Analysis

  • max time kernel
    71s
  • max time network
    156s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    05/07/2026, 12:15

General

  • Target
    ev3rly.apk
  • Size 4.6MB
  • Sample260705-pe82qsct6v
  • SHA256 8a833ca3ac2ed15c46603dd9e10c4b7ee213d0ca63d0f0f19299fdac31827a28
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.ares.eevee.audiobooks
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5086

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        profileInstalled

        • Path /data/data/com.ares.eevee.audiobooks/files/profileInstalled
        • Size 24B
        • SHA256 4797f3455f74c3002e95b748666948290fdfed9d59e0a3612d6813aa3ab974a7
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.ares.eevee.audiobooks/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 3dd8a599650af2d97472f69ca471fa2ec9f409938209e5ebd5ba0b870a88509a
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.ares.eevee.audiobooks/primary.prof
        • Size 2KB
        • SHA256 c3ce835d866a08f0e75f8f2545726f8e9346aaf63a6c3de6370de5d2487eea4e
        • MD5 SHA1 SHA512 TLSH