The gunman, reported to be a young man wearing sunglasses and dressed in black, exited a grocery store and pulled what appeared to be a submachine gun out of his bag and opened fire on a Sushi restaurant, a cafe, and a bar called "Ha'Simta", with the bar appearing to be the main target. Shortly after, the suspect took a taxi at Ibn Gabirol Street near Rabin Square, some 750 meters east of the attack site. He later shot the driver, identified as Arab-Israeli Amin Shaaban, who was found murdered near north Tel Aviv's Mandarin Hotel. The two murdered victims at the site of the shooting were identified as Alon Bakal, the manager of the Simta, and 30-year-old Shimon Ruimi of Ofakim. The perpetrator's cell phone was found shortly before the attack in an alley in Ramat Aviv, a few miles north of the shooting scene. The girl who found the cell phone did not realize that it belonged to the perpetrator, and once she did realize it a day later, she and her father called the police. Selfie videos from his cell phone were later made public by the Shin Bet. The videos led officials to believe that the attack was inspired by ISIS.
Suspect
Police identified the suspect as a 31-year-old named Nashat Melhem, from Ar'ara, an Arab town in the Wadi Ara area of northern Israel. He was identified after his father, who works in security, recognized his son from the security footage and noticed that his gun, reportedly a Spectre M4, was missing. Melhem had previously been arrested in 2007 for attempting to steal an Israeli soldier's gun. He attacked the soldier with a screwdriver, and said he wanted to avenge his cousin's death, and also said he wanted to sell the gun. Relatives and acquaintances claimed that he had mental health issues and often engaged in "problematic" behavior. Relatives have also stated he is not religious or affiliated with any political movement.
Investigation
Immediately following the incident, Israeli forces began a massive manhunt throughout the Tel Aviv area for Melhem. Benjamin Netanyahu following the incident announced that forces have been increased within relevant areas. With the location of Melhem unknown, Israel requested the Palestinian Government's help in searching the West Bank for possible information on his whereabouts, to which they later agreed to turn in Melhem if he was in the West Bank. His family stated that if he returned home they would immediately alert the authorities. After several days, Israeli Police expanded their search to northern Arab towns. In the days following the shooting, Melhem's father Mohammed, along with five other family members and friends, were arrested on charges of premeditated manslaughter, being an accessory to murder, illegal association and conspiracy to commit a crime. The next day, Melhem's brother Jaudat was released from prison, but ordered not to return home. The Police requested the court to allow Mohammed Melhem to be kept in police custody for up to 12 days. Melhem's mother stated that police threatened to demolish their home for not releasing their son's whereabouts. On 8 January 2016, an IDF search dog picked up the scent of Melhem's feces. Melhem was then killed by Yamamcounter-terrorism operators in a mosque in Ar'ara, following a shootout with the police. Melhem's body was buried in Arara's cemetery on 12 January, with some of the 80 participants, some of which hailed him as a martyr. Following Melhem being located four additional people were arrested on suspicion of aiding Melhem while in hiding. On 27 January, three suspects: Melhem's relatives Amin and Mohammed Melhem, and Ayoub Rashid, were indicted for abetting Nashat Melhem allude police. In the indictment, Mohammed Melhem was charged with providing Nasha'at Melhem with a new cell phone and Amin Melhem was charged with helping Nasha'at Melhem plan a second attack in Israel.