Analysis
- max time kernel
121s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
17/08/2026, 00:07
Static task
static1
12 signatures
Behavioral task
behavioral1
Sample
553f2a06d025f54961e4f6f8697d38b63b896a67eadda3743d3d00b2cd4edb10.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
553f2a06d025f54961e4f6f8697d38b63b896a67eadda3743d3d00b2cd4edb10.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
553f2a06d025f54961e4f6f8697d38b63b896a67eadda3743d3d00b2cd4edb10.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target 553f2a06d025f54961e4f6f8697d38b63b896a67eadda3743d3d00b2cd4edb10.apk
- Size 3.3MB
- Sample260817-aea3dazxcv
- SHA256 553f2a06d025f54961e4f6f8697d38b63b896a67eadda3743d3d00b2cd4edb10
- MD5 393bfacf5aa8809348fe403cdf1dfada
- SHA1 ea9ceef4bbb07ce390af11cbcfda14e2f999ee65
- SHA512 55ab8eb80d1ca31bec19debc9565a348e1ca269b1ad5dd7bc000435b41dd83c6c8f535ce30ead65127a9f13dad740cbd7357415e600bb62067a209965868d9c4
- SSDEEP 98304:xEVF6aL7fDW3v0AMYfccAZP67A0/mMVyzKi/En/:x46x3vKcAZP600/5k8/
- TLSH T1BBF53367FD72E436E6E7E03D588071EE6C9DAB94DA0CFF832608518602B3E85D503E64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ir.shz.shzkisi - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ir.shz.shzkisi
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 d027b39cd5337cea11195018c5c5c687932a459a6bb0732346995dbecdd73f07
- MD5 cc7318799aa7a0b02a9ccc1b9d691fc0
- SHA1 7cc6427f99303032cf29b72418aa0b478ce0da73
- SHA512 7be0751da7d7fd8d67479454f3695c2f1979e474eaf139e481618853d71ff0bb9e0a2b515957440675eb35f4b6e852595f5386786098e2d975bee5a3d41cd160
- SSDEEP 12:TLiEy9zmzrfRmBEyPbP/P+/0Fl6ES2Yn7:TLApmzr0GSP/PlFDm7
- TLSH T1947268CD7B106703D1774776B0CB93E11C34A2188723DA0B7B540578AC421886042F54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 95ec73dda4d4efe468ce10629ece9809aa17700d517c2084eeb7be2624fee3a1
- MD5 5b5e485f94c6d3aa893eba482610bc89
- SHA1 282017fd5aa994fcae8448cadcfba4acdea3c435
- SHA512 6b0191a1ee776aef132a19273814d81343dabe0eb775e7887352d7258e79d04e300d18111e3361f7c61069e99bddcc4fbc4c59486904b3c2500817e026c64bf3
- SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hr/gW49blqYFlFM2+/0Fl6ES2Yn7:TLQpmzr0GSP/h1499FnlFDm7
- TLSH T1E67259997A249707E23B0B35A1CBD3D12C3872158B23DA077E511B2C6D827855012F45
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 7af7527a035b04c7bd34bcc3e7d014d8be2281b87adc78f9f64cd59a68e54569
- MD5 9bbe0afd899cb9008055989bff53b72a
- SHA1 060ab5ae7439d55c0bfd4cc83cde7ef2a18f0345
- SHA512 04c7656c43c3c0e7020768c9e2a7a46fc0b97243c567a468e163ee2cfd2925fe15a12a1d92ba920ae451df48d1f8ac2687ab2434d8cefcacc22f22cf47b625d7
- SSDEEP 24:TLEvpmzr0GSP/9PKary5tyvN499FnlFDm7:T4vArSP/9SaryzB5nDS
- TLSH T18A724999B764D607F23B4B3992DBE3D1283832624B23DA177E562B2C6D423858121F42
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
- MD5 eb52a90bb70b76e946b62f50b6f7fb85
- SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
- SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
- SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
- TLSH T11F727DCEDF002202C1360733F4C9D3901D60921D8336DA0767940460AD02108A451F58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 533d909bb43f9424a752d6f53141674781f96d3edc8917af9b2174385298b7e9
- MD5 ac7ecdc4f6409f1c53256d2d362acb26
- SHA1 31a16202e7547bf71d83b4e344767a69ab6271b1
- SHA512 e8c25d6997dac19bb99e01236d0dda70b9e3bc01fd845a5f6ec549e255661320a26807b04a528355674eb6f2d8b6dd492bee0adaf14fc62558c23264f215bac2
- SSDEEP 6:7+/l9Z/0lsWg9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKI3n:7+tP/0WWqL8EEh9zmzrfRmBEyPbnn
- TLSH T17702728E8F202203C12B077BB8EB8340AC28A218C37B9D032BA80864FD03248A051F98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 be1ca9515af4b1456d1a86db797ea5a7350353c6bba85cd34c1e43cf1ec115e7
- MD5 a61ae29f199a8f63276d1d380493b295
- SHA1 50e03247560fcf34f5d8e690078aacf65006b660
- SHA512 1250d8532de884c0b4989f81f7fd02da08ccf14b4bba34d8f2db57f108e8484acad545d8c5d194a750681ac7e23122c6b4276e46726e042e01b8ffe021aba78a
- SSDEEP 12:7+t8f/gW49blqYFlFM2+/0Fl6ES2YngqL1Ev9zmzrfRmBEyPbc:7+t6499FnlFDmgqLQpmzr0GSc
- TLSH T16D0284DDBB20A703E23B4B39A1CBD3D0383872168B63C9077A911B2C2C823854022F45
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 7b50174ff00d193f7e173985f073d74db84c91dd78f4b1bc5a3333ffc7f8c697
- MD5 60aea5c8a3d71fe2c22fd99f131dceb8
- SHA1 880165e84441565fcc40b222f11f6b99ecc1a983
- SHA512 1574b63e7f94d8eb989254602db37cf2caf9ffe28e443c223175c8de57e4e529141165956e3129998c7e7f7e7186b26920fee34ac08d07a971201faa51fa4bcc
- MD5 SHA1 SHA512
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 740be553fa7fc211a563e5b126bde9c9e8f68ee6d5de4adf57ed047568257682
- MD5 f46ef885452e040b396c183cc6c6652d
- SHA1 b767e68ce13df1efd6aaaf3a27e4bc2ac8b6b2df
- SHA512 ca4fb29a11e58f111895118eecbc817e6d3d718234ed469927bbc99261477a08b2de25eebee5f126aea0cbbe6fcc84878eb637e08fd155f4898f262eacbd38f2
- SSDEEP 6:7+/l99n1epg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKyM:7+t0pqLiuWdwRmBEyPbDM
- TLSH T10D02C08DA3810823C91D16BBDCE883400F00E77DC175CB47167008E87C03CCCE4A4D14
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 158c0607df7b2610c92e2334fb3fa596961b64adb32215713a56a80f0d1f0ee7
- MD5 02082d996dea7c8f7ae7bd74043efe13
- SHA1 357129dce787eb60dac393f75c5b2acc92d84afc
- SHA512 6cdc27037886ef40404a7027a7c4ce7feada234633bce2bf5fde66b2d2b148ec6d2ba9750c5e762da7f4783a7caedd9e28ad7b51bc4cf92bd4435cc843db68bc
- SSDEEP 6:7+/liPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKP:7+t2qLJdTRmBEyPbA
- TLSH T1BE91C089E3800C13C0191BB790C4C3802D10A715C373CB07157008983C036CCF490D00
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 ceccc5126437ea4af4898c02ac80e2bfdd37a464b84a87788628b3a3e95ef72d
- MD5 9cceeb10bbd5d4aece6c10c851a6fdcd
- SHA1 cd8851a41f2a0c894f4852e9151c13ad3dea0fe2
- SHA512 25c821c4ed323970aa131231b48931f09d6f075863dee1b42a82f70cdb4506e1bb70ffb2bf7d97c275a1e87b8a477c1f2111bbaad8380a3e2a2582bf37c7822c
- SSDEEP 6:7+/l9MFPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuK6r8t/v:7+twqLmqCRmBEyPbv81v
- TLSH T18602129967C10D13C51996B7A0D983541F10E7198165CB5B15A008A87C4A5CCB894F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/files/PersistedInstallation2024751345226547041tmp
- Size 90B
- SHA256 30b7e955b1e88692e42088d0f26fb0b7fe71a0fd64ea89eaaf4af03c472e3819
- MD5 00d69ecb5ca3e792821ebe48d49870ee
- SHA1 69071a2871cd6edea9f36b0987194d112738221c
- SHA512 4e54586b9aadbafcf10ee8ba5eeacf0f3436736115ec4d02058d56b246e52bd686fe1339c25f3aec50c38c7a1592173029b229e1968a3b6c1084428cf1eb2450
- TLSH T17DB012415A704351CADDE30B2CCDD2012D521440448DCE494A0DEC4041815D0D1539A8
- MD5 SHA1 SHA512 TLSH
- Path /data/data/ir.shz.shzkisi/files/PersistedInstallation3763242665741885646tmp
- Size 568B
- SHA256 fa37f8d3c4710931774804632267111971e10896e5b287d894c992aa0bf2db6a
- MD5 bf9573d278a9c1b55a083fb40b09dda3
- SHA1 e7a6122f1ea70daa36b93800061a03fc4e42e882
- SHA512 901d6828b441b6b074f7d5c96df4737f8f3a67a91b657c339d64c971f44b5a996d9fbe8bfb910f9caea5b7ac77c2c49b0fdbb9af475faebbe31799f07a513504
- TLSH T153F0264F27549915CC975D4B18CFEC201D0400F015670D95AFCDCE20DEE0C1E7563521
- MD5 SHA1 SHA512 TLSH