc816162c389be8cb0b5bd9f7b8c128018ccef9c1a888c1e

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        607B

        MD5

        71f73752477e003b614f5610637815c1

        SHA1

        3fcb0dce3b36705c1353b214910a6a25b65cbd9c

        SHA256

        5c8d929e9a738bac77ee83a0431774d30366e30cb4a409eb21c936e7266db98f

        SHA512

        b98caadf4dfb4ed6d44c0284fcb00ed3c92d909b74bb5f1144c035a8425f658c706f2501e66734bd2c18cdb592b3432035cffde054798deaa4586420bfe3c326

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        719B

        MD5

        02886f24b2cddcea1a7852e924404420

        SHA1

        b0d7ea1a0aedd7c6ef49726b6b36e76c4b39a6f0

        SHA256

        fb2cd8f9fb32ae836d4d72db15d98fdc4cf98d71df98fa4c1ef82facdd3122e7

        SHA512

        abee2f71d36796797daa5bc7b04859bbe45e3c447b5ae7ca10a44bded3d20747e36ca3cd83b498893b86bd2795eab82d3b808a1efa7df7415415de6b95f5a6f7

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        796B

        MD5

        e1c617abc75c0b6906ca8ea473013392

        SHA1

        c97ab172b3d7a8b1af47bc179e309af2dec13aa4

        SHA256

        d75f46e6c85a7b00f7abbf1df2ec99b8d164c7875b239a529f3d13895f6a6fa1

        SHA512

        94e0c464b205526815f20a65fca0c8aa6a3fe69f27e65a5c918c74c99d53b2f7010b3ff33ae05c8a96c5e3235c5e4c506fb510ffa1f29c25ab44a0a0d75f971b

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        122B

        MD5

        250b4caeba60ddf53228405750ba66ca

        SHA1

        422ab714feb34e9f3b4f1cbe669887bcd581ddb1

        SHA256

        2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

        SHA512

        373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

      • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

        Filesize

        395B

        MD5

        215ed4553a2d980c91c325a1f34ad7b0

        SHA1

        b3321cfac1b0265e1edd469dddc1c3dd27b59121

        SHA256

        88b0c8aabea4cb71d43b69485cf741456012dd47dce43b227a6d3a47e8176d80

        SHA512

        8d1743092159cea00637925ee9756a51aa2e4df6fc89b36886ff133025cd51a51128c45bd1813020f937bee47c5468fc6c725464cc37a5f17a99ea8e14d42fa4