Analysis

  • max time kernel
    31s
  • max time network
    150s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    04/07/2026, 15:24

General

  • Target
    com.dh.vbucksfreewinU.apk
  • Size 4.3MB
  • Sample260704-ss6ejsg161
  • SHA256 9e9d2a2b2360de73e9410850466deb898484f54b728d0ad1a1460fa99b716a41
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.dh.vbucksfreewinU
    1⤵
    • Checks if the Android device is rooted.
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries information about active data network
    • Checks CPU information
    • Checks memory information
    PID:4761

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        0545f56f442f3bcaa724b5727bfa21a0.0.tmp

        • Path /data/user/0/com.dh.vbucksfreewinU/cache/picasso-cache/0545f56f442f3bcaa724b5727bfa21a0.0.tmp
        • Size 7KB
        • SHA256 ae0785b98ed46dae4d99e49b439a4168dc82974b680b69136d721008bb5fcf45
        • MD5 SHA1 SHA512 SSDEEP TLSH

        0545f56f442f3bcaa724b5727bfa21a0.1.tmp

        • Path /data/user/0/com.dh.vbucksfreewinU/cache/picasso-cache/0545f56f442f3bcaa724b5727bfa21a0.1.tmp
        • Size 33KB
        • SHA256 faa24ec881e6040655c187a681d6dc496eb8aa41e1bd0652a180b3a40b457187
        • MD5 SHA1 SHA512 SSDEEP TLSH

        250b7c5625f53c2de448dafe44984c6a.0.tmp

        • Path /data/user/0/com.dh.vbucksfreewinU/cache/picasso-cache/250b7c5625f53c2de448dafe44984c6a.0.tmp
        • Size 7KB
        • SHA256 01be5973c421f1170fb716401ee4795996e2629c3c37ddaf024a1d9edaae12d3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        3420bbd6e081c7c3fef3964b4bbd94e0.0.tmp

        • Path /data/user/0/com.dh.vbucksfreewinU/cache/picasso-cache/3420bbd6e081c7c3fef3964b4bbd94e0.0.tmp
        • Size 7KB
        • SHA256 b718317dba45da8462549d8db2b6168e25abf6972508bc68edde9936606a39bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/user/0/com.dh.vbucksfreewinU/cache/picasso-cache/journal
        • Size 303B
        • SHA256 a118891b05cea020aeaf8668de34906deb427d4f6bc45ef588ff025eed34dd91
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/user/0/com.dh.vbucksfreewinU/cache/picasso-cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512

        OneSignal.db

        • Path /data/user/0/com.dh.vbucksfreewinU/databases/OneSignal.db
        • Size 48KB
        • SHA256 1fd657ece10dac279a87dedde172bd6d3c4ac518a96b04886980f209b759a6c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OneSignal.db-journal

        • Path /data/user/0/com.dh.vbucksfreewinU/databases/OneSignal.db-journal
        • Size 512B
        • SHA256 2aac74668eb596861a54d6ea7049ce08e9c34845b4da0582ff12f778540b38bf
        • MD5 SHA1 SHA512

        OneSignal.db-journal

        • Path /data/user/0/com.dh.vbucksfreewinU/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 8d77a2af22e39efccc6cacb6dbb42953d6253fcd600ecdf6ed456d6fd9bd0802
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OneSignal.db-journal

        • Path /data/user/0/com.dh.vbucksfreewinU/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 45c90a0e2c34cba3dfddf9529c2613c66fb8e9606d7f184933087428cea973aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/com.dh.vbucksfreewinU/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 e59de851c98d10391fbd444948041575328505264afb6b34dbeec51dee65c451
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/com.dh.vbucksfreewinU/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1de4b95b7f15776655be582e4ac73f514da87a580b01611bae766df07713bc1e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/com.dh.vbucksfreewinU/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 dda48a7db109887ae1d0b655697d8e733f853c663b427702d3968fd45ba42b3d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/com.dh.vbucksfreewinU/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b1bdf5298147fb582f4f71566051ede891872cc0d7a1f914477ea64b5cbb99c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/com.dh.vbucksfreewinU/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 44226e8b8d02c5f29cecb6d7c1f31f43f8e9efeee1d2dc0b03ea399109c620bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/com.dh.vbucksfreewinU/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d10c85eddf2d888905579586453228a44879cd886f5746e6c23fa6b464febf89
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/com.dh.vbucksfreewinU/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 fba293f5c46ee0dca0a0c09730900c4321134cd125d41263f97d5006a7f9af6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/com.dh.vbucksfreewinU/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 af6ac556c1ad27bcd55472d94c5066548cb30de4565fd016bc99f8980d38a914
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/com.dh.vbucksfreewinU/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 c9931d030444a5124c631efa955986fa350008dfc1266026bfb9df8c7a33b1d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/com.dh.vbucksfreewinU/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 03348c5cd8927e7c72093778a141b1ea6ab9fba2bbf426bec6fead2a3d16b1c2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/com.dh.vbucksfreewinU/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 1d56630be9e9246cd64939127f257991b9730a1c8cf5d00f5dbb360ed6c117cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/com.dh.vbucksfreewinU/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 d45bbb8b181fd3a7103e8fbcbf2e0cc4456dd2bdabc0d4db773672257c5b7817
        • MD5 SHA1 SHA512

        com.google.InstanceId.properties

        • Path /data/user/0/com.dh.vbucksfreewinU/no_backup/com.google.InstanceId.properties
        • Size 2KB
        • SHA256 b89fbbcaf6875594f9c8a8fdb64b3eeb8270f9c1c8759d9c624bce701bf0db29
        • MD5 SHA1 SHA512 TLSH