Analysis

  • max time kernel
    13s
  • max time network
    152s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    23/07/2026, 00:15

General

  • Target
    EasyRetailPOS-Pabili.apk
  • Size 8.8MB
  • Sample260723-ajvycaeb65
  • SHA256 6e0d135b0d5dbad06d2ed4c96ae6ee665c77d39828bd3c3db090e3a6a1bd920f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.posbase.frontend
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:5085

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        journal.tmp

        • Path /data/data/com.posbase.frontend/cache/image_cache/journal.tmp
        • Size 31B
        • SHA256 8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events

        • Path /data/data/com.posbase.frontend/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 79261c91d763d0169113916647be2f285761a6478ffd028d13efc4e23bacda11
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.posbase.frontend/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 4956943323135020a9689a8cfba09905002d45ffa40b1a22047e1954b405b7d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.posbase.frontend/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 981ec2a36340a13b1680ccf6048b135f3cd843a38980e92b0bf048b8d860631a
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.posbase.frontend/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 6b234871f734f8b9911d389a16ac1aa07e5e9775d84894e6f8d41f6f3f5d4026
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 850eb43bcfa8aa60868bdf5380d69a36d76295d898a897c76f6c5d3e3cceb2cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a6bf609f3fc3d045dfea05b85cb1e902ceee17b6e6b1d54b6aafbf58f9ad30f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 dc3b14f7c969a563f74e6bfec756060af11e99cd81bc6ab539ec62d2c5b67d5d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 7073f9dff6ed7817300012c163814e992fe4225b85b52b77776519b1504199a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 458aa953a9e0adbf5b8765ebcf6b51bc5b5a48b7664e85d25c7a8ce9781a2d5c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 acf10eeeb93deee45b8eeff28a6334e54f43abef8610e3f1bb01383264f271e5
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 ca969865c5da74c32c06f5d0f7babf7066632f184442a3ebb79cfe3fa74e67b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 88f6b051556593decdd8be7cf0e2049544b0c6085f123137e76d25e54ab7bacd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 600622fe830bf5e6dbcdab66fa96c33f06b4e85cb7f40ab18d020ad600cface1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 8de9277affc61c6d50a2201143ab78824d80776a444af548e1378bf922cb96a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 7f5b7c167fcae5749676c74efee72039c14da803a69b138dd6907ffc077870e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        448c4004-78b3-4d1b-a337-2e27cb6ffd97

        • Path /data/data/com.posbase.frontend/files/448c4004-78b3-4d1b-a337-2e27cb6ffd97
        • Size 2B
        • SHA256 8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4
        • MD5 SHA1 SHA512

        PersistedInstallation1315653001521690653tmp

        • Path /data/data/com.posbase.frontend/files/PersistedInstallation1315653001521690653tmp
        • Size 569B
        • SHA256 8f134fbc6aae9f5c4ae276462de844b4ff4030246a65399e37b5570c01f5acee
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation6874897082231078610tmp

        • Path /data/data/com.posbase.frontend/files/PersistedInstallation6874897082231078610tmp
        • Size 90B
        • SHA256 7c052e95744cfdc8b2d3c7ee4d62b60a05ea570c509c0c5b1b7173817423dbf0
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/com.posbase.frontend/files/profileInstalled
        • Size 24B
        • SHA256 68da95c7b81915a87f8b68c58688768316a1a36c6452254f0623c2f86ee31592
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.posbase.frontend/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 1d2e472bf863fb3e4852fc6d6f61c10618bdc4808798d58bc8150943d962247b
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.posbase.frontend/primary.prof
        • Size 5KB
        • SHA256 6cfac36d0ab519a2476e00f259ed960d29be8c21be51aa98146cbb09f6c8172f
        • MD5 SHA1 SHA512 SSDEEP TLSH