68e185b39b69e340c0635a164ed093d3dc0b128f0b7f409542cf7e48a2b85ca4

Analysis

max time kernel
91s
max time network
157s
platform
android-14_x64
resource
android-34-x64-arm64-20260325.1-en
resource tags

arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
submitted
20/07/2026, 19:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AMX_FINAL.apk
Size 92.6MB
Sample260720-ypfmlsft8t
SHA256 68e185b39b69e340c0635a164ed093d3dc0b128f0b7f409542cf7e48a2b85ca4
MD5 b967a2a4305de9bb33fb7d3e32efa65f
SHA1 669c171c08af62de3465168a43075c1faa25ef75
SHA512 d0307e2c4bc4bf6b5c00aaa3c386fda4815ff1777a061a9fd55fab6180e0af3fd66c71fedc6f3d67dfbf128d49849a18e20811402a132df7d88b972e6ff2b8d9
SSDEEP 1572864:VGJDn03Av0OTZ5rK8024r2QO+fq4VOPpknJMLsFX:VqgqZpK32m2Qe4VOPKH
TLSH
T16528F16AF10D6C27CFC5B53C89420AA0A6147C62D795D2C73012735EACFB6E8873A7B5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.alightcreative.motior
/system/xbin/su	com.alightcreative.motior

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.alightcreative.motior

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.alightcreative.motior

Checks the presence of a debugger
defense_evasion

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.alightcreative.motior

com.alightcreative.motior
1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Checks memory information
PID:4425

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

base.4425.tmp

Path /data/data/com.alightcreative.motior/cache/oat_primary/x86_64/base.4425.tmp
Size 440KB
SHA256 99ef3b039ef5f2a0c1527580d1856e547a5bfef5c71af4046f4d391e43420138
MD5 38917d9e9a33f4cbe095c03e6cdf3d68
SHA1 da961764d50eb8705928496c25129d451c051b24
SHA512 fe7d731d25366b09030eb19abf30486bbda2a2dd96de2c0c97c0ded85efc7e08401cf99b03cf36a468f2b20bf427d1ccfaafa3a1301aaa836d7b11c3304da6bc
SSDEEP 6144:4hshN8P5QTAoVtdPxpywM7OqO/UDeWMEGXph0Mkk3ho8krPVSAe2PwzwT0QDXk:4yhqUgIWeJEGXNkkRpKPVSN2P8RQDk
TLSH
T11CA47BEFBE228151C1AEBFFA9E4645E5BD35C40022472918A4E2673DE533F24E760F94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events

Path /data/data/com.alightcreative.motior/databases/com.google.android.datatransport.events
Size 56KB
SHA256 a2dcde16b9fe3edd3aaa70a59cb19b05d81880f52ee3552d8675f0bca0c365c5
MD5 7945234aecf9a2bab1883835d93ac67b
SHA1 c0ac66da1e7359facce03bc04725846a4ec22e21
SHA512 6b9a193d264c216873f7744f401662427170463a1f3856a478ee54bb7459c392989ceded2b4b66af8c7388de8e5f8140cc5d493915a2ddb857290ee1faeda1db
SSDEEP 48:T0g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSQ:FMEX0wIyNjaQ
TLSH
T1CB43639D5E2C2221C57E283ED7E243635B7C93DF5B23926239908CF98DC306974358A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.alightcreative.motior/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 7d103e810bb6d7413bbb7a311b30680ff61da7df115a8e22eda9736229ab6906
MD5 ef1434ee66cdbf9ca105718a327ac872
SHA1 581fa97516344f86ac4b9688b87d950654187ab8
SHA512 c80a0cdcbb4f7fb5fae81a6ee37532770c9379e7dd1e9f7007afe462da380fdf7f494a735d1a1700a8de22c8d2f239b035d6b49a4eccc33568786899eb26ebca
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.alightcreative.motior/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 96f67117764342711e6b5db8ad0f88d211cb7921f124091d198fb2030746c9c4
MD5 3b6a21830ba8fe864aeb45053e764366
SHA1 a9b261e67a8a074fd7199b1d855c01cd9772891c
SHA512 c95017084c91ea17032eb95614665afe62f7fdb1ae91cf7f991375bb6da4a6a7a5260626d7187e71c244f5a77425567cfe0c7d77834a4f0e06780f5f23a23d52
SSDEEP 6:7+/l9D14n1lg9bNFlEuWdxEAlOERX4PBX4ogLugMBX4suuKUl:7+thiqLiuWdxBRmBEyPbXl
TLSH
T16D0222ECA3800C23C919A6B790E4834E1F00AB188172CB17059408982C03CCCB4A4E04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.alightcreative.motior/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 31182c48b5405d6849e0b459688f683812a829e1e60d9e7cf01222aca3e2841d
MD5 ba549ec19b7dd0cca3569928904917de
SHA1 44866bafcd8819270895fe0502c4847dee3152c6
SHA512 c29236caeca93581afb9972e9170e2df9a4ee34f6c934f5727ce8ce9c20b8236833b4361a33dd8780c077fa5b34f89505a576fbe0658b4e26670c61a32213538
SSDEEP 6:7+/l9qgPg9bNFlLdvtAlOERX4PBX4ogLugMBX4suuKrtM/7yn:7+tM4qLJdIRmBEyPbcts7yn
TLSH
T172022288B3400D03C92A177B98E9C3601E50A7149233CB9F055008942C02ACCA8A8D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.crashlytics.settings.json

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/com.crashlytics.settings.json
Size 774B
SHA256 79003e7e49b54e0103da1dba7e5231d12eecbadd310616ed0af5700d110e23c4
MD5 e3dad5f20e11bcd233bbfedeaefc6af4
SHA1 a3c43ef871146f8e3c1aa6a93903a027be446331
SHA512 b1f6c3f67bac665caabc926ca06d6c198782dc1e035120e7a2a3e73b3d812174cfc04e1d1b81763cd3528fa26ff523121ce3c6eb5f82be3ee8054d2822214c80
TLSH
T17701906CA48898F980EBF61AC67577F2173808732756AC2CF67C832851E79C0921BD23
MD5 SHA1 SHA512 TLSH

Submit Download

app.json

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/open-sessions/6A5E7DDF002E0001114929F438035CDB/native/app.json
Size 236B
SHA256 1a1a89230a6c30c1847356f8417f7b5a9b8043ce70edc95fd4b07c35a0a281bd
MD5 2b9ee29ff610da7117d1cc97dd28bd97
SHA1 4ee3b1724ed797e654f5d5baa7fd5922907dc8b7
SHA512 d3745f5e4a3c9c7f0faa0232cd6f8afd8101b926b7bc027a96a04c4b2fe72e22e45f69ba7c16e32152fd5aea3166b3c5611db51948bd3a7008822931e89a80ed
TLSH
T1B1D0A714951589B77676224F90A590F503FE00E2575D21C8794B1C3F4711A9C03171BA
MD5 SHA1 SHA512 TLSH

Submit Download

device.json

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/open-sessions/6A5E7DDF002E0001114929F438035CDB/native/device.json
Size 194B
SHA256 109fcbadf453ccc1638be14e8be157ed2dad156d350377e361364d228e923b7e
MD5 1c1e2c59eff4c458506cbca277cd3530
SHA1 67c17d8c9504b1b3009481e2564d8b5cf030b16b
SHA512 149ce7357a646c8e62e8867a3908624cf45b9d19729da4fb638958e3d9a4e26cee41541afbd17f4becde748ca53bd8a033d5db4f3a612e54d220bc37051e0e0b
TLSH
T1E1C022B0EC7E3E6E0BA0E1841D338E53BC2008341A4C2D2020F08D14240F8509398815
MD5 SHA1 SHA512 TLSH

Submit Download

os.json

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/open-sessions/6A5E7DDF002E0001114929F438035CDB/native/os.json
Size 56B
SHA256 a12ab762f7690fb0e8945f8425891be03e9a5b4cca0d63676c36a05554721954
MD5 1ef595b2477f08a46b00c9906bac5fc0
SHA1 fcdf14f8fc95ba640d66cff6dae117128374ba0e
SHA512 7331761fb0a9fd30f2a169e2d42e0f5bde9b1c1bb722ec398b40b5f3dba799a159b0abe083b079c3db65665a4d065b084ca068473f7983dae0437b25ff064d02
TLSH
T1019002769880A036641203645A555E51D37014726045F0245857041216A71B80232109
MD5 SHA1 SHA512 TLSH

Submit Download

session.json

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/open-sessions/6A5E7DDF002E0001114929F438035CDB/native/session.json
Size 127B
SHA256 4060fb0b98589fb7ce581c3492b8c2d8bbfb855baee1221a331bc1a2347c2f23
MD5 46f7e79be29a2525bdaa1bc722800604
SHA1 7b1ea350fc1d6400ec1c1b01b4c83ee6a30cc12d
SHA512 81157c2fc81b0b414b38a8800898fbb6b17e350e6442b55b17083a4a85aab8e4661c4785c0adac09d0985330892f1acc6e20c1b68b54c591fce419627cf86ef3
TLSH
T13EB02BB01F606830439355A3F312FD3007B2020DAD12CD1240F0062C62A5D00E1C9C00
MD5 SHA1 SHA512 TLSH

Submit Download

report

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/open-sessions/6A5E7DDF002E0001114929F438035CDB/report
Size 773B
SHA256 56b98363a4f0166b4302cc6ab8857abca3ed182548fee2a7e8ab597f9cc6ed09
MD5 a40543a775ec4e38bf3d116681fae277
SHA1 78048f4d710a14ccfbab7a4882425773ad5442d3
SHA512 687fd457b95292a3961200b2a04ed8a6136e725d19258373e507f611772cfa10fd0dd57577fce9d795939b91c2c753453fa70efcf1b70eb4932b4c989a0b6d85
TLSH
T17B01D058DB7667387609734F9161B997C2F403A8B7255E4CB8C7002326CF87C9393475
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation5142289563612626554tmp

Path /data/data/com.alightcreative.motior/files/PersistedInstallation5142289563612626554tmp
Size 114B
SHA256 ac0f236fd3276def152eb9f30e8b6e52790dc4096fd87cbe8eb28d1d966f9175
MD5 47b46ccf6e0b8a9167a1a75d15f6dbfd
SHA1 8864a4511ad2bcadfcf98189563202266f13bb1f
SHA512 b94111b8dd993c69931f8ebc00540b9728f5c101073d370276a816b1489e4c968221d3ca2bf1b1aa4abb0468f2e5a94b227be1ce881717862845be2aae0b8878
TLSH
T115B09245167889868596A3062D2D95612AD61881696A4A198A0DD450A4EA2E5CA03EA8
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation6954959099005624769tmp

Path /data/data/com.alightcreative.motior/files/PersistedInstallation6954959099005624769tmp
Size 90B
SHA256 c2cb2d86595bd55db9d2134610092bd82b45ab935ca965b0d37be325bab4b6b4
MD5 7cb6c42630b9f5229ee9a880d10ed8a5
SHA1 868bbd0a7f371f52d264ee196d5de7554377da16
SHA512 abfc8cd3acb8d4525133c34c933cde438e7c4813992e9928462dfb4b8d4d137b73c8f7ca98efda66b9a0cf44b82e3c90fe330b1ad9f72d82b030631d11482e43
TLSH
T165B0124156708183C4D5B2063D5CD1411E811841655A8A194E0DD090D0D71E48103E9C
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb

Path /data/data/com.alightcreative.motior/no_backup/androidx.work.workdb
Size 4KB
SHA256 f8046fb6523b685349e4ceaa5b63d5653f3d4d9bc0291dd9546056bfabd76205
MD5 19e5c2bf2a99d61bc5ae4cc8952d1bb0
SHA1 34d540bf135454e98068819b42b84411fdd62dbf
SHA512 454bce38a46107d5a4c64d8757475da9ff6ee0025fa1a8212e613d787927cb209217c655ae4ec7adf884c723e5683f473e21df0a606cd40ada4245f8daf9c3ce
TLSH
T10C810454D34000F1D0D407F354D1130D0F07D1D4D5510F0315070041CC415470C74FC5
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.alightcreative.motior/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 f33fa8b64ccab9d0347628ee48e8bb6513e2996ae38148c1a33cab05ac72b179
MD5 3629090bb007afd3f2c8284243bc6df3
SHA1 eabee2ed61ecca4f36aebc8bf966631832b204a2
SHA512 af8145324189bcded542cf024b21b8aad986b7161c829198eb023a026cc74a44711ff611bbe0821163e5e5ccd6489291a0a3523342e6e48c03df93c8ee333ccf
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.alightcreative.motior/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.alightcreative.motior/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 0b4c7ac160945bac8ca51727f2bcf0f74fe7ae1535dda8503d8cd40715f5239d
MD5 fca8acd6c6f0b759c4f12f1106f5007e
SHA1 a14f873946774de2413d75cdc2368fc3bde57ef5
SHA512 1d4d490d1b0a647e206e554f33018153f2a469940c222ddffe5440ddc848221493b48d1920e4117a8b0d9670f07ba871a7a6c4f2bba9149037d68db77d532b96
SSDEEP 6:K0uAMZ9FZdvtAlOERX4PBX4ogLugMBX4suuK+/OylmcuDOMfOw2:K3AgzdIRmBEyPbP/jqOw2
TLSH
T13E722BD0EF403A03D1C82B369BCBE3302EE1A619536BC70BE61188186F4278CE850F08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.alightcreative.motior/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 4c714f9d819239896b0f4c9fdb45132ffb9a52d6e6639a53570d44e2776ca93f
MD5 2a62810b279c0cc784d6c9deab2dcbeb
SHA1 147dc02a2feb136f893607a7e561db94f6924ddd
SHA512 e6f973c38b4c2149976a8abd51b991e7cf1e0b5802fbc62a209233de8cc8993eff0a4e56689feaa33ce9d352453435783b50479b568220a8fa6657fd9313db6f
SSDEEP 48:+Y+Y66M/31pp8aEKeWrFhVtD/ymmumWAhrBlOymdGWOWKuWov6xl73JcXSMmchI5:+b6+hdjnHtDRMpf8UzS6+BD8q0ExPeH
TLSH
T19EB3108E0F193640C0D968F0A7911FB179BE812EC397E3E5A5914065AFC2920DD29DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads