Analysis

  • max time kernel
    43s
  • max time network
    154s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    22/07/2026, 23:15

General

  • Target
    EasyRetailPOS-Pabili.apk
  • Size 8.8MB
  • Sample260722-28t6wsdd25
  • SHA256 6e0d135b0d5dbad06d2ed4c96ae6ee665c77d39828bd3c3db090e3a6a1bd920f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.posbase.frontend
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:5062

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        journal.tmp

        • Path /data/data/com.posbase.frontend/cache/image_cache/journal.tmp
        • Size 31B
        • SHA256 8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events

        • Path /data/data/com.posbase.frontend/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 336b0bb6ce2d2ea0df885103c09e2a5a87b138802b4f0a15fabffe73cb3396fd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.posbase.frontend/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 3f0951a496a899a9ebf0da66dbf76d2977c48db8008851d1bad9894dbc534360
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.posbase.frontend/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 bbafcc9a4c1258111be58c739f6011b91a93cfdbe34de1c243c896f1c3e5b7f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.posbase.frontend/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 55eb619b21a5bdc81cf05c30c5b98eea93900eebfce7468319dfba2e74fe36e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 e555a082409d0198c23e4d755a4ef33812e60200908ace61f6d1484195693a71
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 e0952a7d15f057b4d2a99954ceed2e1b92e22bef9095d15c7198d8e939c9ee6a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 171fd6dc01179ff75369252a59ef96cf534a841d24da022686f2d989e42a5af9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a37023fd5a8a4cf4685f04f40b33ff4e39a6303afde631334abedc80e9568bac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 458aa953a9e0adbf5b8765ebcf6b51bc5b5a48b7664e85d25c7a8ce9781a2d5c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 069751e4ab10ec576705e039439122fab2d5fc0f1306424dcb4d22d9dc00d8da
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 7630bd6bbf815cd51281e3b41be49dae3bd8ca6fdf457fee89bc2801d4c22477
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 a0303ce96a4d2db2924af08a2911cd061ad3446340c7a92ba3aa723d5bdb4d36
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 eb792eac055cd4be26248a252b599acdc55757fc28001ac46186e93719058bf6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 840a3a33d49de90a34ee99a59fc3d2a4669bb861ebb53c9f92168d4c116161fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 26d27236bafe158f68e45526e4ffcd00432fc171fc288306bcddec47208cd93c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        412a82e7-72d3-449e-953d-bd24ad0b89bc

        • Path /data/data/com.posbase.frontend/files/412a82e7-72d3-449e-953d-bd24ad0b89bc
        • Size 2B
        • SHA256 8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4
        • MD5 SHA1 SHA512

        PersistedInstallation1541019112679235987tmp

        • Path /data/data/com.posbase.frontend/files/PersistedInstallation1541019112679235987tmp
        • Size 566B
        • SHA256 511d01b080ae4357a938f882bc8d7e39908b4e171d7754463c8d356e85219787
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation5969039546520346446tmp

        • Path /data/data/com.posbase.frontend/files/PersistedInstallation5969039546520346446tmp
        • Size 90B
        • SHA256 52fce7abcd730f3604f375afa231b9232c2a3ef8d1acd4cf36aac10a11408900
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/com.posbase.frontend/files/profileInstalled
        • Size 24B
        • SHA256 bf30cb114b8dbe338197e7d290db9b30512a3c704bc73d858854807a2c8728a7
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.posbase.frontend/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 cbc6c356b7e6a5e099a365952898178b2be168320e0f19d480cdbea3636ab05d
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.posbase.frontend/primary.prof
        • Size 5KB
        • SHA256 6cfac36d0ab519a2476e00f259ed960d29be8c21be51aa98146cbb09f6c8172f
        • MD5 SHA1 SHA512 SSDEEP TLSH