Analysis

  • max time kernel
    74s
  • max time network
    150s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    24/07/2026, 01:12

General

  • Target
    55pgapp.apk
  • Size 5.8MB
  • Sample260724-bk2mysyyas
  • SHA256 44a219546239443bab10a8e217af6034de9f4b7826378d805bb6fc7a74ba704c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.pgwin55.one
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5113

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        PersistedInstallation5686972669762297344tmp

        • Path /data/data/com.pgwin55.one/files/PersistedInstallation5686972669762297344tmp
        • Size 90B
        • SHA256 671daab8dc9ea74d42648b2c5361dc79014005ebe58b6e9e8b809f1814b4a3f9
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation6000225633112545117tmp

        • Path /data/data/com.pgwin55.one/files/PersistedInstallation6000225633112545117tmp
        • Size 571B
        • SHA256 55acb7b24569c7ad6ee68fbec704d1e698e59007ff32c50e6fcadd5de0907fd6
        • MD5 SHA1 SHA512 TLSH

        frc_1:1013856022208:android:1c9abd3efd3c484ee48725_firebase_defaults.json

        • Path /data/data/com.pgwin55.one/files/frc_1:1013856022208:android:1c9abd3efd3c484ee48725_firebase_defaults.json
        • Size 162B
        • SHA256 2eddb0a4564d574d49321f476944eb4c1530749c77ee15ac0bbf37619619410a
        • MD5 SHA1 SHA512 TLSH

        frc_1:1013856022208:android:1c9abd3efd3c484ee48725_firebase_fetch.json

        • Path /data/data/com.pgwin55.one/files/frc_1:1013856022208:android:1c9abd3efd3c484ee48725_firebase_fetch.json
        • Size 140B
        • SHA256 692c8de16d8d0dfe6c61feffe62364adecb576d020a50a4b37145a561f169164
        • MD5 SHA1 SHA512 TLSH