Overview

overview

10

Static

static

10

2FA Authenticator.apk

android-9-x86

7

2FA Authenticator.apk

android-10-x64

7

2FA Authenticator.apk

android-11-x64

7

All Passwords.apk

android-11-x64

8

ICICI Rewards.apk

android-9-x86

7

ICICI Rewards.apk

android-10-x64

7

ICICI Rewards.apk

android-11-x64

7

Kylhavy Mo...ty.apk

android-9-x86

6

Kylhavy Mo...ty.apk

android-10-x64

6

Kylhavy Mo...ty.apk

android-11-x64

1

_Antivirus...id.apk

android-9-x86

6

_Antivirus...id.apk

android-10-x64

6

_Antivirus...id.apk

android-11-x64

6

test.apk

android-9-x86

6

test.apk

android-10-x64

7

test.apk

android-11-x64

7

Analysis

  • max time kernel
    15s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20250917-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20250917-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2025, 15:14

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    All Passwords.apk
  • Size 12.7MB
  • Sample251223-smt5bsvmht
  • SHA256 8bc90eeb3df06d50a460890b4a1d4c8d9a1b72d00e3ecdcc135bd3a8a6ae604a
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
defense_evasiondiscovery

Malware Config

Signatures

Processes

  • com.mobilesoft.security.password
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Checks memory information
    PID:4885

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/user/0/com.mobilesoft.security.password/databases/com.google.android.datatransport.events
        • Size 40KB
        • SHA256 100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.mobilesoft.security.password/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 b254b4020a529cea8bd3eb5503a56fe7004b5517b3f2168ca9339dabc3d91404
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.mobilesoft.security.password/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 b36549efa97bc03d2feeadf82be5136cdcc9faaf2101ca3e7050e66a415d942e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.mobilesoft.security.password/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 5eac59e53b41164c4dd1e229f1092ec9034c6a9e98ecce44bcc0fe0d62a8211a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.mobilesoft.security.password/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.mobilesoft.security.password/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 6d150ccdc2ec535c8b0f29cf41269383cf7b74980518a364fbf9adc28d24e376
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.mobilesoft.security.password/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 22706ec6a9795c9b1f3f01e814cb805a004d267427d5360f607850af4db153da
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.mobilesoft.security.password/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 53353c7d00b6538bee3f448cf9f5d55a2a7cb137480bd79ce4c4d11885f03e9b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.mobilesoft.security.password/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 7a791b959e25a603e999bfba51e13cb9572793e1572434d3b9a11f203e6e07ab
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.mobilesoft.security.password/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b4765a86f69c122307448d0c6e81cebd52ffbc59b0d19da42971e2857f773e6d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.mobilesoft.security.password/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 6e572828ba738cacad53035793b2fc49f2bfc15fd79aaab48b0b575f0eddeddd
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.mobilesoft.security.password/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 446ea6cb079b5009760ee1e4785e03f58a2790ab951f7a3fa7f4a7872a9bec50
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.mobilesoft.security.password/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 976e954e4df50eef832d337cb24ec75c20f42287aa636bb394aacebc014d0129
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.mobilesoft.security.password/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 ede31bd2e1fac997af996f1ccefdc0e190a5e466872914b984679485b5438226
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.mobilesoft.security.password/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 7b8b4d8010f40cce044b544fa23c24f667d3b8509fe4894871b105d078d4ae87
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.mobilesoft.security.password/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 a18dcfe2feea71e89865bcf184e01445aeb4e7c31f4c6cfe0fc5702ffcf19aae
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        694AB23702E2-0001-1315-0DFBAC6C0B6EBeginSession.cls_temp
        • Path /data/user/0/com.mobilesoft.security.password/files/.com.google.firebase.crashlytics/694AB23702E2-0001-1315-0DFBAC6C0B6EBeginSession.cls_temp
        • Size 75B
        • SHA256 8a0746c9707ef4273bb61d21e283d6d3ccb28598d92d6d82ae03470b944e9c0b
        • MD5 SHA1 SHA512
        Submit Download

        694AB23702E2-0001-1315-0DFBAC6C0B6ESessionApp.cls_temp
        • Path /data/user/0/com.mobilesoft.security.password/files/.com.google.firebase.crashlytics/694AB23702E2-0001-1315-0DFBAC6C0B6ESessionApp.cls_temp
        • Size 85B
        • SHA256 66a27676da5700885bba7a57d600d2c5b01f502d85ecf0e34c713b6ba86c058d
        • MD5 SHA1 SHA512
        Submit Download

        694AB23702E2-0001-1315-0DFBAC6C0B6ESessionDevice.cls_temp
        • Path /data/user/0/com.mobilesoft.security.password/files/.com.google.firebase.crashlytics/694AB23702E2-0001-1315-0DFBAC6C0B6ESessionDevice.cls_temp
        • Size 49B
        • SHA256 ec664092a3596d487e39269cc43b1c24502473f0c666e4f91b808394a974a60f
        • MD5 SHA1 SHA512
        Submit Download

        694AB23702E2-0001-1315-0DFBAC6C0B6ESessionOS.cls_temp
        • Path /data/user/0/com.mobilesoft.security.password/files/.com.google.firebase.crashlytics/694AB23702E2-0001-1315-0DFBAC6C0B6ESessionOS.cls_temp
        • Size 15B
        • SHA256 94db7df32f7024d43abbedd5433d0a39a8dfe652621d40e7647af527fb5a2150
        • MD5 SHA1 SHA512
        Submit Download

        com.crashlytics.settings.json
        • Path /data/user/0/com.mobilesoft.security.password/files/.com.google.firebase.crashlytics/com.crashlytics.settings.json
        • Size 781B
        • SHA256 7f8d5c8acd2389f2cb0e5a80e15b0e6c82343b0bc4c9a89174eaa23c847061bb
        • MD5 SHA1 SHA512
        Submit Download

        crashlytics-userlog-694AB23702E2-0001-1315-0DFBAC6C0B6E.temp
        • Path /data/user/0/com.mobilesoft.security.password/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-694AB23702E2-0001-1315-0DFBAC6C0B6E.temp
        • Size 191B
        • SHA256 8815ea9e302255762dabf72addd9643e67519a1438d0973a320315c0965f4fcb
        • MD5 SHA1 SHA512
        Submit Download

        crashlytics-userlog-694AB23702E2-0001-1315-0DFBAC6C0B6E.temp.tmp
        • Path /data/user/0/com.mobilesoft.security.password/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-694AB23702E2-0001-1315-0DFBAC6C0B6E.temp.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        report
        • Path /data/user/0/com.mobilesoft.security.password/files/.com.google.firebase.crashlytics/report-persistence/sessions/694AB23702E2000113150DFBAC6C0B6E/report
        • Size 762B
        • SHA256 de6c9213f441baf31c32aecb8eac9bb2d8f3a0f1dc0025048579ffc8c6762751
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation326483564940460838tmp
        • Path /data/user/0/com.mobilesoft.security.password/files/PersistedInstallation326483564940460838tmp
        • Size 570B
        • SHA256 1388c9931956d455c0f24bba3c898e702a0f6ebb0f490b74544f30c26ccc6325
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation5610990865896792525tmp
        • Path /data/user/0/com.mobilesoft.security.password/files/PersistedInstallation5610990865896792525tmp
        • Size 90B
        • SHA256 4942cf8964d95b85a7a0d6e8aa0570d4cb2ec5d7f556505058c90d99663666b9
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb
        • Path /data/user/0/com.mobilesoft.security.password/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/user/0/com.mobilesoft.security.password/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 c7298ab361382b475864e3613c99a615b86351d193dad79a780ebaeda06347b5
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/user/0/com.mobilesoft.security.password/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.mobilesoft.security.password/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 6b3b3630ff5d4e9154b9b3dc1ff829c7d4f130f5e3b820db40a6de2732213995
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.mobilesoft.security.password/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 1eb8cd1e8ce9c5fb415eaa10e972c30dabc9da5724552f0f635c5fa7c1b28ae3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download