Analysis
- max time kernel
117s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
18/07/2026, 06:15
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
app-Github-release.apk
Resource
android-x86-arm-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
app-Github-release.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
app-Github-release.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target app-Github-release.apk
- Size 1.7MB
- Sample260718-gzwcdady8x
- SHA256 abbfd043300a75514595d205af032681d9b3a35a95d64a1576528736c7cef987
- MD5 665ee5f5cd8a77bf13460e48af2c1f35
- SHA1 328f58e1fa71442e4eea399f824e2caefd1de473
- SHA512 766a6a2ca0416ea05d805d75d80b847e7aa771151255815f6af48f5c7ccefacee224fb26294e9dbb2dd80d84ceb635ca671ba35510adb9992aaf91d90f702caf
- SSDEEP 49152:/o54ZyxdG8t4jKNxWDJODJ5btZZCR6kG3+gp8IG4:/o4yDGk4jIxn9zjPc4
- TLSH T1C985CF42F358E92FC577C0334AA6063A514A8C5ACB46E3436965736C78FBEE44E85FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.github.xfalcon.vhosts - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.github.xfalcon.vhosts
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.github.xfalcon.vhosts/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 742eccff52edc2acb589a25220610f7c6aa275fbbe40105896255705c299d64d
- MD5 f0cd4e555807f25873db8b4262d328a8
- SHA1 bedd148d56e9595fe48094db64bbe63c8deacaef
- SHA512 92636f7aa5c24101aed9df93cee65954443b46f3bff73cce705b4e5ce4cb830496ab4c79bc65a63de2b570c8181bba53f670e431ddc27e5e3cc7701e626e4e1a
- SSDEEP 12:TLiEy9zmzrfRmBEyPbP/NhhOLavnOAUhUyWlpbI:TLApmzr0GSP/NhhKamivk
- TLSH T113725CCDB9649603F1734F7E60CED2D23D2C725A872BE6533F551A1C6E02656E061F41
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.github.xfalcon.vhosts/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 0a9884cb288e946eab77dc3a4feb7be94cc78f157f3ba955de55b86def02c454
- MD5 1c5d7b0d3835285eceb47f19860b1eee
- SHA1 1f6936ad8d9e4da22e9d2b884abae53eb2d0b440
- SHA512 e65c6a039afc2238443eee4a394d78ff64e5c7e8668bd1122680436dc041cebaf22af37cb51e1b7472314c38b0155f67577792d27e992556db6b21dede1e3dcf
- SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hulkn+/0Fl6ImjhOLavnOAUhUyWlpbI:TLQpmzr0GSP/hlnlFkhKamivk
- TLSH T11A728BCC75609B03F1734A3A20CEE3E13D38712A8B2BE6133E051A0C5E02292D022F01
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.github.xfalcon.vhosts/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 6ed3fe6d7ba2b59f7465d959ee645fe67e9dad9ce03cbeb659875a9e21e64927
- MD5 129beabd7e545b657678fecd0d014f5a
- SHA1 122bd4e4e087a1fc7133c8016e0605b6f0d5338b
- SHA512 877de0e18dd4f2423715670bdab3fd4c2f81ce67246fa43634faec73e8784e7c6b6afb48bb4a48f942abe5150503c4574c2bd184527783f94b5931e82638ccef
- SSDEEP 12:TLIEQv9zmzrfRmBEyPbP/my3i4Bg/UhUyWlprvlO1n+/0Fl6ImjhOLavnOAUhUyv:TLEvpmzr0GSP/myS4Sv70nlFkhKamivk
- TLSH T15F7228D57564D603F1B70E3E51CEE6D23E3D316A5B2BE2123D055B1C1D42392D171B02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.github.xfalcon.vhosts/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 19a2ebf0207bb89e9d7bd441d562157bf276f6388320fafad14ebd568abe4561
- MD5 eaac07adde2a5a8ccac87d9bd7fcf633
- SHA1 cb0319c6737283f66da1e053ebcc1eeee0dd58a9
- SHA512 99022bb2e3dbc021591fa0c6248e88cea090fdd4a75e8c20cdeac03695f3953f60721a8e36d0caf96eecf61a60c99a13b4a2e38b9ee72573444eeb1605d1e5f0
- SSDEEP 12:TL6uEp9zmzrfRmBEyPbP/Hb3i4Bg/UhUyWlprvlO1n+/0Fl6ImjhOLavnOAUhUyL:TL6Xpmzr0GSP/7S4Sv70nlFkhKamivc
- TLSH T19772F5D97564D603F1B74E3E518AE6D23E3D316A4B2BE7123D095B1C1D02392D031B02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.github.xfalcon.vhosts/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 c2d4aadebe6576ebd1eeb12dcef6e950d422e0e0dbe850c077fb6710ee97475e
- MD5 dbb4236ba0cfddf8e790d63ec86c1710
- SHA1 89b7e5bf153cb7e1ed99fbb757bbff42305a4f2b
- SHA512 6f3cc8ec716c24d0b13ae105eba44bbed337466f98c8df3c2a406115821c7e7bbdeccf155dd793ec31b63b61ac078ffc1c836afe3fdab40c7e676e3f6a372370
- SSDEEP 6:l9bNFlgls1qlvlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WEa:TLuEev9zmzrfRmBEyPbP/WE
- TLSH T10A722B8D9F102603C6B3877378CE93516D24A21DC3379E473BA80874ED83849D151F44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.github.xfalcon.vhosts/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
- MD5 eb52a90bb70b76e946b62f50b6f7fb85
- SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
- SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
- SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
- TLSH T11F727DCEDF002202C1360733F4C9D3901D60921D8336DA0767940460AD02108A451F58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.github.xfalcon.vhosts/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 1745094a6ecc98ec0f32780c791b295151c7e5a4e1dbd536b6ea6d85716ae1c1
- MD5 91b3539e50971c822ece3e9759553d3a
- SHA1 bc556f5ee4bf257c1adb7865a42319e6663ba064
- SHA512 0162c9a6f385f63f5fa5f85c37e58c933fb9cf7d0fef872383b402cbd6fe182ac378f18e0e95cc12aa77d94159c7bc1a115b7a2cf9d85db41f1570223cc95668
- SSDEEP 24:7+tRS4Sv70nlFkhKamivgqL6Xpmzr0GSl:7MxSv70nkcamivgq2XArSl
- TLSH T1A2020098B965D613F2B74A3E518BD2D13E3D316A4A2BE6163D495B1C2D422D2D031B02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.github.xfalcon.vhosts/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 a3f23453a6381522c082e0316b3f732974a2953f4a073e6e386212499b1ef12a
- MD5 5e40ff8388d02d01e8e2ece1af5ffd43
- SHA1 16c6ecba29cb21897055d4369ec30ea0a3f62a96
- SHA512 f42941f80cd3a684b4a642f486e3399a3f334e4c0481326236fef4d39fbb2aa09035485ab673f297300d531ef4bbd90d6aeb28316f6b71f6cac84fdfe34a3c62
- MD5 SHA1 SHA512
- Path /data/data/com.github.xfalcon.vhosts/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 ba48a672a6c59cc084d3731a0420d711871dc585bb155d1271e3c47e1c267e3c
- MD5 f07562862e551c8cfc44ed9483572086
- SHA1 844f073cdd1f9d68b1608a254bab081a2c749d2a
- SHA512 aacb637f93c88988277cceade29c6ba796ddcb2618df91ec2216f19b6eafb06260dd3e0c4d435bebbc51b83464e460b7be4a8717fa23cd767853da3228068f5f
- SSDEEP 6:7+/l93Hn1NWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKN:7+t1WqLiuWdwRmBEyPba
- TLSH T15A0222C963820822C91A16B790D983412E10EB19CE61CB6B29A108983C434CCA4A0D84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.github.xfalcon.vhosts/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 c4f42bcde69e620d286cb281d6d68a0f4b24f7d2651d4164d0471d596c0222e0
- MD5 e5678be163a39c65611b181b55f597dc
- SHA1 c6c9fba9cae8b1cb8e811a91202585177d462da8
- SHA512 fb1952973d2abd36503d8134981deab29f31b5170e5156e5728ce63dd442082690effc4ab7a1736a97e70d54d8947595a720823a767a8650fd9c13e8e6eaf1ef
- SSDEEP 6:7+/lVlGPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK8in:7+tVl6qLJdTRmBEyPb8n
- TLSH T10491808A67811913C51B5BB790D5C3551D61A715C373CB57156008DC7C476CCE8D0D54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.github.xfalcon.vhosts/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 8e81ea47470bdc7f7cde2a553f36c32344abd5a9a346a9159f6c0d1c573b8848
- MD5 efa324086a64ecd2c70456e8dc85bba5
- SHA1 c7573b632cdfa6731514fc1341e87fdf57e9a814
- SHA512 652ff40a7291747c1d0e27348cf821a7fa9ff236b6e76c0307141996210633a7b62edfe33090212bdad98e3e898b968671ca848ab703c9bc80339533f1c0a662
- SSDEEP 6:7+/l9rvPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKDU/zc:7+t1XqLmqCRmBEyPb60w
- TLSH T1D302229A67C00C13C02926B7A0D883581E11F3188131CB0755A008AC3C834CCEC90D40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.github.xfalcon.vhosts/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 0494922f09ad47af72ff42b1b9af05a28990791f6361aad1c1588d35a6af34ee
- MD5 6449a3b36fbdec6d680aca1b654f0e3c
- SHA1 a0a2c8972ef03d5426d5021e1f79d8a36f66cacc
- SHA512 19a9e087a5ffaa9118259b2585ccfeb0ff47a444b1c8e1b9259344e85da30020102e6562e774ef37a1754fb8982171610d751b51a16958d1ebccdd940eef3e93
- SSDEEP 6:7+/l9mZg9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKqq:7+t8ZqL8EEh9zmzrfRmBEyPb6
- TLSH T18B02728ECF012623C12B4773B4CB93406C28A22A837B9D032AE40464BD432889091F98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.github.xfalcon.vhosts/no_backup/com.google.InstanceId.properties
- Size 2KB
- SHA256 c23837e62f48c26ed40b6084a9543504e0f76e7f86c5b010dac0c20f19736b5f
- MD5 49cb63284a88a1bffe37470b2343bb7f
- SHA1 5a4e7c8ce17f5dafb8801bad46f4ee9c7c6347ec
- SHA512 b4c281a528edcaba9abae6cc81b00a4be793b84a5f6f7fb49f2099c43bc33108bafaa1321eba2e138e5ca1f1206cda2dede8aed77c355665b3e6138a304cd221
- TLSH T184411AC54F59BB4E2C242A237D0AA591C757009A37E19408AFBEF8E4948D496C1A47C2
- MD5 SHA1 SHA512 TLSH