68e185b39b69e340c0635a164ed093d3dc0b128f0b7f409542cf7e48a2b85ca4

Analysis

max time kernel
11s
max time network
157s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
20/07/2026, 19:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AMX_FINAL.apk
Size 92.6MB
Sample260720-ypfmlsft8t
SHA256 68e185b39b69e340c0635a164ed093d3dc0b128f0b7f409542cf7e48a2b85ca4
MD5 b967a2a4305de9bb33fb7d3e32efa65f
SHA1 669c171c08af62de3465168a43075c1faa25ef75
SHA512 d0307e2c4bc4bf6b5c00aaa3c386fda4815ff1777a061a9fd55fab6180e0af3fd66c71fedc6f3d67dfbf128d49849a18e20811402a132df7d88b972e6ff2b8d9
SSDEEP 1572864:VGJDn03Av0OTZ5rK8024r2QO+fq4VOPpknJMLsFX:VqgqZpK32m2Qe4VOPKH
TLSH
T16528F16AF10D6C27CFC5B53C89420AA0A6147C62D795D2C73012735EACFB6E8873A7B5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.alightcreative.motior
/system/xbin/su	com.alightcreative.motior

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.alightcreative.motior

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.alightcreative.motior

Checks the presence of a debugger
defense_evasion

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.alightcreative.motior

com.alightcreative.motior
1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Checks memory information
PID:3327

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

base.3327.tmp

Path /data/data/com.alightcreative.motior/cache/oat_primary/x86_64/base.3327.tmp
Size 440KB
SHA256 013553b7fd04a5183cab195de14ede39b9d9f0302cba6dcfbe51c8328004ad7b
MD5 0eb6fe16bb1527e42abc8e317c11a4b6
SHA1 e86377a07b74a126ec11ec39f9b54a159f07719e
SHA512 d525206c3928397a85b8516e5dfd03b37929a993f991fda7d7123e8c79916d87082f8c2edd40c03492c4a16683ba2da16e14ce27cba60035aec2ac524fd21733
SSDEEP 6144:FnIAt/0nITqGQjJhYBsuwI0/71KRaRY+9knomw/kC4NyEGsh+Q6DQElRbooFlzCO:FPanoAnmwL4IEGwoflRUoFliFA
TLSH
T1E3A46BEFBA228151C19E7FF65F4A45E5BD35C00022532818A4E2637DE533F64E760FA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events

Path /data/data/com.alightcreative.motior/databases/com.google.android.datatransport.events
Size 56KB
SHA256 7f762963a6afca8ff186432b6e861fcd983e7acc777336ea61ce0a8f772e51d7
MD5 c34870bd598967ff45a0b7f07ef4b698
SHA1 3c3aa125326280d8e0c2eae774aa1a0adea019ba
SHA512 2870ae5f9451dc0ecc1c7fe824e595d80926e0d4985f6807f96fbfa90682f6d7d60f2121bdea64a1839b7df19dd02453ce9426778ac0d1b6edb4f7db2ee635b8
SSDEEP 48:Tqg59MENZBdUdndVd/729IvdldHlq8/Jq4qPS8:DMEX0wIyNja8
TLSH
T13443639D1A2C2221C57E283ED7E143635B7C93DF572392623A908CF98DC3069B4354A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.alightcreative.motior/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 e446d03ad5872f9812e50e31c977f8c2107ed45770ba5c339b68c37e743d6a69
MD5 d08d42ccb0935ef702425f598fffdebf
SHA1 d21ec3aaaa46ef87e15d7cbf5f26bb60f78a4976
SHA512 9b9eba65c0490e99d36f6eed812fbf9ee3d00e967266a5dec47c0452278808005a6758ec5501c45e0e926e87e88033e88daaf82ec2db2142b2212d877dbce2e6
SSDEEP 6:7+/l9SSFPg9bNFlLdvlWlOERX4PBX4ogLugMBX4suuKRbkl//u:7+t8SBqLJdvloRmBEyPbIbsXu
TLSH
T12802229877400813C11917B790ECC39B2E10A72DC263CF4709E008542C02ACCAC90D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.alightcreative.motior/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 02db07644dd5afcd604961fd0ae14288de755578ab08077eeceee238bef96fe9
MD5 cf4368dd3128e26f41a0f6d86a0107df
SHA1 4279cedc9d49fb98af3fdc7da0b57a5205a9e9df
SHA512 05d6e0b1b865e96f30dc9e74ee3c06194e9d016ec511c9c2615dac71d4af8c6356f83a6764b24c4ac24c26818e6d862de1251047f9369fca3e53bff78b294d48
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.alightcreative.motior/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 8bcb3238400f0b12a765672fb07c6b8a11fe6fb2ae79c904d7350f0ebe2868a9
MD5 e32201834a1912e07b4cfa40c90b57b4
SHA1 91ca4367f7ac251d7a3495685690219da7b60f74
SHA512 43c22df35c7260478f053d26815d0849270b79badc5d2f93953e45b7e64aeb58d7ec869b46272270e7f58e7e248e0ac39c93804b6adee9c3a2c06be8817f8f62
SSDEEP 6:7+/l9MFn1nZg9bNFlEuWdkG4lWlOERX4PBX4ogLugMBX4suuKy:7+tiZqLiuWdQoRmBEyPbN
TLSH
T12A02228867800C12C8293A7794D4839A4D10A718C171CBAB059008943C07ACCA8A4D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.crashlytics.settings.json

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/com.crashlytics.settings.json
Size 774B
SHA256 de918d0afb1553300b7cbcbfff7e6c293807f3367677f660a85a06768228e969
MD5 bbfab6f657230454206685ee206e4a9c
SHA1 8c7778e1b1c46fdb55cc64ae1fb684151dcdf4df
SHA512 36210f4c45b7b1d8a61a863ca739c5817324996fea8fd144b32127c996eb488a49e40b1e8967116839e73df46ce4644b3c4581b3cff5b8b7ca98db9aacb61a2f
TLSH
T1A3016D6DA488D8F580EBF61AC634B7F2163808731766AC2CF57C832891E79C09207A23
MD5 SHA1 SHA512 TLSH

Submit Download

app.json

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/open-sessions/6A5E7DDE012700010CFF6583DACFCF5E/native/app.json
Size 236B
SHA256 b7af8a2a4a22d77083589eb85031923b4cce897cf68b452a1992a28fb0e943f2
MD5 6849bba2644116879d51c0466aa42fd7
SHA1 6e638971d1821b998b441aba02b45077a80c7017
SHA512 a9b7f0bb3713ed364b1b18acd9c518c4b234417fa2975974179b53018fda5728f3371873dceb614c3264460381288fe11e47e7efb76f02bef198ded1f8459b56
TLSH
T1FBD0A714522089776365424F50A584E503FF00E24759218C790A0D3B4755EDC0357157
MD5 SHA1 SHA512 TLSH

Submit Download

device.json

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/open-sessions/6A5E7DDE012700010CFF6583DACFCF5E/native/device.json
Size 194B
SHA256 fd17ee8cfa87079d6b567224937d1ff2cc939b80a53b34ded080fde1343c7732
MD5 83a49a94a78cf46ea598d7efb8c0c10c
SHA1 a255ba06ac40c844daacca374a7e3819cd06d7cc
SHA512 f0429cd0d8841fec8954f9a213eefdcade09807beb6294112ce34c9ef9108061f8e2ec3fb7db8b08ab71d9cee294c0e70c0dc1a68a3cd2eb6633ad5403d99e58
TLSH
T1F9C022B0ECBE3EAF0BD0E1841C338E53BC2008301A4C2E2064F08D10344FC409399826
MD5 SHA1 SHA512 TLSH

Submit Download

os.json

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/open-sessions/6A5E7DDE012700010CFF6583DACFCF5E/native/os.json
Size 56B
SHA256 aab8e31a32daff7fbde3f0f1e3afe9bd99b113338161f9c64b10744a818a0408
MD5 0d586617b527b794f25a8847a323caca
SHA1 6b2546f54e0fbffe37a9273f0d56995249850e3a
SHA512 878c3f2ebfeacb0fd2841b906dde59aa6365018df6cb9dbd0e81de608551568fc30279a8e4f85d6f359db929f90d8615ca1decc82c99b97d780756c890c76715
TLSH
T1699002769880B036101203545A966E61E37014726045F0245857041112A71B80231109
MD5 SHA1 SHA512 TLSH

Submit Download

session.json

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/open-sessions/6A5E7DDE012700010CFF6583DACFCF5E/native/session.json
Size 127B
SHA256 48ebd5f63e177ff77cf2dd1022f304cd6dd42a3484f93ae0ff305873c68d048f
MD5 4e4829487ceda6a290237bdb01f34e29
SHA1 cafc8a6bb0f9b00ffe933ca1e3c6261746c14a9d
SHA512 70b868e5d162123648f33fc830b6dd76ca83cebd1842e5a828a60b1402a30599ca7a1b79ae74ddd7bf6e3c424adac07eacf22f7ca1eaed6f17fadbd8d9c8fbfe
TLSH
T1A9B02B9023F023304363D6B2F311853006E102087461CC2102F40F6D17ECC41715AC84
MD5 SHA1 SHA512 TLSH

Submit Download

report

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/open-sessions/6A5E7DDE012700010CFF6583DACFCF5E/report
Size 773B
SHA256 c62da7d407f3594393ad1887770dbf2cc2c62f7e485efd93eb1cef98c421a703
MD5 5e893bc624c4a81e283d7ca50af7de52
SHA1 a41c59e4e061bf0bb4adb8c9ce1f25ece2a2e96f
SHA512 746d667987ec23814e90d8ba0d63a8f6d168e97bd0230b9e81e0d3547cdc75e2455116af8d061edb0a897737537cb244bc987e2ab9757bfc0c125cb3f9f6df1f
TLSH
T1BE019CA8E7B5277C5349978EA061ED66C37602A497215A4C7DC7012326DFDACA387036
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation167311613516561643tmp

Path /data/data/com.alightcreative.motior/files/PersistedInstallation167311613516561643tmp
Size 90B
SHA256 49112509540e9d8091e31aed9adf90d76acd84fb1705a04aad9c6c6a8a3671d0
MD5 83a4fd245d462a3c94b2fd15680b4dcd
SHA1 9e79da86d7dedf9c5a8580656080c84bc31a01ac
SHA512 a01521eedb22eba074dc370ecc5b530cd215f3868d6a2c74a6b6c450d1071bb5bebdc8fcfd8d7d7fc5720ed1e2802951ccd519e6f0b33c926a6898bb8db9eedd
TLSH
T125B01200C6354142C4C6F2161C8DA5041D5114C0049D8A040A0C949004821D59123AE4
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation5452696955702461336tmp

Path /data/data/com.alightcreative.motior/files/PersistedInstallation5452696955702461336tmp
Size 114B
SHA256 17d7a051d85344997517dcdd5bbbdc37427a16633e4b1cb2b2ce37df49da6256
MD5 b9028ff2b5307be1ca0a739c596bc605
SHA1 a6bb1c0c9a5e17073b350a88365f2b81dcad3e81
SHA512 157890207c34d8f803e0c00b75ca3bde18f88199802a5bb9201b2857ebc673bf3a0868161d61b7f03934aa72c86485ddb8ebd9630e26072d7c4b74b2ec7f7766
TLSH
T1A4B01204873D8542C587F3171C5EA9382EE315C008AD4E044A0CD85428952D6D623FF4
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb

Path /data/data/com.alightcreative.motior/no_backup/androidx.work.workdb
Size 4KB
SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
MD5 f92de9b7aca81136a5f2712adbd9ae8d
SHA1 8612ffa8ecae146263660d878c1e74d3da282d00
SHA512 9c2b923253b6871e68b7c513a1cbd80d39e270749933dc8e08d5add372f5f432c183768854e699cbd68c105b4e81a5500caa1d3fb2b194743c2b76b6095a526e
TLSH
T195810440574000F1D05407F354D1171D0F17D1DCD5410F0315010041CC455440C70FCD
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.alightcreative.motior/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 ba8f1561cb775463c0d082f70120c035d1ce352d812ddcb2f67635f6fd965921
MD5 368608720f7dc45081e648b0d61b8924
SHA1 7c544d310de5188dc36ca346a3761f37a107a2a9
SHA512 94eeefa27babd779dd3d41ae16589098c62a42b1fd94f6bad78cd5bfeb340f5ab36aa5b379399062a6302ee7ac75c55305e77c3fd1b5aeeef04f3760a762d175
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.alightcreative.motior/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.alightcreative.motior/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 9d0331d827cadbabba1c5070456ea4750137b09e236c24a7c482666880bb8918
MD5 19e7e9192f065860e2edf5ec2e71e594
SHA1 ce71bce37eed9bcc172cf7a7087562da15b5625e
SHA512 ba73bf232514cc7dc5d9fc18408e9adc759ba69e30f397259dbf28c0af0da70c7a29f5b8caeb88a0572887dedb561841b7dd89d89d4eb7583ff99e429b8ff7cc
SSDEEP 6:KozRERE8RoRg9FZdvlWlOERX4PBX4ogLugMBX4suuK+/IRItiRWeXHtiRqLWTOw2:KozCX6qzdvloRmBEyPbP/I+oF6TOw2
TLSH
T12C72C2809783455EC948E23658D4C30E0D68320ED312EB8BD65218287D837C9A9D2D2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.alightcreative.motior/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 9c757d2eff8fba3120e9a63f1ff243129ce30b89b9c7cdafcb3bc2052c7a5dec
MD5 96d62f67e8c9a03a76d5394951fa61dc
SHA1 16fdbc1ba4562aa929cac9a771d6eb2c82fe4f55
SHA512 0c8b53a8e4e3219cdf1dd7eb377e4e6598ce3bfdf9760659a660246edce704cff15d216aa410b0380b536afc4ab78177079f3d0f40938e62e349111d0d7fe0ab
SSDEEP 768:NrHMCUzSVBD8OObM+7TSrYe+6Bkwy27n+qK:mzSVBDe
TLSH
T18BB3E34E0F1A2548C899A4F099E00FB2793E512EC793F3D5A5910079BEC7921DD6ACFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads