Analysis

  • max time kernel
    4s
  • max time network
    150s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    18/07/2026, 10:18

General

  • Target
    com.sbs.diet.apk
  • Size 61.0MB
  • Sample260718-mb4azaf14k
  • SHA256 10583200fb2084cc352f6afa5b3026ef4a59f3a3fed549a768b077c70997db7d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Checks the presence of a debugger
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • com.sbs.diet
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    PID:5156

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events

        • Path /data/data/com.sbs.diet/databases/com.google.android.datatransport.events
        • Size 116KB
        • SHA256 2e13adee777a3f0a378a74947c328c9b25ec3f92208a2605b90d60b94e088395
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.sbs.diet/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 9959e6f3334873ad821db3671952f0c7060aef12b3ee028f3f33c317997ea93a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.sbs.diet/databases/com.google.android.datatransport.events-journal
        • Size 28KB
        • SHA256 1104a2f7c13f38967bef41834a471fb35ff033d8064fef55518f873050b981bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.sbs.diet/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 02f8812e74b2459814d07e7675f1d05c61556eece962cf83a54a3de2a37ba9f9
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.sbs.diet/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 e6d6916f91d3699edd5b2d0f6de4fac25c432e03a11c1c120be6d53b9e0479a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.sbs.diet/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 60c0ccd987453f89ea3bc04d13e34c99f1fc4bcc4aee97c34e524d22f319b182
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.sbs.diet/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 7e37723f438daef7b693c769771674c9cc1cf7946c50c7cb855a8c19a92f61c2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.sbs.diet/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d53cf4562444e1b3e0042d33e0210a6b862929960f3413c9be8c5b5d4447f9be
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.sbs.diet/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2ec9cfa9e1c09104019482a207e7bf4de08b3a8eb62fb8de576687df4d8b3c62
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.sbs.diet/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 550bf8bbf8e199505c1f80e9400103cf6a9228500d9b129e41100f0116ffcc58
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.sbs.diet/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 1cf04230474ee4c99698d3740b7e0a325b7c82db5505627c010ee8025930a5ff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.sbs.diet/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 d4dbd11f87a65216db3ff60665a9dfd6f921a5f78010cd5486bdf6ea00cf3b69
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.sbs.diet/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 9eb7351b6ba5a48a7c53d1c01aa22b9498b53c8e3ee45f12e543f1e36acaca67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.sbs.diet/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 7c5aba34ada9a780337cd6d1ac6a0b9c951be585b304f491e3511d5c8c151bf4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.sbs.diet/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 d890f6818890025492b8c6755204ec845b32b468d16e502e40db29e6e18532e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.crashlytics.settings.json

        • Path /data/data/com.sbs.diet/files/.crashlytics.v3/com.sbs.diet/com.crashlytics.settings.json
        • Size 761B
        • SHA256 61a89324c2756aca73062161c5e2d7c207a212bf0aacfbe0882b033e1739ad2c
        • MD5 SHA1 SHA512 TLSH

        event0000000000_

        • Path /data/data/com.sbs.diet/files/.crashlytics.v3/com.sbs.diet/open-sessions/6A5B535203BD00011424AC736040C9CF/event0000000000_
        • Size 61KB
        • SHA256 d51c6ea384ed79293c175bc17e1e168404f122554587244d0ea9e53f436b3aa4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        internal-keys

        • Path /data/data/com.sbs.diet/files/.crashlytics.v3/com.sbs.diet/open-sessions/6A5B535203BD00011424AC736040C9CF/internal-keys
        • Size 107B
        • SHA256 2e5b79823384123598ae879303e552f5ae0bbb28f2c96b74e82a2e8abcb6840f
        • MD5 SHA1 SHA512 TLSH

        report

        • Path /data/data/com.sbs.diet/files/.crashlytics.v3/com.sbs.diet/open-sessions/6A5B535203BD00011424AC736040C9CF/report
        • Size 822B
        • SHA256 1d8252674bce1df51753c3809ced8763e8948101904375365fe371c3d4bed583
        • MD5 SHA1 SHA512 TLSH

        report

        • Path /data/data/com.sbs.diet/files/.crashlytics.v3/com.sbs.diet/open-sessions/6A5B5353029700021424AC736040C9CF/report
        • Size 822B
        • SHA256 270e912b6416578fbfaf4a91a4fd69b9994550cbe60104490abe4ebee78cc1d5
        • MD5 SHA1 SHA512 TLSH

        6A5B535203BD00011424AC736040C9CF

        • Path /data/data/com.sbs.diet/files/.crashlytics.v3/com.sbs.diet/priority-reports/6A5B535203BD00011424AC736040C9CF
        • Size 62KB
        • SHA256 597ed00c44c817c015eca253dc1306e4107fdfc65b473f1ab891c1f0943b77e0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation1777458498963782084tmp

        • Path /data/data/com.sbs.diet/files/PersistedInstallation1777458498963782084tmp
        • Size 90B
        • SHA256 bd126cb9f7a5d3df45eda8288dd00fb83c721c852f8ff032ff0e2d6869134972
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation4839918198574114255tmp

        • Path /data/data/com.sbs.diet/files/PersistedInstallation4839918198574114255tmp
        • Size 569B
        • SHA256 24586c26629af974b71f64e92374f1353936b54e7a2976d3f20c5c3021cb4067
        • MD5 SHA1 SHA512 TLSH

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMjI5MTU2NDU1Mzg6YW5kcm9pZDo0NTFlMzJlNjQ2ZmFhMTJlYjhjOTNi.preferences_pb.tmp

        • Path /data/data/com.sbs.diet/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMjI5MTU2NDU1Mzg6YW5kcm9pZDo0NTFlMzJlNjQ2ZmFhMTJlYjhjOTNi.preferences_pb.tmp
        • Size 24B
        • SHA256 93c505be91bdd0e3011604340f41f6660f0c319330d27824d2649d9c8927710b
        • MD5 SHA1 SHA512

        FirebaseHeartBeatW0RFRkFVTFRd+MToxMjI5MTU2NDU1Mzg6YW5kcm9pZDo0NTFlMzJlNjQ2ZmFhMTJlYjhjOTNi.preferences_pb.tmp

        • Path /data/data/com.sbs.diet/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToxMjI5MTU2NDU1Mzg6YW5kcm9pZDo0NTFlMzJlNjQ2ZmFhMTJlYjhjOTNi.preferences_pb.tmp
        • Size 846B
        • SHA256 92e180c8234901b6f8800c4db93f170371b23ea38adc815bcd210f5d2fa24d2f
        • MD5 SHA1 SHA512 TLSH

        sessionConfigsDataStore.data.tmp

        • Path /data/data/com.sbs.diet/files/datastore/firebaseSessions/sessionConfigsDataStore.data.tmp
        • Size 145B
        • SHA256 53d063d295876c3d756419b264eb45d133f945477ff6f75da7feaad8c4ba7893
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb

        • Path /data/data/com.sbs.diet/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.sbs.diet/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 59ca86faff26b7ea7aab3a6f0da13025e625d975f0dcb649b05d25e54d41875a
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.sbs.diet/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.sbs.diet/no_backup/androidx.work.workdb-wal
        • Size 124KB
        • SHA256 3a828426713cc4b299d9bab9a302c3791ae9546f2fe212cb664ff6b0a35a5e4c
        • MD5 SHA1 SHA512 SSDEEP TLSH