Analysis

  • max time kernel
    121s
  • max time network
    151s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    17/08/2026, 05:10

General

  • Target
    91f989ba53006d7710488227a800a5ee28e731cbaaa4ba71c5ab4f30c743cfe3.apk
  • Size 3.3MB
  • Sample260817-ft54ystyfv
  • SHA256 91f989ba53006d7710488227a800a5ee28e731cbaaa4ba71c5ab4f30c743cfe3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • ir.shz.shzkisi
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4290

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        google_app_measurement_local.db

        • Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 225f8340725e3e21694c8303f77a07358696187c1195966ed237e329613ba706
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 512e5cc73c747f1ce1090874f5ab29e2e62cfb6d0db410a7859fe93ddda32948
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 6616b76a2a6cb3a2a0608e15e1eff69b0cffef03f04d96439cc3cae726e6751a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 fd9c76afd89b3e44a7b6e262381ec99ca7c14b379ea9c4870c0e38544fbaceef
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-shm

        • Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-wal

        • Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 8baa626cc042a37bc4e09f8b792e16e65ea1c9307a5c75bfc56ec5e58aa5cba6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 0ad90dd591597a2ab226d8db85da109d33ebffc146775a57724b3683233efea6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
        • Size 36KB
        • SHA256 eec0bece2aa7c46960e09dc14afdd852886937cfce4fd02951aca13ef9c3d2bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 1d7a6844e38c70fe900183889a67742d535b502cd2ea1c94e223f482a23a5e75
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation7031318779350958999tmp

        • Path /data/data/ir.shz.shzkisi/files/PersistedInstallation7031318779350958999tmp
        • Size 90B
        • SHA256 a24042df0f630a72755b4ee6e98e64d1ce989fad813ee322bd13cc5e3c39f5fc
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation7516388444877144369tmp

        • Path /data/data/ir.shz.shzkisi/files/PersistedInstallation7516388444877144369tmp
        • Size 570B
        • SHA256 dbd003403c0ebaea352043d146c40857d445b45dd2dff552672736b86bc4ad47
        • MD5 SHA1 SHA512 TLSH