Resubmissions

03/05/2026, 18:24

260503-w2a7jsft5t7

03/05/2026, 18:20

260503-wywdbaax8l7

Analysis

  • user interaction
    yes
  • max time kernel
    269s
  • max time network
    269s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260325-enlocale:en-usos:android-13-x64system
  • submitted
    03/05/2026, 18:24

General

  • Target
    4.7.0.apk
  • Size 67.2MB
  • Sample260503-w2a7jsft5t
  • SHA256 3fdbde37d50fea40f708fb6ca3051ac3e6d3751ead279813e38a3805dc0c6529
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Processes

  • com.lagradost.cloudstream3
    1⤵
    • Loads dropped Dex/Jar
    PID:4253

Network

        MITRE ATT&CK Enterprise v16

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        46f4716a90b7de0053509cc97a6d7b30.0.tmp

        • Path /data/data/com.lagradost.cloudstream3/cache/http_cache/46f4716a90b7de0053509cc97a6d7b30.0.tmp
        • Size 1KB
        • SHA256 93205796a59972bbe99d8cc414e07e890f48f98f4911684fd1030724d404cb69
        • MD5 SHA1 SHA512 TLSH

        46f4716a90b7de0053509cc97a6d7b30.1.tmp

        • Path /data/data/com.lagradost.cloudstream3/cache/http_cache/46f4716a90b7de0053509cc97a6d7b30.1.tmp
        • Size 6KB
        • SHA256 0ea716826179c9e01b2cdb36ea62535593c16be259df667619030d92a8cc4e05
        • MD5 SHA1 SHA512 SSDEEP TLSH

        4da1c91e0b0e685262a3b696516acc53.0.tmp

        • Path /data/data/com.lagradost.cloudstream3/cache/http_cache/4da1c91e0b0e685262a3b696516acc53.0.tmp
        • Size 1KB
        • SHA256 190da0f85a99fa6475115484b4b37e7c8b34400aa99344adb1d601aaa2f7a5db
        • MD5 SHA1 SHA512 TLSH

        4da1c91e0b0e685262a3b696516acc53.1.tmp

        • Path /data/data/com.lagradost.cloudstream3/cache/http_cache/4da1c91e0b0e685262a3b696516acc53.1.tmp
        • Size 23B
        • SHA256 6d854456defca287eaf23c86e1b9aba7cd12f188262e332f120919660d0cfb47
        • MD5 SHA1 SHA512

        journal

        • Path /data/data/com.lagradost.cloudstream3/cache/http_cache/journal
        • Size 210B
        • SHA256 2ad5630d5a511b943338cfde0423acf94ddc4821006a9eb98d43dd150137c9f7
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/com.lagradost.cloudstream3/cache/http_cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events

        • Path /data/data/com.lagradost.cloudstream3/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 24221dea2d70f40c8eb115337888d3c6725f4e6c5d1203ae2261564edc5ac91b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.lagradost.cloudstream3/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 b518dde2549dc0fd16ecfc2f26e6a351cfc5bf8a9418c71720ae210054dcda94
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.lagradost.cloudstream3/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 4dede16d5b0125f4b37efc523e46c4a85591914ba376160b9de7bd6bbc9577dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.lagradost.cloudstream3/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 53e2840ad1552cd8cc914ed64eb25bc1a34327784aa833f0790efb3cf0d7127f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        profileInstalled

        • Path /data/data/com.lagradost.cloudstream3/files/profileInstalled
        • Size 24B
        • SHA256 8aded9471bb83badf8aa042414c7566be3fad47a0be4ba4f3e86a7668de53e78
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.lagradost.cloudstream3/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 e132b7b6ddedd3977d72137472afb0a5edfe16185d5aaae087c5e2f5d9065aa4
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/com.lagradost.cloudstream3/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.lagradost.cloudstream3/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 89ff1a36a748b73bf1a5f9b9ba61d2c32ed01404920c860d74070ccdbbfc703e
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.lagradost.cloudstream3/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.lagradost.cloudstream3/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 bbccde9e2b6d6b4034c80cc749c658e7a74fa66b22841927e526b0e9c1deb6c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.lagradost.cloudstream3/primary.prof
        • Size 15KB
        • SHA256 43d96f70b2b05d718749719ec4816b586ec74abd09329647a3c243c0de770b06
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.lagradost.cloudstream3/primary.prof
        • Size 36KB
        • SHA256 6a2791291462ef6f5ecbb13828fcea58e59a2a92119c6ed823eb3d5f699c4a70
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.window.extensions.jar

        • Path /system_ext/framework/androidx.window.extensions.jar
        • Size 123KB
        • SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.window.sidecar.jar

        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 25KB
        • SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
        • MD5 SHA1 SHA512 SSDEEP TLSH