Analysis
- max time kernel
6s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-de - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-delocale:de-deos:android-11-x64system - submitted
01/05/2026, 01:53
Behavioral task
behavioral1
Sample
accrescent.apk
Resource
android-x64-20260325-de
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
accrescent.apk
Resource
android-x64-arm64-20260325-de
3 signatures
150 seconds
General
- Target accrescent.apk
- Size 6.6MB
- Sample260501-cbgrvsfx3r
- SHA256 40f97ac3ee659d8b1f91dba8b84449fe3c14e05c1e82754375252d8746e6b1f5
- MD5 7ef27ed12d52720474c3e93863143d0c
- SHA1 6b4a7d1d9a829beaa77a0c7ec67c5082cd29d3c7
- SHA512 c06838d7f56a7469cfd63a97b41d2df4c0099c2a66cc05b293fae7d0d5a0cfdd828d5b2382255a61171b8554ae76b23a26c49c915641e3449c31add1844f11d6
- SSDEEP 49152:Yocztb1/mXU6daUQG5lD/iGnmY+nLVlic02P8pSvDivDGHMu93r6DZj0ebbLAi11:Ylzt+KUhbinvr3r6DZQGAi191437K
- TLSH T18F666B86AA12B921DDBE17380FF2471177326C59BB439B4B3044B9A8AF731D06F463D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo app.accrescent.client - Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule app.accrescent.client
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/app.accrescent.client/cache/coil3_disk_cache/196d02bb16a0bb2164efc87a69f1f54ee2ce645ab645af78a4e7acaa2bab1f99.0.tmp
- Size 652B
- SHA256 73202b3577d98794dfba795a22b22f5e058443bb75d8badbe43a20e1df835138
- MD5 0de148f0c1609db0d49fca5039e1178a
- SHA1 520de23451b91cda8ab554ac8ccf65a548f27f6f
- SHA512 a5510548d56109f86c332a0c2f46eed8329610e00bde324100085f0a103fa8e344018726dd96464817fe40e6cab3164eae959670339fcd4d2943fc95fde702c8
- TLSH T1CFF083B317BF59A22D71D592040EBDC332A9F013D6E05041C303874A45103ED8834140
- MD5 SHA1 SHA512 TLSH
- Path /data/data/app.accrescent.client/cache/coil3_disk_cache/196d02bb16a0bb2164efc87a69f1f54ee2ce645ab645af78a4e7acaa2bab1f99.1.tmp
- Size 25KB
- SHA256 2503b04e9af95d6b5a4056a401984242c72a1b765c0c0b914737e207b3c7400f
- MD5 43e3eb19e7704ae046ddcf3b9220b330
- SHA1 074bd00e6c6559183791f2452909feea95541d3d
- SHA512 0ce088c1f544d56eaa3be564ba498bd1282cd886d5d2da55d4888224d9493fc4778b777a968e51a4742983c92a915d4c792af6f0d6beb9af64eeb64289490a5c
- SSDEEP 768:TyunurARx7J2b4Cm7UMt8koZ06BEZtweza:ccFJy4C9oOeO
- TLSH T1A0C2BF87C3D44AE0C56997761107478B0FA2F8B644674B8FCE19A77C1A443287E79BA3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/app.accrescent.client/cache/coil3_disk_cache/bb036280d9bba76bcdc6afea338dc20b05f80fee16fbca62960d0488daccd3a7.0.tmp
- Size 650B
- SHA256 3552865d01c4c363b7717070f2b0d285c977158fddfe6d349b9b6b9ea4d89b71
- MD5 47c7711a3d623bc58a61926679a2bbd0
- SHA1 19d474ae2db484d4e501c0145ce10cd03cc5a728
- SHA512 69fe7ef0b21babda5a96d49eb0f3daf151562f016f0dee0d332b5a936c659d1fd219ba3b1e5691aa9784a8fa943d03f3774724c13e02738778860616c02a48c6
- TLSH T1FEF023F663BD55F2DF62E1E114CDAD867305E30DD7B08814878BDB4909847DC8831A01
- MD5 SHA1 SHA512 TLSH
- Path /data/data/app.accrescent.client/cache/coil3_disk_cache/bb036280d9bba76bcdc6afea338dc20b05f80fee16fbca62960d0488daccd3a7.1.tmp
- Size 55KB
- SHA256 d0ee1ce94c481130ffe2c1d1b25f1810efc528bc3cc78e16cc8aa60d64653374
- MD5 d80817e950af3d7c376b3d05ca6985ea
- SHA1 ebc0a69d21dbef5165be89b588acae85fa9a6fa7
- SHA512 4cb0ca64e4f9011bc332003aa500badbb26628367f2a4b8a60d2d0c7dac265908a6a31a007e24c7d6c70c9258083b9631b7b6398debfd66f9b92eb7c67ba809f
- SSDEEP 1536:jsOjeBizA93jmwogekh3hEOMYPHJhqau9pcCAzx:IhiO4khxrnL/w+
- TLSH T1B543D167A543AC2D543C2EDB15AF356BD86980E8C9A7274EBF900BEE9D78D0153F01C8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/app.accrescent.client/cache/coil3_disk_cache/c763d06488f4af4b1f568222c5d9bcf147e0e7b8fb64d85f18e91ca51bb22053.0.tmp
- Size 653B
- SHA256 5ef743ee16d3c0cad004fa952499eb511eb0ccb13664d48aa81035fe87c3321c
- MD5 7e2f63729cc6345dfe0c3da322db2784
- SHA1 116742bc481ba479f991d712df7d95fc15909e4a
- SHA512 75925a0c1144318010e6e085b35eb086e8bb0960768639ab270b7c79274201bcb7228fe49570b7b1c3d3685077aa6bdba3229d0b8b2a49ada66bb3e0e9ff645d
- TLSH T161F0FEF35B7F85B02EA2E5D12C89BD8F6255E190E3B444069B8ECB1484842CC9867E0A
- MD5 SHA1 SHA512 TLSH
- Path /data/data/app.accrescent.client/cache/coil3_disk_cache/c763d06488f4af4b1f568222c5d9bcf147e0e7b8fb64d85f18e91ca51bb22053.1.tmp
- Size 57KB
- SHA256 c4ede1e442f108d6bd0454636878630ff664b5d051d25fd7860a417d9cd27f67
- MD5 886c82781264700dde151de1ee201d07
- SHA1 abed3f4ed37ae15b36e12e516ac3450c10ae35ca
- SHA512 052591d43b902a44626f191e0b8e4a4fce5e15aa4d4179c30d0aa0528e052eaa8a51e29e92d944001dc7a0d6a506939f1088163468013abb2ec1a9f7e4b3154f
- SSDEEP 1536:zy/1n7lYYXuWyfPZ6RI7PBFr+Vkna2jmE46xQ:zy/17lYYXuWMZk63hnaMT2
- TLSH T1AD430103CC346A0D2EB35B3469730B6D1CD58AE3A21A883D3958496B4FD7AF770DE128
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/app.accrescent.client/cache/coil3_disk_cache/cbffa2e8479139867aa6aac902e160b3681582bf96710f1178ef1fdbfbb8d74e.0.tmp
- Size 633B
- SHA256 8a2696a1207486d971ec0187fb018c267f17f89917ed02f659791a0f8cd026e7
- MD5 c6b456659b3a2b2cb5e1c1803accc5a8
- SHA1 edd47e62adf4d54f46e3881b6fab4f00a66d8d6f
- SHA512 983e706bee253dcc39997b2908db37c375517c95d0580405660d548e28ae5700e6e4c68e1cc816f9d4f3d6b7cac4a8dcc9c8aaf5cdfbf916662a7571f2438192
- TLSH T135F023A72B7806F14F23D1C164CBBD4B525E9101F6D09029579B87561BA5ACCC422D04
- MD5 SHA1 SHA512 TLSH
- Path /data/data/app.accrescent.client/cache/coil3_disk_cache/cbffa2e8479139867aa6aac902e160b3681582bf96710f1178ef1fdbfbb8d74e.1.tmp
- Size 22KB
- SHA256 c182ee990db6a0778e4f251f9e9a0237a4516df866c26d55c0d66dd8352ba251
- MD5 06769a1e8582c879a19ec6fc0fd5aabf
- SHA1 105fed5d8cd3fe7d9ab3720aaa014eb7b0a1ae6f
- SHA512 07419f703d06766ee6b6c2bb38bb8a9cb0504c24a87326ad85b3b31ee60a9b84139dc647c4bbd951e891f9f3fb645b2ab169edbad9645b10298b67eb1cd9ef50
- SSDEEP 384:00i0SMegNJcnlMQp3eZ7gWnctltQotnXNjv5eajvX8Gsjai/hEBd1MF:00/7ol1p3eZ7goOQotnXNjv5em5sjaiX
- TLSH T1EDA2CF01EC3258C1CEADB96298C44561FA4202C3F3954E5F5E8FD8AB1E07326D9D97B7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/app.accrescent.client/cache/coil3_disk_cache/cff65a1766f5e0bd7960a330367f13ebc2352b4fc79c2fbefbdcdf88a6617820.0.tmp
- Size 647B
- SHA256 678a1f447d9f3474a57bd407ccf4b43bbbfd511ea77c3b959abde83cf30ecd3a
- MD5 74735587634d0b75dda73044d2ebcf24
- SHA1 afac849a065df26783cf57e2c615fd3aa129ad34
- SHA512 7e594c6172b391525f2179effdd8657a27552ba5b088ebf2c43178edcb9daf97628f0d7663460828333085c77cac40fc29b7435c140985702437e69532065464
- TLSH T1FBF0237357EB05F05F31E8B21C8DAC4FB342F0DEEAA09850874AEB170A9C2DCC914609
- MD5 SHA1 SHA512 TLSH
- Path /data/data/app.accrescent.client/cache/coil3_disk_cache/cff65a1766f5e0bd7960a330367f13ebc2352b4fc79c2fbefbdcdf88a6617820.1.tmp
- Size 20KB
- SHA256 32f9a1004d3c1112f0f208afd08bbcfecd71044760c47c0fb60db5414cf3b3d4
- MD5 5b0b67c9c9b70203637bab3e4d3fb517
- SHA1 727ba9c2b4dd333bd7af4eacc2c7bb6116fa098b
- SHA512 226c58c2291cc0e5098abeb65352c564a56401f7bd532ea08fd52d47f82b1af3edb142f03ac1da2b23cd83d21c5038dbea3d7dbb7ea58d6210ae573180fd1465
- SSDEEP 384:oE6a09ssSySHAsrHmsIlS1EKntpFseejyIuOJLhDXMy17xPD6K/nF9IfTbMjLvNn:FXySZqsP1puJNbL17Urr6LZ
- TLSH T15392D000F50BDEB60355435E07998FC4C84CAF6D2429D39AEA33C497596F47BCA1B267
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/app.accrescent.client/cache/coil3_disk_cache/journal
- Size 1KB
- SHA256 2cd5a2b920ef2750c2e07ba93b2ff4106e91aabd2ec9d8ac84a50582fe702930
- MD5 2b20f2102069f18e2b2ab3da51488eae
- SHA1 8dac4fd13d10b42aea24a16a73b70a520b5175a1
- SHA512 fb2797dc096338f4acabf645c9fca6ab9edcc3becb63b96b4c80df78afa9fee6d3e2200e82f1992c12c6e81ca7d9fbf592fcf9f81d0654ab66378e0acb4967c6
- TLSH T12321AAE4804BBC1EFA6D263285B9E6E7F3EE7A01A31F3502F5C4B5970813187670B499
- MD5 SHA1 SHA512 TLSH
- Path /data/data/app.accrescent.client/cache/coil3_disk_cache/journal.tmp
- Size 31B
- SHA256 e3650305c6978413b41f02bafa89eb743f3a9158e707497550aea47d18d96445
- MD5 bef6b34bed627020ca277e3be3e6d88b
- SHA1 3461016264f3a9825b3c866b57c3ba7bdf62097c
- SHA512 a696808be4bf64e07b9cf24c9848a78950b83982aa23666089b5fba24446924a6f426f67d174f1396866d766d9af10fbfc8b0c2c025cb9972f47992840d2c33a
- MD5 SHA1 SHA512
- Path /data/data/app.accrescent.client/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 1400d3afe68e5fd88b4ecf4fab90e8aa047e39da92ea44267f483a8f45bd3161
- MD5 83c5d863dff7096a12fc096d06893a07
- SHA1 dd9158c462c21196fd01cf130dbe8d595155dc2f
- SHA512 aa79ca4662dcbcfee143b8716e56bac1db244ef92a11f7a5d548af10356e83165197bd5142a0cf9bd799ad83fba0e45e2a1033bb80c7a6af104d5f678fe9fade
- MD5 SHA1 SHA512
- Path /data/data/app.accrescent.client/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
- MD5 7e858c4054eb00fcddc653a04e5cd1c6
- SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
- SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
- TLSH T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
- MD5 SHA1 SHA512 TLSH
- Path /data/data/app.accrescent.client/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 cf7a830c210f14663af133bb0f8ba9d0a17daa764db4790cc5d7903cfd1d6916
- MD5 a84f28062590f2b6658d5ecb95d662c5
- SHA1 c74f7084ea6ff153a9043c144b465d44035691bb
- SHA512 d9144c82d9ca24ccd93d8dd948abcdd9d05863d83f9bc4b023ffb5d37b8cf10b1b988a2d8d1807283e2206f66e557febf5d7176d27c4d77a31a2a3b84eb7d008
- MD5 SHA1 SHA512
- Path /data/data/app.accrescent.client/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/app.accrescent.client/no_backup/androidx.work.workdb-wal
- Size 333KB
- SHA256 7d8b14cacc22c4262ccc6b1656ba84c9633ee4bbea722510cb4bafa1f83f6149
- MD5 5b4a204f2af76626919bdd3afb47fb57
- SHA1 f09ebcd53c0a2a32b4d3fee2073f7d56b8f57b65
- SHA512 2ee84337879d1e00ccca14ba7f979331e8f01c03ad3b7c3b35edcf64432ac419d78edb45f344b28c2c4de514634f721c81c4622df57bfa0d85db02551ff8ffc1
- SSDEEP 3072:/QYBi/HZgiqyiqqAiqirKqeiqR1iVYDiEN:IYBi/HZgiqyiqqAiqWKqeiqR1iVYDiEN
- TLSH T1B674889F2F0E2118DEB6E7BEF8E783D12D7A95BB07068602180573607EE751C4651EAC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/app.accrescent.client/primary.prof
- Size 6KB
- SHA256 90e2670abe64a8d399479a5cb19c9e50387148da5f2483d6210559e934a38222
- MD5 50bced4689262bca95367c05ac7874b5
- SHA1 e022df084c3ae84d7bcc9ba0ce6e273ed138e8f5
- SHA512 f3c00bda0b5f205952ac265cde5d9df965c450d4b5ddc8534ade4c67860af68aa9fae8da58bce82f49eec70f27f9642c2a6321a9fa7d818fe5f511f5c41fab3f
- SSDEEP 192:NbSb49tITORlAnxd3os5VJWxneudplSKIk:9SYITgCxNos5fOeudF
- TLSH T1D1D18E046D001470E6D5B387C5B73BCE7D842FFA89AC504B9A6CC3A8A5275EE8EB4681
- MD5 SHA1 SHA512 SSDEEP TLSH