Analysis

  • max time kernel
    6s
  • max time network
    151s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    25/06/2026, 18:17

General

  • Target
    ch.blinkenlights.android.vanilla_13200.apk
  • Size 3.5MB
  • Sample260625-ww2sbad191
  • SHA256 0150f08387032ed3d5a5952dbe13646bff2878f01c2c9267e6dc32ecb8747003
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • ch.blinkenlights.android.vanilla
    1⤵
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    PID:5065

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        media-library.db

        • Path /data/data/ch.blinkenlights.android.vanilla/databases/media-library.db
        • Size 72KB
        • SHA256 0874a11d716c5f607f14bd4493bf488e3f4ac637396d2e127a75c7300bf0edf4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        media-library.db-journal

        • Path /data/data/ch.blinkenlights.android.vanilla/databases/media-library.db-journal
        • Size 512B
        • SHA256 acd02c0fda2adc3f01db97fed65e307950d10ae95127588d6a35516a1df413db
        • MD5 SHA1 SHA512

        media-library.db-journal

        • Path /data/data/ch.blinkenlights.android.vanilla/databases/media-library.db-journal
        • Size 8KB
        • SHA256 bb8fc108dc642ab4eb50aac8ff34b17deb267855df7ce36fe21c1af99d4b8fb3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        media-library.db-journal

        • Path /data/data/ch.blinkenlights.android.vanilla/databases/media-library.db-journal
        • Size 8KB
        • SHA256 55976b039f264e50d6ed81a3b218306940b37a379e78ea0d7d3d299316a5772b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        playlist_observer.db

        • Path /data/data/ch.blinkenlights.android.vanilla/databases/playlist_observer.db
        • Size 16KB
        • SHA256 43c45dc3200c8f87204aaba850fd1d436438ff1bea4be0a1cbd6cfa8840fd3d9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        playlist_observer.db-journal

        • Path /data/data/ch.blinkenlights.android.vanilla/databases/playlist_observer.db-journal
        • Size 8KB
        • SHA256 c857e93cba0a97cdd084ffd14de331cef406ae2c563cafe080b361e21f3a4847
        • MD5 SHA1 SHA512 SSDEEP TLSH

        playlist_observer.db-journal

        • Path /data/data/ch.blinkenlights.android.vanilla/databases/playlist_observer.db-journal
        • Size 512B
        • SHA256 41a4a208f4c5050a4987dd4542f2d4ca08151ff45d8c1bc15df97abc2642c754
        • MD5 SHA1 SHA512

        playlist_observer.db-journal

        • Path /data/data/ch.blinkenlights.android.vanilla/databases/playlist_observer.db-journal
        • Size 8KB
        • SHA256 bbc4f7b8d0f871c3b87fb33d32e47df334d61544b2e3ab552b7793b5d795fef0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _prefs-v1.obj

        • Path /data/data/ch.blinkenlights.android.vanilla/files/_prefs-v1.obj
        • Size 564B
        • SHA256 47a14da590cb19f62484f1815e01e323147979cd55ca8d4d0034ac49c2550639
        • MD5 SHA1 SHA512 TLSH