Analysis

  • max time kernel
    2921827s
  • max time network
    150s
  • platform
    android_x64
  • resource
    android-x64-20230831-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
  • submitted
    19/09/2023, 15:52

General

  • Target

    4c52e6a16bf9df19fa77455a7c87eaba81fcd094d547004306122d83dda36bdd_JC.apk

  • Size

    3.5MB

  • MD5

    2bf79ecbf3a9cf2b7e8e4d99087a74a5

  • SHA1

    2456291fc376aad939c5673029440876fd59e45e

  • SHA256

    4c52e6a16bf9df19fa77455a7c87eaba81fcd094d547004306122d83dda36bdd

  • SHA512

    b3db8899ecc4a24e78dc37cb4e5d9fdafc209770cd60060c0eab781a15ed4bde4f535cba18860eb2015b03efab1320e52ad0986a53d412145cdb1ffd2c52423a

  • SSDEEP

    98304:lSPL6efffnRcj7jGPJqQdG8BMSqVauu3kKSz4hz7:lSjXcXgOVaj3tG4hz7

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock.
    PID:5042
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:5098

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/ir.shz.shzkisi/cache/1

      Filesize

      7KB

      MD5

      91ae1e0c6e4e82278015f7d173de6e64

      SHA1

      3705cd94985abc67c7e89da2aa93f90d6b731525

      SHA256

      abe5644fea98da50e5ce3bd6b82b63b7f7d16dd50cbf7a6e6fe354236b67e68b

      SHA512

      a9778e68130259fa8358018060eaea113a07962640cd4f764c20e98bd34f017b29eeb590e4a991835ae7691ea03eefb88d26e99289c574bd02cfddc7e899e56a

    • /data/data/ir.shz.shzkisi/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      5fadb1ac8d8b0e0ea590a93f0c1acc3a

      SHA1

      8268d524b7e4d1ef3d1cb9d6576c9d1a64202833

      SHA256

      dbb06ffc30e38b41f36b5f2115aacd7a17bd5138d100f586a24b6fc4869726ae

      SHA512

      fcff6db3721e05d2783aaafe5917713b65ff9cc9ecd45572985f7ada6d86b47366255c9e3819fa8767f0d9da9aa4cc3e1f21ffd8e91c9a0724154e5085486e27

    • /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      d61af0bfad1cb1a7dff7d37083faf8ea

      SHA1

      43c8dcc5682b608cc671f0fa97328c35c0c7deba

      SHA256

      67bd32b2ad5c37a73ecd12f708c6a98846c1657e89d82d9aaf75429ec57d3597

      SHA512

      3cea30221b67c11cd24204fa07c794b100414bab1336d7f4e536f892f18dd0341a65501c9442533b080575f391bccd7c3af140113e85f6693cc7d08624fb581c

    • /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      67a178a3ad20db8f367396128ff84b26

      SHA1

      4e7659d2fb1f621cba9acbab57899f649740b3bf

      SHA256

      5f1de06d7a194daf9b4e62ecb8d75ea995edbe22d719b5145b6baa0b289539a6

      SHA512

      4d2d5e1f869422a35aee91c764fd729931cf11f02aded6172991f3fd2ca02a4d24694b5ed567bd2b7ff449f9e2d95d0cabd57ec84c17f936108cff20657685f6

    • /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      a63123bc3df8a7bf0d591afdebe7b173

      SHA1

      bfbbfa7952687969ceb18bc2efab6523b7696297

      SHA256

      882ac76d2bb51cec3a671190b34ee92b6ff1b6dbb65b0c607d764ca9bc8dfbe1

      SHA512

      b3e74a1f983fe801386f1ca6ba19e16251f61384c9b8d65bafb934240b924fe3ab0bd15ebbc211f939fc382bcea544b23df4e46646611638bc593ceeb29051f7

    • /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      adf6082723784327d7d1b34adf974e7d

      SHA1

      b1502f70eb881a1dfe41139cb719fefb877ee37c

      SHA256

      252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

      SHA512

      762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

    • /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      eb52a90bb70b76e946b62f50b6f7fb85

      SHA1

      42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

      SHA256

      48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

      SHA512

      b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

    • /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      a203d8e23e90b65c3fd0b949fa342c49

      SHA1

      a43cfe2ce599f529fb3be164180d59b20e708db6

      SHA256

      96250a4d29cd6f12861384ca5942ba26a0d805e681e2c17f32e64dcd26c5e10a

      SHA512

      a23a17d1b2338f8c415e07bfc0a05227243e4d7f7b4c973385e3b72e44f945bf1485a232942454f576911f71f97d63d06a9e6b5827d7b2267d6368a9fad23fd2

    • /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      0e4ccaf03668a98ccfcee36c3ca92c92

      SHA1

      bd8e96251dbda9cf92322e8a7487a92f91c8aa29

      SHA256

      df135996c4cf6f1c6efc5e0ad89361f645739df382a57aec418e90faaf90897f

      SHA512

      80236dcd47e3c3a2cecddda5bc0c2a3deb843a69a1f69b5555fa6b77707edbb701a5d873fb32631109fc434524f8884651028f4182c6b30d47051cb2570203e4

    • /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      1083b76152b3c4295d6b0a99689d9e37

      SHA1

      22fe6cac825e0e27f27bfb2657db7b6e3a212ed5

      SHA256

      b6039c6c7ff10920f6db82287d1d257e37fffcc3c548b69966445005bf2604f4

      SHA512

      33aec29b0a9db43acdd51ae688884b3c5572999cbc452c57b5f79d3c0e822d12b40664acc386f5c137e94f2dbc8256e94c54c31367a2eb4d8e6d85eeabf98a91

    • /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      04c34f4ad0ba5b75a82ced603a24dd80

      SHA1

      92f16b9841194075490403a6cdcc37b0c91f1bdf

      SHA256

      1f583794465ca430e8ca8e2fa566510fdece11664e70b538e68de7b10202ac9d

      SHA512

      24840d124bd7774cff1a0266c9833556d0943b1ab29c2e2124aa529707a7b8f96b5afbb2d473b990e544ecb9a91d7171ffa4b285f62842573763ff4421dc352e

    • /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      564eb0e1ac9483ecf547468a0b7b57bb

      SHA1

      fd86b88c80e01aad275343e4f395ab0a144bdb65

      SHA256

      43eb484281f1a23fd67c1cabe5badb6f471b391823d6a9071ddbf2199a1c434d

      SHA512

      def434b7d91a17852dd4e6810f17d1b9f03d8cd0c1458d79585edecfa2189679532eb1779d4a7cf8858d920b66a3e7a3771dc9197501d9e9b327d88878f20434

    • /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      334b028eef54e903f35e3765e42d5ce2

      SHA1

      ccf8f866c6151af01a2e7ee5331cd658a14ba1f8

      SHA256

      65818cd76145d2b77c9149f845491d772f2ef1825c3a415e518ac7b416495835

      SHA512

      565ed77090b4ca00f7982010147f971501e7e61fb73cec405f203fcc5d4e126db565ca275c5e42b2d4cfdff71f5e9bd561f20130c07e24e6bcc646060fa7d3f3

    • /data/data/ir.shz.shzkisi/files/PersistedInstallation5780062844519634447tmp

      Filesize

      569B

      MD5

      7a4c4cb7a2275befd2f7dad9f9d99d2c

      SHA1

      2fbefd1068a109759a76f59ebe5a361324b89abb

      SHA256

      a2bbe0a13a1b9ca049d7a4bc457c0556d73e7afab78fefca72fb016b17bb8a84

      SHA512

      c6d6f27b23ee2598dd45747f1c142aae6b35335bcafc389d6c22952fd6530b1164cd2ec8d324af0253c5e46ef492399f2eb6cb9e5859da97d6a50e098feb562c

    • /data/data/ir.shz.shzkisi/files/PersistedInstallation7931321249809393305tmp

      Filesize

      90B

      MD5

      f2dd11291ce82f78d30aa94d304a0008

      SHA1

      20afcbfb5f47d1693e3029ff27678ad4375a0cbb

      SHA256

      b2984f1e91bf017acba5b6e85f155ba74b6756955a81e94f8f3c49926046559b

      SHA512

      93ff4cab1447128641781f04cfe2c28d7ce28050cca36f95d206346de99e62d35b5bbeb2268f2fbee93b989b54ab7860c42a2ae995df8d268c72dbc40bef71a1