Resubmissions

22-09-2022 17:08

220922-vnz33sfgcr 10

22-09-2022 17:07

220922-vmx74acab7 10

09-09-2022 16:13

220909-tn3crsgeg2 7

Analysis

  • max time kernel
    1714205s
  • max time network
    17s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    22-09-2022 17:08

General

  • Target

    [لایو سکسی].apk

  • Size

    3.4MB

  • MD5

    854bd2ce5c997872a03927abcb048e56

  • SHA1

    603bfe50c21a2911de573d639c5bb85e1b0714d5

  • SHA256

    3cf954003a8aec7e0a08fb5926975cfb45a0bda948e75603fb570d6b89fc538a

  • SHA512

    5ac824b0ef7c2ca997e2aa4c8bf2feb170c753015c9550d72223f97cdf1f3f66c52b3c99caf222ae08db916d0f9d18c0f9433abf02875878a200404f58672101

  • SSDEEP

    49152://1U8SHe5UQtHy1fffEcy317sc1x7B3l0ZL7ZhJqOdNlSx7i3CrgzwMmePm8D8pm:XiV6efffnRcj7jGPJqOd7rCrgtm8OEl9

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4113
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4189

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      20KB

      MD5

      89cd606d433241b0e400ec6e41988cef

      SHA1

      89b9c657f7f3fb4ccfb91cc80fc96e8856c48ed3

      SHA256

      fcba6384af560e501a3fae9ffa613d5f9d08484ae6c759bf54ae4178d4c2d253

      SHA512

      f79809217f10226f1a915adad15ff5d89aae50835c718a7ca3a9a25fa570f005c8b0ae0eaea767b68bb666d8128426be51b3fbad8e3b024a7f0f0302b14179a1

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      524B

      MD5

      bb9c9007e5ff555d8651137a8ddf8afe

      SHA1

      42f0adbaa7f09887d121d6b6065d17b3473a9717

      SHA256

      cbd424b1c30c14c9e045e2cd22975b2379fce67178983b775b99cd29fe420331

      SHA512

      a3fd2055db611dc220fe97cf84287f90e28e34ec322a6ceed68d1213632efcb3546342a204195b36befa003df07b49717ef11dbb3b2bd420906af4489d79d916

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      ec76650ddfb9faaa0af3dc830b2d18f9

      SHA1

      7abc9d3496a7b3331f9faf1d87a501048d581c6b

      SHA256

      8eff77f66f4586496c61867a8ea3bde7e5a40f5678e182819bd2cf1a0b8f7613

      SHA512

      19400f7b805919ec9b72a0a82fc7494b4bf558597aac6ccc0ee851660b9ce68d65c9b2e6ac1a844955fdcd562057515f6757f7ca2843b7baca5b0818b38f1ce6

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      d59788d4886987da8aab79b346da3b7c

      SHA1

      ba3f6427caedf89ce67c1c6f360cd3e267b01e44

      SHA256

      94e135bf3e65e0e1d30552a87231a7a51e97352e44286fb628f8bf063b04fd8e

      SHA512

      4f1cabb76e497c8d6660ba52068f48f701a9a40cfed6af21ba320e426742ae00d22b2521593a70fb0245bf388c479edc807d37c3de72e2f473df851ea81baf76

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      344378b8917e732be2bc79f2aa2bafe3

      SHA1

      5373c84f23cc491cdc3f0c7eb45cbd06ad96ab75

      SHA256

      3178516c629d065f1e4c6d66d68f0736f1cf97123347cd7bc98f13a89c46a925

      SHA512

      7e49aa5651a712f7f2d7354d0389a6e4658103327296451f8ed5326895eadbbabf50ad7eca69e112f493e2cd3a80b515c0a63b6a44f651637c43251322d7c6d2

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      635eae81a972b66417180f92bb620998

      SHA1

      d6723986af8449fa1897c2fe7f31199c6ff0a7c2

      SHA256

      cd307919fdef1021f356c66fd4ff0dcc0e8a2d6455a588bd6b3724d104037100

      SHA512

      66053ea2d2d63911a34a22a84b1a4d379d0ab458b56be680406574da7c2e941dc9ffac7acc55d4bfdbc22f303c9e345ca60f67a8412892cd8521e4a72cdef377

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      54aa0446eae0d10f240cd12304809507

      SHA1

      f02e40841fef7b175df647f120c3e580dae09f0a

      SHA256

      7e9c016c8c314cbf7865fbba519c8e465ef10e4b5a90003bffec975c0e222235

      SHA512

      0bc9979731c8654f81e99027bccb91bdc725c979663186fec9fd6f1e21a117cc566002a40c8ab52d9dd6b7e2b2d8f016362161f2ac06f4c7f38b9b1de635a2c9

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      f7a91d8a8233128bb49e8efd2c72cb72

      SHA1

      3d30c2e3e68e96f81a06380d03772369669d9294

      SHA256

      bb3c8ef34c43cdb4f8af0d184f3a844d941aa5cb1533b9a4c0d587960f32a333

      SHA512

      3468614994cda0ee6515626d8b87354119e90bd8faf30c534575b6adcbc1e7397ab36d46b552c2a4e7abcbd96d820da65faedbde13fe94088ff77ba08c8d4d97

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation7876058386932830908tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/PersistedInstallation8423883079322046840tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/files/generatefid.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/no_backup/com.google.android.gms.appid-no-backup

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      134B

      MD5

      e262cf539ba9e579c435239d601edca8

      SHA1

      7f65fd4fbe8edd9f7d06bbade3cd790532e500c4

      SHA256

      6b60808d35d26b7d21abf9e49ea78a6c2c7f65cd28938276f328e9c35ced14b2

      SHA512

      104698083c4a132f835965484a4e316b950a87fa4e00a3d09e887e6a34d27ab74330a6de5702562d7fffe4c1175afcb22611b4ef84c4ab349f9403b1a6923ac1

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      188B

      MD5

      eaa41bf630c14ba2993da7835bf41a8d

      SHA1

      8b65ae30890ff6107e8c1db56da722b4f6cf962d

      SHA256

      b79c42f9bb0ecf64b79c50a6fa73e880e9ee099a1426f9975523022e25ca74b1

      SHA512

      9a09201fcd9ca36e9755cb4ab48e8a421d2b050a4108c76c37bb12ce973e49cdf8c49f10d8336c8d3fd04cc2cd88cdfff46e23bc1ef00e1344bb712bf6d2921a

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      239B

      MD5

      0900e1f5d07291c4282d720d4de70ad8

      SHA1

      37f0815f56da8c186acf4a3570827424e7eafdf8

      SHA256

      1eee35ffaf742c8edad6c2865b97c9cf17933306ab282b6ef722cb470db09e81

      SHA512

      9c17b0e69a32bc3ed79177cefb26a9401cb6bf56bd2746bda9bdbe41bafd52118fc69a7ef527186052d69249d377675e719c7678939aef92eabbf650b75f61bd

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      192B

      MD5

      7c7a4bd47aa721514e552935139bc9a2

      SHA1

      502b7b69a369cb883970d60e8dfb750bb7de96fa

      SHA256

      6c7a1b06a7b2e1361e35e5d95c007140a86f01923b290a9a3a245ba22676e13b

      SHA512

      fc7d07637c0cde13e08fd4e1cea9455bf3f057d609ed88c545dea000c6b4c1f617537a8f031b78448bd92488e415266a076b2bd9f02fc71900300d8186c73eeb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      507B

      MD5

      a64c91d02e826d37e58360bdd2475fbc

      SHA1

      99da0b291f87f3aae54f61ef9b29c69454920af5

      SHA256

      4e307bc998e0279de206d9d9331241ed98a8ceb1fd0d9e40ddd76d59cc3e3869

      SHA512

      4819af6d83e6843c7702c30d8533e6e2df95c5a974a17629c686a52f723976f6e4a47b82397284a9acdd9bc7481d527959dba99e6132dfbe66a848b5018404db

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      565B

      MD5

      56d73cde4a8c743f806e8721f64623a7

      SHA1

      ef24726e2b47d09851f0b42e503e7564f01862ce

      SHA256

      823dd393d0e7ce1842d6fbb69123cef452dc3afa0a9ad59c3c38e6502084d998

      SHA512

      d5c4ccbf3933f3ce94b91063cc631915bc7d8bbe97e56262d449bf3e03b9810c35e0d42ee7a5a4103b253fb9d476d7daf82bb90b1e06999e911655cc35c307e5

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      493B

      MD5

      3930dde418097d0561260379eee4e366

      SHA1

      db124bc1eb959e97f72a518b3654570f8497fd64

      SHA256

      dded9887e5fab743bd6122379bf5be355a72306a948d58a95817a7dafdbd30b3

      SHA512

      c9cc944c454ab3f26d03a3c4ec2f121a637a6eb9f2af2dd38afb38f874950218477dc3ca29e73730939e743102cdea4c98d3e286462a6d7767582ac5048a354d

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      605B

      MD5

      9a9fb49fb9d6949b86a800d1c9ab2e2d

      SHA1

      deab1623ad9217ce9d5dc5849b4916e313c7e176

      SHA256

      9eeabcd60f0d10450f54343e4c712fbe796d5f8d98b128957816afb1a6d5692b

      SHA512

      42ee27f2afba275a5aed8a09f0ef5dab5f30292a9564d1ab77aacb490a3e1fe191543465db8b060f98d8f94b8b7825de72970ed08b38f0613c3ac0e3159f9f04

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      606B

      MD5

      d450c81862dc0ba9f1baa7feabea4be0

      SHA1

      0f3e60516186632be466a77903af753a73b1e9c2

      SHA256

      7e2e5e579fa4b5840255d1a9b5c671f657edc89eee443a97caf36b030bdcff52

      SHA512

      fe7cbe26e7674ae37c16d462ce5a46f75a368a5838e70c9ad2acb3402e8fbad1fbda93b397df5d1f22de78bd52ad382252191a1e124afe0e56f74fed5a5ff103

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      718B

      MD5

      16d2585bfeea8e6ca457df39618e8146

      SHA1

      bc77e781032859b85b5c06af5e1227929770c7ca

      SHA256

      e341646a113c301b3ebb83072d8ef0c32e98f14de797f8fadc8442412127671e

      SHA512

      cd1a088b2d8e289d915773fe3fa0796052afb0d941323d06141ca579f7039155388623534953e519616636015c1d7055509a7e09d568ea23ae9ed69ffd66b1da

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      395B

      MD5

      822ff947f49f3b00a94407d25cb8fc6d

      SHA1

      36ea10a4b530c1eafbcc6e8620753f3c7ab0ca3e

      SHA256

      95586ce14df90a549d50f8de187e4c8c9cf202718109ada65eea0a1ed0659427

      SHA512

      d11e401c8185e3479f8cfec652253b5c3974461cbf93bbe5c66b0993f6c321defadb55b64a6599f94f259dee56569d67114d69b7e1f912cc34a0c517f4cf3324