Analysis
- user interaction
yes - max time kernel
149s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
29/05/2026, 12:57
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
app-debug.apk
Resource
android-x64-arm64-20260325-en
1 signatures
150 seconds
General
- Target app-debug.apk
- Size 20.0MB
- Sample260529-p7d23acy2n
- SHA256 166f455c04c51fa92ec9905b75997f830e539d9d5229d4f6499b51ff2e5ef672
- MD5 35c4ea3d71261419c9fd18194f6a47ce
- SHA1 e9cc9dcb49ee2c256c70cdebc7161ee741dbc044
- SHA512 5e5ad1731bcee42a9b61270445c5e08755aab2268a2c940f3e342c7a198a73e112735182bb89012995e3a97d3701cc84031cd9c330e017cddcf564f6d067b0c6
- SSDEEP 393216:mccg+bPxrfjqDCavcqu+/Bz3HxRiVGO52OZolXnpjb+Qo0gqFmIQ5afzvyO/YEK:mLZTIiqu+B3Hz7pf+QlQIQkmO/Yn
- TLSH T15B272305E7E8AE1ECC7381364F6A163601495C63D742D683C938735C78BBAF44E96BE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.aistudio.focusguard.pro.gxrwtq
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.aistudio.focusguard.pro.gxrwtq/databases/focusguard_database
- Size 4KB
- SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
- MD5 7e858c4054eb00fcddc653a04e5cd1c6
- SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
- SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
- TLSH T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.aistudio.focusguard.pro.gxrwtq/databases/focusguard_database-journal
- Size 512B
- SHA256 3d2a3536898e06baf68c3c044ca31da7ff9e84688d5a4b779c32ad53a649d7fe
- MD5 2edffd380ec53e88a527ffd7e5999bda
- SHA1 272527317f323facc4f398fffdc663cc603314f1
- SHA512 e2c46671b757bab651bc2e047fe79a40692919c5c8e9e982a3eae0be975a1b528e1d98e47a18444ef0bbc9d6f865794c3fca930b56ca7d22155da82b53a17287
- MD5 SHA1 SHA512
- Path /data/data/com.aistudio.focusguard.pro.gxrwtq/databases/focusguard_database-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.aistudio.focusguard.pro.gxrwtq/databases/focusguard_database-wal
- Size 100KB
- SHA256 563e4f542269bd878265fe20f0be672fa6e3c45ad1b9926a53dd5dc8fe639d18
- MD5 62e338a3e4f7b738d3d1bc3aa9a29582
- SHA1 ed8586301755e8c56bd0a15e60f5d475382f9314
- SHA512 70aa4ae5db2fbc37ffa7eb39bd74e0bebec07e22ddd67c7d18878f48d843859e1a0939711be4874bca3bff8af06806a47065a110d5ba7c36bc7539302f486faf
- SSDEEP 96:c8P206OOL4psPjrJJqYjYm7mBQQScr1qnXJfLFuhjYOQTM5mBS:H4woJJqYjYOMQfg1qnX9EjYODMS
- TLSH T119A393CB7F38032BF57ED93CF86C06852C3AC2F8361669D3278591A77E468518480DD9
- MD5 SHA1 SHA512 SSDEEP TLSH