25ca14cc34a07441563a533e81d62242e66336ecee890162ac702dfe57c3fc17

Analysis

max time kernel
138s
max time network
152s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
21/07/2026, 12:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
laxmi777.apk
Size 6.8MB
Sample260721-ph2f3atsct
SHA256 25ca14cc34a07441563a533e81d62242e66336ecee890162ac702dfe57c3fc17
MD5 0e7c0c784692a909f8c1dab408e46d50
SHA1 b615cf027ed9d1745f185e0ef5cfa69453927d3d
SHA512 d247a3ee4e97f01a8152f4ad64f1740e65bf4543e5dccba7b351561f4f6055e1f195fd2a2fbc01d2a759c9282487f864b05e0f8607d3b91a59d64503051d74e7
SSDEEP 196608:nHCbe7Bct/J02nePZkg1IPxPHTvVoDB0WkKmvOdUR3:nHCcC/J02nehkgwx7VKaKVmZ
TLSH
T1E2660186F768DA2FC877703209AA5235524B4D128A87D747694C3F1C79B76E80F4EBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

collection credential_access defense_evasion discovery execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.example.laxmi777
/data/local/xbin/su	com.example.laxmi777
/system/sd/xbin/su	com.example.laxmi777
/system/bin/failsafe/su	com.example.laxmi777
/sbin/su	com.example.laxmi777
/system/xbin/su	com.example.laxmi777
/data/local/bin/su	com.example.laxmi777
/data/local/su	com.example.laxmi777

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.example.laxmi777

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.example.laxmi777

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.example.laxmi777

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.example.laxmi777

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.example.laxmi777

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.example.laxmi777

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.example.laxmi777

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.example.laxmi777

com.example.laxmi777
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:5092

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

OneSignal.db

Path /data/data/com.example.laxmi777/databases/OneSignal.db
Size 52KB
SHA256 ab03de5564295f5ec34e2fccba9811cff818911b07798e9e456a58309deeb3a7
MD5 e1941e84ac2269c7b1b8bb7041b14001
SHA1 aed569ddb068a94e893702c297683c233d841f6f
SHA512 99124fc5347f6a7e19e0e30330c4e2f0f2d9074a0fc6a0ab7be25c5bd90d8dfdc66e8abeb1852be871dadb7a5945d7046d2e72ffb4f179c385ed7ffded33c2b7
SSDEEP 24:TLLSRZBUWEaKdStdxyqOkPU/+XiByrBNDd2+32ISpvJqrEqjUix5+xGTrOPjwV+x:TeAcrA0oJxqrKcrObMoOS
TLSH
T11E338BCF4A862191EFC765B3155252E44E3B610E889317A63BF760245E83B16D72387C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.example.laxmi777/databases/OneSignal.db-journal
Size 8KB
SHA256 9ed5c77821df9244ff6087caa137e7ef9dc021ee4aea7674cab8b01f8f44ed99
MD5 b504679f9bbc42f43c3b74d8696e604a
SHA1 12df46bf5b397acf8334c777aedc59bfc0ec7057
SHA512 9d5c160b79aed9331452ccb6c8412e2d936d7ee5648600756cb2ca4e9bd4b2525b2edfdaeb71bfc5e3d9cbab1207d6c5cb486e7a2fcf5de4d51af9f426b3c776
SSDEEP 6:7+/l9ZOn1h/pg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKEn:7+tfcRqLiuWdwRmBEyPbHn
TLSH
T1090222C963800822C82926BBA4DD83800D10E719D162CB1715A00CD83C034CCA8A0D14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.example.laxmi777/databases/OneSignal.db-journal
Size 8KB
SHA256 b5cbeed56b496df3f9139ce4078d92e331d12e5d1a1cdab86cc5ff26a0c9d450
MD5 fa8e2168cce9b77f45e13271e82ae5e8
SHA1 f005b786f849044d2f930dd8f5dfa46606dd9f28
SHA512 8b1993eb3461e7733cf3a980e8960babe760d49502bb7222ad049a61703d16bb4f6d93933eafcfeca19ee9b6db218ba0a58b745f067dfeac9210b3ebe70fc400
SSDEEP 6:7+/l90dGPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKwa9M/W:7+trqLJdTRmBEyPbQ9sW
TLSH
T113021299A7810913C6296BB7B0D983552EA0A7558273CB971B6008D87C86ACCA894E55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.example.laxmi777/databases/OneSignal.db-journal
Size 512B
SHA256 dd0b9d41fceffa49b97940ab9e882bb040ae6a61c52af79f2b0f950818bea4b3
MD5 eae711fdbf850c57bc7f8e595dfa37c1
SHA1 e825021838d8939d3842d590b66c7ccb017c2b63
SHA512 eacee8b66ca094335b3ca5d4ef37fbd36ef5dbd77b17cc67d2cd00069439ebafc88605c831de2053a87010a5159de75f5611b1c991382962d6036d46abd73940
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events
Size 40KB
SHA256 e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
MD5 15d5b92dcbda7ef7f9ca327a903e46e4
SHA1 ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA512 2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
SSDEEP 48:Tf+3u59MENZBdUdndVd/7T9IvdldHlq8/JqYpqPS:z+3KMEX0xIyNYMa
TLSH
T1E703F05D4A202611C2BE083FD7E257531B3CE35F5B2387612E904CF6DDC68B6B831998
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 0981d0fea2c4788002b02b36919b26ca5053f0eafa79d58d77e9da7e27f4cf4b
MD5 b2c41f03d2710612e9b28317e8bb02c4
SHA1 8876a099b635908630fff67e4f25fcb072b05df2
SHA512 c27e6fecabea41032f998e614f050d3adcaf9db20b13c839acbd3313b8b8432766115f532585ed6a275f69c45fa3ce69cc0e9dd614068955efcc08e0f2567d97
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 e81e838cb3737161628a2cb7aa49d856176ab7526ef94f627e66f1f09cee4c0e
MD5 97e1008e761cbbc4910f616c33515c82
SHA1 f0a84ddfd1f477c36343f957b32867b0042dc7b6
SHA512 6f18a77f10aed27ff7da691ab66e039b4321ace1f4f6633571eb0d73d923321fd000839ba8a0407dbf99c7ee0f4ee9acec31ff825c6735241e36706c2ec6c44e
SSDEEP 6:7+/l9TOn1dg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKan:7+tBaqLiuWdwRmBEyPbJn
TLSH
T1710222896FC00822C81A16BB90D683801D11E7298171CF272560089C3C4B4CCA4A0D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 357f428e8adbdf6973aa0c90c0c61ec948ce34fd748c5a5f830c3b4aae1f5865
MD5 3d8d089ab335262918b121c2d72c7a7a
SHA1 21e9a0539ca8d81d4890d6e101c9d03d5f36d38c
SHA512 56425333346e591a84a5f6a195d06f535c27bf3f536f7a2869c57dbef09c164f62e1d298528ba6074484a01d8955d29c6d69122936462a90a1fbe9b82763bf5b
SSDEEP 6:7+/l9RllgPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKsxxls//T:7+tFl4qLJdTRmBEyPbzjsT
TLSH
T18F02129A67810913C61D57B7E0DD83552F50F7158263CF97196009A87D476CCA890F94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation1094923781631726804tmp

Path /data/data/com.example.laxmi777/files/PersistedInstallation1094923781631726804tmp
Size 90B
SHA256 e2feafcaf90ac7e0054ddb960f4a2ccc380060471b0609cffbee7b7ecf0374b2
MD5 3f5636b7dacb9658a06e043e9faa0957
SHA1 f4aac50eda9729d834d5763ae43029e02b2391dc
SHA512 423da8f9a3fe2a88a33bb7b9ef9a68d03728febfd59ae36fab3d016ce43393f67c685b419880c5009f8f04fad319620815a026746e73e52187869d9c8ff7314a
TLSH
T14CB0120146748343A8CEA3023C8D95005E8814804509CA560E0DE08045C11D18103EB4
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation9096483987061634393tmp

Path /data/data/com.example.laxmi777/files/PersistedInstallation9096483987061634393tmp
Size 568B
SHA256 6ab470cb96cb9474b4e48541058d33f8c004978db12e07a56286d3cbc33c8454
MD5 d82ac6d980ca6f4f35db9058bb256583
SHA1 86c36a4a9ec9efec0f343e7150d2bd381ef21f64
SHA512 e69320eb9fb123410e1c16ed35c6d3df2e73037e90b086a09612f936554ce3f1edc06bb2a211b1daab7a5a413705f3fa452a8287d5f7fec6d00d793eddd143d1
TLSH
T137F020217D1DC61AF49E434B30CEBD000C2888EDAB8D84EABDEE88D049A196A5207718
MD5 SHA1 SHA512 TLSH

Submit Download

profileInstalled

Path /data/data/com.example.laxmi777/files/profileInstalled
Size 24B
SHA256 9a31951698191fca168eea3ae97271a3a0ecffc37329e6deae4ce3e372f89a3a
MD5 3d415a8ca2e7bf562ad341c28530de2f
SHA1 d91178d04851fe173a604f7f74c353d11e8fb69d
SHA512 8a40f2f01affd65d52dd6df422b2d87694a78adc5d77d7af0997e2203d9eedd38dcaf9c6a0b8eb4df0750314cb0df87ad091c55d4ff98e94452ec4e621aa4be9
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.example.laxmi777/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 0924f9a6d7bfdb7ae1cdf9361e9f8de0937d2432be0daa2b70f51054e4ec160b
MD5 822ab188ed5cd942d53a8096072bdd69
SHA1 ab28085065b7df5da4e05b64e41c05f35ef79d20
SHA512 037b37a5d18c9ab3f6302cf90cd20227b4c3392bf9846e9b19953e1176027fc82fb1aa621b959a662388451a45dd3c3fb07eb9cfb166ce570f1189bc5cc8a18f
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 92e735d939a08a6ca90ae0b0b94a1ad2b55134d9f831d011855064dc3821e4fe
MD5 2f736404f8beb26ff86e7e387290e491
SHA1 9f21cd4454df4c36e7a6c3e1b85a752c02eb4208
SHA512 c478bb512e74accd691e86fc596d58fbbc7b4f9f6ae7b017a06d79a433f9450c02baf5ca07e7181a34aaba735116a532f71720e722cf5b99d085788656532e41
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 78919fbbb65e63f05d019aa94134a82053381203af5d04d626cb8b32f46d4216
MD5 d7a7cd1f750fa5170ef2048aa1fc5922
SHA1 06890e1766c0ba449c7fe4f52f1aff27ac2f0777
SHA512 25f7e0016606528192017b2c9cf63b6bae4d4de05e32c54556afa23c1f8e315a82689a0ba71c432f7c131fd7173a8870a8a12066b02e4f4acdb83295521adf90
SSDEEP 6:K+XHx/NXrbv9FZdrlOERX4PBX4ogLugMBX4suuK+/Gxn4EtO9nMmF4tiOw2:KUx/NXXlzdTRmBEyPbP/w7Kn4gOw2
TLSH
T1B372C274B7802962C46AE3B6728483013D709E89A756C767956124A4FC42ED89990D09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-wal
Size 112KB
SHA256 1bdff4c11b19fd9e8b35dd703a1d91f3dfd25f70211184fc8f9c4f5029af292b
MD5 32f4c05f494995dfde921700ec571a62
SHA1 c35b741c4714206ea37cc7a600db5d8644d7aebb
SHA512 9a8a2991b13b27480b11572dbc991804d45884152ca7120df50af566c29e5e4ae3fc39e0a332b031e6a32d30d6b3097526e8653f61fbe6a2c390fa050c3d5c92
SSDEEP 96:O8pWQDP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:O8p1ndjnHt9S/f8JzSV+6D86T0ED
TLSH
T177B3009E1F592600C0AAF4B0D6D00EA1793E456E9393E3F2659110B5FDC6D21EE29CFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-wal
Size 193KB
SHA256 4b7bd40f8c476adc56b462d852b240d3a97d1355b11985276158e33cfd935d2f
MD5 0ea58c5d2e5304b0e9cdf87b164fe4d5
SHA1 5ca8bed0cb5bc13f7afacf6b2ee6f6f3a1b1e28a
SHA512 0e4cb5ba2f323e231ae2cb64df4b8bbbe171de6ff73483296fc1be9af7d1fac7d251814d18a00590563ed6bf599feaf85ce1a1991a439eb0390d09a93ad605c5
SSDEEP 96:O6E21DtYT53UEUE1UuPu/E21DtYDyrSE21DtY6uE21DtYH:OK1DtYl3xs1DtYDyO1DtYL1DtYH
TLSH
T17E149DE7B10E8431FF9F167BAE1711E2297304EC5E9394E09D6A7354E982200CF63907
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.example.laxmi777/primary.prof
Size 3KB
SHA256 4eebd4ccc10a0bd43b9c3384d3c9bff56a887c3715f207da8477e425ee9d906d
MD5 ce9dc936650aa845cdf81b57b70b488c
SHA1 e2ef0714d5b30edb9dc72a7ba6dcc3bce1845b87
SHA512 946aea4a8474f93a2944d770970f5f1d38ee14f3e9e793ea99e5707db1fdaae73b348b862d0f6d6b088c20417bb65cd99aec022c8f4c8bf3b4e40fa08b836487
TLSH
T152516D4F829E76C049697DF0CE32BE5955E6C644341D2B02CCBC2F7808A872C2F4660D
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.example.laxmi777/primary.prof
Size 12KB
SHA256 2acc108d76e31bb6179c7b5c581e4c9dfaf894802eb636def3a64054d4c3b359
MD5 19949af3805040f181d6eda0e5826995
SHA1 4d5822194f728888359c0643ae5bce4ed7091a1f
SHA512 5e16d0041dd353bda20c9020a487b786fcfffb0ee23324550316a3d749becf8310278f6b61395303ce4cafbc96c81123754e0a8e82d29e3dd95f0c0751373734
SSDEEP 384:KF+tX6TtLWAazSxJzeUzfNK4pq5no75huCe15Pwf:KotqTNWvz6RZK4+no75Ts5S
TLSH
T1E042BF0F1AFA4CB38E8246C2BDD8B1F79F94824559F78B75A0394CCE2DA48454FCEA40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads