68e185b39b69e340c0635a164ed093d3dc0b128f0b7f409542cf7e48a2b85ca4

Analysis

max time kernel
91s
max time network
153s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
20/07/2026, 19:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AMX_FINAL.apk
Size 92.6MB
Sample260720-ypfmlsft8t
SHA256 68e185b39b69e340c0635a164ed093d3dc0b128f0b7f409542cf7e48a2b85ca4
MD5 b967a2a4305de9bb33fb7d3e32efa65f
SHA1 669c171c08af62de3465168a43075c1faa25ef75
SHA512 d0307e2c4bc4bf6b5c00aaa3c386fda4815ff1777a061a9fd55fab6180e0af3fd66c71fedc6f3d67dfbf128d49849a18e20811402a132df7d88b972e6ff2b8d9
SSDEEP 1572864:VGJDn03Av0OTZ5rK8024r2QO+fq4VOPpknJMLsFX:VqgqZpK32m2Qe4VOPKH
TLSH
T16528F16AF10D6C27CFC5B53C89420AA0A6147C62D795D2C73012735EACFB6E8873A7B5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.alightcreative.motior
/system/xbin/su	com.alightcreative.motior

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.alightcreative.motior

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.alightcreative.motior

Checks the presence of a debugger
defense_evasion

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.alightcreative.motior

com.alightcreative.motior
1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Checks memory information
PID:4353

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.alightcreative.motior/databases/com.google.android.datatransport.events
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.alightcreative.motior/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 934e4a32e278bc70458e5a64d3d2a96a43dc8c85576eafccc5b98e4fb5d25ab8
MD5 bd9bb16f1cd6eae2581aaabd1edea893
SHA1 e49ff5547ad01d8322d2e73981f19a3aa1e57de2
SHA512 15dae4a646af5487c2895f18fe86f146558f4386464e2c6df3bc4f99ed1e42332e4f21a5fa0b596be455850dfb32f645d32036fab09888e05b266da4fb5166cf
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-shm

Path /data/data/com.alightcreative.motior/databases/com.google.android.datatransport.events-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-wal

Path /data/data/com.alightcreative.motior/databases/com.google.android.datatransport.events-wal
Size 68KB
SHA256 d66418377243ace2949b54c5b8db8a7f65341bd07831dc8f5158df5fff67c855
MD5 8568dc735738ab32c582e1e90284513c
SHA1 8e926ca87d762dd5aa0401471593c0cbae6554f3
SHA512 9ecb8fc8aa5bdf44aaa04598b663e279672abff18dc636af712f8c2bc7d3789afe095a606af3d8e01d16e7eb5ec4d6f8705b194bca720e1f71fde6e4fa95400f
SSDEEP 48:xzNSP/yv1g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSP/K77mnbjk:F0Pa2MEX0wIyNjaPi77mHk
TLSH
T11B63515C5A2C2221D36D283FDBE943631A3C93DF571383763ADC4EE98CC2058B02195A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.crashlytics.settings.json

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/com.crashlytics.settings.json
Size 774B
SHA256 03b8827daa321d6e0be772e8237f0c6145512f7ebd3e619bafddcb7a04593cc3
MD5 ff573681df190863d57cc57b5f4b9691
SHA1 d7efc3cd3bb1529eab153075dea3082250e2b228
SHA512 c4d706721d1a96ab751e195ae878005eeef21eb30af33c30eb0f35a68850cfd4112dc23c47231e282888c483a3d2c7a0acab4cb2ecd060aed2cdfd60616623a7
TLSH
T13701906CA48898F580EBF616C634B7F2173808732756AC2CF57C832895E79D59207D23
MD5 SHA1 SHA512 TLSH

Submit Download

app.json

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/open-sessions/6A5E7DE2015B00011101E3D43330D0DB/native/app.json
Size 236B
SHA256 7aa9c61c6c9fe9a99b477d4329ff3327aaa72e56a12bcd86795052c68319b1d8
MD5 ff6525ac108b3985582b221f60c53327
SHA1 3689aa163d990e1f711aae9c8889bf0292bfc3cb
SHA512 2caf93ab3ca54ac99b164f8aef1018d7bebc0f1d159fbec0b1a08e5fc29de514c9edef3895675548fd9a1b51eb8b251372e889028e3b184a25174a33041ef5fa
TLSH
T1F4D0A728616489776669525F80B594E103FE40E24399318C7A4A1D3F47109DC0317167
MD5 SHA1 SHA512 TLSH

Submit Download

device.json

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/open-sessions/6A5E7DE2015B00011101E3D43330D0DB/native/device.json
Size 194B
SHA256 12f31fdec8ba70ef50fbd48cf64827dc589fe0159a66adcfcb75d2a53ef5ea77
MD5 822535afcaf6e3105ec356cae9bff276
SHA1 549bb502453d95cf36d5e06ba36b07fcd3800eac
SHA512 6cea9e2d8aa68b63bffbb23e7600d223c40f4082ef5134e347d635391966487b80fb2fa6511abeb9c680a90f9757e65765176b29fed7fa7f7bfa510abac7e695
TLSH
T1A2C012B5FC7E3A7E0B91E2852C238EA3FC6008341A88292064F49E15190B8449399556
MD5 SHA1 SHA512 TLSH

Submit Download

os.json

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/open-sessions/6A5E7DE2015B00011101E3D43330D0DB/native/os.json
Size 55B
SHA256 bd4d56b8a3894787d825e6254049c869632bcb2923dfe9a0c768a1bfed5e5325
MD5 4c7a416dbc1add857f8c131953a93c47
SHA1 2d775853a6a38f485a9f5919c79f297bd6ddb2ae
SHA512 cbe9526b6ee685473073bba73b1a06636127bf466af2266374d9ec5d634c216be1bdc4424cc29dfc991c7b4081e324002e00f786dbc0f71536c0a3cfe15969b4
TLSH
T1AA9002765881A036141303545A555E51D37014726044F1245857042112671BC0271109
MD5 SHA1 SHA512 TLSH

Submit Download

session.json

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/open-sessions/6A5E7DE2015B00011101E3D43330D0DB/native/session.json
Size 127B
SHA256 4c95f2ada72935f708362a65b83c1afcb117ab493fa11e873c338480999a9adb
MD5 c6fe02493506af4dc5b0d67fd083d7c6
SHA1 70ce929696a5d66602bda8349cf96edfb8a9b7ee
SHA512 f1f1858024bbbe5aaf2ad7495e9a8e160b3ae91af419c4da246c17d282722fc0502039ddd62dcb3a4f9ca8c0f9cf8e8146f26bd27a07f550d9482fd7fb990326
TLSH
T19EB02B70D2643C30435756A2FA1A4D32479A02086415CC1111F0035DF7B4E459185C00
MD5 SHA1 SHA512 TLSH

Submit Download

report

Path /data/data/com.alightcreative.motior/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motior/open-sessions/6A5E7DE2015B00011101E3D43330D0DB/report
Size 772B
SHA256 777afc5a68f5888c8d1f2f5d900b230aaa6336fbeda45f97c1adff72c6e30c22
MD5 fa2106e96abd0e4fb5eec28d129be0bf
SHA1 2c588311556b45be4c325f864b3bf771c53ffa07
SHA512 d0a8cdabaab63138463a4f2bf42be94dd327f3b110ea8884d71e5032bab9154dc0b1212add0842fd84f9200ecac0739cbe4a5fc899473b2ccf4440f9cb77f717
TLSH
T137019068A6B96738160DA79FD171B952D27806A46711990C79D7013316CF8AC9383436
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation2339731188087736462tmp

Path /data/data/com.alightcreative.motior/files/PersistedInstallation2339731188087736462tmp
Size 114B
SHA256 7612681c3d32219d228ad575176182286b3160a90491cb9182237cc0519fb810
MD5 606f6396b165789e26a46070b91f2b5c
SHA1 40a0b830a4b77dc1b3ab6f0be32535f7b431e75d
SHA512 1eb28da24fdc344b385d7303be9a3409a250c5f2536ee4f7b264a900d8e4c0fdb1960ddc21af7aecfcce4338b49169f97363d748d431fb4627f57851d3a78d00
TLSH
T1E3B01244077CC592C646A3031C5DD1382FE758C00C2ECF095F08D40470A42E1D723EFA
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation5996989982553373604tmp

Path /data/data/com.alightcreative.motior/files/PersistedInstallation5996989982553373604tmp
Size 90B
SHA256 db20f7f1034aa10178cac6efb83dca0ddfd75b0eeab4df50cb450e3818f77526
MD5 d2c4f608edb3d8c7460737b889c89264
SHA1 13c05508febe89ca7193d00f719f4d728db772b5
SHA512 a50e3beab8309699786ba92f9772044bf5d55462ea6a4afd9145aaa7d752f27473198713df289058858a4b1cf9ae0108507c00cb944fe4009034aa1dcd5e2114
TLSH
T15AB0124047708192C585A2021C8CD1041F521880081ACB090F08D04050911E0D323DE9
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.alightcreative.motior/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 491d23d559b7cf7bda9e086b5ebb4ff8b0fbf82db2e261eedc01a9436e6fa4e0
MD5 9802e1cfd4953d03f222a3acc1e70690
SHA1 201ce712af55acd96b0f9285ecea8ada4ea83558
SHA512 f38d3c9360f66301f8ce5be31cb1f982feb6db94b66563ba1bf0cd5070e6836a27e4ef75bd5ffe2b3ece223fe1efaa905f8d4aa888f3dce3b4a4748380705086
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-wal

Path /data/data/com.alightcreative.motior/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 d7f2e7d563d2cc359c3926713ff5984f78949f5679e57013eb23b902eeba8229
MD5 39b296717751877d4b547a147269ae36
SHA1 2f94906b9240df684e918837294e4fbfa6d0b4e4
SHA512 e3d5bdbf4df9b2b6fbc766a0d02df4bc562f594b504299b9a18474f26abf417d16366dd600a0732dbfd2fc013d37681d58772f1a8afd8a478f9e63395ca4ffec
SSDEEP 6:KYBsA2Vs5ho9FZdrlOERX4PBX4ogLugMBX4suuK+/KsbectY1ziOw2:KYaohyzdTRmBEyPbP/ocAuOw2
TLSH
T1FE72C2E1A3804B5BC62913B350E8D3011E72D608DF53C78BB9E118206DBA688EEA3D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.alightcreative.motior/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 ebc484bcf3f029ea48194a3376463329424312658b7a60cca59bedac2e45c312
MD5 41beb876a0092d05c3bbeea1a222671f
SHA1 db6de4b45b9462449da08847b6aec582f341c224
SHA512 0f1627aee5933456a57bfdd2d47bf4f73aea8b83cb58badcafa59611aa6cdf8d9fade622b320cf6ad6e5a25a945f743ae7e9aecd6de320f69276d0dc42847e20
SSDEEP 96:V6+hdjnHtDRMpf8UzS6+BD8q0ExPp8jVZYm:5djnHt9Mpf8UzS6+BD8q0E5p8HYm
TLSH
T12BB3138E0F192641C4A954F095E00FA1797F412EC793E3E579D14075AFD6920DF26CBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads