fd67187d48f042f51510f9670c21dfb337caa83c46a865b4298e432279ef491f | Triage™

Analysis

max time kernel
41s
max time network
45s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
24/08/2026, 04:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
tiktok-18-plus-v1_7_2-mod-5play.apk
Size 25.7MB
Sample260824-e8fxyacp61
SHA256 fd67187d48f042f51510f9670c21dfb337caa83c46a865b4298e432279ef491f
MD5 9cc3ca6f453bed7dd97a22b03105f256
SHA1 b114e5c8ff4899caa97c90e843c3c729ddb04ebf
SHA512 6cabed2822a58bd103873dfbaaa863f7df2c7c3c83c9f9f42d4b215932c85c96eb3010801df25c9fb98c77e3ba061f8e62af8d8f8aa9ef3827436872e305ac29
SSDEEP 786432:VkKeHfAtXC90TYw08hXzkge3U5OI/FnHPrJUoJ:OVwK0MYCE5OI/FnHP+4
TLSH
T1764723EBF738AD2EC4BB11736C57317263254E118A42A79B2544331C68B3ADD0F49BDA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery impact

Malware Config

Signatures

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

Process Discovery

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	iwt.shotshow.app

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	iwt.shotshow.app

Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	iwt.shotshow.app

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Data Encrypted for Impact

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	iwt.shotshow.app

iwt.shotshow.app
1⤵
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Uses Crypto APIs (Might try to encrypt user data)
PID:4801

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/iwt.shotshow.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 4169508158d787340d17b2818144cc4c345ec2aa4ebd579465a162c47078a130
MD5 425a5c0bd6e96c4d078e81a5a4da427a
SHA1 24f159e001af6c33c23b2c712f82903aefcbf12b
SHA512 b18887f5869be13b7f05f820d09782de2745c13e89ae3c6ab675183583d1633ea066d0fb7eb80ba902a4ab33a46462d9e0238a0ee216d4f0164dd755e9e5fcf4
SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6q:TLiEq9zmzrfRmBEyPbP/P+/0Fl6ZU7
TLSH
T1BE7268CC7B105703D177873670CB93E11C34B3184333DA173B550428AC42185A042F55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/iwt.shotshow.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 f30c5cc06591710ddb2f95b4c5bd512c39fc2d34296be78342c38bccac4ae79a
MD5 147894ab2bc3043203f117b009cccfcf
SHA1 6210f84e59633931f4fa54d9e77fdd1a2a1e6e7a
SHA512 2245af166e2e48680a2a94c9e5773a893135ebe9aa0fdf8feadf45eca9f740bd1526b61da1b3ed9de8d6bea14280c4cc9c67587268ac1b71f8134bdebe19f4ab
SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFlcmM+/0Fl6ZU7:TLopmzr0GSP/h1499FCzlFf
TLSH
T1027259C97A109703E2374B3560CBE3D16C3972255723D5277A161A2C6D423869012F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/iwt.shotshow.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 a86d1dd915b41553bcac0ce1f8eb985072236acc2651a6ba89e373d8dc35dcea
MD5 366d6b6c03200bc8deedc8ac6536d00f
SHA1 cf53a0e4ff2d18f57f0d29cf9e3e5d865077a398
SHA512 3c2b2c83700d7b414137d908e3d30ab11cf875a5f41d92cd10d3c9c959c3906f49c23faf4d1b4bdf2b32864f4718cd62feaafdcf13e012e86a09642f9c022b49
SSDEEP 12:TLIEU9zmzrfRmBEyPbP/tP+zlLo6qOY49blqYFlcmM+/0Fl6ZU7:TLYpmzr0GSP/ti1qZ499FCzlFf
TLSH
T1087278897A90CB07F2374B35A1CBE3D22C3872522723C61B791A5B1C3C423868151F05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/iwt.shotshow.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 0f1b5e15304d5b5f2a0d064707af2ee03373ff15f4e5aaa4c262f270b8574e53
MD5 e5991047fce47771c6e54028b4966cfc
SHA1 da246431a4d8160d6fd6b15d07a3e53600e2e85d
SHA512 35e9178a969536d52b4bf7590cc3334a13fd658fff4612f9497f3cf533e8dbd04651647102d2881507e86425cfcb1316a3f40098923c09d96649bf010c7797b3
SSDEEP 24:TL6vpmzr0GSP/oPToNf5Tz3i1qZ499FCzlFf:T2vArSP/oboNRHBG5C7f
TLSH
T1DC7297897690DB07F2774B3591DFE2D12C3972422B23DB1B7A6A471C2C423868050F0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/iwt.shotshow.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 02a159dd02748877e27b2a88e11a6f204042c9d53ad30458c561c8f2eafa5f0d
MD5 4768764302b04e65c6c1c76c3d030d87
SHA1 0d5f8254f52de899f4ad4ac87d5e435a4a0c3395
SHA512 9d0c55251e96503eb134f70308cb95985d1175faaf5162da4d73f55d589e484dad7f66ed3ab185f5ec0f34b47c5e4fa3ee3a4170a187f6325275628876cf3588
SSDEEP 24:TL09pmzr0GSP/VxxwL3MO+8Anm9ip9E79mcwUIqzISf5Tz3i1qZ499FCzlFf:TsArSP/Vxo31im9ivJ0ZRHBG5C7f
TLSH
T1E1728B1972E09E1AF6BB473851EFF2C2783979822223D70B7999230C2C433965150F27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/iwt.shotshow.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEmO9zmzrfRmBEyPbBvOwk3
TLSH
T16D72C2CEDF102606C6760737F8CAE3A05DA4A22D833ADA476B950460AE42549A8A1F98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/iwt.shotshow.app/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 eeda1689d107d8feacdf3716b2eeda55db102eba9d8d52d5fea52a8f403d5145
MD5 cd8227da273a44cbcb394e328838c66e
SHA1 72d8e9ad3131d7cbda3ac516d533cff45902ea3b
SHA512 8d9eb593bfdfcf56069627c5d3621a741d4b864b70675b2827763a499a65871b6858b84bdb31d413dfc3dfef06d7612351860b3b55d04f2901f78f48255aab18
SSDEEP 6:7+/lFHGPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK6q:7+tFH6qLJdeWRmBEyPbLq
TLSH
T1379180896B411913C5295B7FB0D983541D247B299373CB57169108747C87ACCF8A0F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/iwt.shotshow.app/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 a148f04e5d77ce3cff0999e7fcfd1030b8e22d3e2074001a6262e2ce720461c5
MD5 e21448e324e722ed67c8d91fde32d91a
SHA1 0c5761a6de5964a2dd5a70be9ce3d17912edc15c
SHA512 bd43d8596ba95465c8bdb3bafddbefed0adb575fac22b00796a428736a094a6af214a773edd3e9996f9d8ab1d6920a8f515da0ab0a9ab2c373fac2dbdd3b1384
SSDEEP 6:7+/l9jqFPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKsIl//J:7+t8BqLmqKRmBEyPbiXJ
TLSH
T1C302229873800D03C02E6677E0CCC3400E30A3248171CB071AA008682C0BCCCF8D5D40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/iwt.shotshow.app/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 824b8b47dcf872f70a61e5cd8818a26964b3724dbe0a6d13e637a05d510a711c
MD5 a6ba3c27f5f85fd4ceaa6096f0aba2de
SHA1 a54bedf4c3c51a3be64d54b2de4ca1b4a6965f55
SHA512 1473feee1f8d7a55171e81c58a9511052afaffa1f1f92120fa520d7b2a9ccbdf03f077df4d158be474caa9afd4bfceea95f176fab3ceb9cf9ddc534f83b9f473
SSDEEP 6:7+/l9mpg9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKEa:7+tYqL8EA9zmzrfRmBEyPbHa
TLSH
T1C30272CC8F012203C13B0B37B4CB83501C28622983BB9D132B940430ED430A8A0A1F94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/iwt.shotshow.app/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 37113cf87590a6e16236440bd754e5d4cbde06fb9949404e0392939747e30906
MD5 ecc3c864e35823fa1fa86e5a5cff8a5a
SHA1 028699c05c6df671be89e0afb697362adfc97a8f
SHA512 225b6b68ef5c49be37dc350764b9fa249f6f692d732ca39797bb2462e31ae28b3f6f42ff463e68b6271d79048d7e0d68b80193053c1428a1d5d36686f7390910
SSDEEP 24:7+tlAnm9ip9E79mcwUIqzISf5Tz3i1qZ499FCzlFbqL4pmzr0GSW:7M2m9ivJ0ZRHBG5C7bq8ArSW
TLSH
T123028B4976E08E1BF1B7873891FFA2C17C387A923223D60E79A9670C2C427929151F26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/iwt.shotshow.app/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 3d71d06f3dcb85915af3f67d324daa68200fcc2814179f65680d9033155d314a
MD5 15f609d22240589769ae7dd31ef86db1
SHA1 9a3fa4f5800a905dd1a6a1cefbf3aaf8412be19e
SHA512 7ed3b17b331a639daa6b6c4c0c06eb4ac127ec216eb4a352e70e499e1821cf4b41c532c5a5e88afd097826212706b76dd7f5742695bffb4659d6808abeda578c
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-journal

Path /data/data/iwt.shotshow.app/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 b683b1ec6d6c80229a516edb5fff66d5218ce55d0bb2af38a80f5051a1c6fd23
MD5 6d31e652a14a0ef586e9c36e4da32723
SHA1 c26427db6a9962c7307146e2b9d3fb548b42b922
SHA512 5ac718857ae32fe2732034bee6083b38c17d1f2c8b193543e289ab98c846908a255ccfb9c505d8d28c2c31b0e586d00ec20e2971013f25ce37bb7879ccb3247a
SSDEEP 6:7+/l9vll0Fn1XRg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKq:7+tJ/0TRqLiuWdYRmBEyPbx
TLSH
T1130222A863C00A12C82926B790EA83600E00A7288171CB9716A24C9C3C0B4CCA4A0D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

isee.db

Path /data/data/iwt.shotshow.app/databases/isee.db
Size 60KB
SHA256 59f7f0271156ca205d8c4263644dbd2f077c86f481236281e040106c2d532217
MD5 ec4809555a4bf83d2a3ebcc4aba5d171
SHA1 00405293c15fa76fcaaf0a5e6e8dd4ba320d9aef
SHA512 e9c3c1bc4843f8becce31a528e03a0e0fbb8b0adc8128337f5821bf4b7745ecf6c8f9523fb906391daf67d21a0c4d94cfe4ea7e9531a09cca3c3ba01823869a6
SSDEEP 48:T6aNAbRLyqbSbc8GXp/afuLly3B/iboSWqjsm:BsLrO667exWSsm
TLSH
T1A353E0C34F3A2312C9790372A89413D956FA861E91F3B79329D420257DCFA409565CFF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

isee.db-journal

Path /data/data/iwt.shotshow.app/databases/isee.db-journal
Size 512B
SHA256 ac285258625eb1c455cf940bd2ea1288211bee17e9eeb85aa9948c5318131cfb
MD5 b01ea966bab1cf4fd9c57a520926b098
SHA1 49bebbd28e6b7fbf6a1335f1f9a00f3d728b0e29
SHA512 1662745a84768d4116f288d6aa0341957ce209f819610c9ac1d1c603bf93bb4893ea6db8ab255b0023d9b4b8d1d294a3a6880e9bb1f1e646c0c17a8f55034ab6
MD5 SHA1 SHA512

Submit Download

isee.db-journal

Path /data/data/iwt.shotshow.app/databases/isee.db-journal
Size 8KB
SHA256 1516bb11707d6fcb27c7d68e44dffd7493d60f624d2e5112218dda1a48e742c8
MD5 a27294f9161bad8196312450b636c527
SHA1 51856d4be0b01538dfa71ae42c07bded654e569f
SHA512 2f088f3a308d5bc8dbbbc4580d0d20ed05dbb5a5b4cffa038cff478a07598eb68fd5b51970c42a480f17682b6d709f699f1d23ccfa29ece3efe826e73d044d60
SSDEEP 6:7+/l9vW/gn1mng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK0/a:7+tNW//nqLiuWdYRmBEyPb9a
TLSH
T15502C0BE63810813CC3D167790D483400E04E728C171CB2726D008943C474CCFCA0E44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

isee.db-journal

Path /data/data/iwt.shotshow.app/databases/isee.db-journal
Size 8KB
SHA256 efeb7fd4fd53a3cb5455b494c64707116f5a3280bb4f0945ef45c6b0c8e6e737
MD5 97077f9da946665cc7157371b6e019f5
SHA1 5f7cb007f1f3e49443306eaed53dbacfe8db24ba
SHA512 c7935490476433c412f6facbb6c91502e904c85fbe7d9903768d7c8382ef9c168c49575661e8aec7f3eb8a3e12c7e4d69cc1339a2a4d2ae94160816dd0a3dca2
SSDEEP 6:7+/l9pk+Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKyMC/S3:7+tQSqLJdeWRmBEyPbDBe
TLSH
T16B0222886B400C03CA295777A8C883401E18A72893B3CB276AD108947C46ACCA8A2D28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

isee.db-journal

Path /data/data/iwt.shotshow.app/databases/isee.db-journal
Size 12KB
SHA256 970541847111b404403591a17f95d0b2f896a9a1c44bfbbf4392a51caa339403
MD5 8dccccbcd7ac10e8cbde1c10bc4ad95f
SHA1 f54a42d580e05be39f171dd601fd34fcf7260915
SHA512 5ab1d21ff2f5e8ac749a70926783563db4dc05803c5667cf5b9510051a47a052970a0badf0d59dc2caa851570da1a3e5835f3c652692d506b54c22dc32a821c2
SSDEEP 48:7MiqKaNAbRLyqbSbc8GXp/afuLly3B/iboSU:7r+sLrO667exU
TLSH
T15742E0C34E3A2702C8B60772B89413CA55FF562E91B3B2D139D421257D8FE8091A58FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

currentFile

Path /data/data/iwt.shotshow.app/files/.fstreaming/fInProgress/currentFile
Size 2KB
SHA256 04e7f9eeecc9a27193c5ce5d21f2bb7e36abae9035dd131e490d39e404cf34ad
MD5 f1ef9e8d0463363378bced99c8d01308
SHA1 f5a60bacef3cf2326a9986d0e40e06b12dd128cd
SHA512 589408274d5e1a21fc3184e3b74b05fbd0523cd4862c71701c9112e3a1315ac4d6b9481acedcf67bff965b6496257e424d4cdb140fb868b61caad8ab16c26507
TLSH
T11751CB3EAF65C976C95D17B188842E82BB7E0314F49445CA63284BE5B2B31DE302633F
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation2085783661379387929tmp

Path /data/data/iwt.shotshow.app/files/PersistedInstallation2085783661379387929tmp
Size 114B
SHA256 d78b36de2a766d9ecdb7aba10d6a479f8eeb5874284b3ccba179220b678dcdd9
MD5 100ff39839da821662f557c1203deef8
SHA1 23de58834f10564fd9529ccdeb88b3e1e85b23be
SHA512 931b1775cc051c150c76eaea00efd4df1a37b2be99a0a39deb22c70aac80124b1a03818779fcffd8b4875f1938aaaff05504311e16dcd98610693adedf4390f1
TLSH
T17DB0926907388665895AA3023C0DD1222FA615C0090A9A495A09A80158E86E5DA13AA5
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation8206327511997023773tmp

Path /data/data/iwt.shotshow.app/files/PersistedInstallation8206327511997023773tmp
Size 90B
SHA256 d2df8f2b099cf8b77d0c2b68be75356faa2c7c052a16e3c46280fb0e6fb5f662
MD5 05f4028d7eed88b77a35a7292bb7cf05
SHA1 90359a5ad970cd75a10eeddcb9485807c4ad9a85
SHA512 4ca3dd5909bb88ffc09c2ee7c0baf6bf42774a7802d58fbcc942b50f39c7c225de0b729905a7c8177700ce384cf44d76591d9ee84688bcacb04ed56eab08e24c
TLSH
T1B0B0125547304361C899E3023C4CD1025F5114C0090ADA490B09A44045E11E492139E4
MD5 SHA1 SHA512 TLSH

Submit Download

installationNum

Path /data/data/iwt.shotshow.app/no_backup/.flurryNoBackup/installationNum
Size 101B
SHA256 967e873589e345adcd02df830281eba82729cbd768a58b72c44f4b86eb4eac81
MD5 3643e605dce5051ca88c4b1f6f332a2a
SHA1 e1e095c3392d60e20937e767df4e855c9aae9a95
SHA512 b79afe558722529e21cc0a89881bea2a451363491e97ac12f96916cebea7b1ea9895ea9472f75ac785820588bdafdba4e2b6826ff3ee77247d690ae183c099d2
TLSH
T171B0120433C45B35C14302F6326270769F958E260440801080AA24F00DC84E22047577
MD5 SHA1 SHA512 TLSH

Submit Download

channel.data

Path /storage/emulated/0/Download/iwt.shotshow.app/UUID/channel.data
Size 10B
SHA256 a2cad053ca688c481123ad7a351c5e804f512cfe28f1b031c75e680f73b21efc
MD5 46eef11162a19a34723a71b2eb778506
SHA1 e1f206752b41134f04c340fd855202d473e81989
SHA512 bec86464379c48ad636934bc4c58ef54cf5b90088c2cf3bf6b44b94233d296cf7170014eb33526b72da217e84ac3d33519db421490c043d768967cfb213036c6
MD5 SHA1 SHA512

Submit Download

uuid.data

Path /storage/emulated/0/Download/iwt.shotshow.app/UUID/uuid.data
Size 32B
SHA256 d4d71fa366e376dcf2d83648c041b302fee989827d7af2dea66bec553c62c6ce
MD5 ecb1f42f1bfc2c3c7706f619758299c2
SHA1 db50ec01d345c755c59645af128c1e76e48dcfa7
SHA512 f3694935dff759cab3f99b0176d76db5ddf241ff8d8f6ad3e991bd25e11a48cb9e632eca6f1bea54e3e192bb3f36fab7ab5d4d059a073196d24a10b619a1cdf6
MD5 SHA1 SHA512

Submit Download