Resubmissions

23/07/2026, 08:47

260723-kp9zkagm9v10

23/07/2026, 07:54

260723-jrwpaaac8310

Analysis

  • max time kernel
    100s
  • max time network
    151s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    23/07/2026, 07:54

General

  • Target
    ade8bef0ac29fa363fc9afd958af0074478aef650adeb0318517b48bd996d5d5.apk
  • Size 257KB
  • Sample260723-jrwpaaac83
  • SHA256 ade8bef0ac29fa363fc9afd958af0074478aef650adeb0318517b48bd996d5d5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: Pegasus

    Pegasus is a commercial Android spyware first seen in 2016.

  • Reads the contacts stored on the device. 1 TTPs 1 IoCs
  • Reads the content of the browser bookmarks. 1 TTPs 1 IoCs
  • Reads the content of the call log. 1 TTPs 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.network.android
    1⤵
    • Reads the contacts stored on the device.
    • Reads the content of the browser bookmarks.
    • Reads the content of the call log.
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4384

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        NetworkManagerData.db

        • Path /data/data/com.network.android/databases/NetworkManagerData.db
        • Size 16KB
        • SHA256 2cbd6c123ba0396b016401cc9590cf6b7ce23538f57398e34615cdd614bda3cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        NetworkManagerData.db-journal

        • Path /data/data/com.network.android/databases/NetworkManagerData.db-journal
        • Size 512B
        • SHA256 b58a9ca72b838a80a06f1bcd35d78d4bd526ae4d132bbfa74ff5cad516606163
        • MD5 SHA1 SHA512

        NetworkManagerData.db-shm

        • Path /data/data/com.network.android/databases/NetworkManagerData.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        NetworkManagerData.db-wal

        • Path /data/data/com.network.android/databases/NetworkManagerData.db-wal
        • Size 28KB
        • SHA256 bb4e9018350ac23314023e1e0b402fe390e431b9aa99f1c3888f668aedb2c7ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        0vlt.dat

        • Path /data/data/com.network.android/logs/0vlt.dat
        • Size 12B
        • SHA256 bd943e5e5066321ebe60475ffbc9a9e26a92b6cc0ee24006844ac84f9a1dcdaf
        • MD5 SHA1 SHA512

        0vlt.dat

        • Path /data/data/com.network.android/logs/0vlt.dat
        • Size 12B
        • SHA256 838fb01aefc9de602d34081c2fa90e17111119539e1cc7a04086c65c842550a5
        • MD5 SHA1 SHA512

        0vlt.dat

        • Path /data/data/com.network.android/logs/0vlt.dat
        • Size 12B
        • SHA256 3636b3af83c2c2f13004c6e9a8f8df8e9be92425749ec81c83a1a278ba851667
        • MD5 SHA1 SHA512

        0vlt.dat

        • Path /data/data/com.network.android/logs/0vlt.dat
        • Size 12B
        • SHA256 24740572a2a6c50d848cd7fc58f46abebabaa210f3513b324d512b996a89ff41
        • MD5 SHA1 SHA512