Analysis
- max time kernel
16s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
22/07/2026, 09:24
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
3n_18.apk
Resource
android-x64-arm64-20260325-en
6 signatures
150 seconds
General
- Target 3n_18.apk
- Size 1.5MB
- Sample260722-lddyesdb26
- SHA256 bb0532ce6f2cb22950740aba7a9536a17caab4961b61829d4d11f45c2970e8aa
- MD5 ed72a3408d1be13537fad3f9efb9b439
- SHA1 055eb9cd90590f0b05395c2235b6ad9f392848bd
- SHA512 cd02298eb0da4af85c6db027e09e23781f0009b73d47672c003ce1567b74748e1194a2e18e3554ddad063de713efe805b9bc208f079cc8c604860e596834758d
- SSDEEP 24576:xCaGNkVUlBPO7J5rerPxW4KXyExC+DEX01ieOiI1RgavbaaowKIf0aRGiTYEnpIC:T4PM5rejk4cCqEX8ieUSCaaodIfVRJUU
- TLSH T1B765D082F6D8BC27CDB3C13303A50A3B51568C598B46E7471955B36CA8FBEE44A85FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /system/app/Superuser.apk com.glory.m8 /system/xbin/su com.glory.m8 - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.glory.m8 - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.glory.m8 - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.glory.m8 - Checks the presence of a debugger
- Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.glory.m8
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.glory.m8/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 36db564020fb3bd2346d078ff2eaee051ba27d0df44c5405f2d17cb8558d7f10
- MD5 1e95abeaffe32a6f0c9800a033e2f0e5
- SHA1 6d7110a999cfe0cf8cd7b27372668d620e7c012f
- SHA512 1b2ec87ce5a67d140aa70fb13605f859b5282390c34a3df62104e72b77316168f7dede303496ae188c66b5cfa7449c60650584408b6b1e51570384639f35fcd3
- SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/Wb:TLiEq9zmzrfRmBEyPbP/W
- TLSH T123722BCD9F102603C1730777B8CE93915C14A32D83379E473BD90470AD434499091F44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.glory.m8/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 d41b66f817011e5ba12885a3c97db79a07626d57a8eece68273bfec47a1c2924
- MD5 e95d7cce0ad249e9f47ac7ce823b89c5
- SHA1 19c43a198133225e493b147ec502c4f5a34fa966
- SHA512 b3a2d6cc3e0127ee968ae1244fd9ec984d72a6e4c69b64dd253b986a0f17f5f6ee8383b144259982f6c062db40f961e2015106202966c1876463a43b79fe8d6d
- SSDEEP 12:TL1E39zmzrfRmBEyPbP/n4V4bCAUEWlCuUyWlIcoC:TLopmzr0GSP/nu4bCCbD
- TLSH T1A272A3CCB6645713F2B34B3A60C9D7C12D38712E873BDA133E49191CBD036458021F50
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.glory.m8/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 7e7f34c235ef4592cd94aa5103bc565cf75f833a1760ae0e9ce0e031779c9e56
- MD5 6aaede98d988dcb665265d1a430d5048
- SHA1 52e65fb948a55ce94a799e2ecfe86dc12dbbcc96
- SHA512 f01344f2cff4df1beaadbd035589ca631cf6d6aceefa8176ec0831e68a54cf8cb89dc0eba6ed68f7dc14a98353d107a30d44df3d75fc980a419948c4f3710596
- SSDEEP 6:l9bNFlils1InlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/Wb:TLIEU9zmzrfRmBEyPbP/W
- TLSH T135722BCD9F102607C1770733B8CD93A15C14A32D83379E473BD90470AE434499151F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.glory.m8/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 fa27dc9c4f4ef1316e2dd30cb30807e7515a0a95a2efeba6f940c828f1e3a988
- MD5 34479d44320df108504e06eab96d93ee
- SHA1 5e329654c68191a144a4ab9dfc698b485f7a9c24
- SHA512 090040561c215a262f69c85d15368230fdd23d12edf9201f1e9414df88fd28804f9b841c1574ddbac574172dc3b029a2de1471cdb45e16199d2c80a7f4f2ebf6
- SSDEEP 12:TLWuEmO9zmzrfRmBEyPbBvOwO4VOLabCAUEWlCuUyWlIcoD:TLROpmzr0GSNOuKabCCby
- TLSH T1AB7297CCEA60A612E2B34B3AA4C9D7C02D28712E432BDB073A89091CBD026408160F40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.glory.m8/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 5317b7bec74c615bde6aea506f79ff472029318604f1b17e94ecdec31bcd9f70
- MD5 2c6dd64edd7a6cb66b98673296f3c0d7
- SHA1 0c883de9e329c3eefec3dd31655b1e30f2d93b8f
- SHA512 2e4ae5724582db65132447db954b3d16f56c99ad8efda68846041a871ea5d748a6cf4a2b020415ea19a1d4588b51c835aef949f989f6b612b1a1f443e6cef6ec
- SSDEEP 12:7+ti4V4bCAUEWlCuUyWlIco4qL1E39zmzrfRmBEyPbU:7+tiu4bCCbTqLopmzr0GSU
- TLSH T1A10254CCA6655613F2B75B3AA4CAD6C02D38712E876BDA573E591A1C7D036918021F50
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.glory.m8/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 6544c289571e594c3a0a4bf0f763f609763b1249d35d4c592bcc82e46d0b7160
- MD5 38c7670763ec73d7b05a541dc18efecc
- SHA1 2912ec7cf16e85439cb59332145e38210bacdd16
- SHA512 fbf65a5f26c2450a9affce4c74dd7bb508074214547d6a4a681919db42cbecacd80cc85b3eeda16df027b4b98ab81c7115e99fae349614c08cd2c857829bc11d
- MD5 SHA1 SHA512
- Path /data/user/0/com.glory.m8/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 7ab74e45e7c1c08f673c63e76636434fed4fcc83e12b3aab87b186b235ca7bec
- MD5 c61ea13b013cba2b1ca433a909162040
- SHA1 241e6059a9104075926faa361beedd0d395d6073
- SHA512 3e7a8a3f0795eafcbf70030a47523ed06ceca97f66eb80e57d0a7853c12699c45759fe4de628590ab0467e0dbdf9503ab4e6fa9feee5086abd480c63a31cb5e0
- SSDEEP 6:7+/l9Pl4n1xg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKm:7+tIqLiuWdYRmBEyPbR
- TLSH T1F102C0EDE3800C23CD2D167B90DC83402D06E7A88671CB17169008943C076CCE4B0E04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.glory.m8/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 a60a8a7cb0a209edb6f07d665fd42dd132a573aaf81783fb9171e31b7c502806
- MD5 cba112a78322250aefa59af0216174f5
- SHA1 d55375f27ee97d71b8bb4d9a248632f7dd453110
- SHA512 661ca97c2b62f82bf330bd85aeb11b270a96bb4d7a3569350fa2732340ae23f725bf49b394e7d1eb60dbfa76007c0b89dbc1a528d513e6b61da7094eab141d02
- SSDEEP 6:7+/lYgPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK0z:7+tY4qLJdeWRmBEyPbrz
- TLSH T1E291808DA7410A13C5295B77A4D5C3D41F24672A9373CF57569108547D476CCF490D44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.glory.m8/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 ab95da494e2a9d24229537b85b9aa19492afb68c631e777a93459641c45e954b
- MD5 83e51ef40b5ad4a72c8aaaaabcdc95cf
- SHA1 20c1ba53f4675cfd5569808a3411f0524ba68a53
- SHA512 b14cb9a30d74afdaa662ccb549c555060a1282318e08e01fbad1219bf84516ed1362bef67d6b66a215b3ebfe96ff3e9969a612cd064c6cb694510d8820cbd1a7
- SSDEEP 6:7+/l9xk2gPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKqzJ/lM/ain:7+to24qLmqKRmBEyPbbltsPn
- TLSH T19F02128967810D13C52A567790DA93541E28B7299269CB6B2AA108A46D475CCB8D0D94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.glory.m8/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 1d05e826cfa51587c16ccbc44ef076c63374dc603c8570e24f1533054d05db57
- MD5 5327f2aff316d912f97e8a28dd8ef129
- SHA1 63a460ca229288ff1fe4e19eb715f034ab46f54f
- SHA512 22fb7e439843ecb6b1755e4304d20bf0cfe75a67c28986d59147049a121cd1d56e5246b257294629f447b47366295e762e2eaa7b43325616f382eb96b64db9c3
- SSDEEP 6:7+/l9yg9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKs:7+tUqL8EA9zmzrfRmBEyPb7
- TLSH T14A0272CD8F002A03C1BB0B73B4CB93401C28A22AC777DE236B980460EE030989061F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.glory.m8/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6A608C610379-0001-129E-CDE190F4B035BeginSession.cls_temp
- Size 77B
- SHA256 fcb05ff588e939acca2a60805c8585114b95746643449f91c2594051c3ae44b4
- MD5 8c541e433242b20591e988b376f69cd9
- SHA1 c42967420926faf06d7b0c30c9423ffef478fa1c
- SHA512 ce955dcb0ceae83d667ce3cef3958b2113b7dd32f7dc19f87c4296696855c9607db728049a75b12e954ade7eeead164fe945c04118a1ae3c1bd080e93625a218
- TLSH T158A0122115102222C101962CF108CA123210104417B2F215215200003F0240965C9E80
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.glory.m8/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6A608C610379-0001-129E-CDE190F4B035BeginSession.json
- Size 132B
- SHA256 1f80f109e8012c4f54812a832e07491afd7bb20e302ec1a1d869011da6f178f9
- MD5 7c0e11dddd58ecb8fbf864c0316cd842
- SHA1 439b2eb0234765ecf0b7a5a45f3d17c4d4b8685e
- SHA512 549bb7b8012cd2e9f1f1ca18bdba8f158f5006178b4e6a95fad9b18ff32ae79f86169ca3bf316f1a1732ffa7b1c1d590d27d630e1574eb49dd2449d8bff1bfdb
- TLSH T156C02B31225062304062A90AC31FDB3317B0060453B2FF1124E401083325D048246DC0
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.glory.m8/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6A608C610379-0001-129E-CDE190F4B035SessionApp.cls_temp
- Size 108B
- SHA256 798a4f33474fa5f756b88cfbaef666102abd69e16c30dfedf1d07868a305c136
- MD5 76038fd0763bf05616b2195411a6fce4
- SHA1 312cf7c7eb5b98bb63bb5f21591dda5c63329fbc
- SHA512 a1a2e1b80be78f9665dd1d731b44ac83de7aec6e6558241546852641428638e8dc1075cca63246241817080f15d7c761fb2c6e28811c50de929480dc885d33b6
- TLSH T178B012056DDC9E0AC38B853568CB028C971098924D5C88329173DA4E9CCEFDF52D402C
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.glory.m8/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6A608C610379-0001-129E-CDE190F4B035SessionApp.json
- Size 222B
- SHA256 0b3e319f5d445abb4f23a22ca72c2ff261137e8593ad1fd9214d71aaa21fc629
- MD5 f9931c3cafe82da40a94c7c072867cfe
- SHA1 2a1842a184312d974f8ae0f5d3261cac455d0af6
- SHA512 d8d056526316087d2ebe082d91f889f13c39c7e9e9f1fb14564ab3f3f91bbf77f00bc16112c28c092f221083d1fc9792a34347dfb5dfad5f370d80a92653bbe7
- TLSH T1A6D02314BCC5D9370147C77455C5415D437800E2045D157175175F49CB83FCE03D455B
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.glory.m8/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6A608C610379-0001-129E-CDE190F4B035SessionDevice.cls_temp
- Size 49B
- SHA256 ec664092a3596d487e39269cc43b1c24502473f0c666e4f91b808394a974a60f
- MD5 9678ee05e2c1d8edb5b2d5bc5fd3bd68
- SHA1 d17751c5903be86f5fb615e7c715d65af7ddc787
- SHA512 fff577233d552938e5865d94abce6ef6520abdb6bb9e110ed97e7b380d902f2004487e25b207af4e4e71107155bc9f4e77f4f73cc819df973dc355755067b95c
- MD5 SHA1 SHA512
- Path /data/user/0/com.glory.m8/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6A608C610379-0001-129E-CDE190F4B035SessionDevice.json
- Size 203B
- SHA256 17cfcb8518203529de6e288ea03820ab37b30b226e335de7ff507a0c4a945a23
- MD5 865a53ac54cda762a66d4630e0987aa7
- SHA1 0812a4001c55d991fc2ab5c4d23c43dcdba15acd
- SHA512 c043b95709a32e0bb63c037d960b5202fda6b2611b9079b00fd3b98d5cde0319f906bec72aa5cdcc718d8ba06f9f5cda1c677a5fea36220487fa92455f84234f
- TLSH T181D012B5EC7E3A6F4FD1E1C85C329E53FC6008751A8C7D2060F59D59158F894939982A
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.glory.m8/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6A608C610379-0001-129E-CDE190F4B035SessionOS.cls_temp
- Size 15B
- SHA256 94db7df32f7024d43abbedd5433d0a39a8dfe652621d40e7647af527fb5a2150
- MD5 8c751d367ca035ad56b9dc5865cf1780
- SHA1 20b437badd375403a9fb008bc3174d6f2f257932
- SHA512 f82774c2c74ef1527ab212c495cbbf55a0f21dbec8a0f9172f574ad0950762b8c45f19962da321b8297fb8985a23cb7d1fe77fe1b9535a27af952f3b2e328e94
- MD5 SHA1 SHA512
- Path /data/user/0/com.glory.m8/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6A608C610379-0001-129E-CDE190F4B035SessionOS.json
- Size 56B
- SHA256 3a5df913db77290768c5dfbdfd65b218dfa34b7999441f5cc87797e4b65e445c
- MD5 66dcd98f1fd5bca64c229cc972cfcd9c
- SHA1 08e2eb6c7a4b34a5eba69d00099d5b30f1d84f94
- SHA512 362e92c6671814ec671a70aa7df0f0a5138ad93cfa3b0e88736536ae838ae70f45012b373d2e77835cf33da17f83020aa62821a1b4a78c93ec38da94403cd8f1
- TLSH T1FC9002769880A036101203545A555E51D37014726045F0245857041152A71B80231109
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.glory.m8/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
- Size 426B
- SHA256 9aed9ffb80915e8f805d7fc8c4fe55001c61ac01397efd8e6b11416cd1a82071
- MD5 58cd5a53e78154cdeb258a9da8e8cee5
- SHA1 6e52ea67f376efcecb1104b1e674cbc9ff8c039a
- SHA512 26a2ed7a05e8d073972397b5c13041e28c402f7933faa114506f3a9316bf1c26a54fd7ba3675278180b266af50eb30ab907f53873370da9fe7cc93877f1f9299
- TLSH T1F7E0AB52E6444F78A602E7BC55AD95912B75A932C2C2D52566130B28499E98E0274733
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.glory.m8/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
- Size 1KB
- SHA256 d28ab051241610530b9ade99fcdad503379687817879997eace42928e6f94c45
- MD5 d05ad092658a847f37c0fbfc244712fc
- SHA1 be735c9939375d54596ffb8eeafc372f442a83a9
- SHA512 8449b66e30a444aa6616a90cdeb06b209367b0b915f5f79b8456d1fcd4e6d5d38cc287d1078daab1ee97f12eabdff11efde647e8f4d18f820b96c240b650aeba
- TLSH T1BF31CF55DA886F785603E7FC4698859627B8A973C2C2C53836170B7C4A5E7CA127823B
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.glory.m8/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
- Size 16B
- SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
- MD5 c33583fae4e0b61cde1c5b9227963237
- SHA1 fe2ebe4d27469af1460f7e852031a04208ef629b
- SHA512 fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
- MD5 SHA1 SHA512
- Path /data/user/0/com.glory.m8/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_5d7a356c-91c3-4cb8-bdeb-b438061e504f_1784712290799.tap
- Size 344B
- SHA256 19ce2c9244756c3e0f90a608642f7b066d3fab836a9decb62555aa9dfed23bd0
- MD5 6219a1d213b2dc8ba4a31feb9ae03092
- SHA1 2e9753ea98995224d0f944ad74c62d32fc560b2f
- SHA512 2433b0768291ad061a2570401625d6c7702d74fa9dfe451f92312685dde69400601bd5ca070b50fb380bde5271c6eecb294d9d3ea261fe6c94e71cf2e1be1efe
- TLSH T1CCE0C0A07941D760D40F2D326F04A0015FFE95157316874AE03DC0A692265D9123B655
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.glory.m8/no_backup/com.google.InstanceId.properties
- Size 2KB
- SHA256 c621314965e5ed178427bb7032842f44d922cdb191b890d7ae0bc796f984c53e
- MD5 e89c1e02ee74c801741eb28d0f6765d5
- SHA1 efbebc82777a840180fb2f62d65b7926cbd069bf
- SHA512 5993b43b408a8ada089289e7970d127472046d545bcc664d4815fa236de1007ed763d351f739d68911c1379ba2ef3c03a387c6910d6a09ba70cd360289da52d6
- TLSH T1F641E7C2962D86519E26108D9ECE31945A5E333AD3E804267C011CE29028851E278881
- MD5 SHA1 SHA512 TLSH