Analysis
- max time kernel
3s - max time network
153s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
17/08/2026, 00:07
Static task
static1
12 signatures
Behavioral task
behavioral1
Sample
553f2a06d025f54961e4f6f8697d38b63b896a67eadda3743d3d00b2cd4edb10.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
553f2a06d025f54961e4f6f8697d38b63b896a67eadda3743d3d00b2cd4edb10.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
553f2a06d025f54961e4f6f8697d38b63b896a67eadda3743d3d00b2cd4edb10.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target 553f2a06d025f54961e4f6f8697d38b63b896a67eadda3743d3d00b2cd4edb10.apk
- Size 3.3MB
- Sample260817-aea3dazxcv
- SHA256 553f2a06d025f54961e4f6f8697d38b63b896a67eadda3743d3d00b2cd4edb10
- MD5 393bfacf5aa8809348fe403cdf1dfada
- SHA1 ea9ceef4bbb07ce390af11cbcfda14e2f999ee65
- SHA512 55ab8eb80d1ca31bec19debc9565a348e1ca269b1ad5dd7bc000435b41dd83c6c8f535ce30ead65127a9f13dad740cbd7357415e600bb62067a209965868d9c4
- SSDEEP 98304:xEVF6aL7fDW3v0AMYfccAZP67A0/mMVyzKi/En/:x46x3vKcAZP600/5k8/
- TLSH T1BBF53367FD72E436E6E7E03D588071EE6C9DAB94DA0CFF832608518602B3E85D503E64
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ir.shz.shzkisi - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground ir.shz.shzkisi - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ir.shz.shzkisi - Reads information about phone network operator. 1 TTPs
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/ir.shz.shzkisi/cache/~test.test
- Size 4B
- SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
- MD5 098f6bcd4621d373cade4e832627b4f6
- SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
- SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
- MD5 SHA1 SHA512
- Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 c026c8e0d7a0858598ebdaf238f89ea138d820668fb75af1fa865b0c57fb0a63
- MD5 71cb5100c3d9aa0c3556f77aedf77607
- SHA1 26e57231a70f61bb3300bf6c26904e3a9c30e141
- SHA512 6d593d235e6635d20d50f051296f38db88e83dbf979d97497fd8cf9c2f84be88e70f7d35b4b0b20a8a0547f176b5854cadf332f97ceaba6abc365961bb668dd4
- SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6J:TLiEq9zmzrfRmBEyPbP/P+/0Fl683Yn7
- TLSH T14A7268CC7B106703D177477670CF93E11C34A2184333DA0B3B550424AC42188A142F54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 5c2f860a440182a91da578618a96ed465da6ba82d7e69bde364bf28bd9135b83
- MD5 37a3bb8ad41a889b0af2dd7ffafdc04a
- SHA1 e98631e1706edeec7d7b397f1c7d095702ac11a0
- SHA512 de4acc8c6c0e5b4d600e07e32666f2da497dcb0ac004bc538f9b838321888f9ce32fc4f590efb6a93d71fc3290daaba0107e76651a6e82cec340656d3ac4c3f0
- SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFlFt+/0Fl683Yn7:TLopmzr0GSP/h1499FxlFPo7
- TLSH T1737259997A149703E2370B3560CBD3D12C3872299723DA077A161A2C6D823859112F45
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 72ac08f2b0313c822ca08f655885300eefd7573588e90a51a4ec057ce8a3a1d7
- MD5 8694e3690da22e411faa6e758fd330f4
- SHA1 abf4989542ffcd9b9ffbe6f0e8a6b49fbfc15891
- SHA512 d4e277eda777ef1a0df40347f058eaba6e8f4fb99829d91b9d4ed3b022479d1e6298d4a37ab3f8d32d50ae14c26533a8a5d581194dd1c01674acc4a6b9e99f02
- SSDEEP 12:TLIEU9zmzrfRmBEyPbP/9FAiOLauK/6AUvkWlsqEk49blqYFlFt+/0Fl683Yn7:TLYpmzr0GSP/9PKary5tv499FxlFPo7
- TLSH T170727DD8B664D603F2374F3860DBE3D1283832664723EA177E1A5B1C6C433C58122F46
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 3e189d66b98d15d78acf17f06de67362b0f08d72108c75fbaa9ebe5c3a5d68a9
- MD5 5bbb2b04820de4746ed1a2e4e90a2abb
- SHA1 26277f05f1b41b3897bc6fd22b04092e04e686b1
- SHA512 6db66654d699a2d3b844b3e4769831d5f931cd9fa2f828b606131141f55d783df972d502ada1661a71fd22d94a64cac15c9619b260c65013a62c1fe6cff93eef
- SSDEEP 12:TL6uER9zmzrfRmBEyPbP/sFAiOLauK/6AUvkWlsqEk49blqYFlFt+/0Fl683Ynv:TL6vpmzr0GSP/sPKary5tv499FxlFPov
- TLSH T1CC7249D8BA64DA03F2374F39A0DBE3D1293832664723EA177A1A6F1C6C423C58122F45
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39
- MD5 de82e2c94d2718988804b035a46d17b1
- SHA1 705f5ff19093ad209f2a666085d6ccaed3bf58a4
- SHA512 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e
- SSDEEP 6:l9bNFlgls1WnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/W:TLuEe9zmzrfRmBEyPbP/W
- TLSH T126722B8D9F102603C6730773B4CE93515E14622D83779E472BDD0470AD83449B051F84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
- MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
- SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
- SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
- SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
- TLSH T16D72C2CEDF102606C6760737F8CAE3A05DA4A22D833ADA476B950460AE42549A8A1F98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 aef1e8ee367b95d493e706874c41d33a27e1ca63ea39571a3337d3bb93d5b7e5
- MD5 372ba2bf8bb01ab74a9bec55421f898f
- SHA1 00a8f53558db40f0ac90b0e8e973e547086b2930
- SHA512 791e1453c788a37259394ef90dc684c2a52cdbaf35bf9d0f14dac110caf8fa6ab8886b5089b0e08f39af385b6899fb27206c04263d8d94d4b251b56b93c177f3
- SSDEEP 6:7+/l9Q6/Sg9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK6J:7+tW1qL8EA9zmzrfRmBEyPbLJ
- TLSH T1AD02728EDF002603C23B4737B4CB83409E28A32C8377DD072B980820AD0B1A99061FA4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 569c279feec104eec7e4623b57472f464323b05d6d5de01a4f69dda3ab990a18
- MD5 16979739b7638b776aec9442c91de43e
- SHA1 0bbe6187f788ae2a9f777f0d0c1e64d7cefc65c8
- SHA512 6af8fb86175132d6499e46fdaa7b37640176af0394b7356336601347d89dfa001af8cf1351d23772df7e20a62f760cf71c8567d5c755b223ef79e42882c1538b
- SSDEEP 24:7+tgPKary5tv499FxlFPo2WqL6vpmzr0GSHT:7MgSaryzg5NP1Wq2vArSHT
- TLSH T1FC027B98BA24D603F2774B39A0EBD3C1393832224323DB17395A5F1C2C423C58121F41
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 a5e15b5a0c81bf191d6c885c8f31bdb2c2f69731ff27c146c906302dccc1a1c9
- MD5 c82764550d76819eb009c8670949d65e
- SHA1 47e7a9b59fdab6ac47c0206d4be8529ae4a9e2ec
- SHA512 6b3a1af6e9e2c18cb53bb30e6da6d62e4ee510e69cd445de26df3d33852d9f458637b7df410fdf613846c02b83947d17faaa3c9a28afac1ba03e67b35691e68c
- MD5 SHA1 SHA512
- Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 170433267c3173884d27eb6f531c7b6d2047cdb33009d54302cf6319a47b4663
- MD5 786e184309c09306abb6fd2777ed29e4
- SHA1 8ae050557d61d599466731bc083c4ce9bbf795c5
- SHA512 d92bd1ec3249cff32591ba460ce0a69fa4febe2a0b8cdaf1a0a1da626434e73bd5f593810231a463afd233b10ee07c82335c0c63438d921e038ad4071b350b08
- SSDEEP 6:7+/l9Vn12g9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKPP:7+tkqLiuWdYRmBEyPbk
- TLSH T170022298B3800812C82D26B790D483440D24B7289161CB1727D008943C074CCA4A4D44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 762bfee8246378bae7acc606f8eb2ff20fa448a2d4cb062a93246dc54b327673
- MD5 45702baa95d9b226d523839c75d590b3
- SHA1 7461b87708ac62e56627312429ec279dbf98617f
- SHA512 824303ac2b79735dfc59c90590ca64d1372b1ec8c70dd7089013f1a26b6b2d6777dace78e0ffbf3bda84549ea71f78ee324c82d9d5200e6827098c16617953c5
- SSDEEP 6:7+/lnPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKux:7+tPqLJdeWRmBEyPbH
- TLSH T1A591808967410D13C5295B77A0D983541D24A73DD373CB5756D108587C47ECCE491D44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 9a4e830146208df5ea84edf676687e25af73bd52c99fc014ec93907fd4d9a39a
- MD5 f4052116acb3bc6763c18071befd0040
- SHA1 41c60efc4cd8f17625a3fd319205ddb817c02fd0
- SHA512 abf2e4b2e9211c266078d6ddd4d7b8b7551866e0b9fa3f768caa291656644220b4fa11964128809f6c0595486161f489599747e82115e29344da70db42da410f
- SSDEEP 6:7+/l9tOPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKQa/Fn:7+tqqLmqKRmBEyPb6F
- TLSH T1FA02128D67C10D13C52A667790D983541F14F7259161CB571AA10874AC4A5CDBDA0D54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/ir.shz.shzkisi/files/PersistedInstallation3163312779738117597tmp
- Size 90B
- SHA256 a9b8ec23d77b9b40e605f41301052cb5a68a81fa51b3c5107083f2cf1cf80cfa
- MD5 1a2f6c171061025ef6b60c84e22f11e8
- SHA1 c3ebf5198bea4da600eb3fcb6bb71c58d0fa0caf
- SHA512 ed9e2f20d127a9f5d40420a0fbc1241d239481c93ead09597aa4bd70a474b073bae7c77a076e2430ee2e9b72db1e393a2834261eafb6bef151cd93a3afe0d0a6
- TLSH T178B01240467043B3C4CBA2031DCCD1401D903C421D0A9E040A0D908140C12D5C123AA4
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/ir.shz.shzkisi/files/PersistedInstallation370684162059264610tmp
- Size 567B
- SHA256 18605ff7b9b9986e644f37843869aa9bce6ad2169b34cf963af373ddd7679c9b
- MD5 a68c2c93c4d4a2841525c29a734b6991
- SHA1 1219e6d4b012756b1e44c52d770be0a2bd767113
- SHA512 f7588cc65fb92304e70810feeb6cff0f18ead2fa0f0959a605304b7f5f0a603d4ad7c43028c724f6e144488fa8531c30477138e7a6bcd854685d7e68dd20f6af
- TLSH T12DF096832A2A4A8EC4A7124304DDDE400C3024FA812B04906B4FCD1098F1AAEC039194
- MD5 SHA1 SHA512 TLSH