181a75348ef246208b390b15139dd6acd2304d285ce7c6621e93cf77192dfc09

Analysis

max time kernel
149s
max time network
155s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
20/07/2026, 18:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
king7hub.apk
Size 10.8MB
Sample260720-w2a7jsbv8j
SHA256 181a75348ef246208b390b15139dd6acd2304d285ce7c6621e93cf77192dfc09
MD5 acd47a725e6d7f28202198f484168943
SHA1 82e615b20f64b5c22989c0c6ab03f080adfab6e1
SHA512 a7cfdabee41cf9dd7baf00f4da6abcb1329ae44c9346d0e390a40b9db8541cc6b544773a2c56c228c1dc44f1374fcb43e14364f4b67ffc25626f093bcfd04958
SSDEEP 196608:kJ7Ch9/Jk12BQah12BQaJyxQ7EhAJZBHkGgvEhvu7gk2jIrj365xxL5xPGYXu:kJyhBrOBrJn4yTNm50+SxLfP8
TLSH
T184B62381FBD8EC1FCC73803247A21676864A4C9AD782E38B5914B26C58B7AD44FD5FC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

collection credential_access defense_evasion discovery execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/sbin/su	com.king7hub
/system/xbin/su	com.king7hub
/data/local/bin/su	com.king7hub
/system/sd/xbin/su	com.king7hub
/system/bin/failsafe/su	com.king7hub
/system/bin/su	com.king7hub
/data/local/xbin/su	com.king7hub
/data/local/su	com.king7hub

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.king7hub

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.king7hub

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.king7hub

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.king7hub

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.king7hub

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.king7hub

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.king7hub

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.king7hub

com.king7hub
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:5083

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

OneSignal.db

Path /data/data/com.king7hub/databases/OneSignal.db
Size 52KB
SHA256 ab03de5564295f5ec34e2fccba9811cff818911b07798e9e456a58309deeb3a7
MD5 e1941e84ac2269c7b1b8bb7041b14001
SHA1 aed569ddb068a94e893702c297683c233d841f6f
SHA512 99124fc5347f6a7e19e0e30330c4e2f0f2d9074a0fc6a0ab7be25c5bd90d8dfdc66e8abeb1852be871dadb7a5945d7046d2e72ffb4f179c385ed7ffded33c2b7
SSDEEP 24:TLLSRZBUWEaKdStdxyqOkPU/+XiByrBNDd2+32ISpvJqrEqjUix5+xGTrOPjwV+x:TeAcrA0oJxqrKcrObMoOS
TLSH
T11E338BCF4A862191EFC765B3155252E44E3B610E889317A63BF760245E83B16D72387C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.king7hub/databases/OneSignal.db-journal
Size 8KB
SHA256 acc3a000389527c3e681f0f71c8875bb1bc471bdbff0c116f139e772c218b777
MD5 8df28d7d8a8d35f461fa5712b230ef02
SHA1 dd4902fd7b6dae536d82185d25bfe05044ed8cf9
SHA512 d167906bcf410073968f84a3f698ff2030004755b8097162f995e55621d0aea4b8a95d146190c17a090f74dc4f41c65d5e53ff66242311a58665414a27d685d2
SSDEEP 6:7+/l9ZYgn1el//vg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK+C:7+t8fqLiuWdwRmBEyPbE
TLSH
T1D102228AA3801923C9292FB798D483602D00E75D8162CB0719A108983C038CCA4A1D44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.king7hub/databases/OneSignal.db-journal
Size 8KB
SHA256 1a66078bb8a08e39b8f9a380f0006c0007e8557233230e51daa56d1d40d24d55
MD5 1dd393477caed50095e7536c3531facd
SHA1 74e116f5ef370f48ed683e67caa32a2a1f814b36
SHA512 d4f7bb4d52384dc242ba2ca2c8d16cfd2a1cc4a00433fbd715ab690eb125410adbc8cff5338362b947d58abdb05645769f3e9663608eb0072782d44350906fe3
SSDEEP 6:7+/l9KwFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKvXllGt/q:7+tEwBqLJdTRmBEyPb0lSq
TLSH
T1590212C967410913C51B5BF7A0D9C3652E50A715C263CB5716A108987D466CCA895D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.king7hub/databases/OneSignal.db-journal
Size 512B
SHA256 bf926065f783d0d900112b32cc81071245de014e4dc410821ca68bcc4369284c
MD5 31f8889943398a128bdb15704c7da3bd
SHA1 48edfba02ae179e764fed15512b7a5b387151630
SHA512 d30e7a5a60b60d6c29ebcee5a0dfbf265c25acbc127c640d3471830a70513ec79a1e2fb2abbb91085ec3a818dd6fceca083bc67abee39264353fd700277d3e75
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events

Path /data/data/com.king7hub/databases/com.google.android.datatransport.events
Size 56KB
SHA256 ed5b175eda72b720c86a8c3918868857532fd03ad765df22acbbb7d66da2124c
MD5 2b2db15887921fc86f1df5267384a99b
SHA1 865319cd92e5c8698d18b0a5e5d289c81db0c2b8
SHA512 ec09c064fe77c9cfe7c907fc80a8780a37ae6ac4433122d4f2169dd78e51560d6dc9cf67380a2206f163956bf67c991d92b093d4bb0e2b3c4351286444d558cf
SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSY:8MEX0wIyNjaY
TLSH
T12343639D1E2C2221C57E283ED3E143635B7C93DF5723926239948CF98DC206974358A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.king7hub/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 b4031abf536793cefb03ec4695585e5e47c5460399e5f2cceaacdd5fda6608a2
MD5 1fc67e4b113b6a0652e67d738ed13f39
SHA1 b47806c02df1ae73e16a1dde641806eab2fa5777
SHA512 8fcc64e2db4f6c165734d6a8c575f8441ea9d55b20c67995e0d21f560bea747c16e71542542074dd64319929c993688639916488ea44047fe07e82ee3c78303f
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.king7hub/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 d5f76f09e3d56fe7adb06a55d180e00bf9ffb4cb6bfffbeedfa2d3b3d42738d1
MD5 347be8a6e43c3ca9be388acec42c3540
SHA1 4b46c522da1c68957b1eda78138d1991cc4bd72f
SHA512 28c14cb3275c50b2f3e5825c51d53c9c73b93e19435f938f5381d5e65d55b365591099181d4f9ca94d1daaeea319dc7a9e26201c1a4677957c9d1a757742b5a1
SSDEEP 6:7+/l93CFn1Pg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKsZb:7+tVuqLiuWdwRmBEyPb/b
TLSH
T1E002228963820822C81916B7D8D683500D20E729C672CB1715B008E83D074CCE4A0D0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.king7hub/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 1a4b296a7fec7e7ad4ab7e4f233715d5338cccbf6a0a42b358b6dc83ea9fa5f2
MD5 5331530e5ba9145e92b14ef6cf806b82
SHA1 e22d213bc1de59ba805fff70e8b9b8ed68bdac3a
SHA512 4feb5eb791d04f24902f77119cfecb79ce26c1d345f087ef1597e4f39816f247e6ce4e2b2d315ae27d95d6bee3eb524ec80cd9fd116e2edd813b29aa9a6c9512
SSDEEP 6:7+/l9W+FPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK60vkl//u5:7+tJBqLJdTRmBEyPbL+sXu5
TLSH
T167022289F7440813C0195BF790C8C3802E10B729C623CB0B256008983C026CCA894E00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation4442313353242624516tmp

Path /data/data/com.king7hub/files/PersistedInstallation4442313353242624516tmp
Size 569B
SHA256 686dd9a637bc5182870f2aba51e1fa87e4673db1cc5c43339490b7ff298648bb
MD5 1d431092dacc16d7962f397816bc6e18
SHA1 092f43e15da76f6d462c3814482628d82a78c8b9
SHA512 ee646a8d7410fb7bdbd0080beb757eca9806e61860baf7afd75dc1a22b1f82d95864bf2753255734f21d55c3db925d7b704cd4aacbbbfa67ffefb5eff7ed255f
TLSH
T103F096194B60CE2DF0DD034E308B3DC09C0718D7471B15E9EF9888659EF505FE11B544
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation8560659936284322635tmp

Path /data/data/com.king7hub/files/PersistedInstallation8560659936284322635tmp
Size 90B
SHA256 a957653de0801786aa149d251c5388bf34655cf192b31d771ff6c7c7bed61075
MD5 7c13879e73d9e343faa11f7efdda579c
SHA1 40dfa6b054e90b0e911d614899290b134a5a95cd
SHA512 44fb87fb77b4e78677a5074f2b8f52f8c0c6f7f8be064c5fe80d50b441ed2257f87539bdb86e8c0a5e763b0a66cccc2b02feb2f7c89e7897858f3a07c9b588b2
TLSH
T1ECB012048B304352C8C5E6462C5D95E05D85144114098AA50A0CE05086D12D6C143AD8
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb

Path /data/data/com.king7hub/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.king7hub/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 577d82275dcebc94189fa72d29b62eb00c0c07a09d9b12d5047a5b521b4f909b
MD5 874f54d8e73bfaf5e1f8b267e35b3d59
SHA1 d63b348e0c2f25e31020e2f155112e6142544de3
SHA512 fa6e35e0f49c4f1ba38235f61f69de372d2b9502708afdb32762ac994b201b92687cf3139a371cfcbf1ac795956056e0bc9d5978f806544740923d07efbda07f
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.king7hub/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.king7hub/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 f34c9987fbe839a6bd96c2fa7913f827afe614d52bcc96491004b15fd0bf9f3d
MD5 419d0f65a17cf9187f962a9a0fee372d
SHA1 e6d8b786730563d51bafd08c5915a0e509b31ef6
SHA512 ab12984d7d263603325e097cbdd47b8b44a9a074229571a3ec7c6551bdfe643d02b9da548d79fd17b1e4133adf618fb1f2e85a51432c0f1fdc9ff6dcb5a3921a
SSDEEP 6:KQs3GQ9FZdrlOERX4PBX4ogLugMBX4suuK+/0pQgk4JOw2:KQMGazdTRmBEyPbP/0pdOw2
TLSH
T18672C2985B941962CDBD4672B4C4C3412DE0579ABF53DB87199208543C09298A862D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.king7hub/no_backup/androidx.work.workdb-wal
Size 112KB
SHA256 eaa9ac54d7017fd29695521854b76d9ffc6261694dc44fd581ba26323ff9a52c
MD5 decfb1893fdcf55fb16b606758d13952
SHA1 ebe5d59c6435e077a06fbe0e72a4fbb98f255519
SHA512 ec37b3ad8dcb0b8fe38d5f62ed00b881b60bf6b34be702555aea1e3ff2abfd937b2b27b9d8cf6192e4a37fc7669a9e557ceaef86e7ee75ae45a13f24db66b182
SSDEEP 96:Itp5VWeDP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:Itp5V3ndjnHt9S/f8JzSV+6D86T0ED
TLSH
T18CB3138E0F6D2900C8BD64F0E5D00FE17D7E426EAB93E3D165910075ADD6921DE2ACFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.king7hub/no_backup/androidx.work.workdb-wal
Size 201KB
SHA256 5fcbc33e256cf080861fc32cc3227da6d15112057f94056866620243c0438672
MD5 98c18b8e5dcba578ccefbf232e665e74
SHA1 78e78d6eb2aa82f8d8fe585fc210e0cbf9564907
SHA512 262c018b4add265b2fa35588363afe11844c3003c084121839778f08cc91109bf08d36f0bf8cba4c6893f266d975e338c922b990fa9db51b3746a7a3b859e19a
SSDEEP 192:8h1DtYG0ESQTQgkS8/h1DtYxh0h1DtYq71DtY:U1DtYpEaX1DtYc1DtYi1DtY
TLSH
T15F145EE62B2FC831EF6E013BFA5646F20CF351E92E96D45057AB026024C92459BA7E11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads