Analysis
- max time kernel
125s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
29/05/2026, 18:17
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
app-foss-release.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target app-foss-release.apk
- Size 9.3MB
- Sample260529-ww622acv21
- SHA256 ad1691a5af1b25e135aff18f99d31cf0696e5704f4482945bf509132958762bb
- MD5 0efd4d7212da5fe4681e106a95224725
- SHA1 0907d62ec9d40d91388bd7803be4ea41c8c9c222
- SHA512 c83ee5cfa052b0d60fc081d2503c59b4bf3c17e3cbc65bb5ed7c98816b1eb245c2956ec60c2d16e33efda09cbc66665159d70d152a1090f71ea123806f2b4ca7
- SSDEEP 196608:emGYbTOYyd5OsdP38J18X1XO8aBnsupZCUTWYN7gEElKei:xePWJ16XO8aBnvuUSK7
- TLSH T12BA60146F7586E2EC87A40334CDA5270261A4DA78E82D74778883B5C78B36F84F59BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4980 com.jntx.retune /system_ext/framework/androidx.window.sidecar.jar 4980 com.jntx.retune - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.jntx.retune - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.jntx.retune - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.jntx.retune
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.jntx.retune/cache/coil/50fa1c4ae88356da10708120d24dc967097f5d61d094f41836ec3e01e70dc5ea.0.tmp
- Size 555B
- SHA256 5a2d32f48215748d3542548f6cc35640f002c56f596efe47374617907080b9f5
- MD5 d0b3e51f52e9f4da7f3c794515fbb78a
- SHA1 a29f04eb06bbd5acc5cfbadcad680fca04d2dc8a
- SHA512 01115c83073ca882d0e8eb2357be67aac8f1d23a9d2fb6bb20044409acdb052ade686bd4cdfc7e0167c7767dbb0422db81f2a8f835b58b0f72953452de02c591
- TLSH T14EF0EBA24E203131A7A7A22433499F4032A6D2A1F03B90DD202018D866E939CB2E728E
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.jntx.retune/cache/coil/50fa1c4ae88356da10708120d24dc967097f5d61d094f41836ec3e01e70dc5ea.1.tmp
- Size 78KB
- SHA256 77f23df836af36878a18d82f3f9f9c4815a8d0c08ee36a6aea76a3da5c96b4ed
- MD5 2044922047a49ac235512e904671e14f
- SHA1 d6cb35fd88088ee1c335203fd37e6b33066865b3
- SHA512 6844403a5a95d34caa8b7f0bcf11e9a3c135b56a6b3e73e3adf2b48c18e418c48b8cfdb7f151f5c9f6110ed87a2d3d11072b5e64d34de67b7c56f59b32dd7fae
- SSDEEP 1536:lypQvG8NI0BO5ltvynHrGaKh19DxMZNEYj4ZFwpbBxSH8s247GhSXul4:nvG8N9BOvUnHCaKpDxMZL4wlSH8T4ySn
- TLSH T19473F1E5225339269BBDC2171217EAC4601434FC2B50EF7CCB18DA4E3A5E1BE5ADBB41
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.jntx.retune/cache/coil/bea7f2ce4311564bb79b6dee8a755cc74ca032dfb37dd8b192affff5d3e97b4d.0.tmp
- Size 556B
- SHA256 d513fce5f859d93afa78b6326e989f8428367444ec5cebf560384917134af980
- MD5 a77f4903bdbcc16c0f14b883a76df1a6
- SHA1 0a701deef553f59e2c62c3f4ecb2ead91e39198f
- SHA512 c572b524177bf3ffdd2e254cab8d1ae05ab9e6a7fdd8597fd8653b8cd0b9dac793740b14411a212995e62f6be5291961ade6972b607d419b1a647b44ffa95ecc
- TLSH T1D1F046958E20312563A7A2646399AF40329AC6A1F03BD0CD202019DC66E9799B7E728E
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.jntx.retune/cache/coil/bea7f2ce4311564bb79b6dee8a755cc74ca032dfb37dd8b192affff5d3e97b4d.1.tmp
- Size 106KB
- SHA256 f950e4578630575e49a05d313d18bdcdfae74e34a757fd8b887fa6c71b23abc3
- MD5 9a595093cb20423ea9d1189bddc5642f
- SHA1 a97e45bb324338632e1d706cd514eab5d42b9047
- SHA512 fd25a2499d04fcfb40d09c168453a4c0b059810b1c76d22870f90911f60e58cb13ef1832089937046693d74fdb05e28ae44077a688e9ad9031dba51a6e3ddbbd
- SSDEEP 3072:LOUBkreenztwqLHPEK7ur4c6oAxy7uZnzIpil:LO0ki2bL8K7uU3oAxcupz9
- TLSH T134B31263EC81DD48DEBC0C7A199956684F74CB22B3F45BAA1B51768DE9CB85C0BB0D08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.jntx.retune/cache/coil/f053997088959da13d64f29e77c213df1e12a952fcc2af9e9330b99494b70953.0.tmp
- Size 556B
- SHA256 328cdac673782d3ec47ecb56552c2fe171f8305a44966f8774aa837f82f45fa7
- MD5 b763eda16729dfb355362196aea2ffc3
- SHA1 4ddbf81b14107614c7d542adf84bcd1c3c404e98
- SHA512 47e0a0a62edd5038f6f9d14ce63dfd23251c342f485616a14c4b520d443e352d3afa11c675a4a880086dcea21d8e11686330a68dd5588ca8b8145918a3b7bdf5
- TLSH T15AF08B964E203134A7A7A21567899F403256C6B1F13F90DD202029DC67EA7D9E6E738D
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.jntx.retune/cache/coil/f053997088959da13d64f29e77c213df1e12a952fcc2af9e9330b99494b70953.1.tmp
- Size 236KB
- SHA256 26ad64c93818c887ad6dcd3f42fc2687511436ca6cca102912b4c4e76c63faa1
- MD5 71b6e67bfcb86a2f264640110afb45b2
- SHA1 924a15379b9ab98778560b156585b84969b77963
- SHA512 fa94d693b8325b8b157db2a02c72c4ba8d6112a62a5944e163f0a7969260bd4389a718de375299cb5327ab9432fef385083df6d1c1f2d35b0f258ddeec25c2d3
- SSDEEP 6144:EqsYiNoWAKUhNcYxefJP7DAsuhc2Y3WgdEI:5+pUhNjxeh7Msuhc73hl
- TLSH T15F3423F6FC233216749CAD2557147F9A9FBF4D00AB68658CEB487837A3C5B1F249081A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.jntx.retune/cache/coil/journal
- Size 629B
- SHA256 17c7c4febd18c86c5396054b478b7b90ef38dbe84e1ca8dfe91ae40a52953c7e
- MD5 e98af2e9a3dba788e3d6ca3f40f6d748
- SHA1 c90e655567cb3a4f02e9fd136265f2242d2e49a7
- SHA512 a66d0c67e3a7e1bf09b9a27b71810059e89c31b3e21575561a7536054f506160ddf01c56fff34198e28079e475b1ddba0b2ec03e8968edd4412bdcbb3e30e7a4
- TLSH T1C7F00205515D3823D701F3FFD9417F37B1A028A8AF8AABF2821BB8411D511122C640E8
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.jntx.retune/cache/coil/journal.tmp
- Size 31B
- SHA256 8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a
- MD5 d6ac8c8db0504502d7f0e057a78c5ce3
- SHA1 8f4cf91a262b24ec9c1a6e7c41fd6d16b6623bb4
- SHA512 100e74f0c65b51a17de6eeff96d5c38bd6d40e3c8ee00094fd906ba5794088fe1ad6f3a15be196480384cf01399ea26665a05471404f1eeebb0c82ae6fb104bb
- MD5 SHA1 SHA512
- Path /data/data/com.jntx.retune/databases/exoplayer_internal.db
- Size 52KB
- SHA256 3af5bbe213927dba9195f8597e2ca0111572b7bdf3f6e56ee1317330d478be1f
- MD5 48c386530c33a7ca3cbeff291a01279a
- SHA1 15c91676e589c1b7258c815a0555f1e8e9c4a989
- SHA512 18e8e2559ec908a6dc1e5230ea0ba7d730a49b1303da371e4f71b05ba6c2c010f5a4363ba9256f179b0afa751c5cd1396136ac8f122808e6e2ff7d4ead5436ad
- SSDEEP 48:T2oDHDEmzzzdzxjEvz7ziUzUQUs/xk37Rvd/O0GiooGEwSQujXJhqZ:9vX1GvN47sSci5QujXvqZ
- TLSH T1B833888F0B28B731C4FD2571B8C147B22BEC655F472182417CE0A5AAACD749DE2664DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.jntx.retune/databases/exoplayer_internal.db-journal
- Size 16KB
- SHA256 4700fc86e8902779f531933063e5575d1cd861a4f51fbabea0a08fbe3d829109
- MD5 26990deb1636514fc6fc3176e00b9214
- SHA1 2954f167275fa9dee5effd617e5e8180767dbd9d
- SHA512 f8386135fed49438bd4cc1e3a6ff654e10cd69894f15a852755c23c92b7716d6bdc0a805c4db78e1699aa64452dc9a0c895bcdc32610751d934a912bb91c32fe
- SSDEEP 48:7MzZAujXJhTq33zzzdzxjEvz7ziUzUQUs/xk37Rvd/O0GiooGEwSI:7AZAujXvTcjX1GvN47sSci5I
- TLSH T11472548F0B2C7B32C0BD38B178C15BB11BEC665F472082467DE1A56668C74CDE5664E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.jntx.retune/databases/exoplayer_internal.db-journal
- Size 512B
- SHA256 8f230f9e1f393abce611872668362b55cb0589be59a1c93b4bc88dd588d5ef50
- MD5 4b91eae16445c892b7427a1f0be83768
- SHA1 b8d0ff14a98e31bc22a3cdc7398e4a7591a613fa
- SHA512 66160c8a5907ccc95798bce4577c2bbe51a948740efd4e68daec4c0ae88c9bd3e9a3ac2978c7fff3408df3685cf6cc0bbdae7dcf9a5be5467b628fd11745efc2
- MD5 SHA1 SHA512
- Path /data/data/com.jntx.retune/databases/exoplayer_internal.db-journal
- Size 8KB
- SHA256 18d9e9a8c5a5dd24cc0fba218e8e395d6b8247ef54762a3d9d1d468a2b1d7e4f
- MD5 deca50bb277e93b329e2b95cec65ca0b
- SHA1 50a88e14202452a0db2cf86b883457b20c8b3dda
- SHA512 351a2eaa57c0417fe1dd56a4e786273f6955e8347c30928fabca286a8ec8d494267b30ed197125581827c209a04d2d035dd2d677ab6abe9bd6b1527dfb01b5e0
- SSDEEP 6:7+/l9Yn1vXvg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKkX:7+tQqLiuWdYRmBEyPbjX
- TLSH T1B102C09E63C01813CC2E177790D98B540D00EB28A1F1CB27179008B43C07CCCE4E2D14
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.jntx.retune/databases/exoplayer_internal.db-journal
- Size 4KB
- SHA256 ad9b82e65c71e35d8d9b09745fa95003647d16fe10079029a4f7d421123feaa6
- MD5 5d02e215bfb1e4ce4738b0a7b7145a97
- SHA1 c5f3f916b3d81dedf1c22cb898b3f5bbf474f6bf
- SHA512 014ad2d4f957252152ec9a5f5a965b06e2c03555636786681a2acd23c131982e3a611aa51aaade7713fbe7942b502345d61786e00e46e6074aea9ab33bbfc497
- SSDEEP 6:7+/l6Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK+en:7+tuqLJdeWRmBEyPbk
- TLSH T1779180C967810953C5295B77A0D5C3541E1567399373CB5716F108547C4B6CCF4A4D44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.jntx.retune/databases/exoplayer_internal.db-journal
- Size 8KB
- SHA256 84e2c2afd9a5ec349ee83ea59b721571cad223013b61e9747b4dea6b9dc3af6f
- MD5 e39fabed00b78eda9ac62c04569b7901
- SHA1 2371cbd524ae0e5c698679b49a0c3fac1233e0e2
- SHA512 c339e8d6b373175301cc676cef92b8630bf2350de30de3db3f8a2cf6239174cb53b83ac425b471254c9addcbae43aecfccc4d2c00aeb6ee9b95eab25690ada40
- SSDEEP 6:7+/l9JSFPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuK+kl//5Nn:7+tP4qLmqKRmBEyPb3klXTn
- TLSH T1D4022288B3820D13C42A16B790C8C7410E00A328D221CF071AE008742D064CCA890E40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.jntx.retune/databases/exoplayer_internal.db-journal
- Size 16KB
- SHA256 872bc75f9885f5a083f3c481400b6a28ab0ae07b9c2affe1d203c535f92bb1e2
- MD5 2da10502ac19a0c42358134793df505a
- SHA1 d7cfbf37f3efc81f3855846c57b1551ef8aa4cbd
- SHA512 70e3e1783d5e9cf319658c5163a9169b09dfe34170952376fe5b6e17d0bb54bd19fa5b3a3442794787062e5b755c1ee459c54e1869cfc08cd8152b11493d98dc
- SSDEEP 12:7+t7Q5qLswoq25GO9HWG6mwf9AvDyAonAyGzBmGmrRM0yA2AKRmBEyPbVl:7+tUqLl3UGO0Gi9Oy9vGoGIVyteGSP
- TLSH T18D7245CF4B2C7331C06E46B770C743752FECA62C47218292BDE1A5A7ADC708DC45A8A4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.jntx.retune/databases/song.db
- Size 4KB
- SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
- MD5 7e858c4054eb00fcddc653a04e5cd1c6
- SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
- SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
- TLSH T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.jntx.retune/databases/song.db-journal
- Size 512B
- SHA256 398f7884350db15e05453ee89cf328d07f78d7b054935089edce53a117decf73
- MD5 b21bcf864c718cd7580efa5bc7e241ad
- SHA1 d7cf8d97f5ad44259b93a155b0660b1408734142
- SHA512 2863546851ecc0066b9fa5ad53cfff7ebe4058b11c37fc5a2d681e72f5d5d47c4e25ce62ede9806a931826e6c369f80c283d1f35d1ded4ef3f141dae1353bbb0
- MD5 SHA1 SHA512
- Path /data/data/com.jntx.retune/databases/song.db-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.jntx.retune/databases/song.db-wal
- Size 209KB
- SHA256 15b6f7780ab9c8963862a23bc01845aecd681c5421427ff13661998334b899d1
- MD5 51b8d36abfd34a9881033208b984335f
- SHA1 e271679c975af0e1a1a3c7b51a4e7222b465c6e4
- SHA512 ba51041903671b90dfc995eb7ea8f6c3c0a8065f9d7c716b0e324f58c9f0a5eb7efa1bc5b5f71379b0693a8a6c6ac0fd335f5fccd636d79d282180aa93b579ab
- SSDEEP 192:W+7wHbfFmT+IVoR3JghjoLKsc74fYfSsD3Qn8zCMkt4OyrsR7gymzLU:L7ufFmT+RLKsccQkd7gD4
- TLSH T11124354F0F162623DCEDBB31D0E68AB36FB6911EC3B19B415EA051A57E83C11963E8D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.jntx.retune/files/datastore/settings.preferences_pb.tmp
- Size 563B
- SHA256 7e3f3d48234df519e844aafe10dd01f0b7d683b5c7c549b855403fc4bb7ffe5b
- MD5 0c97cadd7e5605c0383137970b9933b0
- SHA1 055cba09f0f7a76152fe2ba70a8031d683d58efc
- SHA512 6b779e09efb7f51dd909bc6c1667f5f46c7b62e94a5c07c0afb0addc5538920836e13e92c5207461aea50f43a2a7bc2afd94682629119a4aace1a5054b20b86c
- TLSH T133F0413380A16880A0648E1CC1EFB390B3188B0282F604619C37AECA451B8704C048C1
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.jntx.retune/files/datastore/settings.preferences_pb.tmp
- Size 540B
- SHA256 1eda2b15a3c36c4d52419fb45ae848c834a9403a723ae387a9f65f8cb655847b
- MD5 f6aa05223ccb36119708a961f4018e8d
- SHA1 7b75e81011d6827379e2b06b933a8747b8ce4457
- SHA512 57d4bc35f340a44aaeb33aa6b02c54a13d60109b57934a987065587769bb1446502c724ebbebdae90764de12bf391d1afc463c24dc6f8e7543b5111ec09df737
- TLSH T111F02033C4A26880A4648F2CC2EFB390A70C8F06C2F718618C37AEDA496BCB09D148C5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.jntx.retune/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 b5b9cf26bf038d5b9e13efb0bed59c12bc1a31659da68c32bda64c0f5853f718
- MD5 c676aac6387c848b05eedbc0be5fd817
- SHA1 b6fe72efad7cde6bfc5b94a765a8fafdc51adc54
- SHA512 48370a8d946854356f3e1e2f29ee475c55fc1813634e36fce8e7902f565014c017fd17867a971711810ade49c266d7795a861c73d8b3aa4da6dea093734316f6
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.jntx.retune/primary.prof
- Size 7KB
- SHA256 96876d0f4a8320d2d0b03f446f8bbb3df6575e5a92dab53e35da2e574c7c194d
- MD5 9e49313c00671641cf1e2dfc7c8df224
- SHA1 11e5cc631634cfebc98c51a742b16c4113206763
- SHA512 ba6169076a0c9ba3798683258650df41ffbd741f36b10f517b11b633bedca5945e2c71402f4f0566342581db48c4b1973bde79462a1aebee7cac02bcfc66a839
- SSDEEP 192:vH5avi8oODvjPeAYTYemD1RXjFlenWmfNrZPyyjIkgr5j:vZLbODbPeZkey9lGrh1Lgdj
- TLSH T1ECF1AEF8377F7DB11D1E25D40E586BB6D20FDA863E46914DEAE38B500681C127CF8266
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.jntx.retune/primary.prof
- Size 17KB
- SHA256 24b8ddf91a4c167c51eff01435c79f98177f5b9692a35d0c321f31ca6d92d7e5
- MD5 8056a45504234f924c65561650783175
- SHA1 43412006a071e25968bf96a75f490a4116f2f6f1
- SHA512 536f3e03e9bba194ea274f0ca614e04df99718919afb6a4a421d1a803c7391d17d55fcea7772a2028cf1fa6a8a5624c354a98111dc01068a4e7615b0321f0eca
- SSDEEP 384:enkPHaq5qtq6xbAgbBya5hPta613Z7L7wR83nbRm9bFL/b5i:ekPHacuq6xbbwaDgc7A+kb9DU
- TLSH T1DE82E1272ECA356B504BF28269DAE43003F9C483B11AA573D7D0F39DE7517C15A0BA36
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 12KB
- SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
- MD5 bdf3529e80318eb14e53a5bf3720c10d
- SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
- SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
- SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
- TLSH T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
- MD5 SHA1 SHA512 SSDEEP TLSH