Overview

overview

10

Static

static

10

6461851c09...b5.apk

android-9-x86

6

6461851c09...b5.apk

android-10-x64

6

6461851c09...b5.apk

android-11-x64

6

Analysis

  • max time kernel
    106s
  • max time network
    113s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    04/08/2024, 01:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    6461851c092d0074150e4e56a146108ae82130c22580fb444c1444e7d936e0b5.apk
  • Size 3.3MB
  • Sample240804-bl7wcswdrd
  • SHA256 6461851c092d0074150e4e56a146108ae82130c22580fb444c1444e7d936e0b5
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10
discoveryevasionpersistence

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    evasionpersistence
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    PID:4495

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        ~test.test
        • Path /data/user/0/ir.shz.shzkisi/cache/~test.test
        • Size 4B
        • SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 e476829c5cc1d728d2b58dbcd383b40bbee39ac4cfd8782e027af70edcc39944
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 0889a37a58efaf3bef8aa57f1a0910621a59c4cbaf1a1f24fd4d0a71b27ec9b9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 006e82fbee1879fad19637ede7cebc820a6ce833c7ce407f9ed304ff0ae5ecb2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 f9f39c4392d4a222bb23f3cd54e50b787bd90d76e196249fa239f8262233f88f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 225de6311977023e8e15811645cbc0b53f9347159e592a6eab81f18b697b6331
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 2f29e1644f72b4d1d3db598afb5fa6e574d8d80363666855b95d6fdfbcab0fb5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 da7ec69e20fc811aa71903ef661f38bc3b14a16b57642cec8c87a536201e6c62
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 b593ab51a2b6bbb2a6e412a6abfafbbf02e00207469709b5ec696230e13bb641
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 b711838e3754709f57f42f3be6dd2227703ae372185d8a1d08857f29a8b3a796
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 2a1cdc047fef7d3c71f4c1212aab175caf20d0b48ac9c58f96bfc945e69a43d7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 7f5f532a85c130052b68dd74af3ce808757f195154b34a94f73a73537ed60627
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        PersistedInstallation3777101146051267764tmp
        • Path /data/user/0/ir.shz.shzkisi/files/PersistedInstallation3777101146051267764tmp
        • Size 90B
        • SHA256 e1198ce03f0b114269ff85f7d9921e4531a5757833a43b59157fc0d3b7359f3d
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation4341620987459129954tmp
        • Path /data/user/0/ir.shz.shzkisi/files/PersistedInstallation4341620987459129954tmp
        • Size 567B
        • SHA256 d4e725edd1157be26770806de9de7c5a534a6a162848a91f7718343221b284bc
        • MD5 SHA1 SHA512
        Submit Download