Overview

overview

8

Static

static

6

BestTogel-v1.1.apk

android-9-x86

8

BestTogel-v1.1.apk

android-10-x64

8

BestTogel-v1.1.apk

android-11-x64

8

Analysis

  • max time kernel
    57s
  • max time network
    151s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    10/07/2026, 00:10

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    BestTogel-v1.1.apk
  • Size 3.9MB
  • Sample260710-af279acs5x
  • SHA256 aacce5b8606ee6849ad745a75596f30f2f8493fa44db17ab4c1e2c1b31666b5f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 8 IoCs
    defense_evasion
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • com.example.besttogel
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    PID:5112

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        OneSignal.db
        • Path /data/data/com.example.besttogel/databases/OneSignal.db
        • Size 52KB
        • SHA256 ab03de5564295f5ec34e2fccba9811cff818911b07798e9e456a58309deeb3a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneSignal.db-journal
        • Path /data/data/com.example.besttogel/databases/OneSignal.db-journal
        • Size 512B
        • SHA256 d58209d94f57ab1d28409528d793d3162eb640fac3de74bcc0fded3e77819f3a
        • MD5 SHA1 SHA512
        Submit Download

        OneSignal.db-journal
        • Path /data/data/com.example.besttogel/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 3e23c05b11f5ed962700723c061b92d1c7ccc15817ee45c1efa9de3225f717a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneSignal.db-journal
        • Path /data/data/com.example.besttogel/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 366a85a372ac4b8ed54972dfc78cb76a0725b4e32a1b9786cbc627941db2fc2d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.example.besttogel/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 daa9af7844566e0185f2bc4f08f132a6afe629bcf5d51c45857825e7d76570b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.example.besttogel/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 9ee79763219a251a2f3c2d391e06629842374a9c83166c23c88a74fa42a71dd8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.example.besttogel/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 c5e11d428e8e78ea8fa6fa44c5d9010f464b002832254550ef7a7644a10975ad
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.example.besttogel/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 a2de714a01d0ae6eecee8d2eef2c87a1218a7e1a3bd6c18ed9cdbf59c8859f77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.example.besttogel/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.example.besttogel/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 826cc1c30fb421c3274756b53973045c2627daefa85641f0ac8bfc761bfe16e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.example.besttogel/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ea921a096038d0f7c8d76df22192a7991bf99004f793bfe198384fa79a4ead9f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.example.besttogel/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ff09f708c0888fae29204faa47c6d4c6a50ca18310356928b0ba76bf17e2473a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.example.besttogel/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 4d8e5924aa9eed003d8eef808d6599014a72033d8dd38b1d16a47cfe2f2bfa5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.example.besttogel/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 458aa953a9e0adbf5b8765ebcf6b51bc5b5a48b7664e85d25c7a8ce9781a2d5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.example.besttogel/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 224c74cf51a6e740329fa1bee3a61e7da4f6f49c54b1a83cbb9e7a57159a4274
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.example.besttogel/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 71a839519c37eac5fdd01991e51947848f28362d3c34816f61821e0367c005eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.example.besttogel/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 a73e0137e4892b8751e6f1cd8d07573eea025f164dd443f99a7cbcf50cc3c776
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.example.besttogel/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 949ba1f72347151b1dfb78d494b1e50117de374b2c2ac96bea7e0e8b4b23a798
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.example.besttogel/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 eeb3125275c5a9437840d6809be39318805afe6cc72a4a8d29a716afff49aba3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.example.besttogel/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 8f1a794502c461381731bc7af5228283eacf14b5a17276fc52f831cad5a6ec20
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation2077210407877188281tmp
        • Path /data/data/com.example.besttogel/files/PersistedInstallation2077210407877188281tmp
        • Size 570B
        • SHA256 8ee752ee08385746658f68340b1485b354be6df518a2397efe153549f64f074b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation2402805725806649506tmp
        • Path /data/data/com.example.besttogel/files/PersistedInstallation2402805725806649506tmp
        • Size 90B
        • SHA256 36cc80c86e511d6bd14004bb2997ca55ced75c14fa8a1b92f97e610a1c9b1c8f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation5270166063970578980tmp
        • Path /data/data/com.example.besttogel/files/PersistedInstallation5270166063970578980tmp
        • Size 566B
        • SHA256 84834ee16bb4e13c0d7500bbdb97ec6c92d7f52eaf292d4890d79a3fab56cd85
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation5380913298614686624tmp
        • Path /data/data/com.example.besttogel/files/PersistedInstallation5380913298614686624tmp
        • Size 90B
        • SHA256 f9d0df16f8f4fa69e3a30ee418d9a002dc91ca0fee8392150ce07f3772325de1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:303575334951:android:a500fb76792607a2c0ce02_firebase_defaults.json
        • Path /data/data/com.example.besttogel/files/frc_1:303575334951:android:a500fb76792607a2c0ce02_firebase_defaults.json
        • Size 172B
        • SHA256 782f89dde17c133e778a7a3f42c6d30f0af6ac2b397a5826b875e3c3080d03fe
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:303575334951:android:a500fb76792607a2c0ce02_firebase_fetch.json
        • Path /data/data/com.example.besttogel/files/frc_1:303575334951:android:a500fb76792607a2c0ce02_firebase_fetch.json
        • Size 185B
        • SHA256 f1cc14f0af4f3b3dddff0b88851f949e467f9b8004bdd03c07d38ccd7749f2bb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileInstalled
        • Path /data/data/com.example.besttogel/files/profileInstalled
        • Size 24B
        • SHA256 637364c5f4408c07731084c9fdd20f14cb24b73e96696e1d3586d2501717a7bf
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.example.besttogel/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 75db95e80710ae0365b949eddd2974dc1f22bd59659865c0cf6e514e8130810b
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.example.besttogel/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.example.besttogel/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 f9519822c4c81808d69b6cc684a461b3bc07f249d747caf9a44c4e339bdc0cc4
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.example.besttogel/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.example.besttogel/no_backup/androidx.work.workdb-wal
        • Size 112KB
        • SHA256 ae47b2e4d6a3a9501e4d08ebc0861330dae683ff4089e07e7f0d23afc0150c93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.example.besttogel/no_backup/androidx.work.workdb-wal
        • Size 201KB
        • SHA256 70da9d93a54ce94cc14e080eb8eee23de6994c013edb150cd94f6d301bf6d677
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.example.besttogel/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 67a418910c784f4a2e9153abdbdb1899abaf528ce3deffe5621b88935c41fc63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.example.besttogel/primary.prof
        • Size 1KB
        • SHA256 c9d08a3e138631373bbd501d5fe09f70b419026ce6219d94cc85b13f90c03523
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.example.besttogel/primary.prof
        • Size 7KB
        • SHA256 cb18f731113d6f4284ba89cbfda6e0d174b71d68d339af9386c9258fd334808d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download