Analysis
- max time kernel
121s - max time network
151s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
17/08/2026, 05:10
Static task
static1
12 signatures
Behavioral task
behavioral1
Sample
91f989ba53006d7710488227a800a5ee28e731cbaaa4ba71c5ab4f30c743cfe3.apk
Resource
android-x86-arm-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
91f989ba53006d7710488227a800a5ee28e731cbaaa4ba71c5ab4f30c743cfe3.apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
91f989ba53006d7710488227a800a5ee28e731cbaaa4ba71c5ab4f30c743cfe3.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target 91f989ba53006d7710488227a800a5ee28e731cbaaa4ba71c5ab4f30c743cfe3.apk
- Size 3.3MB
- Sample260817-ft54ystyfv
- SHA256 91f989ba53006d7710488227a800a5ee28e731cbaaa4ba71c5ab4f30c743cfe3
- MD5 871d021d89e2c1f08d2ee8da43aef4f7
- SHA1 7941b06247ec6e4faefcf5dbb371c5dc61b5666e
- SHA512 29a8d38d0ecaddcf5cbabd562d7a63edf126453c3f686ac0cb1f881b48ee84e7500dc20e51c3c148d71cc703e4958d24120dcdd05d7f98b3de1d98521769cd3d
- SSDEEP 98304:QEVF6aL7fDW3v0AMYfccAe2pwFT0rIU3B8jtC8ikX:Q46x3vKcAXGTnUqjskX
- TLSH T18AF533137E67C530E893E83D84F0A2B4CCB596B88908BF515996568E0DF3E467E03DB6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ir.shz.shzkisi - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ir.shz.shzkisi
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 225f8340725e3e21694c8303f77a07358696187c1195966ed237e329613ba706
- MD5 dfcd6d6b37aa5590ccb75c5932697e0b
- SHA1 ee83fc608054bab431ac4755a1afd40b10a9edf9
- SHA512 db7d885acd1e5ec43588f40d75337f933f2349e8808f06b47aa02e8d0ae21efc781c1c40a9e5ebf0cfc8eecfe9315e321c02c11f3fd586a44707bd66ce90b200
- SSDEEP 3:qqb/NjghzY+/lzyliMlTXmAxOBVnqfzMlklKllgIn:LCM+/lulvl6A4BVnqfQlrf
- TLSH T1B57212913185CB02F13B933562C787F21434F2883E12C21EFA05B30C1C813D02A2A71B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 512e5cc73c747f1ce1090874f5ab29e2e62cfb6d0db410a7859fe93ddda32948
- MD5 c37a443059ff64f334ce33fa20c1170b
- SHA1 2f42e5476a618226cf35d1f1cc0e79ac06f7aec3
- SHA512 9dcf08c03b0f104285a0129c1fc3aea20a02000df08eb3b387067df5b752b5cfae94164e9796fb30d320048c8788a53272dd262bd75e43962a1e6038fee47d48
- SSDEEP 6:rLP/gEhV71m/9blDqlrElvldVQlr2brCM+/lulvl6A4BVnqfQlrf:rr/gW49blqYFl8KN+/0Fl6A4BR7
- TLSH T1E272A7A13168CB02F63B4B3861C7D3E1303971561B53C119F906BF0C1D867D10535707
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 6616b76a2a6cb3a2a0608e15e1eff69b0cffef03f04d96439cc3cae726e6751a
- MD5 f3e2729edd30ca97d094f3d84e17d446
- SHA1 78b0efcb21af35123e168cd4406d2daf5f22d555
- SHA512 5a39b605aa4207a2dd2870a163a30f83a062db54650d1275bc8d8ac1fa667d539e06f7570897f09c2777488ca75161a40521e014090d464c58bd514d92f5d4dc
- SSDEEP 12:XFAiOLauK/6AUvkWlWXW49blqYFl8KN+/0Fl6A4BR7:XPKary5tt499FRlF4
- TLSH T151726DA171A8CA06F6374B3851D7DAE1203971A61B63D226B906BF0C18467D28531707
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
- MD5 7237409e0640cfab7bdbd429bf821a3b
- SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
- SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
- SSDEEP 6:l9FCls1ulO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TgEu9zmzrfRmBEyPbBvOwk3
- TLSH T16772C2CE9F102647C6660377B4CAE3916DA4A12D872BEB472BA50464AE42609A861F98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 fd9c76afd89b3e44a7b6e262381ec99ca7c14b379ea9c4870c0e38544fbaceef
- MD5 ee90321d7fd7116d87fdcacb48b39050
- SHA1 f8c7936ccbaf54ef137a8bc27d85bd65a4aa3c97
- SHA512 7f20ff41e45de44d500c440b6d985277bb80dba8c5d48603393c0740f49464f43e9a6d0347cd37528fa1228889fa53c46f255701032e1b752299a7e172894499
- MD5 SHA1 SHA512
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
- Size 4KB
- SHA256 8baa626cc042a37bc4e09f8b792e16e65ea1c9307a5c75bfc56ec5e58aa5cba6
- MD5 a2f77816041035923921e09ffc8adabb
- SHA1 f281e5bf015dc353e44709ebab37ef18a51caf6b
- SHA512 6c64b2fdb95c738db18f9a56cc64cececcb3fd82babc89f55d0211b6d86914ac204fb886bf478b5c256a1b77c3973cd18c66043ac06011e3ac1a97bffbc29bd9
- SSDEEP 6:Kl/hLXyY/IP/gEhV71m/9blDqlrElvldVQlr2brCM+/lulvl6A4BVnqfQlrf:KR9FW/gW49blqYFl8KN+/0Fl6A4BR7
- TLSH T15E818CA03118CB22E32B0B3461C792D5303971562B938109B902BB0D1C857A10039747
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
- Size 4KB
- SHA256 0ad90dd591597a2ab226d8db85da109d33ebffc146775a57724b3683233efea6
- MD5 b9338017450af016134c88d96575c3a2
- SHA1 9f38b6945b6fabfdc994c280657e086c771a1888
- SHA512 c30f79b560afb956c3887104818191c8542fc90a1c4ff28efa8f1bff9210d8abf595b201b6a10b9eefc477c6a5bcd3404c23ae5fa19c31895eac0fe5169c5e89
- SSDEEP 12:Ktq/fXFAiOLauK/6AUvkWlWXW49blqYFl8KN+/0Fl6A4BR7:KtWfXPKary5tt499FRlF4
- TLSH T12481E5A072A9CE13F2374F3C51E7DAE12039B5965B53D226F906BF0C18453D24531B0B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
- Size 36KB
- SHA256 eec0bece2aa7c46960e09dc14afdd852886937cfce4fd02951aca13ef9c3d2bc
- MD5 6a547d6accb4108196972834e60cb283
- SHA1 a9c35059bd6fa69f73be0e31744ac64e9fdbe4d3
- SHA512 6d9cd08c3e997d399aa843496db7db3b49e1df474cf17edf29525767453425342f6c4e4b9936e541cd2bd0fd7c334eab611765418d537dc53be3ccc58deb4ea8
- SSDEEP 24:K9OzyGSP/k6CEuI4zDGSP/t36yqpmzr0GSP/2yY3:5zNSP/k6Huzz6SP/t36yqArSP/c
- TLSH T1BAF22B9F97C02AD3C177037364CA97952D74A339A723CB4727613864BC8278CA860F0A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
- Size 4KB
- SHA256 1d7a6844e38c70fe900183889a67742d535b502cd2ea1c94e223f482a23a5e75
- MD5 d852e4b8be45d9a82b341ea71326bee4
- SHA1 50412f7167cc9c6ab9fef8fd494a5c6678666695
- SHA512 43f741e9ec4878ead8edf08185f6b55e0f979641a4e790851ada89a88dcc5673abc49783fb6d5b8a35dffe9999c96184000eaee401959745013fbfd03a831cbc
- SSDEEP 3:OlH/loNbro/D7/7yrMe9uoi/NjghzY+/lzyliMlTXmAxOBVnqfzMlklKllgIn:K6NPo/EfRuCM+/lulvl6A4BVnqfQlrf
- TLSH T14B818C643250C7A5E53F5332518F53F10534A2F425929209F601B61C2C803E1351970E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/files/PersistedInstallation7031318779350958999tmp
- Size 90B
- SHA256 a24042df0f630a72755b4ee6e98e64d1ce989fad813ee322bd13cc5e3c39f5fc
- MD5 58de1b9ddd703e388f6e8761c9a16022
- SHA1 298d97dc13252200aa185baf3110fe2bec30ec3f
- SHA512 2854738c3e79e2cd41c9af6843a7ec309b955a5748ea64596267326973d0f47a20950c481b888f7a29717f3b8b23e5a5e206995f065d21c176c249500a1af21d
- TLSH T124B012018631C3E388CEB3121D4CD1406D851540454ECA144B28D14140C21E191039D4
- MD5 SHA1 SHA512 TLSH
- Path /data/data/ir.shz.shzkisi/files/PersistedInstallation7516388444877144369tmp
- Size 570B
- SHA256 dbd003403c0ebaea352043d146c40857d445b45dd2dff552672736b86bc4ad47
- MD5 138dae576e906577a74f449b168f0dd4
- SHA1 278a2e794e002d1b67323ade59161b74d698e6d7
- SHA512 21c161f248cc23c117325f407e2f8a69cee479f405f0bf5beb3b4542afd37de1defa474f9db8a2fbca678cba3e5fcee31191a611d318ba17ad6fd8ada8560a16
- TLSH T1FEF0264EA77DC525DD8F9B53C5ED6D901C0417F21A4B019DBF9E8A70C19006B720E8C4
- MD5 SHA1 SHA512 TLSH