Analysis
- max time kernel
121s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
19/08/2026, 03:24
Static task
static1
12 signatures
Behavioral task
behavioral1
Sample
ffd29c57df2fb49013dfad0cf4182921e6ec36df41d69a4cb7838b09a4ba779b.apk
Resource
android-x86-arm-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ffd29c57df2fb49013dfad0cf4182921e6ec36df41d69a4cb7838b09a4ba779b.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
ffd29c57df2fb49013dfad0cf4182921e6ec36df41d69a4cb7838b09a4ba779b.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target ffd29c57df2fb49013dfad0cf4182921e6ec36df41d69a4cb7838b09a4ba779b.apk
- Size 3.3MB
- Sample260819-dydjdscg45
- SHA256 ffd29c57df2fb49013dfad0cf4182921e6ec36df41d69a4cb7838b09a4ba779b
- MD5 d716e8164fa29e5ade634235aeaca7d9
- SHA1 580643a4e4bee2114ffdd18396c134c619285522
- SHA512 18a7545c5311e7577e82070a8dd6d1b787abb05c16324900de5bacafd814394b86cbfe76414da7bf4cac09a74072f0e7b9c2ee9700b88fde8e8500ea86f83384
- SSDEEP 98304:4EVF6aL7fDW3v0AMYfccAKmg/+Vv2+c9vhG1uP6J6tSiu+iX:446x3vKcAxgGVXc9JPZ+3X
- TLSH T13FF5330BFFD3E530D617B03980E4629EF975A115561CFF03AA44A68909F2D86FB07E62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ir.shz.shzkisi - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ir.shz.shzkisi
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 428c6bae98d0918718b51a3d8650ac9ecdd46924f552018927bc2f81a6f8f8bb
- MD5 f4c77f1344f20748c04c4e470cdc99ec
- SHA1 9fab53b596e306108196a4f300a8b1de716b2211
- SHA512 d37084c6638dc0aabf46b598e7047afc5bbecb1fe43a5e85c15b88da898a4b8364fc0c175bab247fa62256c50deb99d6d89cccaea6e9e05130b4b6fd1cac6120
- SSDEEP 6:l9bNFlsls1ylO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl64Ap:TLiEy9zmzrfRmBEyPbP/P+/0Fl64Ap7
- TLSH T19C7268CD7A105703D173477670CB93E21C34A3198723DA177B540468AD421846142F41
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 3edd2d406d83d366013bcd01c9f0b22cdf7e8e55d812fa2b564c484a13f573ca
- MD5 be90ae62faad57b70d6ae286caf8aac1
- SHA1 670571c7d6794e973d9f823e8a739878a03c4080
- SHA512 c3e5a676be83e4ddc207a1c1778a38e893daabb5ee9a9768fdc784e9daa1b79e7b2e51736fb9f424f5ee4b32b6d6575a436e9e2eb8bdbb2864c92b41b8e36868
- SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hr/gW49blqYFlNmq+/0Fl64Ap7:TLQpmzr0GSP/h1499FrllFM
- TLSH T12B7259897A209703E2730B3560CBE3E22C38B3164B23D51779111E6C6E423855112F02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 6d6b284e14904da30c1daf2994c29519fe1fe2969e2be49b13692498f6208134
- MD5 3ccd378b91315a6d912d2237b3915246
- SHA1 6fbca0c531c3eddf594304daa24897a3966fb9f9
- SHA512 92ea313691ce0f76c220e5b52ef24e61410492cfac6ebb05b4cc6345e8d45c769307375f8aee7eaf8f4326ff686d21989df74129256a8e6a002524020cddbdca
- SSDEEP 24:TLEvpmzr0GSP/9PKary5tB5W499FrllFM:T4vArSP/9Saryzrj5rZM
- TLSH T182724989BA64CA03F2734B3951DBE7E22C7873664723D6537D165F1C6E423C68122F02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
- MD5 eb52a90bb70b76e946b62f50b6f7fb85
- SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
- SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
- SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
- TLSH T11F727DCEDF002202C1360733F4C9D3901D60921D8336DA0767940460AD02108A451F58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 492bb016e0829cfbdb0ae03c8c797443750d2dc207dbdef5b7c3690c893cbb27
- MD5 94b044f331e2736606a55b9802d8d2ec
- SHA1 94bb29b89df5fbda37a87e40dafa8b46c8160e86
- SHA512 2afd60672fba6ccda4f45cde0ae30be405dbd4b40c5a9ba1012962d60ece03b42825bbcb784975b98794db39bc388c9193fafff5f22d7616c61fae0d2266e42a
- SSDEEP 6:7+/l96YWg9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKs:7+tdWqL8EEh9zmzrfRmBEyPbz
- TLSH T1C002728E8F002203C2AB0773B4CF83802C78A318837B9D833AA40864BE030ACA051F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 fdec1c6010b49224dbe580e2d82395b5fbc975244fcb5a668c42e9648c2302ca
- MD5 db57a9c682da2d85a2c8f9c0f1d1761a
- SHA1 be81ac34680a399887f279b10be7cbb5089c2761
- SHA512 3456840c92f7d32df0df03dd877dc57f1253ad6471ead80996c7bab50457e9b990b051803580c5ab6f4456ca7f91a71195e46463d8d96c9850121357cffc1c9b
- SSDEEP 12:7+tz/gW49blqYFlNmq+/0Fl64ApDqL1Ev9zmzrfRmBEyPbLN:7+tt499FrllFuqLQpmzr0GS5
- TLSH T124022B9D7B109703E277473561DBE3D16C3873165763D51779111E6C6D423855162F02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 2030e34beb3f93082305360482552acc7ee0e84fc8605a140cf9d83df65fc46c
- MD5 4662c20a35e4c56a03aa5dc7cce9b904
- SHA1 b02e022448eb7da21969a4bf0256ebd17592744c
- SHA512 4f573635ec8d5d19839b4e8a4a997cdf8515ba22eec33c3bce50801931904114ed15fce32e513eb867b7b68230e696afa127573a4da5ae08eb355882a79662ae
- MD5 SHA1 SHA512
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 9787bb5778068db73a95f243d2fc53543128d757079c15f602ef5511038dc547
- MD5 ef6d06630f53aeaa76c4fa7f0e4c0d0f
- SHA1 08e6b8e552f2e7048caf11614e4e26cffc3341fc
- SHA512 66c946b6704f506e932d042a8d5595a764cbd8fa4a6f711ecc7851abaab64a9062eaa21a23813d11428f81b5d8d6b94cea19d38cb85edf307b1e63a783d01fb2
- SSDEEP 6:7+/l9pyn12qxvg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKyzn:7+t5qxvqLiuWdwRmBEyPbDzn
- TLSH T1E602228A63802822C81B26B790D483600D40EF2982A1CFA759A00C987C038CCA4E0DA4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 a391147cab6db51086cf04d70232e262d036734e9c6ae08a847c478fc364ca5f
- MD5 96f55eb84aa6f925f6bc8937bf477656
- SHA1 a995831280c3eef07d5b9b95585e9a76cc3ac16f
- SHA512 7c2ed2eb345f187ad4b790bd5d924b25aa463f2627f4dc9faf4d38a9c9700cfee49f6e1965e68185adcb4a8ef254787a5a3100bcbc3b51d7a63b36895a0ad58f
- SSDEEP 6:7+/lzoPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK8t+:7+tsqLJdTRmBEyPbz+
- TLSH T13191808967411D13C5195BB790D983591D54E725C373CB57196508987C47FCCE890E44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 854fde3965e33b39e11471320c67a9b40b7465e2973776fbfd59fddb69292140
- MD5 8100d6f0c45a993ab59f203dace67bce
- SHA1 ae75ac308b006068989505cdfffe53e4c4b0665a
- SHA512 5802df388690404dafc76814829225fea314ffb880520dcc32a16ae14d07ded803116601aa87fa010198b58b877559efb69922bf88b7bc339eb7f4ffc1ddf81a
- SSDEEP 6:7+/l92dGPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKwuy//eV:7+tUd6qLmqCRmBEyPbJXK
- TLSH T1C50212DABB814D53C51E57B790D9835C1E10E7168161CB5715B008A87C475CCE890D94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ir.shz.shzkisi/files/PersistedInstallation2132182200942919872tmp
- Size 90B
- SHA256 fab6865f05b4d4127407912ef4e3c66d4cbbccb5ec569c5a798f4ba5cf8a4999
- MD5 3d7bae700db3dcc4e7b1f54ba2dc731e
- SHA1 5f9223748019571aae5bcf201d2fec260737b5ea
- SHA512 a8769802d1d545a4d4e8f1fd61997856835c7ede0f0d97cea05e5f6a802cd18e541014445de2adb36300283ccb0e3eedbcb72e714491902cfa4daf5710040517
- TLSH T1E1B012016A344143CA89E3021C8C92C01FD028405D09AA480F1CD04010A13D2C143DAD
- MD5 SHA1 SHA512 TLSH
- Path /data/data/ir.shz.shzkisi/files/PersistedInstallation5706456262089457665tmp
- Size 570B
- SHA256 5c647cfe7f2ff1bc9a2c7701275bd4cbcdb7ffda57a4534ac9078553c67d0285
- MD5 3fc9f74c17ac91aa0a52e24836596528
- SHA1 9935b68be24ad41d81a15dbd61be8a3e181518fa
- SHA512 670acb362de3bb38708be6671784673318944b95b13994040e30feb807aada05d77d3bfd9f2d54dc6088a454c56ed768d7c0576fc3c7672890f54b7c9621dcfe
- TLSH T1D2F0208537308215EE80820260EE9C148F9048E12D4B149C7FA8D5E66AA8FAF611BAD9
- MD5 SHA1 SHA512 TLSH