NAIROBI, Kenya (AP) -- It's 1:30 on Saturday afternoon in the Westgate Mall. Rafia Khan is huddling in a crawl space of the Millionaires Casino with her cousin and eight other people as gunmen roam the building and shoot, again and again, into crowds of shoppers.
Now she is teaching those in hiding -- perfect strangers -- words that she hopes will keep them alive.
The group had found the ceiling-level space as they fled gunfire and explosions.
While they are hiding, word spreads by mobile phone text messages that Islamic militants have taken control of the shopping mall that houses the casino. Word also spreads that the gunmen are allowing Muslims to leave -- testing them by asking about their knowledge of Islam.
Khan and her cousin are the only Muslims among the small group. They decide to teach the others to recite the Shahada, the short Arabic-language creed that proclaims there is only one God and Muhammed is his prophet.
Over and over, Khan whispers the words slowly and phonetically, as if to a child: "La il-a-ha il-Al-lah wa Mu-ham-mad ru-soul Al-lah."
Saturdays are crowded at the Westgate Mall, Nairobi's most elite retail destination and a crossroads of the global economy. Rich foreign businessmen go there, as do wealthy Kenyans. There are shopping diplomats, and aid workers watching movies. They stroll the Nakumatt grocery store and have sandwiches at Java House. They buy sunglasses, silk shirts and phones.
Much of Kenya lives on less than a couple of dollars a day, but these poor also come to Westgate. They work inside, carrying boxes at the supermarket, sweeping the marble floors. Or they just come to watch.
"Poor. Rich. High class. All of them are there," says Khan, whose husband is a wealthy businessman.
On this Saturday, though, they would watch children weep and watch them die. They would leave injured friends behind as they fled the attackers. They would be shot, and hit by shrapnel from grenades. At least 67 would die in what became a four-day siege by extremists from al-Shabab, the Somalia-based, Muslim militant group.
This is what happened in those first hours.
The Westgate Mall entrance, about 12:36 p.m.:
Kenyan authorities believe there are as few as six gunmen, although the number remains unclear. The first team, wearing bulletproof vests, storms Westgate's front entrance, throwing grenades and firing assault rifles as they run. They are clearly well-trained.
Few people inside the mall think of terrorism when they hear the first explosion, and many think it's an electrical box giving way under Nairobi's unreliable power grid. But as one blast gives way to another and the clatter of machine-gun fire is heard, thousands of people know they need to move. But where?
Outside at the entrance, Ben Mulwa, a community organizer driving to the mall for lunch, jumps from his car and takes shelter in a shallow flowerbed. He also thinks it's a bank robbery. An unarmed mall security guard takes cover next to him.
Then he sees four attackers in the driveway, racing in his direction. All carry rifles.
"I realized this is bigger trouble than I actually thought," he says.
Mulwa hears a bang, and the guard next to him is shot through the head. He never moves again.
"That's when I saw the second gunmen actually pointing his rifle at me," he says later. Three shots ring out. In his mind, he sees his 1-year-old daughter. "I asked God: Why would you want my daughter to go through this?"
Al-Shabab once controlled wide swaths of Somalia, bringing with it a harsh version of Islam that required punishments such as stoning adulterers to death. The group has been threatening revenge on Kenya since 2011, when Kenyan soldiers crossed into Somalia and helped hobble the al-Qaida-linked militants.
The group said in an emailed statement after the attack that "any part of the Kenyan territory is a legitimate target. ... Kenya should be held responsible for the loss of life."
Authorities believe the group had planned long in advance, scouting the mall carefully.
"They likely had cased the location for some time and knew very well the best place and time to attack," House Intelligence Committee Chairman Mike Rogers, R-Mich., said in a statement to The Associated Press.
The gunmen, for the most part, are dressed casually. Many are in khakis and long-sleeved shirts. Some have checked scarves around their necks or flung over their heads. Only some are wearing bulletproof vests.