Resubmissions

23/07/2026, 08:50

260723-kr2e7svbne8

23/07/2026, 00:16

260723-akyevsbl8s8

Analysis

  • max time kernel
    99s
  • max time network
    152s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    23/07/2026, 00:16

General

  • Target
    PinUpzQpxmg.apk
  • Size 11.5MB
  • Sample260723-akyevsbl8s
  • SHA256 df7a34de1dce539cd125a5253bcedb1d409744456e3c38c6906b0cf9167b4c8c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 8 IoCs
  • Acquires the wake lock 1 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.app.mosbet
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    • Checks memory information
    PID:4333

Network

        MITRE ATT&CK Enterprise v16

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        344a3a21a65f86e9138df9e87b30bd1506fc7668a86168d393c10f199c5c9de3.0.tmp

        • Path /data/data/com.app.mosbet/cache/image_manager_disk_cache/344a3a21a65f86e9138df9e87b30bd1506fc7668a86168d393c10f199c5c9de3.0.tmp
        • Size 1KB
        • SHA256 290f84fe5e586e9eb0c13c844e317e0b951ec51197d8d2bff11dfe17bbe40ad8
        • MD5 SHA1 SHA512 TLSH

        658b824f067aa072cad7008078bc36a478211076aae1068fe0794c8e8fa93627.0.tmp

        • Path /data/data/com.app.mosbet/cache/image_manager_disk_cache/658b824f067aa072cad7008078bc36a478211076aae1068fe0794c8e8fa93627.0.tmp
        • Size 1KB
        • SHA256 b14edacbbf1ca068a6faaeb7cfd0e7c577c2dbad94a9a89bcc0f2abc1e499877
        • MD5 SHA1 SHA512 TLSH

        7cf5b11558d043cc2fdbc041c314787a9145870c4b79e1417fcd427e1d525d5c.0.tmp

        • Path /data/data/com.app.mosbet/cache/image_manager_disk_cache/7cf5b11558d043cc2fdbc041c314787a9145870c4b79e1417fcd427e1d525d5c.0.tmp
        • Size 99B
        • SHA256 0158ab57a262f447afc7af6889d14df5acd9c9ec334ff13ad2bfae45876223d7
        • MD5 SHA1 SHA512 TLSH

        journal

        • Path /data/data/com.app.mosbet/cache/image_manager_disk_cache/journal
        • Size 680B
        • SHA256 77b0578ce290770515788491d071a1949790237929f6278d6706ccd9b02e2957
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/com.app.mosbet/cache/image_manager_disk_cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512

        OneSignal.db-journal

        • Path /data/data/com.app.mosbet/databases/OneSignal.db-journal
        • Size 512B
        • SHA256 572ff73baa6ad91ede7e9a909b2c13954f8cdc43e63a3faf23cf0a696707a183
        • MD5 SHA1 SHA512

        OneSignal.db-wal

        • Path /data/data/com.app.mosbet/databases/OneSignal.db-wal
        • Size 64KB
        • SHA256 27bf284c882e400e1acaeb96e5ee33c986b2cfb3dbebc0d489de55be932a92c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events

        • Path /data/data/com.app.mosbet/databases/com.google.android.datatransport.events
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.app.mosbet/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 b904fc0f3f39c345eca37920d05116193be3e0093a0b8f1dc898066b178ee907
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-shm

        • Path /data/data/com.app.mosbet/databases/com.google.android.datatransport.events-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-wal

        • Path /data/data/com.app.mosbet/databases/com.google.android.datatransport.events-wal
        • Size 68KB
        • SHA256 5a58425774654a5f4f100b70ffc2d16cf2881bf267df5b7913cf83e9c6d9d721
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.app.mosbet/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.app.mosbet/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 4afd81f362d6a7111737d1f718a660e5d5c790217a307b23a17295401ebd879f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.app.mosbet/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 0b5d8b889da4796af7a03d4380933178e6ea61f68e586a14b23336daae04dae8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.app.mosbet/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 7e3e278b506a0225bc015a2ab38aca823d6cc73901975d491f10510d3dbd0b50
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.app.mosbet/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d62d5a80fff0e38403c5836c1301baa37e9d92b3d5d1c6c9f221ec5b3e43f022
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.app.mosbet/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 e975acc795d8858cdc5228bab003114e1e6460b5db38ca465c0596653a1bd802
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.app.mosbet/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 ba3379e5e875816c574e5161ad62b220c396a4a253f16216411da221dedcfeda
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-wal

        • Path /data/data/com.app.mosbet/databases/google_app_measurement_local.db-wal
        • Size 36KB
        • SHA256 293b94b00059ff99eba72c652e568708ed249a7d1850f4ca1fe4ede37fdb4204
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/com.app.mosbet/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 ea58d3769ed7fe93e1d659c5a6c0e98e0774a60fc09e71529b24acb169e26c3e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/com.app.mosbet/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 ad6d15ddf9dfeba20b844d228a5169f4d59d188af352e4ab864ab3be1d237d61
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/com.app.mosbet/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 8dfb2300644694031375d4f80b33d8b58b5d92408f15da5c370d7ebaf175a0d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/com.app.mosbet/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 b7b720fcba8a1899896698112c58b6b5944377375fc1df86d803eab265ebcee7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/com.app.mosbet/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 c4c2b4eade4816077dec4bda2ba014bb1e53eea02720052c45a4a32bfc3ef82b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        navigation.db

        • Path /data/data/com.app.mosbet/databases/navigation.db
        • Size 20KB
        • SHA256 c89c346d69ef443ac928d2b6f7eacec76c55c9a61e2e0d3da698587659635634
        • MD5 SHA1 SHA512 SSDEEP TLSH

        navigation.db-journal

        • Path /data/data/com.app.mosbet/databases/navigation.db-journal
        • Size 512B
        • SHA256 419effc7e8a4fdfd147309eef6cc3c2f5391fe576a76dc929de035cf45c1b4a3
        • MD5 SHA1 SHA512

        navigation.db-journal

        • Path /data/data/com.app.mosbet/databases/navigation.db-journal
        • Size 4KB
        • SHA256 c5cefa6671c9528e8b73ca13c79274aecc43e2774d3a19442fbe803507dbfb81
        • MD5 SHA1 SHA512 SSDEEP TLSH

        navigation.db-journal

        • Path /data/data/com.app.mosbet/databases/navigation.db-journal
        • Size 16KB
        • SHA256 da38aed4aa9a46a2c7f174f91c8be9ec8e664c2e3d4ad0dff6383276f2e7a536
        • MD5 SHA1 SHA512 SSDEEP TLSH

        navigation.db-journal

        • Path /data/data/com.app.mosbet/databases/navigation.db-journal
        • Size 8KB
        • SHA256 1d800560a0b1889de90d14d9087908d87a65ea56172e3b4697113cebe0c744f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        navigation.db-journal

        • Path /data/data/com.app.mosbet/databases/navigation.db-journal
        • Size 12KB
        • SHA256 95020ad90e39d2f236920dca2af16ab4de2a2746d7571e9aff7359931fde0ce7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        navigation.db-journal

        • Path /data/data/com.app.mosbet/databases/navigation.db-journal
        • Size 4KB
        • SHA256 1d3d6b6b144f91fccf9925ef93ac3dbee7f3d786861a222a4e8912ba84de65f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        navigation.db-wal

        • Path /data/data/com.app.mosbet/databases/navigation.db-wal
        • Size 32KB
        • SHA256 691d031bb7910cd0b247fb956a1a3c9bde331cfdb4ee532c387755039d3f82fd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation2549878823676277373tmp

        • Path /data/data/com.app.mosbet/files/PersistedInstallation2549878823676277373tmp
        • Size 90B
        • SHA256 45c96bab06123f4643f15bcf991cd5b3eda63c43ac54cd82d23e43a13b5bea2c
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation3177871417447991127tmp

        • Path /data/data/com.app.mosbet/files/PersistedInstallation3177871417447991127tmp
        • Size 114B
        • SHA256 7035efcb468da7bf1ebba1f99d59b0bdd8ca1a79828e0aed3a02a66e79a5468d
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/com.app.mosbet/files/profileInstalled
        • Size 24B
        • SHA256 a20b45e756fbec39b9deaab76522c47e070aee415b3531fa6cba86f1421837c2
        • MD5 SHA1 SHA512

        androidx.work.workdb-journal

        • Path /data/data/com.app.mosbet/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 493e2eff60c73e5d050d9747aab24fc92ab649cd640080dfe1cdc887e21a7444
        • MD5 SHA1 SHA512

        androidx.work.workdb-wal

        • Path /data/data/com.app.mosbet/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 765cfa9c8a0ac908d382bb2aff5a48c12bdaf86a1957a61ef1b3d4c7f5d06144
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.app.mosbet/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 30b096b70f06db00e0598831f0b001c636bbcb4442906dd8edc7cee82671fec2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.app.mosbet/no_backup/androidx.work.workdb-wal
        • Size 265KB
        • SHA256 17f44913b9428c64cba92617cec61d0530089da019b5caa2ccdd0ee48ad7bdb2
        • MD5 SHA1 SHA512 SSDEEP TLSH