Analysis

  • max time kernel
    46s
  • max time network
    154s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    23/07/2026, 00:15

General

  • Target
    EasyRetailPOS-Pabili.apk
  • Size 8.8MB
  • Sample260723-ajvycaeb65
  • SHA256 6e0d135b0d5dbad06d2ed4c96ae6ee665c77d39828bd3c3db090e3a6a1bd920f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.posbase.frontend
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4732

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        journal.tmp

        • Path /data/data/com.posbase.frontend/cache/image_cache/journal.tmp
        • Size 31B
        • SHA256 8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events

        • Path /data/data/com.posbase.frontend/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 50c2456723e3e777ddc9d2e6c1303db1ac80c809693bee8c0121f50679f47e0f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.posbase.frontend/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 b4a76ec7e79ba13448babb14779d034e4fc59f02dd51607d0ca993d97714c5f2
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.posbase.frontend/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 ad5f8fd4a554e52fccf786fc1fa39d9897b1bce459acb95318dedc8dec9fea22
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.posbase.frontend/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 8d09176dbdf43718cc9657930f520aab8365308f347358aef6048cffeb8d59aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 95d249e3ab2ccd62ddb8b943492a63fdfa72695640f62a102e1dc4146376ee09
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 dd78ebe4234af97f60c8e03e7924b3c58c7c7b57b986182b6c1b6c0f2cc65a50
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 dd98a87b94353787e49ac29280110b03a0401169b0a9453d9bc34a82b985d9f6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 8867669de9769ad3a77ed912c2e4fc380c051020be6359ca44e0e32f6365c007
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b4765a86f69c122307448d0c6e81cebd52ffbc59b0d19da42971e2857f773e6d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 a92f349bb61fedcfef00f4e6a1ca667534789d90e0adc85a5abf9ef654bde086
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 d91042857f31f2c0313101cca38f82755a47da8e043ea32096b0eaf5868f6bbe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 728e7d3a85952cd62f54ecde58e8bcd329e93b8129bea4385f8412b66ac7983a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 14377a62fb767f3c5a20b3a505fb3137aba56336d178c0cb8240f1176e69132f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 c3c59953f2cefc9417d281aaa4350dc36430b61a3453c902b4734c1a737e5dd2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.posbase.frontend/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 cb71a29e6f9d02ce68b7dd28b168b483ed6a8faca22ab986a5c9825952b57947
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation4482092230140861657tmp

        • Path /data/data/com.posbase.frontend/files/PersistedInstallation4482092230140861657tmp
        • Size 569B
        • SHA256 25cdd1940ede61fe1a419440f692a7faef69ac87e7344991f99a4654dc51e4b2
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation8990667068851531567tmp

        • Path /data/data/com.posbase.frontend/files/PersistedInstallation8990667068851531567tmp
        • Size 90B
        • SHA256 23ef9f67664a5aeaf137e7bf7118e75d8dac9b532dbdaabe65da4a83a3f14fdb
        • MD5 SHA1 SHA512 TLSH

        edeb2404-6cde-4cf0-a1d9-a795aaf13482

        • Path /data/data/com.posbase.frontend/files/edeb2404-6cde-4cf0-a1d9-a795aaf13482
        • Size 2B
        • SHA256 8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.posbase.frontend/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 554e308e114bca54cd674e95e8a557c24143ba1f4b7923a1e79c59ad708bf3fe
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.posbase.frontend/primary.prof
        • Size 5KB
        • SHA256 6cfac36d0ab519a2476e00f259ed960d29be8c21be51aa98146cbb09f6c8172f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.posbase.frontend/primary.prof
        • Size 11KB
        • SHA256 6e1510537c5854e00bab7e3f20d028fe8ee5cd53f9702265ebb19ab6fc6fee5e
        • MD5 SHA1 SHA512 SSDEEP TLSH