anti_dev_pm_zygisk-v2.6.5.zip
- SHA256 721c3497715cf9a6db4e2d6c0a98bcb7bfc10eaecf4fb6463be9251ee1ede0f9
Overview
overview
1Static
static
1META-INF/c...binary
ubuntu-18.04-amd64
META-INF/c...binary
debian-9-armhf
META-INF/c...binary
debian-9-mips
META-INF/c...binary
debian-9-mipsel
customize.sh
ubuntu-18.04-amd64
customize.sh
debian-9-armhf
customize.sh
debian-9-mips
customize.sh
debian-9-mipsel
inventory_worker.sh
ubuntu-18.04-amd64
inventory_worker.sh
debian-9-armhf
inventory_worker.sh
debian-9-mips
inventory_worker.sh
debian-9-mipsel
post-fs-data.sh
ubuntu-18.04-amd64
post-fs-data.sh
debian-9-armhf
post-fs-data.sh
debian-9-mips
post-fs-data.sh
debian-9-mipsel
service.sh
ubuntu-18.04-amd64
service.sh
debian-9-armhf
service.sh
debian-9-mips
service.sh
debian-9-mipsel
uninstall.sh
ubuntu-18.04-amd64
uninstall.sh
debian-9-armhf
uninstall.sh
debian-9-mips
uninstall.sh
debian-9-mipsel
zygisk/arm64-v8a.so
ubuntu-18.04-amd64
zygisk/arm64-v8a.so
debian-9-armhf
zygisk/arm64-v8a.so
debian-9-mips
zygisk/arm64-v8a.so
debian-9-mipsel
zygisk/armeabi-v7a.so
debian-12-armhf
1zygisk/x86.so
ubuntu-18.04-amd64
1zygisk/x86_64.so
ubuntu-18.04-amd64
1Static task
static1
Behavioral task
behavioral1
Sample
META-INF/com/google/android/update-binary
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
META-INF/com/google/android/update-binary
Resource
debian9-armhf-20260513-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
META-INF/com/google/android/update-binary
Resource
debian9-mipsbe-20260513-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
META-INF/com/google/android/update-binary
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
customize.sh
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
customize.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
customize.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
customize.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
inventory_worker.sh
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
inventory_worker.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
inventory_worker.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
inventory_worker.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
post-fs-data.sh
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
post-fs-data.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
post-fs-data.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
post-fs-data.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
service.sh
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
service.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
service.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
service.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
uninstall.sh
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
uninstall.sh
Resource
debian9-armhf-20260513-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
uninstall.sh
Resource
debian9-mipsbe-20260513-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
uninstall.sh
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
zygisk/arm64-v8a.so
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
zygisk/arm64-v8a.so
Resource
debian9-armhf-20260513-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
zygisk/arm64-v8a.so
Resource
debian9-mipsbe-20260513-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
zygisk/arm64-v8a.so
Resource
debian9-mipsel-20260513-en
debian-9-mipsel
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
zygisk/armeabi-v7a.so
Resource
debian12-armhf-20260127-en
debian-12-armhf
0 signatures
150 seconds
Behavioral task
behavioral30
Sample
zygisk/x86.so
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral31
Sample
zygisk/x86_64.so
Resource
ubuntu1804-amd64-20261019-en
ubuntu-18.04-amd64
0 signatures
150 seconds
General
- Target anti_dev_pm_zygisk-v2.6.5.zip
- Size 388KB
- Sample261104-2rnyjseh49
- SHA256 721c3497715cf9a6db4e2d6c0a98bcb7bfc10eaecf4fb6463be9251ee1ede0f9
- MD5 d01647518ddaa423a02207d32de8a72f
- SHA1 df9b42494849501bc6342af8a1e419c57747bc74
- SHA512 7e539fb002dc1bcbc421e02fed6b422c96f9cde3d7563465b44818abfb67868d70c2cc507f58537de6e27f28d77d289232e931a940bcfdeefca4fa07fa733cb8
- SSDEEP 12288:DbItCeznhxdO/ZGGIOBO5knGweGunYM6V4v:Db/EGIJPwCYMdv
- TLSH T1CC8423483A1A68329FAF81DCA74429278AFD948CF8CD07575B258D6275D3FC4A353D8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
anti_dev_pm_zygisk-v2.6.5.zip.zip 388KB
-
META-INF/com/google/android/update-binary.sh 612B
-
META-INF/com/google/android/updater-script8B
-
customize.sh.sh 2KB
-
inventory_worker.sh.sh 5KB
-
module.prop646B
-
post-fs-data.sh.sh 1KB
-
service.sh.sh 1KB
-
uninstall.sh.sh 2KB
-
zygisk/arm64-v8a.so.elf 300KB
-
zygisk/armeabi-v7a.so.elf 181KB
-
zygisk/x86.so.elf 252KB
-
zygisk/x86_64.so.elf 297KB
META-INF/com/google/android/update-binary
- SHA256 bcf4b1d9913f3af17755569c853e0b5a75b8005f6a18eb3f86dadcc0e968c29d
- MD5 b48a3faaac5b116c9214033f0c65eebb
- SHA1 ae5e2790ba696c866b6a8913bb071081d2ee5164
- SHA512 1318b2c020b2d6afb3f963ba15712ed2e97c90644a5ef018fbd937673fdcb182813387994c6b7742b9290f69e73e56b19974f1321a2079814c0c8bdf9b0ad45d
- TLSH T1A7F0C04EB6482E463B8701F040CF96C510A2F7C92EAB3AA000FEB5E44C9C4949093214
- MD5 SHA1 SHA512 TLSH
META-INF/com/google/android/updater-script
- SHA256 d2b8203193a083e43ad076fde01b9c7821e0aa521e1f8077b8628fb1cdb70c60
- MD5 b39cd178923d60d67de5c5b81a78c242
- SHA1 2f3975cb5702e93bd7cad2e3ea8914f35fcff000
- SHA512 a5c6a06ffd023af1294478b0d20d8211ecf33f3e0fe6ae60e610a02935acdc5a984acc2fcc5e952701ad47c6471522121c3a0b204290406b0417f92b3f1414bb
- MD5 SHA1 SHA512
customize.sh
- SHA256 5703828556603855a3c80c68f54e98571ae3ce2eb2bd573b96e3da5dbe1bb608
- MD5 32fbda8a178c856432810b24f4d4fec4
- SHA1 5a4c0ba2415d35795288a569bbf4e10704ea0738
- SHA512 eb83126d9a56d9fab2720d15a6ef9728304cfdff7d6da9e387eda74de0633c4d353a2c83d24217342bea66f3e611dfaad4b15523f06d981471555f6a6ded38d3
- TLSH T1FF41FD43B1311E2D2E150F28A767155067AF77F2AB6034E0F4C9EE987E3444E2B2EB24
- MD5 SHA1 SHA512 TLSH
inventory_worker.sh
- SHA256 4c2f04c62387bca60015ec4e1d3252dc4a562d25a977057fcfc643317df99518
- MD5 0644a0d0c4f1fbd5bf26181871423f36
- SHA1 772fdcca7b060d71c5ebbb383b03b9564ecc7424
- SHA512 8ac9408983498d596bee51ed79ed401201bcb8e45af4463da984d697d3785a174dd92542bbec8fac33655a32df3559bbcd267bd93acbb857cdf43cea40915b13
- SSDEEP 96:tsOWnPix3tYLjFXUSNHXlJ1IbSV+pe1dlb5hgYsVaI/rMk82BOldb9TCR:6OWnPix3tw5XUSp1JSbjodlb5hmVZ/rv
- TLSH T1B6C1C856FA6729E42016410C25EB3601175D23F3165C36A4F9ACF7DC6F3C810F6F6AAA
- MD5 SHA1 SHA512 SSDEEP TLSH
module.prop
- SHA256 77d04835c2c427b415fbfa5578526b5200640b79c49e26deb1598f86e0100429
- MD5 89f2ba4ef1ccc30e1f3695291db66007
- SHA1 46ecb92089d566ad79d7d8d8419656840e8ac095
- SHA512 fc511c8dc41cc7027e4b29c426ae0cb1f6c6bc24b084379e36bf27d217a4309b64a6bcf1100261fc55c9bdce5e99e4ac215c86ed0513003f9c0e3b4328f3992c
- TLSH T195F0627BFB2A6F290F5302137628A8F6D71E81CA33372050EB04930D136238C8B6B187
- MD5 SHA1 SHA512 TLSH
post-fs-data.sh
- SHA256 e66c06e02fc41a1401f6dba501dbe98174ea67c8eda89f82866c9c07e8b86d22
- MD5 d1fc8731d7c4ed95334bbfb32355eff4
- SHA1 0c62c72503967cf1f51882ace72cdabcaa84eb84
- SHA512 4ae5924ace5b5dc6fd1263c96fc7113dcecc7e267656cfb61a563ab229dbae78379e4f08c81835c05e79696f622c31214fe747c7c7a3399d3da0286322cd30ff
- TLSH T1E721CD11F5640F143C2A041827686729976F36B7512434E8F4CC7E6CAF7A6076B38B21
- MD5 SHA1 SHA512 TLSH
service.sh
- SHA256 67e4bad42adf32b9ef2cd0d3641dd1a2beba86a570fe69dc5c1455493f89f789
- MD5 d42a1982f560d52045d836927a99eccc
- SHA1 8e8871147ee4681ebd79443153c41dfeb074401f
- SHA512 3b5688f66c03b0003c0478161a1efeade70e471a572f235017238390ae36a1f93722a20693c8b10c1abe8b78377ca4760f2f9c7b33bdbc0fbf667fe15faf9173
- TLSH T10031DC12F5251E143D1A05282BA87719976E36F7412434A8F4CC7EACEF7B20B6B78B21
- MD5 SHA1 SHA512 TLSH
uninstall.sh
- SHA256 6c19c9ca73d97f0b9347642b7cdd5e61a58d835b566212428b055543900c47e9
- MD5 70ef5fb60e1aa9bc123317a25424a8ba
- SHA1 2fd1e79742a4bfda218b36e02629bd908687ad37
- SHA512 0ff477eda3baa1b9d3259014ab39bf5443d72f62a1e6cf06bd07eedc6efb98d9b16d76a03f2827b9a2551aee25c76d0046676e111dc7d39514e8ccb250122e52
- TLSH T12851A222F0A53D746917827E3FE5374862CC23E36B143668F88C15BC1F785056FA9B65
- MD5 SHA1 SHA512 TLSH
zygisk/arm64-v8a.so
- SHA256 8949d1eae9ad6f66ff7df2b1bf66ff3a6a81e0a964e9f9ad7370df508ac1ca53
- MD5 d6516a391c1da881ff91975686c1ac6e
- SHA1 28608dff8d05a7cece7060ffe0fe9b98842925db
- SHA512 7ec6dfdd0322f14083d142fc62240a9659d533d183be35c8fed2c3c796935adf010987cb8e412d76ad8449ef784914c9029e3518d07e81bb57101f2fac3ab848
- SSDEEP 6144:Qr3Yui6A+Th0bOTtoCD0i09LrH64OGNTWEKnh7DEfXlgFQqbsVgLsJwShoK1E885:hXl5D1E88WeBeEqGLEe
- TLSH T11C642C0EFD4DE439FEC8B47D5A461293763F30585364C21B09214619FEC72EA9E3EA92
- MD5 SHA1 SHA512 SSDEEP TLSH
zygisk/armeabi-v7a.so
- SHA256 ea62e23e77050f64e222bfc65ac1afd90590046ac59d265c0276e6c76ca4bb29
- MD5 b9769128a8a7e4115b6b7f010a34449a
- SHA1 4bc0c337ab50192bba8147b881c9c28f8d00b791
- SHA512 3d9ab8b65bdee005b96948d1cca1521b9332f8ec0f9b20000a65499b40ddd4b2a97d6080f76c95d35ba5e05d74387ed699a68994238d6323b5710fa31d465744
- SSDEEP 3072:RYr3Yui6AdTq09NOTtoCD0i09LrH64OGNTWEKnh7DKuaKOe4Xp0FQqbsxdWLsJwX:ur3Yui6AdTq0bOTtoCD0i09LrH64OGNu
- TLSH T11A046DCBF665C472C8A3693075C202D27832899453F0A7824629D7706FEB36DEB2F6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
zygisk/x86.so
- SHA256 f71111f6f0536665ade5e43c25d876b8bbe6502c635cb38c70bb598cba3dce34
- MD5 ef818f971bab0e37d23ef64785eb21ac
- SHA1 dfa9be2c3e790e6dda2090ba710ef9183f49d4ec
- SHA512 04285e7592733a614e78bd5142df703b1859592bec5e3a77549d406ff463e2cc30f9d735a8d5f2c7d456a8809fa14039fd58bb426be3cd09bbb5d0c2773e8e07
- SSDEEP 6144:Sr3Yui6Aqlh0bOTtoCD0i09LrH64OGNTWEKnh7DBtoX9VFQqbsxgLsJwfDNuM1my:TX9Lu7QfGXVx9DpPQhYr
- TLSH T110443A16F9804D61F47776B5715F8738C8166E606F32D9C34F2AAE606A2B2C0CB3E6C5
- MD5 SHA1 SHA512 SSDEEP TLSH
zygisk/x86_64.so
- SHA256 c101d1358760b02b2e2251039212cb203ff25e080b9a54f6059428185c747914
- MD5 1571e7433cb4d340efab2efd4ff6e88a
- SHA1 159ec92002ae3ef63b54a34ab44fa62fcf92ae49
- SHA512 b754d3699af450d395f51bf19b3409d1e28f19c4ede39af96469cac8d236d61a2b80f9f0449ffe503e96d4d06ba1682ee6e183386824f4ed67ae80c1e3286d9e
- SSDEEP 6144:lzr3Yui6A+Th0bOTtoCD0i09Lr164OGNTWEKnh7DMB4PXrxFQqbsVkLsJwF73A4Z:lRXru4H4c/Ixbw
- TLSH T10954096AF694902CE477503C974BE270E370F0A40399A2CB4B9067253E97DE69F3D9E1
- MD5 SHA1 SHA512 SSDEEP TLSH