Overview

overview

8

Static

static

6

AMZ CLONE ...KY.apk

android-15-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    11s
  • max time network
    155s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-fr
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-frlocale:fr-fros:android-15-x64system
  • submitted
    16/07/2026, 04:37

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    AMZ CLONE DARK SPARKY.apk
  • Size 90.0MB
  • Sample260716-e8ttssds6p
  • SHA256 d8755b3d0e174fb5aed20f4b0fab79d9a51611f509aa9fc98659e6cc02f1144f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasion

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Checks the presence of a debugger
    defense_evasion

Processes

  • com.alightcreative.motioo
    1⤵
    • Checks if the Android device is rooted.
    PID:3488

Network

        MITRE ATT&CK Enterprise v16

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/com.alightcreative.motioo/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 1e35e291f0c54a9f43099e8108d18cfe7c29e38e0cc9617902ca0b2d8d798eae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.alightcreative.motioo/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 1957445eeb145624fa13455656b5f7186eb3c80b6da05126e3c249384fbf7e31
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.alightcreative.motioo/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 e419d765027ff844e93601166a12f3b7851fdb9426071a08b5cb7f590e611816
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.alightcreative.motioo/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 8484de79010a1a628e0c2929297e7d7fcc925d08d0152a345d4d9a471a56c7a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.alightcreative.motioo/files/.crashlytics.v3/com.alightcreative.motioo/com.crashlytics.settings.json
        • Size 774B
        • SHA256 fd6a1bd2a938e2c502f42b986190ffab6b2c369b164e6d9da0bbe687074626cf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        internal-keys
        • Path /data/data/com.alightcreative.motioo/files/.crashlytics.v3/com.alightcreative.motioo/open-sessions/6A58601F026100010DA013DD3E0FF547/internal-keys
        • Size 207B
        • SHA256 c032e8bd4fd8349b788b2aea02577cb2b13257ad4c774beb828b23a26815cea0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        app.json
        • Path /data/data/com.alightcreative.motioo/files/.crashlytics.v3/com.alightcreative.motioo/open-sessions/6A58601F026100010DA013DD3E0FF547/native/app.json
        • Size 237B
        • SHA256 a2ea5a505211da4b34908673e4a07871907c98df1419772c2c8b6ec595d16a05
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        device.json
        • Path /data/data/com.alightcreative.motioo/files/.crashlytics.v3/com.alightcreative.motioo/open-sessions/6A58601F026100010DA013DD3E0FF547/native/device.json
        • Size 194B
        • SHA256 fd17ee8cfa87079d6b567224937d1ff2cc939b80a53b34ded080fde1343c7732
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        os.json
        • Path /data/data/com.alightcreative.motioo/files/.crashlytics.v3/com.alightcreative.motioo/open-sessions/6A58601F026100010DA013DD3E0FF547/native/os.json
        • Size 56B
        • SHA256 aab8e31a32daff7fbde3f0f1e3afe9bd99b113338161f9c64b10744a818a0408
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        session.json
        • Path /data/data/com.alightcreative.motioo/files/.crashlytics.v3/com.alightcreative.motioo/open-sessions/6A58601F026100010DA013DD3E0FF547/native/session.json
        • Size 127B
        • SHA256 eb0c33f1d92edd19a12225175453e8efff8f632b966977b438590bf0d1152305
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/com.alightcreative.motioo/files/.crashlytics.v3/com.alightcreative.motioo/open-sessions/6A58601F026100010DA013DD3E0FF547/report
        • Size 825B
        • SHA256 ad60d3f3d86247daaa57bf8c1625855a7fc07ecd0103875c0c7e0e678334e302
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation4375873875247545820tmp
        • Path /data/data/com.alightcreative.motioo/files/PersistedInstallation4375873875247545820tmp
        • Size 114B
        • SHA256 8b0decf4c34e9f49ba6f6b83e2fd29e29b9bfaa2791b8e95043c41f33e2a200e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation9060944199167806135tmp
        • Path /data/data/com.alightcreative.motioo/files/PersistedInstallation9060944199167806135tmp
        • Size 90B
        • SHA256 aec2c2c9b78f6c37d0e874002f336d69006748fadacc6b961deeccd99c16f58f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmFsaWdodGNyZWF0aXZlLm1vdGlvbw==_settings.preferences_pb.tmp
        • Path /data/data/com.alightcreative.motioo/files/datastore/firebase_session_Y29tLmFsaWdodGNyZWF0aXZlLm1vdGlvbw==_settings.preferences_pb.tmp
        • Size 33B
        • SHA256 a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6
        • MD5 SHA1 SHA512
        Submit Download

        firebase_session_Y29tLmFsaWdodGNyZWF0aXZlLm1vdGlvbw==_settings.preferences_pb.tmp
        • Path /data/data/com.alightcreative.motioo/files/datastore/firebase_session_Y29tLmFsaWdodGNyZWF0aXZlLm1vdGlvbw==_settings.preferences_pb.tmp
        • Size 75B
        • SHA256 1e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmFsaWdodGNyZWF0aXZlLm1vdGlvbw==_settings.preferences_pb.tmp
        • Path /data/data/com.alightcreative.motioo/files/datastore/firebase_session_Y29tLmFsaWdodGNyZWF0aXZlLm1vdGlvbw==_settings.preferences_pb.tmp
        • Size 121B
        • SHA256 232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmFsaWdodGNyZWF0aXZlLm1vdGlvbw==_settings.preferences_pb.tmp
        • Path /data/data/com.alightcreative.motioo/files/datastore/firebase_session_Y29tLmFsaWdodGNyZWF0aXZlLm1vdGlvbw==_settings.preferences_pb.tmp
        • Size 163B
        • SHA256 7495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmFsaWdodGNyZWF0aXZlLm1vdGlvbw==_settings.preferences_pb.tmp
        • Path /data/data/com.alightcreative.motioo/files/datastore/firebase_session_Y29tLmFsaWdodGNyZWF0aXZlLm1vdGlvbw==_settings.preferences_pb.tmp
        • Size 212B
        • SHA256 03cdf51d1e010c2200d7d7632f9348ccd4d0989b517ec82867f52d8d5662156a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.alightcreative.motioo/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.alightcreative.motioo/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 f528d992e3fc4fda829cfdf1f8f668509065c8f3b7afa6853521cc3cf59ea06b
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.alightcreative.motioo/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.alightcreative.motioo/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 c4de582581cd63517965c8c83f87e8c295809e642bba57206012bdbfac9d2ea6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.alightcreative.motioo/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 07f58d1908d8c870e3defec32949511fba72382747328b070f626fa0bc8e3e11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download