6d9258e2977f9a4cb76d784cac724e08525facdd458f4991d5a0695549fc3d8a

Analysis

max time kernel
45s
max time network
76s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
08/05/2026, 17:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Solid Explorer v3.4.10 (Premium).apk
Size 42.8MB
Sample260508-vxjsfsbt4t
SHA256 6d9258e2977f9a4cb76d784cac724e08525facdd458f4991d5a0695549fc3d8a
MD5 78f16242650154e0c3659be7d1169ace
SHA1 7571f7856d6d6e1bad74c754a8b27aefb163a885
SHA512 db002fd78774efa4e746dbeaee00afc1ab22cec0dbd5ec195178e18b95c9d491261e75437d55d3e8f4bafdd51a9f3442708309e3566a4809b7944df0ebdc6d5f
SSDEEP 393216:5XnHSEfamea+gMg7F/g1NIQbggFvAlVD72BxsIiU3zZ44kTDPWhBT8DWci0+y2C:9H5XF++QbgGLvsVUl4JPPM5cj+c
TLSH
T14BA79E43F7569E32C4BD833A58B28381BB315E96AF4393972014F7BCACB36D55A846C4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

banker collection defense_evasion discovery persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 11 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/sd/xbin/su	pl.solidexplorer2
/system/bin/failsafe/su	pl.solidexplorer2
/system/bin/su	toybox which su
/sbin/su	pl.solidexplorer2
/data/local/xbin/su	pl.solidexplorer2
/data/local/su	pl.solidexplorer2
/sbin/su	toybox which su
/system/xbin/su	toybox which su
/system/bin/su	pl.solidexplorer2
/system/xbin/su	pl.solidexplorer2
/data/local/bin/su	pl.solidexplorer2

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs

collection

Data from Local System

T1533

description	ioc	Process
URI accessed for write	content://media/external/images/media	pl.solidexplorer2

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	pl.solidexplorer2

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	pl.solidexplorer2

pl.solidexplorer2
1⤵
- Checks if the Android device is rooted.
- Reads the content of photos stored on the user's device.
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4326
- /system/bin/sh
  2⤵
  PID:4366
- - getenforce
    3⤵
    PID:4387
- - toybox which su
    3⤵
    - Checks if the Android device is rooted.
    PID:4405

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Data from Local System

T1533

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

explorer.db-journal

Path /data/data/pl.solidexplorer2/databases/explorer.db-journal
Size 512B
SHA256 ed02cfd553a7b360d10ff2bb753f9cf9c06805a365e5419543ea568af7a16f3a
MD5 a34aee015f122d57b8e776d67a113403
SHA1 f25c1312924dc0e41b4bb6eb1fbaa327034fd865
SHA512 7084f6d0bf17f94c6226c9c28c6602e5cabeb8cc8bb79081bbbf4f6af2aacd934a889a758387bfd5d363a77928c5974812179bd366df3295c65e47b108a76f65
MD5 SHA1 SHA512

Submit Download

explorer.db-wal

Path /data/data/pl.solidexplorer2/databases/explorer.db-wal
Size 92KB
SHA256 179ebfe93db381e0768eb193a2f05f3074621a73dbf62753885d91c7b88da64e
MD5 9b29e982c79d398fda5f6f47f2bd07fb
SHA1 ada57b011a307d7a6ee47cd937b32e6f298afc22
SHA512 74ad94b201d70702e35562580832c2e858488dca68405ead5667fb5b11e81f0b626c2ee425f68cd2a18cf2e82b9d892b6595deb411eb315a889cb575cca37077
SSDEEP 96:b0PREa9tGc9famTXgvh1Pyp8vKYyvKWwDvKdv+vIbBvKHv0vvR:Um6w6DTmFypUKjKWw7KNmiKPs
TLSH
T10793355103181A61C15A92B8750A23741F78B7CB22CAD7837AFA5114FC12B8CE9FFDA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

folders.db

Path /data/data/pl.solidexplorer2/databases/folders.db
Size 1024B
SHA256 e20ab0ac8d23e2e7cba43d0181492a3cf1cc13690091e9a787578af0527095ec
MD5 44fe03306520f601e26d5c482d606297
SHA1 879a2a4fe612094518d8a4c17afc60a6b16cb207
SHA512 338bfae0a063015f6a25a79b914a1ef87879beb422fa3a014fdada74c52d56e1e04fd1bcc506f709c353ce240e08386a8b071971d80bb8875767b33994d6c20e
TLSH
T14C11171B9B889891C4E4DDBA54E61C195B2AE00ADF82C9B225781441D8852D22CB5135
MD5 SHA1 SHA512 TLSH

Submit Download

folders.db

Path /data/data/pl.solidexplorer2/databases/folders.db
Size 159KB
SHA256 f9bd0487b8ae30aefb86515f5ece1cf2c0f1efe49012f0b10ef7013d07a7c29f
MD5 d0b1cfbe46db488d306ed1397b56149b
SHA1 b6860b450d95c842294d779d69581dcc8c9be001
SHA512 978967045104d963adcc4329b017f2add6a9eb327500682f2d48b099c1da0e69683d5d43e642a9d5341a64eaf94dd44df4439b3e1750806f91fb879ecf31f3a1
SSDEEP 3072:qDlTrvPAI9lw/SZ2xRx7TQM3kI58K/pNh0yXKiUAhH+v3JPgpp7dLR75hG:qDlfnAI9l4Rxz3kI58K/+yXbjH+vRgpQ
TLSH
T182F34B095B2F1957D9BC07793C0C3280AE28ABFE48359897679D96CD7D1AC8C11D0FBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

folders.db-journal

Path /data/data/pl.solidexplorer2/databases/folders.db-journal
Size 1KB
SHA256 b6b800f02845cae8b7231743b40a1e6c9f12119e6d8254e53c3d7281458ece9b
MD5 6a7eb8698f4d31f17f211942dcaadf1f
SHA1 78a48c3741a2144fdbd00b6add53104d54726077
SHA512 098e8c48be1b468e49dfa05522d6b9e86a237bb835636de6535147c773c777e6f2933e66bf9edf10b4e1e5fbf03fc6bd72a34e10091125520096ac2c17beeb9c
TLSH
T17031C20B8B8CE845C4E0ADBE54FA1E6D4F39F5098BC2C5B315780000C4C51C31CB0234
MD5 SHA1 SHA512 TLSH

Submit Download

folders.db-wal

Path /data/data/pl.solidexplorer2/databases/folders.db-wal
Size 5KB
SHA256 07dae703bfc9320cf9478d4b6270d84c6f898edc903489c416eb9005df9d8709
MD5 168450bfeec20609f2d28956a42ab021
SHA1 591019536dd48bb0952fb617844c60a9a7524d29
SHA512 5a9c9adff6df508d1df51e4cd4c8e027b4f25fe94defd958269cecc51c251696ebba7a6433a65b2564428b5acbabbbefa1edc523ca799c8c9c5fbba5fe6bc74e
SSDEEP 48:AYktfJxBt+MhV8lwUVF6Ehg01h5bf59l91/Js3QJaVtuJxBt+E:AXJLt+46eUb6v8Bh/bJLt+E
TLSH
T162B1F70753446887C4A89BB4D4EE1E115E21F99B9B61D1BF23581898BC439CEA4F0F38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profileInstalled

Path /data/data/pl.solidexplorer2/files/profileInstalled
Size 24B
SHA256 0b982bbb816355972fddb28b3a0b9b29e85fccf47c0b5fdccfab96e01d1d0ec4
MD5 b550d36751de43997c94edb136c3d1b3
SHA1 a9f7435997336c2a3878f9365b2fea3c61305fa1
SHA512 ca441258c21187fbe8f554a2ea82c47bbc7898c144b2dd784678d27b9d234e453c0632dd2e64422d0f792194cdf4cc0e29cdda8ba371f20e3fcd56f0ecdfd06b
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/pl.solidexplorer2/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 b56ed8679ec496c7258e1fff522cd2565c99ea72eaf5cc04917952c9892cc62f
MD5 349d0b008fa364829e99a025982f2c62
SHA1 a32d2fe9ee40cffdf4937aa3fa4a783a4eec9f1c
SHA512 8e97e7994c2c6da9f0c0ff551f505fb501dee1f82b55866a03c2278b4f27baba1ad0c025a1c4378a5b47dc25e5adf4372a9db76f1b0cbbde48f6b198b4bae637
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/pl.solidexplorer2/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/pl.solidexplorer2/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 0a450fdd5ee4f4563daf5ea97cb7d68d22943b39491f2af36c8fa326c8a53333
MD5 b18ffbec5b3a76a47d297e78ddd55d63
SHA1 5714e7231a088b968e744e219f24ec1e24c00550
SHA512 0f5a017e96bb97d914029a663773264534895b22e65cf89b75d3eb9acd65cb5147a944ce0475444c0efbbabdb2bf19b2aad98fb3aa22b04f36f4cc5e2d5d66f4
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/pl.solidexplorer2/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/pl.solidexplorer2/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 4d73d06f880c46e82e9ba52b62f0f2c1e41e4817d13936e23dbcdc847a3f6012
MD5 46b818601a7ebad1ad62a6afe336a6b6
SHA1 5f8e1a3b288b8811553c637963b53edde02ec3e6
SHA512 141eb6ebd866c08401ea3c11314abed64e79794800c69072db60d8027af43b1cd2d71cf5f9fa411f64958b0150fca45f5da482ceed1dce0920907eca989fbf75
SSDEEP 6:Kgbgf7EbgzD9FZdrlOERX4PBX4ogLugMBX4suuK+/6bgMYYcc9/YMlOw2:KbEUzdTRmBEyPbP/05QmOw2
TLSH
T1A9722B47B34C065BE709737A44FAC391AD90A20D9B93CF0B59F206557CCABCCA890D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/pl.solidexplorer2/no_backup/androidx.work.workdb-wal
Size 116KB
SHA256 0257a28518237b0bdc729ab06c49b7ee6bf05f726f026d263ace52057829ac2d
MD5 d7242d927eb3fb6da1f4299eaf71432f
SHA1 02fb33250878c44a73f586db5a3eec2df20aa8e6
SHA512 d9f1b8b209bc2ee87c1320ed18bcb33bb6fcd6afa8e4e00b3d13f8e0def3092cb8f361193d7c701638a3d9e48b7e1c40515ce7232876d991576e8c19db0b5aaa
SSDEEP 192:wnUEwjsitidjnfWzzb83zSPde+ZD86u0ED:OBFitidjnfWzzb83zSPdhZD86u0ED
TLSH
T15BC3528E1F5C2601C1A964B0E4E00BF1BD7E412E9393E3D225E10175EDD6A61DE2ACFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/pl.solidexplorer2/no_backup/androidx.work.workdb-wal
Size 124KB
SHA256 cba3f700edf1dae6cd97f1c907fdb65df30ea109e1ce380e82dbd6fa5edd874a
MD5 f127e33a194c70bb14a6cdee0e82ca5b
SHA1 e5fb9713161c72b69c58e113c3dff2b4c93311b7
SHA512 687ae879210e054c1c6945d43e8bc9704785ecbda1468129d0221d1bbf9403cb06cb4e77b9af3d40f60c8a13fd73709aeb34c932b8f9d8598e53f39ff9ee18c2
SSDEEP 3:xJygnwjacwzXtRKVjW+Cnyl/yawvY3N8+c0XllgoqKXtRKVjWn:Kgww72Vx/yBSK+c0p2Vq
TLSH
T164C392E336590567C01067BCEE2FDE94980AED0096D8AC7386AA1A6069583C40225001
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/pl.solidexplorer2/primary.prof
Size 4KB
SHA256 952c79f4e9db565c9eff93453f3360b000109c5e991039aa31a3667df7ff8993
MD5 7095bbac64d6fe4340726bd7e8125257
SHA1 5faeb8a3a3958d3dad88c47b01e500c1b4011756
SHA512 6eb0e27c6f847b0b587a2216656c96c0e9534954afe564539bb997418bcb31da788574623c997d24917c747c6b3ecdeb046bdaaf0de5d5b59c18b96c62216d7d
SSDEEP 96:nOY3qz+iHDCROwvK5a5nwvYsX4NcXZvnhNhM2thXAGqcK5Ra:T3qaACRHV5n/cnhzthAllva
TLSH
T109A15DEE3C74F059A71942B9C09B4CC9C6452DA5E8B02397F6F8458CCB47CD7AE02592
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/pl.solidexplorer2/primary.prof
Size 13KB
SHA256 0be8be0a9be595c5bb6b6d632765153f1cf3cdf1c961da9889e62cff4b3dd674
MD5 51fd17a987a66dc59f47fe48f2a542f9
SHA1 0676965d486200c58ad12f87acc4d09ff8a45efe
SHA512 853a5402f1297ca594060b3b6ae270d225c8b1c8926ba2956090ba57ae5f995e0381096c33ea3fa25195909cbda5b8c510abfef29694ad0d1b6b250ee43933aa
SSDEEP 192:TUTYhj3XWU8U1Cml8ffJsBPL9ZjpuaYgybNRc6NdqQgAqL/BlhbgDUi/TEg2ylQ7:dRbInJsBT91fYBNRc4DEbR/KERyKj
TLSH
T1E852D0180D8E39B79BE6B5333D328AFB0D958E2541267938C37B18DB2B7039590DB49C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads