Overview

overview

10

Static

static

10

Weather Li...m).apk

android-11-x64

8

Analysis

  • max time kernel
    64s
  • max time network
    86s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    11/04/2026, 02:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Weather Live Wallpapers v2.31.0 (Premium).apk
  • Size 42.7MB
  • Sample260411-c2eeesas4t
  • SHA256 457234ef2a83293b19170ae5b913f6a971956a7c8bd79bdc7431b928799a6ac2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasionexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Declares services with permission to bind to the system 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Requests dangerous framework permissions 4 IoCs
  • Checks the presence of a debugger
    defense_evasion
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    defense_evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • com.skysky.livewallpapers
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Schedules tasks to execute at a specified time
    PID:4825

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/com.skysky.livewallpapers/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 02aaa38660ac043421b9be159ea949553e6c4b9af26e0ce75184ead180e26d6b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.skysky.livewallpapers/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 4f64cb4309f10c6dc4df9bde7da8c244e05fc2a7ead3402412a98fd1bc768be5
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.skysky.livewallpapers/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 5375a7f761b51c19558dc175be32031178e368f85cfe48c25fa2044a1a12547a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.skysky.livewallpapers/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 d8fafbcd05e06d04ca8ae829cdc0aa5e2bc7fabd9316b7b2e87f64e54b90c114
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.skysky.livewallpapers/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 386819b89d72f2bc2550e502b8988b442c87d12b3adfae21bdb34568c02bce62
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.skysky.livewallpapers/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 dbaed803e5df18bb70478793c6f7e4cef2c024528f3ef9e959ed1b6467fed2f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.skysky.livewallpapers/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 22daf5420b4339e67a491a0aa36e4304671288fa5213c07f16c0da66e93439e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.skysky.livewallpapers/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c06a23d57776ace715aef1b2f3576fd5308c1b2df8336c8e0dd4fec5b1a7aed7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.skysky.livewallpapers/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a103c9f49dbd67af70508970df603fffd3245272654be9e636ccf13f4badbafb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.skysky.livewallpapers/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 dfce03136664531e576c860b6e09d86a2a6e0ae8bfd878fda49ec4635aa53c87
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.skysky.livewallpapers/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 871c91ef0767dc57f3f4b802c8b9ed547c022b80d55bd4c10246a38f47b670b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.skysky.livewallpapers/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 3f45a564ac5727cdc12841f83fa7fa054791d5ce4d0dadca7e5c8663f82f9993
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.skysky.livewallpapers/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 bf2f2ae6f137039bef5993e709fba52a656703735002f04219fd08f94e992358
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.skysky.livewallpapers/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 9aa68c0b87e9620383258ed30a6b36cd83bb846f6481e50f62bfd36bb8484bfd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.skysky.livewallpapers/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 f975809f9cb3df0a0ac654c26a860659f75f4e1a2beee2d8753019628a884e73
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.skysky.livewallpapers/files/.crashlytics.v3/com.skysky.livewallpapers/com.crashlytics.settings.json
        • Size 774B
        • SHA256 34b6e881143df934af817041c36f684f8e22dc9242f422e19c031696657e9cd1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        event0000000000
        • Path /data/data/com.skysky.livewallpapers/files/.crashlytics.v3/com.skysky.livewallpapers/open-sessions/69D9B85B018C000112D9B95C3E9D8AE9/event0000000000
        • Size 3KB
        • SHA256 d08a8923ae594cd248da0f09e1204b7f2b1772a414375ba8559229c802ff1992
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        event0000000001
        • Path /data/data/com.skysky.livewallpapers/files/.crashlytics.v3/com.skysky.livewallpapers/open-sessions/69D9B85B018C000112D9B95C3E9D8AE9/event0000000001
        • Size 3KB
        • SHA256 27062df157b4eb773b7add65b31c7f265085d7bc33d097665a89754e55bcff0c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        event0000000002
        • Path /data/data/com.skysky.livewallpapers/files/.crashlytics.v3/com.skysky.livewallpapers/open-sessions/69D9B85B018C000112D9B95C3E9D8AE9/event0000000002
        • Size 4KB
        • SHA256 0caed880e8a3882afcb92f9f920c79e7dd2b5769c44797a12c4d9586c8845b6c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        internal-keys
        • Path /data/data/com.skysky.livewallpapers/files/.crashlytics.v3/com.skysky.livewallpapers/open-sessions/69D9B85B018C000112D9B95C3E9D8AE9/internal-keys
        • Size 207B
        • SHA256 f2496af6c4ae31ba7c983924599317a30c0a93344691abe560d234714a328c3a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/com.skysky.livewallpapers/files/.crashlytics.v3/com.skysky.livewallpapers/open-sessions/69D9B85B018C000112D9B95C3E9D8AE9/report
        • Size 801B
        • SHA256 c2413a2f369827e74993083772013a170336c42fd331a022ca7ba672e52157db
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        user-data
        • Path /data/data/com.skysky.livewallpapers/files/.crashlytics.v3/com.skysky.livewallpapers/open-sessions/69D9B85B018C000112D9B95C3E9D8AE9/user-data
        • Size 23B
        • SHA256 8c9d8f90e946633b84a86418590297cfc8a29beaa281c3552789005fea4b6385
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation2565205296195907194tmp
        • Path /data/data/com.skysky.livewallpapers/files/PersistedInstallation2565205296195907194tmp
        • Size 559B
        • SHA256 0fdf82d87a21c72d417346e1af51d205f87db08c9eb4cc4ea000f252d0c4b7b3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation3378246882293413628tmp
        • Path /data/data/com.skysky.livewallpapers/files/PersistedInstallation3378246882293413628tmp
        • Size 90B
        • SHA256 49ffe4b5da7d0ef8a53536be4ae469f493209590a6e3af05df244beae095f82a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo0NTAxNDg2Njk2MDY6YW5kcm9pZDphMjdkMjI0OGRjNzU2Mzgy.preferences_pb.tmp
        • Path /data/data/com.skysky.livewallpapers/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo0NTAxNDg2Njk2MDY6YW5kcm9pZDphMjdkMjI0OGRjNzU2Mzgy.preferences_pb.tmp
        • Size 429B
        • SHA256 2bb55ff5f51ef14dd47063272dcb2f43bd99baef145e68e958fdd9c260b6c181
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo0NTAxNDg2Njk2MDY6YW5kcm9pZDphMjdkMjI0OGRjNzU2Mzgy.preferences_pb.tmp
        • Path /data/data/com.skysky.livewallpapers/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo0NTAxNDg2Njk2MDY6YW5kcm9pZDphMjdkMjI0OGRjNzU2Mzgy.preferences_pb.tmp
        • Size 453B
        • SHA256 4555c7ec957f31a787a8284f15092d1fb0941cdf7304b6ebdad58a81fa4d78fe
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        data_store.preferences_pb.tmp
        • Path /data/data/com.skysky.livewallpapers/files/datastore/data_store.preferences_pb.tmp
        • Size 30B
        • SHA256 3758e07a84a1a1f760c90543363fad16b97b4770961f0d4d89e8aad7aac89932
        • MD5 SHA1 SHA512
        Submit Download

        sessionConfigsDataStore.data.tmp
        • Path /data/data/com.skysky.livewallpapers/files/datastore/firebaseSessions/sessionConfigsDataStore.data.tmp
        • Size 145B
        • SHA256 2c45e2aba046a0151b1c48bf13791df976ea14e03874c2fb5e191743eb1f1396
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionDataStore.data.tmp
        • Path /data/data/com.skysky.livewallpapers/files/datastore/firebaseSessions/sessionDataStore.data.tmp
        • Size 285B
        • SHA256 b25978f86c2dcc087077c73f3a9cfb851519b3b85a4cdd831e762fd2ce940a0e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        preferences.preferences_pb.tmp
        • Path /data/data/com.skysky.livewallpapers/files/datastore/preferences.preferences_pb.tmp
        • Size 32B
        • SHA256 666000d4041168bec9bc156fdfae95ded0f14521f793dcdc62b1513e7d5a468a
        • MD5 SHA1 SHA512
        Submit Download

        preferences.preferences_pb.tmp
        • Path /data/data/com.skysky.livewallpapers/files/datastore/preferences.preferences_pb.tmp
        • Size 57B
        • SHA256 d01dcc8218cff9d7df381ce6366e31a69712ed98933d5ec52a31b381590c0385
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        preferences.preferences_pb.tmp
        • Path /data/data/com.skysky.livewallpapers/files/datastore/preferences.preferences_pb.tmp
        • Size 99B
        • SHA256 444e4178588c324f626f4499787e82bf414094753fcb1d0319f86708a893e16b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        preferences.preferences_pb.tmp
        • Path /data/data/com.skysky.livewallpapers/files/datastore/preferences.preferences_pb.tmp
        • Size 132B
        • SHA256 ef953ba1893950f92406a3f6fa15d8478e7e35a030f39a53050c57b68edc05fd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        purchase_sdk_cache.preferences_pb.tmp
        • Path /data/data/com.skysky.livewallpapers/files/datastore/purchase_sdk_cache.preferences_pb.tmp
        • Size 44B
        • SHA256 c8a8f277d9cbb2d755a0827c8357a0cdfcee226da5687348d80e9acac6d0cc96
        • MD5 SHA1 SHA512
        Submit Download

        frc_1:450148669606:android:a27d2248dc756382_firebase_defaults.json
        • Path /data/data/com.skysky.livewallpapers/files/frc_1:450148669606:android:a27d2248dc756382_firebase_defaults.json
        • Size 1KB
        • SHA256 54fd3ce68a21dbeee0ca994c8e2d898dec601b728e2d95727e189700910ec7a9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:450148669606:android:a27d2248dc756382_firebase_fetch.json
        • Path /data/data/com.skysky.livewallpapers/files/frc_1:450148669606:android:a27d2248dc756382_firebase_fetch.json
        • Size 9KB
        • SHA256 c5a9a951bfb05ebfd9ea5970fe46ff1f4bd2e13ee9ffe700445f7d9b27056d7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.skysky.livewallpapers/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 ffb29ecbbf461e446a4669ee11aaa15ea31ebe5c0fa2f7a7ff48138b6fdb6417
        • MD5 SHA1 SHA512
        Submit Download

        zmFJe2q.apk
        • Path /data/data/com.skysky.livewallpapers/files/zmFJe2q.apk
        • Size 120KB
        • SHA256 d2099461df3dcf3eed9e3946da09f068ffe84017b61f04f98571d98ffd1a4d2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.skysky.livewallpapers/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.skysky.livewallpapers/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 addc59b7d9ed332baf75b1afc14ae64a2e0b04071a2539b08807c05c6f6bdac6
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.skysky.livewallpapers/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.skysky.livewallpapers/no_backup/androidx.work.workdb-wal
        • Size 301KB
        • SHA256 6ba8596d69cdc0b0376790934c5c53880bd76229eba9f284b8c0dbcfc18840e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.skysky.livewallpapers/primary.prof
        • Size 10KB
        • SHA256 aab85649d9444a2ab4ec252264b46e4984f892cc1f140a9e45dc6e6e55e7c4d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.skysky.livewallpapers/primary.prof
        • Size 21KB
        • SHA256 693dd9f85519d245ef65d8ecace07ed565d9537a71f4458f6385186f2a78cffe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download