Overview

overview

8

Static

static

6

Shizuku_-1...66.apk

android-11-x64

8

compat.apk

android-9-x86

1

compat.apk

android-10-x64

1

compat.apk

android-11-x64

1

Analysis

  • max time kernel
    2s
  • max time network
    33s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    10/10/2026, 14:55

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Shizuku_-13.7.0.r2766.apk
  • Size 8.6MB
  • Sample261010-sapdbaae36
  • SHA256 64bac0c468b3f40c376b097e37b9ee3a0d248f247e70740084df267f443348d6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasionevasionexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 3 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • af.shizuku.plus.api
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Schedules tasks to execute at a specified time
    PID:4897

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        core-oj.jar
        • Path /apex/com.android.art/javalib/core-oj.jar
        • Size 4.7MB
        • SHA256 4df590b764f65c16b51176ff394458d0b3a866ca75a4f912d6f76b7793043c1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        dist.json
        • Path /data/data/af.shizuku.plus.api/cache/sentry/2449602f0aceb2bcc77efdb9d8858196cff076b6/.options-cache/dist.json
        • Size 6B
        • SHA256 cf7d4c193740660b53b407c0d4d08b16fb7125ac30e75bece4fb3cdade1ff0fc
        • MD5 SHA1 SHA512
        Submit Download

        environment.json
        • Path /data/data/af.shizuku.plus.api/cache/sentry/2449602f0aceb2bcc77efdb9d8858196cff076b6/.options-cache/environment.json
        • Size 12B
        • SHA256 80be2eb0944c0453a6ad339a56e1c8f39f8cc57a4e627758246ccfd274176fd8
        • MD5 SHA1 SHA512
        Submit Download

        proguard-uuid.json
        • Path /data/data/af.shizuku.plus.api/cache/sentry/2449602f0aceb2bcc77efdb9d8858196cff076b6/.options-cache/proguard-uuid.json
        • Size 38B
        • SHA256 3542e21bcc3478ee2d1071e0c31572f033337156f190be353c3ec9b49d5a7a5b
        • MD5 SHA1 SHA512
        Submit Download

        release.json
        • Path /data/data/af.shizuku.plus.api/cache/sentry/2449602f0aceb2bcc77efdb9d8858196cff076b6/.options-cache/release.json
        • Size 36B
        • SHA256 b5859a7978598d5061c3b0d8246219dd5b7321a1c73969b3a543dda8296783e1
        • MD5 SHA1 SHA512
        Submit Download

        sdk-version.json
        • Path /data/data/af.shizuku.plus.api/cache/sentry/2449602f0aceb2bcc77efdb9d8858196cff076b6/.options-cache/sdk-version.json
        • Size 707B
        • SHA256 0928555080658b6c82121e498ea4464867166b8485fee2d7078ea9abf77dc289
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        tags.json
        • Path /data/data/af.shizuku.plus.api/cache/sentry/2449602f0aceb2bcc77efdb9d8858196cff076b6/.options-cache/tags.json
        • Size 2B
        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
        • MD5 SHA1 SHA512
        Submit Download

        breadcrumbs.json
        • Path /data/data/af.shizuku.plus.api/cache/sentry/2449602f0aceb2bcc77efdb9d8858196cff076b6/.scope-cache/breadcrumbs.json
        • Size 4KB
        • SHA256 9380dfe3353792b3b0c1cac5c547a1964f69ffc14d28d3cfc1be403545c73315
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        breadcrumbs.json.tmp
        • Path /data/data/af.shizuku.plus.api/cache/sentry/2449602f0aceb2bcc77efdb9d8858196cff076b6/.scope-cache/breadcrumbs.json.tmp
        • Size 12B
        • SHA256 ae1afdb53fc94d62b6862659f839a20634382b65a7354f32b5e81cd29fb4270d
        • MD5 SHA1 SHA512
        Submit Download

        tags.json
        • Path /data/data/af.shizuku.plus.api/cache/sentry/2449602f0aceb2bcc77efdb9d8858196cff076b6/.scope-cache/tags.json
        • Size 39B
        • SHA256 539c15f0aa673e585c2bfa2d8dcf8cf04db1a239e18d2b694ba75144ccca4d8f
        • MD5 SHA1 SHA512
        Submit Download

        4e94e28cf65947bb945a323570d11d27.envelope
        • Path /data/data/af.shizuku.plus.api/cache/sentry/2449602f0aceb2bcc77efdb9d8858196cff076b6/4e94e28cf65947bb945a323570d11d27.envelope
        • Size 1KB
        • SHA256 1ddda0522176d7c3788c627db82ba7aa8b154603a2785ac9ebb2c0c3aa9a2189
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        f3bd6caed43a4f0a96c9edf18fa1ee71.envelope
        • Path /data/data/af.shizuku.plus.api/cache/sentry/2449602f0aceb2bcc77efdb9d8858196cff076b6/f3bd6caed43a4f0a96c9edf18fa1ee71.envelope
        • Size 1014B
        • SHA256 bac883f8b4e21a6f7ced4c2b089b4fee00fc84dbff2b9f372f0d1ee73d5df0ac
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        session.json
        • Path /data/data/af.shizuku.plus.api/cache/sentry/2449602f0aceb2bcc77efdb9d8858196cff076b6/session.json
        • Size 280B
        • SHA256 d1913311c66131a65f18da662007e3093d409704a4dd167cc288cb7ed0e382fc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        INSTALLATION
        • Path /data/data/af.shizuku.plus.api/files/INSTALLATION
        • Size 32B
        • SHA256 04f4d3ee665826d7cda3a407bda7bad31b203c7aa0e477ade9d834b170195056
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/af.shizuku.plus.api/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 6d8674aaf644a248a92722d5289ff88eb619d3dd1f54ae66225000b9f8c92549
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/af.shizuku.plus.api/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 d3573bdbcef25042fbdd682845d5c9830332ccdb310c2b517a1b36194ff82c53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/af.shizuku.plus.api/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 23908a13ca21b4154b206ac081afcc839b3dbd410f82b8f901eb9171dafb687c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/af.shizuku.plus.api/no_backup/androidx.work.workdb-wal
        • Size 181KB
        • SHA256 3c20a8a6822b159fb016f14129ac8591c595a7ccdb4dfd0f34d415218045ec2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        shizuku_activity_logs.db
        • Path /data/user_de/0/af.shizuku.plus.api/databases/shizuku_activity_logs.db
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        shizuku_activity_logs.db-journal
        • Path /data/user_de/0/af.shizuku.plus.api/databases/shizuku_activity_logs.db-journal
        • Size 512B
        • SHA256 0eced48d925caf112788e67afaaf6bef5d7e8d9d04c0b3886a4ecd7e56595b5e
        • MD5 SHA1 SHA512
        Submit Download

        shizuku_activity_logs.db-shm
        • Path /data/user_de/0/af.shizuku.plus.api/databases/shizuku_activity_logs.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        shizuku_activity_logs.db-wal
        • Path /data/user_de/0/af.shizuku.plus.api/databases/shizuku_activity_logs.db-wal
        • Size 48KB
        • SHA256 594e9fd7cd82ca95b0e4503f22faae9137ee2062794cf9ff95f6021a533431cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        shizuku_activity_logs.db-wal
        • Path /data/user_de/0/af.shizuku.plus.api/databases/shizuku_activity_logs.db-wal
        • Size 16KB
        • SHA256 58be396a82d70bc6fa56bddd48b737fa5bfd8463fa23e19457c7fe3cf26fa143
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download