Overview

overview

8

Static

static

6

8dcd492ecf...7d.apk

android-11-x64

8

Analysis

  • max time kernel
    35s
  • max time network
    152s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    08/07/2026, 04:35

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    8dcd492ecf9356f17418f56e05cc45bb1a54bf7cee1997e30b43890ce85a317d.apk
  • Size 66.4MB
  • Sample260708-e7xjasbw7n
  • SHA256 8dcd492ecf9356f17418f56e05cc45bb1a54bf7cee1997e30b43890ce85a317d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • org.traccar.client
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    PID:4810

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 732152eeed985ababb2347d8c580fea695868f950601ae4d75d448d8be170497
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 84d52396f558359699d60abcf93062117a9cf83e6f5a05f3f8f06a195f329a10
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 00cd51d5507c3703a5a454f7ce92a62577c7450771f3e62cbc1da25331955ce0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 ae6a6fa9291b282e26761349772a0c0c32ff2e68ed0e5df4512ccfde5ff37ebf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 f2ba39d1340307beb8a235ebf3e71a811992f0dabc0b8007b4b55fedc343a8c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 ade5b27e6f1c79ca771b8935e9efc1e3f57a0e4f768761efbf9883f8f1150807
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 a7d27b39d159be885257e071f3db9d2d811fc19bcfaa734bf63cb74bfbcaac87
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 fecda2e650a2cbb3652d60ee1843b2e8fa9858bab765aee964b59b80a73d5c97
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b6279e8fad6f9670408acd358784d821ac14cc0c2f730ecda4b81ffb9aad86a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d0903013dffb46b9e80bde6a1ff2f69a082f5791ece7b3db9c5f6990b8a8b76a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 3294b6df72e34e211e1a609ba3d3ab8c398bdced0405f05148c0a82f6b087ee8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 e04105bb901a4ac30839cbd24b8937ef6753ec958a07ab50cd8786ec423cefec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 afb0219478a622b16684e464458a1b811b01d12dcbc6771e384416faf44e5ffc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 1352cdc551ff38befb9226c9290a8dbf08070f74570aacf84eaa9b62103385e9
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 0fc9cdb5aa1634bfce2cfda98a2e5d732a89fa55583f703c2ea1e3e2d6e16dff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 0f7efac89d54ce18fc773f234bbc50b8fe812fa4a359a6cc732f4ea8d3dbe893
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 d0a7dd00c7e4525198f41a14ea04d7014ca4ef3549a71c0d6c0f8b8c1a413a8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 500d71abd08b0d069cda9e2167659c97374a1183bc03b820ed51b15424c6b8a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 50e9e0e279a3ff1a433e9495a84ae48184e8fe038bbf34482103b396b997fd4f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db
        • Path /data/data/org.traccar.client/databases/tracker.db
        • Size 32KB
        • SHA256 4dbcbeee118febe90109df4746054dbb4a6c5494355c89ed973d98333843609a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 512B
        • SHA256 469610985d44201d8e070d0a1307583463b3fbc0496b23e693e0f2195cc98294
        • MD5 SHA1 SHA512
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 8KB
        • SHA256 55e875f51d0cce38bb90be474f92e669c68abec93120ce46a06316d234d0fa7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 8KB
        • SHA256 355faa0675025dbc8b008ebab4ec586fa39c576a76785ebfcc39ee8a762a3e52
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 8KB
        • SHA256 568fea1fd7cf4e8c60560a12560c555efe839832d39480c07277865119f383c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 12KB
        • SHA256 7cee01c28c5695846e73f890551457f0f41d56e5eb1c00a0622c1f86d5c54b63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/com.crashlytics.settings.json
        • Size 767B
        • SHA256 cf7529f8e643f61d8cc0d6193388e13764cbdd7729f39748dd46e5c4266a7347
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        internal-keys
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/open-sessions/6A4DD3B2018B000112CAF7C581E926CD/internal-keys
        • Size 107B
        • SHA256 2e5b79823384123598ae879303e552f5ae0bbb28f2c96b74e82a2e8abcb6840f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/open-sessions/6A4DD3B2018B000112CAF7C581E926CD/report
        • Size 823B
        • SHA256 a5362a996a47fda5ead1e89d5923336000e7b3934c2bd215251f0221ac2b40a6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/open-sessions/6A4DD3B2018B000112CAF7C581E926CD/userlog
        • Size 189B
        • SHA256 dea1d7594f66cdd9b10a65a4c93a70193d30ff0a81961aa4d5542cefeb88b2ea
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/open-sessions/6A4DD3B2018B000112CAF7C581E926CD/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation5449936803876992906tmp
        • Path /data/data/org.traccar.client/files/PersistedInstallation5449936803876992906tmp
        • Size 555B
        • SHA256 27fcc747c86df06013284f625c9fe3c186f4647cfe19c0158f1d5ab5ecbafe2f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation5559568444442828567tmp
        • Path /data/data/org.traccar.client/files/PersistedInstallation5559568444442828567tmp
        • Size 90B
        • SHA256 d0bc5f2b39a8687d83969cd5b272b89a4ca822cf37cf4b345e781da4e40660a0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTozOTAxNjQ3MTM5NjphbmRyb2lkOmIxYzcxOTRjNjk5YmZhMjU.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTozOTAxNjQ3MTM5NjphbmRyb2lkOmIxYzcxOTRjNjk5YmZhMjU.preferences_pb.tmp
        • Size 481B
        • SHA256 33cf72a98e6d2cebf2ece6c31c6d615191419fe3bd0e9b2ee218f378db9190c9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTozOTAxNjQ3MTM5NjphbmRyb2lkOmIxYzcxOTRjNjk5YmZhMjU.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTozOTAxNjQ3MTM5NjphbmRyb2lkOmIxYzcxOTRjNjk5YmZhMjU.preferences_pb.tmp
        • Size 505B
        • SHA256 8a2516a123198a513c8ee3651b1219bc1596f88c2f691634dcfa64319810d733
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FlutterSharedPreferences.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FlutterSharedPreferences.preferences_pb.tmp
        • Size 34B
        • SHA256 111e32bf646367786e298fea8b776d8c02c0a551c17deb89ed1142ff09e8c5c6
        • MD5 SHA1 SHA512
        Submit Download

        FlutterSharedPreferences.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FlutterSharedPreferences.preferences_pb.tmp
        • Size 60B
        • SHA256 014bb2dd02d7d9a670a2bcaf2fdb4a3430b2b7be88a9e22e5a238bf86f296d2f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FlutterSharedPreferences.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FlutterSharedPreferences.preferences_pb.tmp
        • Size 92B
        • SHA256 396335b8db5228b06f36aa1c52d2cc58d884ec9922fd332c02d0af0b09d18885
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionConfigsDataStore.data.tmp
        • Path /data/data/org.traccar.client/files/datastore/firebaseSessions/sessionConfigsDataStore.data.tmp
        • Size 145B
        • SHA256 a099bca2949b0d530f9fd83f9ac089eab802031a418d9647966b1ea88d9961b7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionDataStore.data.tmp
        • Path /data/data/org.traccar.client/files/datastore/firebaseSessions/sessionDataStore.data.tmp
        • Size 278B
        • SHA256 012106ebf65008e2c1db3f708a1adffe8e80e6f59e46fbbb626fc8bfbd1e8e64
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        flutter_callback_cache.json
        • Path /data/data/org.traccar.client/files/flutter_callback_cache.json
        • Size 226B
        • SHA256 d569ac2f32d1dc07ea9feb5fd881d78786e724bbd95743de69e2d82a940048c9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        flutter_callback_cache.json
        • Path /data/data/org.traccar.client/files/flutter_callback_cache.json
        • Size 389B
        • SHA256 cf90534b15b1f7497d031e5911bdc6a75578fb215f8d66beeaad72f9ad7e1fc3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/org.traccar.client/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 eefac451a5aabaa51c00aaa126311326a8eb6a6fd45328e9a721aeca3f185b4a
        • MD5 SHA1 SHA512
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/org.traccar.client/primary.prof
        • Size 1KB
        • SHA256 7e2400abab73d24ac0c1bb6d7fe128046bc7b35a8cef1d00bcffaa7f1e5c4875
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download