Analysis

  • user interaction
    yes
  • max time kernel
    139s
  • max time network
    154s
  • platform
    android-14_x64
  • resource
    android-34-x64-arm64-20260325.1-en
  • resource tags

    arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
  • submitted
    28/06/2026, 16:51

General

  • Target
    mtk-easy-su-2-2-1.apk
  • Size 4.6MB
  • Sample260628-vcsjvsaw2p
  • SHA256 9cc91ba2742dbbf87480ce125b752b55f5bb88f678a789bbbf70c0224fd9530c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • juniojsv.mtk.easy.su
    1⤵
    • Checks if the Android device is rooted.
    • Checks Android system properties for emulator presence.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4270

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        pcam.jar

        • Path /data/user/0/juniojsv.mtk.easy.su/app_pccache/6/7FA2B9468DE56EC21AE60EDC11DDE47E38CE6D94/pcam.jar
        • Size 512KB
        • SHA256 966e89e2a48d740401099ebaba6712ee6c391c56b0f973e4069fd6a0d38becf7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pcam.jar

        • Path /data/user/0/juniojsv.mtk.easy.su/app_pccache/6/7FA2B9468DE56EC21AE60EDC11DDE47E38CE6D94/pcam.jar
        • Size 32KB
        • SHA256 36f59245061c1760eb0fd411be4d805f9d14950515ba66cc400e16f6757b1aef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pcbc

        • Path /data/user/0/juniojsv.mtk.easy.su/app_pccache/6/7FA2B9468DE56EC21AE60EDC11DDE47E38CE6D94/pcbc
        • Size 23KB
        • SHA256 3db8532372ba6ae0337cec473be492d4a4e43331d91144759b50b4d1335ee26f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        1731536186208.jar

        • Path /data/user/0/juniojsv.mtk.easy.su/cache/1731536186208.jar
        • Size 10KB
        • SHA256 b46438f460b8b093c4c665fc0832b48d1b54bf354bb05ddae07d7cf2743000b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        1731536186208.jar

        • Path /data/user/0/juniojsv.mtk.easy.su/cache/1731536186208.jar
        • Size 23KB
        • SHA256 078ec5b3a0af66e58dd0914e3cc49b609031846a5df2a3c88f96ab6b26d6b1a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base.4270.tmp

        • Path /data/user/0/juniojsv.mtk.easy.su/cache/oat_primary/x86_64/base.4270.tmp
        • Size 516KB
        • SHA256 0424d0ba77f3b2e792c509f5621ab820f382d9b0fa0798e04a76e6352b6ba572
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 a48fbbc59a63595b56f37f91a2ac7af239359cd53574420901a8c90f2253c6c6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 64b0756393568b95913d557ed6097196d5f221b76eee4318f113939013c20326
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 05451fbe98eb356d0dfb8d8ec45a75bafe7a9239c93d4f82f44f3614cc796702
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 c7c76b9d29f8b18012f560d658d6de0819f63f2074088d0c20929193cb1ef236
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 ac9aa85e3058648a6ab9d692905ec8f2edee87cf9a067f9385e2dc9446ac1fd6
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 3013b7f80184336116c01b90bbb8c1a1387f311e901e7c3d4f525d3824b73673
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 3e30e408e822b5efaf1e20780802ac4f87d66d07d7fcaa481d3f59c77933a7c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 85ef4b5b9a44e5147d92e43eb960184d1ee71362e0ba1ec338eea00f310c2344
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9df0c9729dc287d0f92f9b690607f4ab579a41db23748caed255d5c415db9f53
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 aa1581eee0e7f949cf91266444aff3b781756366e06c5b3af96a710d79a3b98c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 cd3009c5a424c7fe9d01957da660929c96203d4f39433abe0de60feeae9d01de
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 94fcf1ff00762b2c0eb9145917421b536952e059954d775261e281a68e30fde4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 895dbc4562ce571d5b769d1dd06160ad24270c3c1eb4286b81e3899396b7707c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 2d7e35b37302e7e4e42f18a59331f7bfc6ba10c3048654a09660d4f21a0e0841
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 5ae9bb3767ae27ea107a54b45b9073581faef37ad3d75dbf227211ff2373d60c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 b4a859eed01d790b3ac44edda23d1b3d703e00eb2e74d482ba9528e1c887ff42
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 8341f012df6aae8ba058dbd501167a557d2e94195d1b59c54ca1ba08d9e15477
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 67b4f6fdad2e88719225a41fb58c215dc8801c5550a6452caaeecb4df1a09e10
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/juniojsv.mtk.easy.su/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 5bc4c78456811eddaffe924c86cc6d9cba382f8ce1e2e83f20aa6ec33a4e6c81
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.crashlytics.settings.json

        • Path /data/user/0/juniojsv.mtk.easy.su/files/.crashlytics.v3/juniojsv.mtk.easy.su/com.crashlytics.settings.json
        • Size 769B
        • SHA256 9c3ad82e0f91c56171428065b1438241528a05aa877cffa5247732120e2d9a98
        • MD5 SHA1 SHA512 TLSH

        internal-keys

        • Path /data/user/0/juniojsv.mtk.easy.su/files/.crashlytics.v3/juniojsv.mtk.easy.su/open-sessions/6A415147010D000110AEAAFF295D57D9/internal-keys
        • Size 207B
        • SHA256 9559a6f9582d223e2cfd77fe2bf007962955d62e0e508eac6dc62865c706159c
        • MD5 SHA1 SHA512 TLSH

        report

        • Path /data/user/0/juniojsv.mtk.easy.su/files/.crashlytics.v3/juniojsv.mtk.easy.su/open-sessions/6A415147010D000110AEAAFF295D57D9/report
        • Size 797B
        • SHA256 ad18e5d457c05b0b16c44eef66b2b197bb0574ec4af14e0196894073890893b1
        • MD5 SHA1 SHA512 TLSH

        userlog

        • Path /data/user/0/juniojsv.mtk.easy.su/files/.crashlytics.v3/juniojsv.mtk.easy.su/open-sessions/6A415147010D000110AEAAFF295D57D9/userlog
        • Size 189B
        • SHA256 6eeade73f986b68eaf2a8a980e33ee9ab3df9ad81de078d7c870ecbe320359af
        • MD5 SHA1 SHA512 TLSH

        userlog.tmp

        • Path /data/user/0/juniojsv.mtk.easy.su/files/.crashlytics.v3/juniojsv.mtk.easy.su/open-sessions/6A415147010D000110AEAAFF295D57D9/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        PersistedInstallation5278739262618693927tmp

        • Path /data/user/0/juniojsv.mtk.easy.su/files/PersistedInstallation5278739262618693927tmp
        • Size 564B
        • SHA256 9d1dc3905249c0d8c51c5105486eda25ebd3eabadc177fae5bd9e1fb0569d7f0
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation619732385946567372tmp

        • Path /data/user/0/juniojsv.mtk.easy.su/files/PersistedInstallation619732385946567372tmp
        • Size 90B
        • SHA256 54460e6d721d72445251fa5f87f8e1468ba8b93ee481455050cc48772b21c930
        • MD5 SHA1 SHA512 TLSH

        firebase_session_anVuaW9qc3YubXRrLmVhc3kuc3U=_data.preferences_pb.tmp

        • Path /data/user/0/juniojsv.mtk.easy.su/files/datastore/firebase_session_anVuaW9qc3YubXRrLmVhc3kuc3U=_data.preferences_pb.tmp
        • Size 50B
        • SHA256 67f5cfe4c94028aa2f1bd121c9e3475745d3df7f7410a3680ecd37886ac58497
        • MD5 SHA1 SHA512 TLSH

        firebase_session_anVuaW9qc3YubXRrLmVhc3kuc3U=_settings.preferences_pb.tmp

        • Path /data/user/0/juniojsv.mtk.easy.su/files/datastore/firebase_session_anVuaW9qc3YubXRrLmVhc3kuc3U=_settings.preferences_pb.tmp
        • Size 33B
        • SHA256 a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6
        • MD5 SHA1 SHA512

        firebase_session_anVuaW9qc3YubXRrLmVhc3kuc3U=_settings.preferences_pb.tmp

        • Path /data/user/0/juniojsv.mtk.easy.su/files/datastore/firebase_session_anVuaW9qc3YubXRrLmVhc3kuc3U=_settings.preferences_pb.tmp
        • Size 75B
        • SHA256 1e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef
        • MD5 SHA1 SHA512 TLSH

        firebase_session_anVuaW9qc3YubXRrLmVhc3kuc3U=_settings.preferences_pb.tmp

        • Path /data/user/0/juniojsv.mtk.easy.su/files/datastore/firebase_session_anVuaW9qc3YubXRrLmVhc3kuc3U=_settings.preferences_pb.tmp
        • Size 121B
        • SHA256 232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513
        • MD5 SHA1 SHA512 TLSH

        firebase_session_anVuaW9qc3YubXRrLmVhc3kuc3U=_settings.preferences_pb.tmp

        • Path /data/user/0/juniojsv.mtk.easy.su/files/datastore/firebase_session_anVuaW9qc3YubXRrLmVhc3kuc3U=_settings.preferences_pb.tmp
        • Size 163B
        • SHA256 7495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2
        • MD5 SHA1 SHA512 TLSH

        firebase_session_anVuaW9qc3YubXRrLmVhc3kuc3U=_settings.preferences_pb.tmp

        • Path /data/user/0/juniojsv.mtk.easy.su/files/datastore/firebase_session_anVuaW9qc3YubXRrLmVhc3kuc3U=_settings.preferences_pb.tmp
        • Size 212B
        • SHA256 c2de6e803dc7401d2dc75a594e5fce001b100cafb92704137c9b272218db91b2
        • MD5 SHA1 SHA512 TLSH

        magisk-boot.sh

        • Path /data/user/0/juniojsv.mtk.easy.su/files/magisk-boot.sh
        • Size 2KB
        • SHA256 d39f08595d0c6e24bc8b851e99e41f28b423320c35d162582b6783a44a768a4f
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb

        • Path /data/user/0/juniojsv.mtk.easy.su/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 f8046fb6523b685349e4ceaa5b63d5653f3d4d9bc0291dd9546056bfabd76205
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/user/0/juniojsv.mtk.easy.su/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 71477ac3e4969dd12e130543a7b5dae6a52882976385f92199f9d0d9b6b5c0ca
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/user/0/juniojsv.mtk.easy.su/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/user/0/juniojsv.mtk.easy.su/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 2371bf9f1989fa562396e23f11c515a4b89b3c10c6a44cf3fc2258a755080e7c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/user/0/juniojsv.mtk.easy.su/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 c689a11b25ab458a71850731a2bec2bafe533e729ccb34e2af162593159b60ab
        • MD5 SHA1 SHA512 SSDEEP TLSH