Analysis

  • max time kernel
    3202476s
  • max time network
    158s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    09/10/2022, 22:31

General

  • Target

    Games.apk

  • Size

    3.5MB

  • MD5

    9cf03f6f19ecd925f07dc7a72e665587

  • SHA1

    a038c93af63b046a0ef9fa200cc7889e96aef425

  • SHA256

    0b01e7e4e94909ffc4362c0d2a66a250434f1bc6e8e587682cbdeb5923c725ea

  • SHA512

    b4d9ab7554a847f4bb7978665b6429811115d1bfecc9ec27e43a66ad03ec532983bfb939adfcdc083c80f89e0a7178cfbdcb4b33866ed57495de832dc65eee9b

  • SSDEEP

    98304:mqo6efffnRcj7jGPJqekRfgey2gOAWkAV7iNmqxko+:mvXcXg9ktyVO7H+NmqA

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:4403
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4459

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ir.shz.shzkisi/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      1KB

      MD5

      6af0074ec1043d60c46f5c9264fecf5e

      SHA1

      f01f991bb20c5c74af751d237a37374ba376bbb4

      SHA256

      7158c83011988bad700b1f8cb2afd7bd9ba4492bd37c9116f5d8ca39d564fe01

      SHA512

      d328d1bbec4fadf260201126b076712829865734208411c80c24c7b35371cb9ed06acd649a1b838316f6910b9803217634da756a8671ffb83e52cf2920a8ce39

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      239B

      MD5

      eb1b216ce3619299b1f4ecec00a94770

      SHA1

      ed253962a53209ecdfebccb26ce52d6b07fe7e94

      SHA256

      b8115d3383b1b8ea685ce57ff20615bdb5b7849c6bf198f06a1fc4ee598f4028

      SHA512

      7fd9d925a154de16c36f5e4c9ff8a2599627c6027671974163fe213dc1f2f15338f747d0491e0b52418373ce61d89611dde183a8d636a2b78d24326c8f6492a4

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      134B

      MD5

      db3a1ce084147eb85d4aad011935ae12

      SHA1

      5a6e9db08748a7925182617d1b022ffd89d210a9

      SHA256

      a05b517b08e85f6c24ec5eb7b8636e0b5e0ff734e09b671b74b8bed14a57630d

      SHA512

      5b931aa200637c9b515946c97778f124cee24f2c60659f400413db6fa6b73f8721e2225aad14f14ac1660ce35722aebce39d415c0900d49d4584f2e9b31fcbec

    • /data/user/0/ir.shz.shzkisi/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      188B

      MD5

      8de44cd9c8c72ebc6a2908597c20200d

      SHA1

      4ffd3a28b34f5d71bc30ddc4f268c518c42b4c87

      SHA256

      2e7c863803fd6697809573277600255cfe4979273b87e90a73a1148289c07125

      SHA512

      35f3529f145b6bb21e438a1a84134e812d6454f5cd5868c7da75f7b488e04b3cef48189322056fb0605daa1dd3fc02ce559d27826e94e80ee7612e138f9b462c

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      192B

      MD5

      410c2d76fce88a9cb60bf716b02ef50d

      SHA1

      8cb7bcde48b9aac8264086bd4349d2b5d3ec1b57

      SHA256

      45fe169f0afd33e215c0f7171078f15625c59ceca7574dc4e3462521991e59c2

      SHA512

      58a63f49aa8fbcc0c01438ab9f27a8016635e7714f7c4c3cf8939a9dfc315ae54ef3b7a8b48b785523cef05a7a1e7715c372cf6fcd3460dedbe3eebba09e2efe

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      250B

      MD5

      25aa7bfa4e98e4b2cd76191a46301f9c

      SHA1

      b4c09da6e19d5e21e4e1a44ea547f22196182f85

      SHA256

      02b7397b1caea5b96b0e9716441bd8702764a1a1dac15110155abbc3931b1e78

      SHA512

      9c2e02b9a60910ec33e61dc55493dbc9f15d3a8fa1f062b0cc9110def1f541a9433c61817f00cb0a9c37f6b5f7f6bbf616edae3b9200c2749ed67e298a7c3f16

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      565B

      MD5

      1228feb840ece6e26b9dd469344cf4ba

      SHA1

      c0b7e45536460e475e7f216558ac17be39bceab4

      SHA256

      8c79557635354c2cf4a95651b169c4e63792dc6d15fc02f88f553683b8d16768

      SHA512

      fc5b84c91db8fd66d67dc427caaaec98ffc56b85facc27a0f7dd05a6d81d37c61dd232a885bca88186eb9b273b9c156fba72f21beaa5452897edee13fe2df8af

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      558B

      MD5

      e78c399ff9b6a683af6a586f4690ae45

      SHA1

      5f3ed1f6619d4b7253cc5b8295ae157a79029f31

      SHA256

      e2b09156c91eff845b44ff5c04721ef6dc2e3ea76a448add1a019b97f34293a5

      SHA512

      0c9e3823a2c2c38946409fabb7b87f7dbe5b09be4c97ab75a6df85469f58b1e80e5f674656b08a632c767c8b7ac4928ee0744dedb692bd9f76912af90a3584e7

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      607B

      MD5

      f2e0f98f6bc0f955441121ff8d12391f

      SHA1

      fd44cd7f95829d1b5a8b71a1e6a05dcd994bd36e

      SHA256

      e2087235421cc506161108a562ef4e9334cce843dceedf88273c9b644c398620

      SHA512

      11008765ad2c64e106a0c71d77b1ec47975ba7597fd3744d2a442b87fae5d932ad81af52b102c3a556278d19f4665c6b69ba07330d997381e38d84a9c243f3db

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      665B

      MD5

      efbece9f2f91d7884f3f7aedfefc2df6

      SHA1

      0810b8f6513812549d2a732c0eeb38d7fcd8cf46

      SHA256

      252bd544819e79f3c2ba663974814b5d252420116b3de8b56b42d4a9cf77ea7f

      SHA512

      14e9cc85f291e6776da67f4e096f73612f17a630ae89070c0d6dfce7d3214b0bf8be045eaef1641d8023c58444ce1da097c908b1b097c0ede1967bbec97a718a

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      719B

      MD5

      41b641b13f6203fe06025cf646063ae7

      SHA1

      3bd7a86d0aaf8bbca6407a983f2c9279bf5dab70

      SHA256

      ffb57939ec0d9eb21b183b16fd3d25904051f5e4af67b5f084a0a2fda167aceb

      SHA512

      5378f9cdddb29010862c8911c7f1c30a9e23ea9e6682e7626c0addaf705d30c24a8761a0c74e5d448cf74a18a459c8f7b032e3185d90ecf56085d01182edecf7

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      796B

      MD5

      8fc7a7495f37c3ce3d90bf148fe020a8

      SHA1

      f232640e21b45d0ae7f63105ac25b18367e33079

      SHA256

      3be48e0afc4248de98e132608ca8714a20e7a1bb38fc0348b92da93d59d19c0c

      SHA512

      111092435d2be6a1bb1d93079a4b3daf93312ff6c851a4b6843748e9487f5840c95ae6802699d8fcfe67523a4231cbd07be8eced450bf6b4576cb6c48a02dddc

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/ir.shz.shzkisi/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      395B

      MD5

      adcb60b14a4d5074753bf7f7b77940e3

      SHA1

      03d06a546df388d4d789f08e957d0278a881bc34

      SHA256

      281c3dae73ad028d1bc1b52aba57e394db380b21b94601a6add1dfde853f387f

      SHA512

      5902d7eede5401f92ff1f95271eead3106fd8e43b02f07e343bd665bba1095259cbc815891c4fd604a6abf3270317f342aad5245d8e9026ed2c6def62329658c