25ca14cc34a07441563a533e81d62242e66336ecee890162ac702dfe57c3fc17

Analysis

max time kernel
58s
max time network
150s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
20/07/2026, 14:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
laxmi777.apk
Size 6.8MB
Sample260720-renf5sev7z
SHA256 25ca14cc34a07441563a533e81d62242e66336ecee890162ac702dfe57c3fc17
MD5 0e7c0c784692a909f8c1dab408e46d50
SHA1 b615cf027ed9d1745f185e0ef5cfa69453927d3d
SHA512 d247a3ee4e97f01a8152f4ad64f1740e65bf4543e5dccba7b351561f4f6055e1f195fd2a2fbc01d2a759c9282487f864b05e0f8607d3b91a59d64503051d74e7
SSDEEP 196608:nHCbe7Bct/J02nePZkg1IPxPHTvVoDB0WkKmvOdUR3:nHCcC/J02nehkgwx7VKaKVmZ
TLSH
T1E2660186F768DA2FC877703209AA5235524B4D128A87D747694C3F1C79B76E80F4EBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

collection credential_access defense_evasion discovery execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/data/local/bin/su	com.example.laxmi777
/data/local/su	com.example.laxmi777
/system/xbin/su	com.example.laxmi777
/system/sd/xbin/su	com.example.laxmi777
/system/bin/failsafe/su	com.example.laxmi777
/sbin/su	com.example.laxmi777
/system/bin/su	com.example.laxmi777
/data/local/xbin/su	com.example.laxmi777

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.example.laxmi777

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.example.laxmi777

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.example.laxmi777

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.example.laxmi777

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.example.laxmi777

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.example.laxmi777

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.example.laxmi777

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.example.laxmi777

com.example.laxmi777
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:5089

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

OneSignal.db

Path /data/data/com.example.laxmi777/databases/OneSignal.db
Size 52KB
SHA256 ab03de5564295f5ec34e2fccba9811cff818911b07798e9e456a58309deeb3a7
MD5 e1941e84ac2269c7b1b8bb7041b14001
SHA1 aed569ddb068a94e893702c297683c233d841f6f
SHA512 99124fc5347f6a7e19e0e30330c4e2f0f2d9074a0fc6a0ab7be25c5bd90d8dfdc66e8abeb1852be871dadb7a5945d7046d2e72ffb4f179c385ed7ffded33c2b7
SSDEEP 24:TLLSRZBUWEaKdStdxyqOkPU/+XiByrBNDd2+32ISpvJqrEqjUix5+xGTrOPjwV+x:TeAcrA0oJxqrKcrObMoOS
TLSH
T11E338BCF4A862191EFC765B3155252E44E3B610E889317A63BF760245E83B16D72387C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.example.laxmi777/databases/OneSignal.db-journal
Size 8KB
SHA256 4474d9e5abdf31287b8f401568f91f39c0833d1ddb4b14d13cac06f9d0b0f184
MD5 a8592ad09b28c10722aa7dfb1cef144b
SHA1 f1978f864016d17ac4a785f2485925a251de7c3b
SHA512 81aa2c870fa488316d982547a8dd87eb256b5a0207ce4867e684826ec110bd23f140234778a872489fc931fc76f9e93a8b0dbb21364a373f48121126e28d5ea6
SSDEEP 6:7+/l9gn1vg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKgB:7+tMqLiuWdwRmBEyPbX
TLSH
T1BE02C08D63800923C81D16F7A0D4C3410E00E71DC371CB17176008D83C835CCE4A0D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.example.laxmi777/databases/OneSignal.db-journal
Size 8KB
SHA256 eb40e7a35e1e5c0dfe032069b32c98769f7e4b45f98997e591f37df0d2b7ec0f
MD5 a978df0a1bb7da1a75d2bc100cc69748
SHA1 ef533f2ea757f8f547393e3c218bf1605dc8741d
SHA512 77c58e5c5bc6a85043ed61b334d064ba352ca01558c939672e2b4d30eca2bd2d45ba781ebcd9e93fc9d805f790522913ffc59864c416154c8427181b8208c61a
SSDEEP 6:7+/l9TPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKLvs//mx:7+tBqLJdTRmBEyPbXA
TLSH
T11402C0C963400C13C02D9BB790D883442E10E754C333CB0756700898BC077ECE89CD00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.example.laxmi777/databases/OneSignal.db-journal
Size 512B
SHA256 0eb7e6457b8d8ca8cd68b2252955cfa0232b779acf99cdf4ea17aa7244facbf1
MD5 bcf56ab30f99fc470e4ca9f49fff9ba1
SHA1 784f3602d17b6c06be7c66e24e8f7ea3137a2ea6
SHA512 bc4f20433e49f8aaa73a1547b02984e9904092ba7cfcc80716844be8a66db051d5a3c479bff8a2b2c566c9547d7a5650868791dda1135971e3a1c85695c52038
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events
Size 40KB
SHA256 e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
MD5 15d5b92dcbda7ef7f9ca327a903e46e4
SHA1 ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA512 2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
SSDEEP 48:Tf+3u59MENZBdUdndVd/7T9IvdldHlq8/JqYpqPS:z+3KMEX0xIyNYMa
TLSH
T1E703F05D4A202611C2BE083FD7E257531B3CE35F5B2387612E904CF6DDC68B6B831998
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 28e276f855156135ec0ab94c9ee05f7f4c7d8070cbb9d5f0886d576506c7e31c
MD5 5a419df51695b4cd993af31f821ad5d7
SHA1 7fde70164136492b264e92836de318ae5429b30a
SHA512 00f1c353c954ad245a59ed2dbb24245250395a82fa1e4f274dfbeb1765bc7152afffef3df8b1b8a440d868159c99cac3b5ce8f1a7a9f2ad9a4aa3c310cce9588
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 e6fb31ce27261b1904aa187c733c4f3ef08dec8a59643032afbfc61ed125319b
MD5 cd8596b40cdc43499a67b183809bf9e4
SHA1 fb4e15d23546e90555820d6f48b98352cc34070c
SHA512 123b733cfa02bf1b68709b99f98930d6daa89f9f6c11fd4709b526427c7c2a4a23e4743383779f5cc29494b360cee835cbf9f26d756f5ff0d213c9023d89a860
SSDEEP 6:7+/l9nn10fg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKSM:7+tIqLiuWdwRmBEyPbRM
TLSH
T1EC02228EA3C00822CC9926B7A0DC83461D10F71981A1CB07256008983C034CCF4A0E04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 a6eec01cc76a7d61fe3e4da92bc4b6a6103a5efc65fc7dcbf0c85fd8bd6f3ff1
MD5 61af64c5ae93a9e8118deea2df1cf89f
SHA1 bc4a9bcf7b90c3e371776c574ee44816e9ef1d4a
SHA512 6ef8151bbf91d77e51b63a1bad545a30d8930ebfd4ebed265733fde124ca230dd4221252861b683a0dee6a2c3d394531b50b08cc0d7a95f0d289d70ca6d144e3
SSDEEP 6:7+/l91HPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKtU/O:7+trvqLJdTRmBEyPb1O
TLSH
T1F00212896B414913C5295BB7A0D983553E50AB158663CB67166008987D46ACCA894E54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation2891893174816311333tmp

Path /data/data/com.example.laxmi777/files/PersistedInstallation2891893174816311333tmp
Size 90B
SHA256 b0f6d40dcc5cd137706981c5081556a0e65b0d13e9c96c42c15648dfb5de8594
MD5 5d68035e6f40f9a3bea5a178937968ec
SHA1 42e03afc17489e149cb1c6986d20f6bc78e55694
SHA512 027b1470d972146f760bb5250f5f12ce18d631e8820dd79ecf36b9ebbc62405732f923251a5a56e1bd68b6e007ee64d02857d7b659822bc9b199170bae78f55d
TLSH
T19EB01204E6324241C48AB2033D8ED7902E5124400989CB440A08905000859D4D1139D4
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation6106845249363866173tmp

Path /data/data/com.example.laxmi777/files/PersistedInstallation6106845249363866173tmp
Size 566B
SHA256 d577a1a95dacf5b8ad5e869542fca6f6b85c528838a16d759b6c1df444a93942
MD5 d4bdbdebd72491d439881e78d2d2164a
SHA1 c25aa585719e5116b6923f69aa3ea75c0b131bc2
SHA512 c12bbb6742f8a57183a78af2dc8858d78cac3bb23a7f1930fa59d77af544cbcca10aa235b5249d52b1bb6b16dbc090ca0fd458a8227138bd5c7aeaa4bc8fabe5
TLSH
T166F0E184E6119725C459929720C97FC46C080145135606AFAE6D9979AA64A7DB24B2B0
MD5 SHA1 SHA512 TLSH

Submit Download

profileInstalled

Path /data/data/com.example.laxmi777/files/profileInstalled
Size 24B
SHA256 5b165ace2ea17bb50bc1265b8978fc22e5284b3807219392b6157b01d8dab0f6
MD5 ce5a5249fb7acc7b3ac6de24dc0fde3a
SHA1 47b6da5fa480e4e8192d7c5a18a2fed096bca500
SHA512 393ccb4416c093a25f7608a56bf72015bd1657d963588880da81e6307a23b3984634825cc62df7e852646ddce626eb1b3d90f86cc2b76690c8158fded1015756
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.example.laxmi777/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 a40de73312cdd54855aaa8f0b52ba1ca1da4ccdb707ae48e73aac18583d7ad84
MD5 bf422e44fa225cae185417ef49bdcf88
SHA1 c5c119ee868d946e4157e42469dd3c8ef8c799b8
SHA512 d3023b48f7b2f7db731fb2d138cf6da390779cf442b89c667b372a9dc9f7088667c42a9671fe4a6a601c47df714e124dac0fa0b0cdc158859e20a5922c38823b
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 7e549d45bf3244189ac766c1f71367e17cbd67f220e2096bb494d888b52f7440
MD5 95e2978b49e79f6545b3b51fc98acbed
SHA1 002fdd2786c7b438a5e451a0dc3a7e66d4536e37
SHA512 8f8721a1df1a2af39ea2ef345920d7be9004dfd814b3a14fe33e27e28a8884b7473c3b33c56bf35f500e72b46d71eadb42e7ed713b36b8e86e4d6bf87396501f
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 126c0862ac3f7242231a54ea7f2c60d1e26c7d2a75aea2815c3006a2793c754b
MD5 bad9e4ab1b21cb4862db2539c810d79f
SHA1 c4a75e30263ce6d5e3617ff8e256ff1c0dfd4d83
SHA512 602be8cebe1f1dd1d51d280fc2a8e04eeb863bb0ac274bd730ebc0e4bbbc32c3d86eae05f560bdadcc2307dd8618d4f6bc4fdfac82e90593d1e88dc59488b329
SSDEEP 6:KwoJ9FZdrlOERX4PBX4ogLugMBX4suuK+/6lC9tvtStiOw2:KVXzdTRmBEyPbP/6lCtSgOw2
TLSH
T17E722BE16F811522C0CC1332D0E9CB401D607A3CD712CF2B16E004373DC1BC8DA52E18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-wal
Size 112KB
SHA256 9cd8a53e49b526fca0af196c1aeb53e94a351cd5c08b55e4e888f473e8137b7e
MD5 6687875b4624a8781680fa227995d38a
SHA1 7b433e06d05a01e454f5a059a48a2ff2b6fe38fc
SHA512 15ec9f84fff4e4d5917cec00dffdc7f56a195ca08c5014fd706df477c9369ffbca7030916d3131e525b26ac9fbb0f36b9cac966359f473bb1b447acc28d68a3f
SSDEEP 96:sy8dlxWVmDP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:szx5ndjnHt9S/f8JzSV+6D86T0ED
TLSH
T14DB3018D0F592600C4E964B0D5D00FE17D3E613E9793E7F125E14076ADD2922EE2ACFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-wal
Size 193KB
SHA256 98fd55cb196a1e0a26c5c0eb40296528084a43684232fdcb76477908a4ed040a
MD5 ead02825645a7994f2e6213d543a925f
SHA1 ea5db8871688c3a8349c62b2a40b04523aff51ab
SHA512 02e82a01baf8b0e1ca040cfb802da171fd8cb4509e5c864e89feb7044989c887dff2439f09779aac20829b4431e48e5e1dd8f39b10d5b383bddf762740a43d70
SSDEEP 96:KE21DtYSbepUEnEVAUuauw7E21DtY5V7E21DtYoCE21DtYh:a1DtYxpIAI1DtYHz1DtYJ1DtYh
TLSH
T1E9147BD73B1F8921EF8B0237A8D608F204BBB1F50B839AD2559F877965C35058B1B246
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.example.laxmi777/primary.prof
Size 3KB
SHA256 4eebd4ccc10a0bd43b9c3384d3c9bff56a887c3715f207da8477e425ee9d906d
MD5 ce9dc936650aa845cdf81b57b70b488c
SHA1 e2ef0714d5b30edb9dc72a7ba6dcc3bce1845b87
SHA512 946aea4a8474f93a2944d770970f5f1d38ee14f3e9e793ea99e5707db1fdaae73b348b862d0f6d6b088c20417bb65cd99aec022c8f4c8bf3b4e40fa08b836487
TLSH
T152516D4F829E76C049697DF0CE32BE5955E6C644341D2B02CCBC2F7808A872C2F4660D
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.example.laxmi777/primary.prof
Size 12KB
SHA256 4a1e61bd8208de8a1efc76d969282a3e3c3c6c53dc135469ed1ebf6e692d022d
MD5 84b0f0f0a4a40b47f147fc536a91cad8
SHA1 95bac4646864618a0046f7ee1a1f4329d4862057
SHA512 52494319f2175173244481e15cdce4cc56b3ab966c5de1bf0a1bbb83d9da9f09666b00416632595210d9b8a55cb21b8dff6f6752d921e1c7b7548050e9a233b1
SSDEEP 384:KS2nQkM5PF33qcsfulJHgepY0ng2Z4ED4X:KS2nQDUu9Z4PX
TLSH
T16042D1A3CF0216E3982642BC1BFFCEC045ABD4F113E402680DB07475848697C965E65D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads