25ca14cc34a07441563a533e81d62242e66336ecee890162ac702dfe57c3fc17

Analysis

max time kernel
57s
max time network
152s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
20/07/2026, 18:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
laxmi777.apk
Size 6.8MB
Sample260720-w3l1fac17s
SHA256 25ca14cc34a07441563a533e81d62242e66336ecee890162ac702dfe57c3fc17
MD5 0e7c0c784692a909f8c1dab408e46d50
SHA1 b615cf027ed9d1745f185e0ef5cfa69453927d3d
SHA512 d247a3ee4e97f01a8152f4ad64f1740e65bf4543e5dccba7b351561f4f6055e1f195fd2a2fbc01d2a759c9282487f864b05e0f8607d3b91a59d64503051d74e7
SSDEEP 196608:nHCbe7Bct/J02nePZkg1IPxPHTvVoDB0WkKmvOdUR3:nHCcC/J02nehkgwx7VKaKVmZ
TLSH
T1E2660186F768DA2FC877703209AA5235524B4D128A87D747694C3F1C79B76E80F4EBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

collection credential_access defense_evasion discovery execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/data/local/xbin/su	com.example.laxmi777
/data/local/bin/su	com.example.laxmi777
/sbin/su	com.example.laxmi777
/system/bin/su	com.example.laxmi777
/system/xbin/su	com.example.laxmi777
/system/sd/xbin/su	com.example.laxmi777
/system/bin/failsafe/su	com.example.laxmi777
/data/local/su	com.example.laxmi777

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.example.laxmi777

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.example.laxmi777

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.example.laxmi777

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.example.laxmi777

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.example.laxmi777

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.example.laxmi777

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.example.laxmi777

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.example.laxmi777

com.example.laxmi777
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:5089

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

OneSignal.db

Path /data/data/com.example.laxmi777/databases/OneSignal.db
Size 52KB
SHA256 ab03de5564295f5ec34e2fccba9811cff818911b07798e9e456a58309deeb3a7
MD5 e1941e84ac2269c7b1b8bb7041b14001
SHA1 aed569ddb068a94e893702c297683c233d841f6f
SHA512 99124fc5347f6a7e19e0e30330c4e2f0f2d9074a0fc6a0ab7be25c5bd90d8dfdc66e8abeb1852be871dadb7a5945d7046d2e72ffb4f179c385ed7ffded33c2b7
SSDEEP 24:TLLSRZBUWEaKdStdxyqOkPU/+XiByrBNDd2+32ISpvJqrEqjUix5+xGTrOPjwV+x:TeAcrA0oJxqrKcrObMoOS
TLSH
T11E338BCF4A862191EFC765B3155252E44E3B610E889317A63BF760245E83B16D72387C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.example.laxmi777/databases/OneSignal.db-journal
Size 8KB
SHA256 cab36a598c3441793c33794893c9ea39d707240bcbd08b9a7ecdea5dd78bc36d
MD5 91b4cfdb6a9f691407be15cf55a7e0cd
SHA1 c08f9751c9d63b3df0553e4f12afadd94f9c49f8
SHA512 75ec2b2daf484c6608ea1a922973242ea75221d0d6d545836a042a605ba206bc7a1ad152bc3a6e3744d57581181628d8a11ca407d5e636f142ab26ce19bcf63b
SSDEEP 6:7+/l9/lGn1Pg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKyl:7+tUqLiuWdwRmBEyPbb
TLSH
T1200222C973C00832C81D17BB90D883400D08E72AC171CB17296008B83E434CCB4A0E04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.example.laxmi777/databases/OneSignal.db-journal
Size 8KB
SHA256 9ca3abf1877f87d2a573d58ff8895063efd79c6ce0bb62288ec45ba81d490b62
MD5 abcd4d6cdd6169d60a4e775138367106
SHA1 4c2b0de2e6cd8bb3b5e3f1cc70c0ff84ca85b1bd
SHA512 c282e0c26655e72458f002a180179d18f9eeb227e010942c99bc8a92ef8df7bdcbdea34179c4593f0e57feccc0676b1ecaa195e7fcd386c80036ee32fae766a6
SSDEEP 6:7+/l9WDFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKAkl//7:7+tIDBqLJdTRmBEyPbbsX7
TLSH
T11002228967800813C01917B790C8C3402F10A7149223CB57156009A87C026FCA890D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.example.laxmi777/databases/OneSignal.db-journal
Size 512B
SHA256 0e2a666a7e2dea4c20fdcfc854ddcc961f313e82c147775b7769d05815356d80
MD5 5e8a9bf9ce806cdff69bd6d896dab751
SHA1 fa04b2dfcf0ddd9f654f5438418ecc9cc53ca35d
SHA512 0d0e56dd6acb20f5603dc90bbae9db6b76b5c4d042a380364f7abe1a8a5ebf3e2b76143eec6f56be06583a0648ce91a06d9d460f6e0a1e0e0ede66e5fa81160a
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events
Size 40KB
SHA256 e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
MD5 15d5b92dcbda7ef7f9ca327a903e46e4
SHA1 ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA512 2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
SSDEEP 48:Tf+3u59MENZBdUdndVd/7T9IvdldHlq8/JqYpqPS:z+3KMEX0xIyNYMa
TLSH
T1E703F05D4A202611C2BE083FD7E257531B3CE35F5B2387612E904CF6DDC68B6B831998
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 b49e1e483268bec0e5b8683a5954bbe9c5f672b5c79e46ba5eb0cd7322712db3
MD5 fb9b52a991717df1c6dc007e3b577e86
SHA1 5da44df4741f27174f4291b9f37ae8c3149f1a67
SHA512 d450886341bbc460778171d619a15d79651f38e0f5dd75ef6de5ef0a798a4a70be7e0bb1b3c5b423a9bcdcb58336a39b09cc6f3273db77dc2a54f900dacdcb5d
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 7fcd65011b671d3d049cd8c73599c9f3b6dfe27fc5337a3bd67e65b2e85b8f02
MD5 91de71a9f57a6d21d3be45e4ce0b0ca3
SHA1 882142d456fe22b5700f62412ed8630780a914f1
SHA512 c52d52e3117da90002b8a98a9672a8185923aceaf927a6a5e415636b07828264799875d40cfb0186470ff7e04ef5dd833504261c81c215d3689a3cf82ab19040
SSDEEP 6:7+/l9FwHn1N5l+Wg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKyh:7+tzosWqLiuWdwRmBEyPbRh
TLSH
T18E022289A3800822C82956B794F483850D90E71DD1B1CB0765A008B83C0BACCA4A0E24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 1aeca2a8250f11b831fa76166318ebb2460143ba2dc73f54eca183a85b331755
MD5 80d7d2c198566e39826275998daf5431
SHA1 6e25366f314a5c1c2349381d40de28e89cbc40aa
SHA512 33a2bff80ebb581e3f9546e39974300e79280ee58ecec530b477ea70137ab6641552f1e15665b108c1a20aee0aff0edba8aeb6fa02992512f8921c369aec592f
SSDEEP 6:7+/l9jgOPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKM/0:7+tmiqLJdTRmBEyPbf0
TLSH
T1B10222C963400813C01D17B7D0C883542E10B714C227CB179D60089C3C436CCA8D0D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation2707700954995646681tmp

Path /data/data/com.example.laxmi777/files/PersistedInstallation2707700954995646681tmp
Size 90B
SHA256 096719c5234460fad15e6954a3944b605437345d17ed217360d467e7b3e17b3e
MD5 bceef1e2ac64a99eeb45f9f1edaa1a62
SHA1 d281dc8df897c4dcafa2a7a979e56915965ce918
SHA512 476f811be7b5b22729f0ca0e6d52a9f213410efd37d4cb7087ec60721038477e72691fbb1c3e29d600653b8150ce2b7542705d69a5d97ea11b611c4663999bb3
TLSH
T1F2B01240677042818897A2422D4CD1005E5128400409CB1D8A0AA44044812D58503DF8
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation558194801720575974tmp

Path /data/data/com.example.laxmi777/files/PersistedInstallation558194801720575974tmp
Size 567B
SHA256 d7cbf130a09aba45a8e53ee5016298a0af6593ee16ee245b992ebc18e9dda227
MD5 150aace30de3326dce6189e8f3b2204f
SHA1 587ef2c5f25a084f4b9f20a4a62280ac0cca6085
SHA512 6f93e9012d5a14255933b367f9e56cfe3d67f1ff3473bd38acd406830d4d51d06bd9bf64b2c532ec882b62a36758993a0af6e769197a33248478b37bd1a37867
TLSH
T180F02642539249ACE8C503CA3585AC406C148854551D47F9FD564C8499F65BF7356518
MD5 SHA1 SHA512 TLSH

Submit Download

profileInstalled

Path /data/data/com.example.laxmi777/files/profileInstalled
Size 24B
SHA256 24490ae2cb9fb218cd415bb91445a36eb2584651dc8cafc8d38b32906543b2ef
MD5 d4fbfa8dbe6890c01cb48c3ffbc5d46d
SHA1 3edccaa5dd396110bbc5f14d91561dc07b8e1e72
SHA512 472cb2d4fab2e8d9e12b2b4354f449156ccc5876c38e87e938f75c6307f40338d2bd89cea27ac4cb743f4cb83458bb08fb9a86d8005cee659b79697d3b3c8319
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.example.laxmi777/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 cfc72657b5a6bbf075ca3355d8ec428b4116288d4fafaca528c09bbcc9335bb3
MD5 dc54127b8d51284a554af8b13396874b
SHA1 db03305ba57f5cdba2a150d2aae4090a92542bae
SHA512 7e75564db207dd62bba06741a63475c1d6271d1736786afcd9f74d58ae2f29698f88f2a34d28d798e5a55f915a490d2756eb9bafcd09cb92e96d6863575953b7
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 cc8431f458a34084657ebeebc8624641a53d3794d6811a3e6ceedfaffc208e11
MD5 1999c796f982f128e81fbee63b502555
SHA1 b480f1e3f778e97664560134266cf494d387ab43
SHA512 d76b9fb547d3830e5d6273bcc559aa590006efa4fbde7e232da3b571bed8e0d0b537e187c0b2eb213f35a9fd7fd4a59cd6f90d46dfcd350842cfe0c943e790bf
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 2cd15ce81e3a15a9a2ebe838a0cc36658638ddf367f004ba921eecd8ae561cb4
MD5 0bdbb10e674ea26fcb284cebb2178405
SHA1 62798cfd5210ed538388f38dc1b72112d8c9b836
SHA512 161419d7508583d64954df2ec8b1dd6e5a7d659223eb2e2b4e2b27a954a8a31e5d5cf100d90f9721b5dd5de904cab90d2c2e48d4e13f3398ab699f3e7ba97094
SSDEEP 6:KVFYMFb59FZdrlOERX4PBX4ogLugMBX4suuK+/XPTlI86OBlCC0jiOw2:KVF7FzzdTRmBEyPbP/XhYApOw2
TLSH
T10872C75893881E73CA088BB75085C3C01DA9522A4673CB2B52B934B22C8A7C8EDA0F48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-wal
Size 112KB
SHA256 b2b0d1909834d6e996f80aaa74613ba50f0c4def1ab2b752bbc1e025d408df41
MD5 28e45c18468125f16a913d072a8ae328
SHA1 aa1c25da8cfde5854eb6f907eeb791922bc43a53
SHA512 3437b91bac2f5cb08c119ada1596f1ac367332a53bb783f5e5d5aedbd42cce1abfb6ae35747d23669bce74f7f46c47236b16fbacd36ef13b5b2914aa6b5026e2
SSDEEP 768:I5eyZ1PSP7dsRcDkg5kj2HCyFxHSsJzSk6D86ZD:4gzSk6Dx
TLSH
T1B9B3218E0F5D2A10C0ADA8B1E5D04FE179BE412E83B3E3E165912075EDC7921DE25CFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-wal
Size 193KB
SHA256 25b7e0d146d75a827ae7133d9b91b86cd878963f4888b716a80044e6a6e99b03
MD5 b20d2c71cb8a50a98ca4459cd11d7eae
SHA1 73269240efd9fee26a8798140260ac586d89e941
SHA512 fa47794508ee425ea36e667915e3be504020e72508424d9dddfed18dd7e139e560ca8f00358f70d97f81bc9f3a215c8b2021d8949235f50562a0d34883048fcd
SSDEEP 384:Z8eF1DtYwi0v5/s964KxNaMz6aFF1DtYgVy5wFNF1DtYfX1DtYe:Z8KDtYwJv561kzfhDtYgQuFZDtY9DtYe
TLSH
T19F146AE6223E4921FF4F0B3BA953C8E204FF5CE40EF79550966F6B2415C62848F27666
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.example.laxmi777/primary.prof
Size 3KB
SHA256 4eebd4ccc10a0bd43b9c3384d3c9bff56a887c3715f207da8477e425ee9d906d
MD5 ce9dc936650aa845cdf81b57b70b488c
SHA1 e2ef0714d5b30edb9dc72a7ba6dcc3bce1845b87
SHA512 946aea4a8474f93a2944d770970f5f1d38ee14f3e9e793ea99e5707db1fdaae73b348b862d0f6d6b088c20417bb65cd99aec022c8f4c8bf3b4e40fa08b836487
TLSH
T152516D4F829E76C049697DF0CE32BE5955E6C644341D2B02CCBC2F7808A872C2F4660D
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.example.laxmi777/primary.prof
Size 12KB
SHA256 4e9aecab0df4c0fb645b0dc474e431266be95eb0ff9e5e9eec247ab898cebfe9
MD5 b284e712c431e7b164a4a012d0b63e36
SHA1 068beaedc20757559d33299e16b16f27d14a895d
SHA512 65043dbba8dfca76807bf27433d94731b63cd7b020108a32dcf163d934658664ced899e70896a7ee5479ae0979e02dcfeeaae0f03e0ce8abba7b4f3d62c32947
SSDEEP 384:mecGKNJWZPsKA6InaJkYydOhW+2gROSjc:meSaSKYacd9MPc
TLSH
T16D42AF3E8A546FCB27910DA08B74F6599AD09E05E79AEF32872C5F890365C3F78D4608
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads