0e6932738a9bbe91cbe19124818946ee53639301d41dc37a25dae75f4f57fb63

Analysis

max time kernel
148s
max time network
153s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
22/07/2026, 12:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
pgtada-20260526.apk
Size 5.3MB
Sample260722-pd8dtaef24
SHA256 0e6932738a9bbe91cbe19124818946ee53639301d41dc37a25dae75f4f57fb63
MD5 67f817e3994dc7a191fffc5425a8e030
SHA1 a2b86bf20cae617c660882a3a16e850a88ee5e17
SHA512 533408a7515f0aab5e40a0145bbdce4e92453e06e4c3947f941ec4288fd582aa5cd217ac95a09b68dc9b2afd79d366052762bb96107d3f60ed1ccae17a140d55
SSDEEP 98304:hp3yDep4S4OkukM9eezZ4UB2P2oT+Z0mcvkEd/xdmQO1DWyuZ8/7woSHOZL52jbL:7yDyx4O9ZBB2P2k+Z0mkbBOQMDWyuZ8g
TLSH
T1F146F146FF589A3FC8778033476A1636356A8D168A43D757791C331C28B79E84F8ABC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion discovery evasion impact persistence

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.hardware	com.gamesuper.pgtada.normal

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.gamesuper.pgtada.normal/code_cache/.	5023	com.gamesuper.pgtada.normal
/data/user/0/com.gamesuper.pgtada.normal/code_cache/.	5023	com.gamesuper.pgtada.normal

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.gamesuper.pgtada.normal

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.gamesuper.pgtada.normal

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.gamesuper.pgtada.normal

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.gamesuper.pgtada.normal

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

defense_evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.gamesuper.pgtada.normal

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.gamesuper.pgtada.normal

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.gamesuper.pgtada.normal

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.gamesuper.pgtada.normal

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.gamesuper.pgtada.normal

com.gamesuper.pgtada.normal
1⤵
- Checks Android system properties for emulator presence.
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:5023

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

Path /data/data/com.gamesuper.pgtada.normal/code_cache/.
Size 12KB
SHA256 f3ebe91ae0bdc98ab546648c60a6a0a058d8788ea7dea4fb5f32583a815737af
MD5 b6df238a92d2e60a021ee2b9a1068e9a
SHA1 d4e08d3f1980679544c5dfd7de6a7bf7cf7f40f5
SHA512 9d8fca4a7cfec9d2c9a529db26fc2ab0a9e2b392659e4852fc1c44572fae86613601bac9b1c93479922c66a67c90a029c2ebe4bb83f3dc9108c5e90252dc0fdf
SSDEEP 192:BmtQzT4eBYfKoFpflgxFngKnF1NNLmf52fS8wj7fIOjYkU5t8Rg8Nxy+jXetHWDW:BmkUeByKoLOgGN9A52aLjr3xg87yrHcW
TLSH
T15352BF46AD544715CD8042333B118D8BB9A57B770279736AD8B69CA10A5A9F810FCECD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path /data/data/com.gamesuper.pgtada.normal/code_cache/.
Size 6KB
SHA256 0eeff8a5073ce66e771eef9e5362f02522dd4a6fbdc2062c798750152f1ac834
MD5 dc40179ff83a7a6f105966714179e4ef
SHA1 1cd0f9c880ecbb6f2e8053bee578e00fe942d5cf
SHA512 e6540c68bdcc87927cf967dbe01b5b3b1322d7ff3c164778c5dce7e04cd8a77c95d7f2192fee046d68b31ed0f6da2e7858e8faae27a0e1ebeeca2d5ec6a0f160
SSDEEP 192:eDemPA18PJ0Pt48c3Gbl8T73IvHfd7t7ww22hTO3M:epPA18PCF48cWaTbIf1h7ww2+GM
TLSH
T12FE1AE72C502E75BDB3468B38A7223A2757B56004FD108491A3598693A15CBEEF384ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events

Path /data/data/com.gamesuper.pgtada.normal/databases/com.google.android.datatransport.events
Size 56KB
SHA256 14bafdf0a3ad0891a5bdb964834b7549793cc83114ac8593956008faccd86496
MD5 db5265788bba9fc1e164319e5a55aa0d
SHA1 d40dad3cfe2c73b16bff3bd7e8f3cb567355025a
SHA512 7384ce795cd71ed1f46141912bc6315145c46fab8683202ddc8da0468e36b69a8cfc1ebc64271e7b741e80db754014704b661b91cb0d9eb2aa9dc458727c3fd3
SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSs:8MEX0wIyNjas
TLSH
T1D143639D1E2C2221C57E283ED3E143635B7C93DF572392623DA08CF98DC206974358AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.gamesuper.pgtada.normal/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 bd9aeb4678c3ce2a5619a8568a65459861f1f8a0a0c95c5b33a5ce218d3cbca4
MD5 abb16cc99e6c3bfacfdb24dbd71ae73c
SHA1 e9a04932453560b6fc325a6fca061463b4d107c1
SHA512 c1b1b262596cbf7e133e896ae5dd2813bad6cc499241b2a9f1afe4f0c8aaa2627f880dccf5add359cdfa9a83f326fd9a178b714da2a8be087f6f44520830ef9b
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.gamesuper.pgtada.normal/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 75e1999dc70bb9f92284c891d7961c28238006c26c868d313b0a97c69975ec5d
MD5 c74732a2e8f17ba7a0a2fd749aa3217a
SHA1 1a2f459334a1264f79ebe7b7d1422b5e081b27e8
SHA512 9d845c576f8e8a696b8d778e88342ec0a623a45e30ca038a1d58eb17cc28a16822efe80f8239c32f4618ea800a642faf82283ab3299dc06b5404c598b8dde6dd
SSDEEP 6:7+/l9Pn1Eg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK0zo:7+tEqLiuWdwRmBEyPby
TLSH
T1A60222C96B800822C81D2EB790F683401E00E71D8161CB0725600898BC6B5CCA4E0D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.gamesuper.pgtada.normal/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 2530e09631eed36a18bb2bc85857de0df9c58f589d71201ade8bc82fccdadd0e
MD5 259ef51b9b66fcce8ab19c83e32cc5a5
SHA1 c4845d9187a175ded479397ce3d3120eb2ab5232
SHA512 0c8cec32003c66c725d88beb84a1abb2c3fd1800297caf5da763fc214f399db952eca9bcdbc3a0fe9ebede235e24f9d1771af276bc8fbb57c5c139febb51dc4a
SSDEEP 6:7+/l9VA4Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKMB/Cn:7+tjqLJdTRmBEyPbrpCn
TLSH
T10102C089A3400913C31D17BB90CCC3412E14E715C3B3CB07157018A83E036CCECB0D10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.gamesuper.pgtada.normal/databases/google_app_measurement_local.db
Size 16KB
SHA256 fd536a4719a7e06b5979a3ccd3bfc96b795996ac701c67a241627a4000b3a136
MD5 1aedcea9997dcfbec7a5d268c9bc0aa5
SHA1 7fd02d0c987352ee27b1cc314ceb62fb0ecae78d
SHA512 a5ca3b935345296c9704625bbb19da60875e5e51a8c38f7f724626c89208857e2cedfc204c77016bc75e6463d69acbae1f5cf27162f1137daec6ec7f1dbc10f8
SSDEEP 6:l9bNFlsls1ylO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6iLi:TLiEy9zmzrfRmBEyPbP/P+/0Fl6ZH7
TLSH
T1B77268CD7A105703D173477670CB93E21C30B2188323DA173B540478AC431855082F80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.gamesuper.pgtada.normal/databases/google_app_measurement_local.db
Size 16KB
SHA256 599507d4915c17f6fedc30c9cc10a10c1f123df62ad0a0ecfab6f50274ea2b91
MD5 907761af2877c327b3d894f915d30f1a
SHA1 85520a471aee52f521d2cee7689d09f2ea02d9aa
SHA512 6a4fa6847dd7976be2c1da9415845cee7fe21737f2a39cf24fedc6de4e3f6b2c152dea021dffb38c6ff7967c9b9f42a76d8fafde7dcbcbe1b10e9665f406c528
SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hr/gW49blqYFlSUdb+/0Fl6ZH7:TLQpmzr0GSP/h1499FPNlFs
TLSH
T1EC722EDD7A20DB03E2774B3570CBE3D12C3872155723D62739551A2C6D837865052F45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.gamesuper.pgtada.normal/databases/google_app_measurement_local.db
Size 16KB
SHA256 75dca5a02ba03fc76152e385460afd5b8efb7336035f469d9ab0b740ea351c72
MD5 4fbacadd0efaa015b8ff6ebb925a0f10
SHA1 4d38940331783855ec3a88c4c427a656b6cc4ec5
SHA512 3ff615da0e582e99e488323a762a2d240f6bcdd1f85c6c475ca819b4264bb33e021514b88e55fd9be60af49c00b3528f664355fb67e1b372246e700ed98c85a3
SSDEEP 12:TLIEQv9zmzrfRmBEyPbP/MwDOLaFEAU5zCb5qglXWlZHp449blqYFlSUdb+/0Fle:TLEvpmzr0GSP/RKaFE2bkLy499FPNlFs
TLSH
T127727B89BA64CA12F2774B3850DFE3D1283832960B23D26739161B2C5D423868162F42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.gamesuper.pgtada.normal/databases/google_app_measurement_local.db
Size 16KB
SHA256 29d7da6a77a22ae4dd5302eeaab41e3fb2acdcb97b8abf360d1b6af1095f04f1
MD5 72d6d9a6db0c09357b46691c0a03d4a8
SHA1 39800125eea6af6408f58bad876a68058a004f0f
SHA512 77c4a069916744ee70aa21a769caf4d68437fc2bd0f758735ade0178ef51cf73cea1b8d1071cc90d800a638406c60940cfd6076c7ff65d135d6fb1c7a85de659
SSDEEP 24:TL6Xpmzr0GSP/kXKaFE2bkLy499FPNlFU:T2XArSP/k6aFEpLv55U
TLSH
T16D727BC9BA74CA12F2774B3890DBE3D1283932960B23D62739562B1C5D423868062F42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.gamesuper.pgtada.normal/databases/google_app_measurement_local.db
Size 16KB
SHA256 ac5efa3a92d2b568672a47d02e342056fdea9ab3df7ea5c19b162cdfb6ac6f2d
MD5 342455f89cc618852ec6e0a17f400bed
SHA1 f65e9c97a7204e7f43874d8a63024126dbf0555b
SHA512 00cb1ebdec44054fe1cfff1b95a76c258637ba76c111455eaa023e83b9bb7cb9b27097014bfaa5957104dde29cca08a132c45115a1d1ace0267470365ff81f6d
SSDEEP 6:l9bNFlgls1qlvlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/We:TLuEev9zmzrfRmBEyPbP/W
TLSH
T102722B8E9F102603C6738773B4CE93916E14A21D83379E572BAC0874AD8364994A1F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.gamesuper.pgtada.normal/databases/google_app_measurement_local.db
Size 16KB
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
TLSH
T11F727DCEDF002202C1360733F4C9D3901D60921D8336DA0767940460AD02108A451F58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download