Analysis

  • user interaction
    yes
  • max time kernel
    65s
  • max time network
    65s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    16/05/2026, 12:19

General

  • Target
    Niagara Launcher v1.16.5 (Pro).apk
  • Size 14.1MB
  • Sample260516-pg9faagx3q
  • SHA256 2b67713c659c517e945b64e0bf481dce0d94247a8cb27304eaac0f26bc9761b4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • bitpit.launcher
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    PID:4828

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        cdb_8356976766690154978.tmp

        • Path /data/data/bitpit.launcher/cache/cdb_8356976766690154978.tmp
        • Size 7.4MB
        • SHA256 e54b4c7d5acc939ca6002f4dfb40d192a28de36ae33fbfc1f059fa43cbbad4b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        0.0.1778934123154.v3.exo

        • Path /data/data/bitpit.launcher/cache/media/0/0.0.1778934123154.v3.exo
        • Size 636B
        • SHA256 a54a5e74dd0000874687b88c1e36cbb3a7d8bd53f8b333e395bcb007d2f94e33
        • MD5 SHA1 SHA512 TLSH

        DataBase

        • Path /data/data/bitpit.launcher/databases/DataBase
        • Size 188KB
        • SHA256 6efc1d0452d1c76f8340381020a648dedd155d311f873c9134d250aa878e060d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DataBase-journal

        • Path /data/data/bitpit.launcher/databases/DataBase-journal
        • Size 512B
        • SHA256 b6abd3adb4f0964fea52855d69ac39597f4759b4bf3e5df358d237e9691bbfe7
        • MD5 SHA1 SHA512

        DataBase-wal

        • Path /data/data/bitpit.launcher/databases/DataBase-wal
        • Size 406KB
        • SHA256 30cb50e2aaeb46ef2c95f0e18e30b98f3d95a13e2ad5b40c4732fc249166eb85
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events

        • Path /data/data/bitpit.launcher/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 6fe893ba06d0ef71a4101fb5f83c9cf83d447f8b5e4c0b8b64562e7fa6a5eda3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/bitpit.launcher/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 e7c0266f3f7e77fcffc21d8935b5f2ccdda3273884c41141390006171b00b505
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/bitpit.launcher/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 53a8d4699c46d6692cc6f84eb93d16db69c4b18dffabccdd82ada4864e75b6f3
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/bitpit.launcher/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 bf8c7d8103d7f52c0020741c1caa8c864fafa81cb1ba604b9020e3c5c11add78
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/bitpit.launcher/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 358be635342046ca61ed70cca0013a20b67328ad4179936b7ca0be030088edac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db

        • Path /data/data/bitpit.launcher/databases/exoplayer_internal.db
        • Size 32KB
        • SHA256 1e8c5c95bc6f7db543d6beeb331d745c52d217aa0f3a1a8a924dbf234e87fa26
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/bitpit.launcher/databases/exoplayer_internal.db-journal
        • Size 512B
        • SHA256 fdee0dab25f7ab4049396fe261010cd69cb6410dd3361268765d1a66571ca46a
        • MD5 SHA1 SHA512

        exoplayer_internal.db-journal

        • Path /data/data/bitpit.launcher/databases/exoplayer_internal.db-journal
        • Size 8KB
        • SHA256 3313d2a4bf1f2a776ff6b28c69b9f53ba6c9a3f390c1812c73e0aec0635c1016
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/bitpit.launcher/databases/exoplayer_internal.db-journal
        • Size 4KB
        • SHA256 2e19d3a90450f98c427eba9ac432911acec97ebee26990de4a6bfa7c33124da3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/bitpit.launcher/databases/exoplayer_internal.db-journal
        • Size 8KB
        • SHA256 5df000d662ed192d1433916bf5022dced3094b3e002091c6ada9515bca33565c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/bitpit.launcher/databases/exoplayer_internal.db-journal
        • Size 16KB
        • SHA256 bd10c7d3bfb5740880b8f822bc455a605e25b91c4b02e8a1c0171af27f948e6e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/bitpit.launcher/databases/exoplayer_internal.db-journal
        • Size 12KB
        • SHA256 21972232e443ef97dc01c8a5e58118e245209a8c9ee4698b981b7ffddf5b59f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        internal-keys

        • Path /data/data/bitpit.launcher/files/.crashlytics.v3/bitpit.launcher/open-sessions/6A086167021C000112DC6CE272137591/internal-keys
        • Size 207B
        • SHA256 aa1a1d623859623e22d78dab19b49eccc0625bfaf5c626f935bd3a368dcb239e
        • MD5 SHA1 SHA512 TLSH

        report

        • Path /data/data/bitpit.launcher/files/.crashlytics.v3/bitpit.launcher/open-sessions/6A086167021C000112DC6CE272137591/report
        • Size 741B
        • SHA256 3ecc3697f9766417dbc1e6d6b485beb283ad2e49ab966cdc870bc76f37f7ed04
        • MD5 SHA1 SHA512 TLSH

        userlog

        • Path /data/data/bitpit.launcher/files/.crashlytics.v3/bitpit.launcher/open-sessions/6A086167021C000112DC6CE272137591/userlog
        • Size 40B
        • SHA256 f7d4ac60e3f7996a9e00e55fe6b0d3429d5a192b343b2cd1ff6ab8d9d97b5b44
        • MD5 SHA1 SHA512

        userlog.tmp

        • Path /data/data/bitpit.launcher/files/.crashlytics.v3/bitpit.launcher/open-sessions/6A086167021C000112DC6CE272137591/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/bitpit.launcher/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 60a80848d0b34316f37f7662dab1e97be6a983d080ef2fbbce42d4310d81e6b5
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/bitpit.launcher/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/bitpit.launcher/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 95ae11565351a212741dfe9936d37d7045becdd81c600791f0e5e162b0cec817
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/bitpit.launcher/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/bitpit.launcher/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 1ab4cc6760d0bbe6072a4cff7b4ce8cdb4d2e2cc800a64b43dad66950f95a16d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/bitpit.launcher/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 34d1f6915db54456b5e0a4dab7667895ca2f30e1072d7ddd39185bd375261f38
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/bitpit.launcher/primary.prof
        • Size 6KB
        • SHA256 0079a53dbdb38caa2448b8efb2fa4a07ab4d22bdbf49530fbf2d5fde7c12f108
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/bitpit.launcher/primary.prof
        • Size 18KB
        • SHA256 0f3be6cd2b04162ae6783111ce392f48564c2376bfc5c04a478f49947293bf03
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.window.sidecar.jar

        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH