Analysis

  • user interaction
    yes
  • max time kernel
    594s
  • max time network
    562s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    07/07/2026, 07:51

General

  • Target
    sahti.apk
  • Size 15.0MB
  • Sample260707-jp2gracz5s
  • SHA256 81200ebd20bf30eb9829dd5c4ba1c8ba53186f2a8be3cef53a812e26bbb9f630
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.example.jempol2
    1⤵
    • Queries information about active data network
    • Requests cell location
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5112
    • /system/bin/getprop debug.mapview.logs
      2⤵
        PID:5185
      • /system/bin/getprop debug.mapview.renderer
        2⤵
          PID:5204
        • /system/bin/getprop debug.mapview.gmmserver
          2⤵
            PID:5227
          • /system/bin/getprop debug.mapview.renderer.label
            2⤵
              PID:5248
            • /system/bin/getprop debug.mapview.renderer.label
              2⤵
                PID:5337
              • /system/bin/getprop debug.mapview.renderer.label
                2⤵
                  PID:5390
                • /system/bin/getprop debug.mapview.renderer.label
                  2⤵
                    PID:5425

                Network

                      MITRE ATT&CK Mobile v16

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      DATA_ServerControlledParametersManager.data.com.example.jempol2

                      • Path /data/data/com.example.jempol2/files/DATA_ServerControlledParametersManager.data.com.example.jempol2
                      • Size 22KB
                      • SHA256 80068a9ad3bcef0cfb04c75cdddd994fd0c00eee766a3f136f2a621ba5d96944
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      DATA_disk_creation_time_its

                      • Path /data/data/com.example.jempol2/files/DATA_disk_creation_time_its
                      • Size 8B
                      • SHA256 2663251e1f785d3ff7f8579902aa3ad9ecb70f2abff467ca80ee3cf6642a1461
                      • MD5 SHA1 SHA512

                      DATA_disk_creation_time_its

                      • Path /data/data/com.example.jempol2/files/DATA_disk_creation_time_its
                      • Size 8B
                      • SHA256 af1dfb1013b1ef4fce71ba2a539ebd1f33f91eacc2a5dbd8f1b690d46956ad60
                      • MD5 SHA1 SHA512

                      DATA_disk_creation_time_its_ter

                      • Path /data/data/com.example.jempol2/files/DATA_disk_creation_time_its_ter
                      • Size 8B
                      • SHA256 5e20834b18ebc526f9d00d489444b4066230bbbda8c057b045136cb42738ff77
                      • MD5 SHA1 SHA512

                      DATA_disk_creation_time_its_ter

                      • Path /data/data/com.example.jempol2/files/DATA_disk_creation_time_its_ter
                      • Size 8B
                      • SHA256 8bb81d64126d2f62f1ac3bfe9c0dfc46c300f4aa27f9b42c0f9dd8afa3561824
                      • MD5 SHA1 SHA512

                      DATA_disk_creation_time_vts_com.example.jempol2_default

                      • Path /data/data/com.example.jempol2/files/DATA_disk_creation_time_vts_com.example.jempol2_default
                      • Size 8B
                      • SHA256 da978143d008b4bf2e6e1e75dc374273d24a41e38ff0d9026cc62c5c26d2c87e
                      • MD5 SHA1 SHA512

                      DATA_disk_creation_time_vts_com.example.jempol2_default

                      • Path /data/data/com.example.jempol2/files/DATA_disk_creation_time_vts_com.example.jempol2_default
                      • Size 8B
                      • SHA256 72ed6bdb0518179eefda278da938d0526a138068492c0a6ef2bc6933ece92542
                      • MD5 SHA1 SHA512

                      DATA_disk_creation_time_vts_com.example.jempol2_default

                      • Path /data/data/com.example.jempol2/files/DATA_disk_creation_time_vts_com.example.jempol2_default
                      • Size 8B
                      • SHA256 194be9b4fe159bbc54fa1481c166612ff05eb9358501f165647836926d73b651
                      • MD5 SHA1 SHA512

                      DATA_disk_creation_time_vts_inaka_com.example.jempol2_default

                      • Path /data/data/com.example.jempol2/files/DATA_disk_creation_time_vts_inaka_com.example.jempol2_default
                      • Size 8B
                      • SHA256 a85df5d114fa1beeca54ddb900cdbbe3485ce62e41aef1ce62cf013b364d33a4
                      • MD5 SHA1 SHA512

                      DATA_disk_creation_time_vts_inaka_com.example.jempol2_default

                      • Path /data/data/com.example.jempol2/files/DATA_disk_creation_time_vts_inaka_com.example.jempol2_default
                      • Size 8B
                      • SHA256 818bdc6d64961b47adc6afc575b92049e48bd57c2f50822363644f013742b9f6
                      • MD5 SHA1 SHA512

                      DATA_disk_creation_time_vts_labl_com.example.jempol2_default

                      • Path /data/data/com.example.jempol2/files/DATA_disk_creation_time_vts_labl_com.example.jempol2_default
                      • Size 8B
                      • SHA256 44ce614928dd58cbddba6dae3c615138a965bd55d30f3cfca9315bcd13371fab
                      • MD5 SHA1 SHA512

                      DATA_disk_creation_time_vts_labl_com.example.jempol2_default

                      • Path /data/data/com.example.jempol2/files/DATA_disk_creation_time_vts_labl_com.example.jempol2_default
                      • Size 8B
                      • SHA256 80a292e109345bed928ef544d8e9555be4cdec0a7e6f508d72492ad8ed041cc2
                      • MD5 SHA1 SHA512

                      DATA_disk_creation_time_vts_no_pois_com.example.jempol2_default

                      • Path /data/data/com.example.jempol2/files/DATA_disk_creation_time_vts_no_pois_com.example.jempol2_default
                      • Size 8B
                      • SHA256 2e7aad210463cdeb046257655a6da984ddb7132d84c9ad1bfdac1129cae0eafe
                      • MD5 SHA1 SHA512

                      DATA_disk_creation_time_vts_no_pois_com.example.jempol2_default

                      • Path /data/data/com.example.jempol2/files/DATA_disk_creation_time_vts_no_pois_com.example.jempol2_default
                      • Size 8B
                      • SHA256 d818a2925712409c9a9909d7eb530dc6495837095170aaca8c2427968ea48c0a
                      • MD5 SHA1 SHA512

                      ZoomTables.data.v1

                      • Path /data/data/com.example.jempol2/files/ZoomTables.data.v1
                      • Size 1KB
                      • SHA256 869b0d78321b191c087861b5ae70df88b72ecdf806b3ddb5c085790dda19a6d3
                      • MD5 SHA1 SHA512 TLSH

                      _m_t

                      • Path /data/data/com.example.jempol2/files/_m_t
                      • Size 234B
                      • SHA256 99db95fc60a1aa98b189eb90128b81df9ded3fca99a8a8122fb7a240dfe37d27
                      • MD5 SHA1 SHA512 TLSH

                      com.google.android.gms.maps._m_u

                      • Path /data/data/com.example.jempol2/files/com.google.android.gms.maps._m_u
                      • Size 4B
                      • SHA256 e300f9826b86d940f2907962161c378e3862ec6b3495d3cdcf79b37ef7975be7
                      • MD5 SHA1 SHA512

                      profileInstalled

                      • Path /data/data/com.example.jempol2/files/profileInstalled
                      • Size 24B
                      • SHA256 a769351d3b86ca123fcab34ecd3ae9669f4066a7c8e325ba84d7e675a3c645c7
                      • MD5 SHA1 SHA512

                      cache_bd.m

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_bd.m
                      • Size 26KB
                      • SHA256 6480d3f3447284d9105e11ab02b4fa23be1b54de743c6fef38eb27053ed58d55
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cache_bd.m

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_bd.m
                      • Size 26KB
                      • SHA256 cdef4665719e2f1114979aab318e99c966ae6fcba86d9a9b59c05582ec73aca8
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cache_its.m

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_its.m
                      • Size 22KB
                      • SHA256 f706af21a80e11ac6ffc776e2120d00e10a0eda8ecc8b02c54352f3439db095f
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cache_its.m

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_its.m
                      • Size 22KB
                      • SHA256 6997fedb5ab360c7c02a1c61efd9a63931491037f56403de5c24b91795e90c34
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cache_its_ter.m

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_its_ter.m
                      • Size 22KB
                      • SHA256 1bf7ed4e6e04d41d24cbadd1a6d329aff00f8ac65ea1f78dd188bece22518ede
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cache_its_ter.m

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_its_ter.m
                      • Size 22KB
                      • SHA256 c21bcb20942ac62c5246e13325424ab58ab536e5639af96249184b0aa93bd8b2
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cache_r.0

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_r.0
                      • Size 29KB
                      • SHA256 c44bcd1d9909b1a6ce258b4f3e237d4a34b56a517a1af77d91ee6b303c793d8e
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cache_r.m

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_r.m
                      • Size 32KB
                      • SHA256 7c2e754ea91ddcf75c9a8e1f0d87c6be2dc58329eaf0ffff84bfb498616fcee3
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cache_vts_com.example.jempol2_default.0

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_vts_com.example.jempol2_default.0
                      • Size 500KB
                      • SHA256 aec49c59689f1c585bdb5e9339e0ca3b6084aa7a7ba3f22f3c7f9a3541abc399
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cache_vts_com.example.jempol2_default.m

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_vts_com.example.jempol2_default.m
                      • Size 27KB
                      • SHA256 af6d9c2d5491f06a0310dbc96cffb294ec63d81b775156eecaad3b375bfd06ef
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cache_vts_com.example.jempol2_default.m

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_vts_com.example.jempol2_default.m
                      • Size 40KB
                      • SHA256 102b3433012ab11f6643e15e93626d907ce58143e69a5a94774b9cb03449cfac
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cache_vts_com.example.jempol2_default.m

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_vts_com.example.jempol2_default.m
                      • Size 27KB
                      • SHA256 b8cecd7aa90a612d83e753776ac8d291cb9247e8fdad1bd6623be3f4ce1b68b3
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cache_vts_inaka_com.example.jempol2_default.m

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_vts_inaka_com.example.jempol2_default.m
                      • Size 27KB
                      • SHA256 748fae01761bc638c3924b28fc7dbcc9b3ec728973eb82edb81bd19f8ba292cf
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cache_vts_inaka_com.example.jempol2_default.m

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_vts_inaka_com.example.jempol2_default.m
                      • Size 27KB
                      • SHA256 41e7956072e9b1c15e40dbf07c80b4f50833bec769ab00087a20248d03dc1ecf
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cache_vts_labl_com.example.jempol2_default.m

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_vts_labl_com.example.jempol2_default.m
                      • Size 27KB
                      • SHA256 16d89e3d755507352c38d6288c1a3e31c3067391cfe0464d8ebdc8f3cee3e16b
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cache_vts_labl_com.example.jempol2_default.m

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_vts_labl_com.example.jempol2_default.m
                      • Size 27KB
                      • SHA256 0e47adef3ef4bcd1b1bd637dab642ee6439b32b1773d8ed5bb5745f59f9bf667
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cache_vts_no_pois_com.example.jempol2_default.m

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_vts_no_pois_com.example.jempol2_default.m
                      • Size 27KB
                      • SHA256 d388257a4d2437a8ba399a3f4e3f806fa1beaf4cee2370414d839cb105c069d5
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cache_vts_no_pois_com.example.jempol2_default.m

                      • Path /storage/emulated/0/Android/data/com.example.jempol2/cache/cache_vts_no_pois_com.example.jempol2_default.m
                      • Size 27KB
                      • SHA256 4fc3e82b69784942634175b1421d23350ef9f20933bdd869c498872d8010cb94
                      • MD5 SHA1 SHA512 SSDEEP TLSH