Analysis

  • max time kernel
    3s
  • max time network
    153s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    17/08/2026, 00:07

General

  • Target
    553f2a06d025f54961e4f6f8697d38b63b896a67eadda3743d3d00b2cd4edb10.apk
  • Size 3.3MB
  • Sample260817-aea3dazxcv
  • SHA256 553f2a06d025f54961e4f6f8697d38b63b896a67eadda3743d3d00b2cd4edb10
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    PID:4872
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4927

    Network

          MITRE ATT&CK Mobile v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          ~test.test

          • Path /data/user/0/ir.shz.shzkisi/cache/~test.test
          • Size 4B
          • SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
          • MD5 SHA1 SHA512

          google_app_measurement_local.db

          • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
          • Size 16KB
          • SHA256 c026c8e0d7a0858598ebdaf238f89ea138d820668fb75af1fa865b0c57fb0a63
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db

          • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
          • Size 16KB
          • SHA256 5c2f860a440182a91da578618a96ed465da6ba82d7e69bde364bf28bd9135b83
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db

          • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
          • Size 16KB
          • SHA256 72ac08f2b0313c822ca08f655885300eefd7573588e90a51a4ec057ce8a3a1d7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db

          • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
          • Size 16KB
          • SHA256 3e189d66b98d15d78acf17f06de67362b0f08d72108c75fbaa9ebe5c3a5d68a9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db

          • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
          • Size 16KB
          • SHA256 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db

          • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db
          • Size 16KB
          • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db-journal

          • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
          • Size 8KB
          • SHA256 aef1e8ee367b95d493e706874c41d33a27e1ca63ea39571a3337d3bb93d5b7e5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db-journal

          • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
          • Size 8KB
          • SHA256 569c279feec104eec7e4623b57472f464323b05d6d5de01a4f69dda3ab990a18
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db-journal

          • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
          • Size 512B
          • SHA256 a5e15b5a0c81bf191d6c885c8f31bdb2c2f69731ff27c146c906302dccc1a1c9
          • MD5 SHA1 SHA512

          google_app_measurement_local.db-journal

          • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
          • Size 8KB
          • SHA256 170433267c3173884d27eb6f531c7b6d2047cdb33009d54302cf6319a47b4663
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db-journal

          • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
          • Size 4KB
          • SHA256 762bfee8246378bae7acc606f8eb2ff20fa448a2d4cb062a93246dc54b327673
          • MD5 SHA1 SHA512 SSDEEP TLSH

          google_app_measurement_local.db-journal

          • Path /data/user/0/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
          • Size 8KB
          • SHA256 9a4e830146208df5ea84edf676687e25af73bd52c99fc014ec93907fd4d9a39a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          PersistedInstallation3163312779738117597tmp

          • Path /data/user/0/ir.shz.shzkisi/files/PersistedInstallation3163312779738117597tmp
          • Size 90B
          • SHA256 a9b8ec23d77b9b40e605f41301052cb5a68a81fa51b3c5107083f2cf1cf80cfa
          • MD5 SHA1 SHA512 TLSH

          PersistedInstallation370684162059264610tmp

          • Path /data/user/0/ir.shz.shzkisi/files/PersistedInstallation370684162059264610tmp
          • Size 567B
          • SHA256 18605ff7b9b9986e644f37843869aa9bce6ad2169b34cf963af373ddd7679c9b
          • MD5 SHA1 SHA512 TLSH