Resubmissions

22-09-2022 17:08

220922-vnvtcscac3 10

22-09-2022 17:06

220922-vmsbvacab6 10

15-09-2022 11:34

220915-nppkeagfcj 7

12-09-2022 08:55

220912-kvgj7sche3 7

09-09-2022 18:06

220909-wpqrgaggf4 7

Analysis

  • max time kernel
    1714334s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    22-09-2022 17:08

General

  • Target

    Live_signed.apk

  • Size

    3.4MB

  • MD5

    af8c6f5c4c1edaefb17263649c46bb6a

  • SHA1

    96aecc877cf9be5472ebd757326feedbd9ac31b0

  • SHA256

    c39d000ab3bc8fed90aa713ea4ddaa24379a5bb5c995a12c43f4bfd033b2dacb

  • SHA512

    e73ac4720810935e3dca94d72a895e4ef80279640d684f288c46ea9a7dffd94c5b4b47939f8127b99a7575da57a5052563a1876992a90eec250ed3a20c694342

  • SSDEEP

    98304:zb8SV6efffnRcj7jGPJqOd7rCrgtm8OEl3:zbFXcXgld7rUgtm8fl3

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4552
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4647

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      1KB

      MD5

      f55929b31b38f20d0e2fe28778c1ce67

      SHA1

      2f272263e8d3b637f41018c9e10ee23912f3cc98

      SHA256

      a0b77d3ffbd866c0324e73068d64a874506c27eb2792527dd57e4960374f5e9a

      SHA512

      3c91a2bf470b99c9bd5b2e7ec3024ff05f6ef2eacb0018c17e5d58fc3e7bdd588f95f7b94945259cd1c0b1628f562201553ad370ff6b7a1604ac8b199bb1053a

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation2647724987965224574tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation8139881805587511657tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/generatefid.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      134B

      MD5

      97b20e06a2f364b244a84a06178d1ff4

      SHA1

      413d0468dbcb095fc5a561ddf6a17bb970024682

      SHA256

      774183b52021be3921c81376337ba7ff10fba424898f23b91dee8389ba4013a4

      SHA512

      d02f0c2a40978cda723ad7e2cfa0aec94ba427e44a6cd417c130c49315c27745a13ff09654af96914628f0f1ded17a19e0c9d78ee69c45ec3588f36565bb7644

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      188B

      MD5

      f9db2cf547c9564235891d38ba10ec32

      SHA1

      3f71ec3ba1128755acd8f4eb5cebd76d455380b4

      SHA256

      af2d682c203659ab189c8d85f393c3ad1af0361aa92a23c7722c962d94fa6902

      SHA512

      4bd0911cd202ba5f934e632ca5ab895b0dfb9fe019dcf13235eafbcdb2f6aa5900467688bc272ffca22837d88a45fac703d9d8e920dc724f63b8f0696df49704

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      239B

      MD5

      54bbca98b649383ef6994156fa085f88

      SHA1

      27d6dd682797e04d7daec9c01ab19df08f0b8486

      SHA256

      bb5a0254e9fcbd2b24489dae3f0ec6988c6ccab3df137a56c25b7c28348273e3

      SHA512

      7b86e1ce2a1f77c856e0b72f2127bdc953f9a3de611018eefea7551cf64df33632e9a7f473e80a63ff64e6913607f403805420f3a40aa6a0347b92b0b91311ff

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      192B

      MD5

      104674886c818ff478a08300f33a7002

      SHA1

      b9094220b5844a02c2bcde192aea744d5e83e772

      SHA256

      c63fb47f542956a0f391d27d2a4e68537a66e7b41c954ce7f3269057656c4a21

      SHA512

      f6029176a2aa8a36fb8563a9999c0d1a3ee48c307e666bf603db3c2b386e12c50594fe97bb633e22e071a2d6c02eb5b1ccc79f576f8dfee2c12a00fc97b79b83

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      507B

      MD5

      eaeb056b480047eaa62aa88bdc42b28d

      SHA1

      0ed5fd57a11dbfa1af3a9d7917d76c12f4123cb7

      SHA256

      faa2aed75cc33c6457f0bc43b85275cc496da40600dda832d601a5c765e108c1

      SHA512

      65dfb25df52227a4fe620eea29e7bc23d509cdbd286f15622eabdc56d8153bf15f6f6d5d409311fcee89fd3b1ddee434b2098ae9dac5ee73ec625a69eab2f583

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      565B

      MD5

      8ffc29dac66093d8637e0daba31cf348

      SHA1

      3ac9b8ce9be68f12d6a497941b96643aa1865b2f

      SHA256

      7c8f9dfa8daa753f24bc98b84455e0ed5fada1319b398abb84ef1b50a2b9ac66

      SHA512

      9de0bca590d1c562a8e1b90e5be489e500601a8944f5c8d3bf46674cb8203ac225eac641099f9e4ac71fc3bcdcf30ba7c0060d13cbe9b2bb0c9829f2cee4d958

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      558B

      MD5

      8e0dcfe10c0baa32493fd073f4870f79

      SHA1

      91b8d227d03dfc6104708b216430837b0a9c5ec4

      SHA256

      6015fe4c038a96a8856239ecee56bd083b45f761db443a505c32305a777c0834

      SHA512

      edb2c0f13c8de3431d5b143891c74323e94ede962e79c91c78d8e6d7b1050e9dc3304fa11a467c4ce4afe9cfbbf52f75fe107709f982fb0bbe0cf0a727d61685

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      606B

      MD5

      fe71234fac26df398fbfc6ca846d9bae

      SHA1

      36bb0fd58a353be1dd908730a1f0da729bef0c75

      SHA256

      a0c47e767e54b094105d4c5a0d5a8f8f815cdc7b3171d82b254584430ff4cccd

      SHA512

      8bff66924e2b9a7bc0763b14b0eb2c3b0c277e2f8310c88ff9ec5a51684215b488194ddf5b70582736b9a1e6aed2c023e8e12451cc424c983bcd5184f5be5083

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      607B

      MD5

      f6a429d4124924c2b7438f12efd28295

      SHA1

      ff92438349be62b83fa36879ac36db211dc60629

      SHA256

      39bf42599e2ae7f816f5cefe1d714698166d2cf0110b5ca510059d8e1425ce50

      SHA512

      224ba23c25d9ca2ec80a1c309dbc1ab611a58693b7c502629302be77d5a07535d4d01d9dbdb25cce230376d72c06ed8794748fe2c75f19fccd1ea8317e03080c

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      719B

      MD5

      d441861cb7cead48fab890c135817aa7

      SHA1

      d09cec5e71075e934e5dc5ff034aa079b593f96f

      SHA256

      2f74bf455267a7bce7a85d8ce61c2a4a1b8669bbe33bc9bdc9d6f1445fa1605b

      SHA512

      065e2bc4866564828f3156e690ff8b6f46d8f3b2a29fc114b88eefec8de7cde81dfee578793da7ed3624eff82fe9ca565285b4122bad3b642bb76bc347046ee0

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      796B

      MD5

      f8768396590bcff106b535df030b7330

      SHA1

      f3bea424d43a13b56ef0944f92281ba6d85d5b38

      SHA256

      a0b386dadbe66059b429d4c66d152cc08d112bbc24309a4f8b9ea0a592998f40

      SHA512

      36f43a185779c7cd23f2824e2f75d8548db5903e95473cd5153bb3f1f08f570647071e8be0526a1c53b0985a684a6cb6341304f006d3bea322a23216429b1d55

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      395B

      MD5

      f57d5b3eba6133417aa1240cbaa84b17

      SHA1

      ba5eaff76d3d8cb607a046b4004f426f58f2df6a

      SHA256

      9057b7521ca181d9c07cf82c178fef010d9a7e97d6501c991d54f8d5fe862325

      SHA512

      3950062638c8586dac26c0549b6e3f948d815760615de3c771e4278ab3a97f2aa4f9f0d5ae6f7c6f4871f9244f1b2918df2a5b8b865e733479fdef468129d359