3a2e31f2844df5cb91eedbf24c0b93de4b0aa08525f733132c2bce0d7ab81acc

Resubmissions

21-12-2024 22:57

241221-2xpr2atjar 10

21-12-2024 20:29

241221-y9xfvsyngy 10

Analysis

max time kernel
122s
max time network
135s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
21-12-2024 20:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

044d4141fa14d7abac6f282b72e4d4a6f0fec56df3d0d1650e2db3a1a5c80783.apk
Size

3.5MB
MD5

c126af541f25c0a689dea5f44d598764
SHA1

68e1772c5bf7a0db611063205b2b6f90718893a5
SHA256

044d4141fa14d7abac6f282b72e4d4a6f0fec56df3d0d1650e2db3a1a5c80783
SHA512

eba66c60d7a38a18c57278aefaa7c235fb744b460ed7d9f59724ec68366af6eb6d31333c0be17e92faf91ffefd8629e8e0697771fb13cb3d16cfcb9ad556e215
SSDEEP

49152:3/NUASHe5UQtHy1fffEcy317sc1x7B3l0ZL7ZhJqowVSvsEFP2R7QBub9e3g5zpd:vqp6efffnRcj7jGPJqikVQI5Dhpdns3E

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	ir.shz.shzkisi

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	ir.shz.shzkisi

ir.shz.shzkisi
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4283

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

Filesize
16KB

MD5
9cc6080894843a0248afe8f493426e48

SHA1
f8d293a8072e9dd874482d6e95a03229d475e902

SHA256
741b4ca0deccd6fc305769c3348f78b283b2580204b83c54f8e6f323f4e7045a

SHA512
47dce949f5cd0efed28b4d7de2445ace460b4eed4d7c295e569417642eba0f255ad79c0930642decb8c34a61a0a3c0a3cdf53015aedfd4620a6025fe09ae9aa6

Download Submit
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5674460101c8a1ac8615a3d1bd139bf7

SHA1
78294213e6f699d9c739947851d23c6655ea69eb

SHA256
0b192ac969eee0b3da13e4d7750ac8b8fe173c82d49a2567b2c245013f52d480

SHA512
6ba2165e26360f171d28066aa9377a152d6bee13df9a270e45e5fd858d2262deee369bb59c09a175768024e3b52309383491dac496c3dfa6173d32ef885f08ac

Download Submit
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

Filesize
16KB

MD5
df686713600c09f1ae97a968f16a78fe

SHA1
3a52ea5fd6d5e65a3698a7b90839764c5048016c

SHA256
d025adb2c282130619b7ec2f8065327e9f80cd98be2d7340595e65d908b66423

SHA512
92eb623739faf8de77eae3134b1b07602cb262bf78a4106ec2f3cba882720255d63a54d043ce676e848117f4c75bd4adeebce96b14ada2b84bdd43c222012d02

Download Submit
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
2a43a55f945cd3500baf9f8bda40b63d

SHA1
63e3c5f735d29ab2669f46ffb81847b93980b631

SHA256
b336c1bd290897d9cea0ba636261a4e2e0c90df5565d5f454bf0109d88bb89e7

SHA512
ddb55418e3aa793bf6ef2cf1ee19c5a2a455f9d58d6eee078174bdbf0c427c40f8f7d32756dab5a44a3802ad3647fa0314824bafe7e7efdef59a07910c216623

Download Submit
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
b88a0941f9dfb258f1b1d2677d562531

SHA1
4e62932abe6e3df106f0c0480885a018f951a4ba

SHA256
f0e6b2bb5dfa913a5aa674325c301967f96afee695eb8cb4afc3327ba6402d0e

SHA512
cbd72d4a94f9710a13d0820e344a8743006eb29513a1c4019218ee062a0154b56409615d98edfbdeb8f92347e0e5ca3f81d213db9d7a1c2ad957b387da506968

Download Submit
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
8abc18b858a995572c2ed804beff6d6e

SHA1
662e07e56ba279000956fbe670a3254be8eb2d5d

SHA256
775531c94cab10b2cab2fc9071848fdbdbc88a5759dc8d308df29a5f2a16cdc4

SHA512
090be318a0c6235e29a4eda7ed6769ee6372f9a78d73c791b6cd0bcf9a7d038d5660b5befeff31157d1dcc4c82cbaa002605be8dac5ea9bd3874d57511f56952

Download Submit
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
1421d0bdf30f3935c972647ffc5dcbde

SHA1
34c3c57b97a966cb7ef6841db75ce83767dd981b

SHA256
6258aada1660347d95004479d2aa22bf9f2fd0d00f9668b1649a91460142ad65

SHA512
e08dd8c90492da512735367c457ef34ed12a0ec90199e2603444f00cde11a7a8180c3ac914441e0a8320c62ad2d59e77d68e0a0574d23e4ba26035dde24ac77c

Download Submit
/data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
438b725e9b6ee783a588d3f3ef1f86c3

SHA1
842eff746646f680348d70d445011391c0e2fc41

SHA256
e49206755a13ccefb30f417b1c4984e60a33ccd825e6153e981e396dfed150c4

SHA512
01b4c44809f9da39fed3a850c3607cdb63a6a58a9dbd0e5eb0aa485b3ac3ab3dce62f88d95d4302eedefa263f891edf4245698a8153c41bebece9ef737773086

Download Submit
/data/data/ir.shz.shzkisi/files/PersistedInstallation1882559628042338511tmp

Filesize
90B

MD5
e96f19e7c5f517d8e8b1deff8cb3bed8

SHA1
609508cb2908cc43642cd337fffb87377bd160b3

SHA256
f5d9c3c35cb28ccefa9777746d209e5d304e1c17987348c38ca052f79018e90d

SHA512
ae7df7d719bad303a168d8fc66879cb00f568cc9d00030ba692d778d09a2de1392984ad4c066970ca6391254743fe9c7ab2158bae91965c5acab8666dc633ccc

Download Submit
/data/data/ir.shz.shzkisi/files/PersistedInstallation288666989956725901tmp

Filesize
567B

MD5
14374c26fe56f44e1b30a9a8ffadb3c3

SHA1
d7e408e2fd62accc6222d74daf8184e7292a0882

SHA256
af740f82f19712d1b9420242aed340e3259720dade9358c33764fb88650480fc

SHA512
b494f0cb771513a6d176d20fb42123ed20e1f7db4799d728775356ddc3bd24c8717ed641125bea7df7562fdbba1124fc4f0715dade65d8a5b583abb51e6d179d

Download Submit