Analysis

  • max time kernel
    3s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    24/07/2026, 09:17

General

  • Target
    beetv-2.2.3.apk
  • Size 15.3MB
  • Sample260724-k87csabl8x
  • SHA256 690bee06fe3dd170def13a6ea6a44477bb9de06fbf1d49726da92a4a58316ff0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Contacts third-party web service commonly abused for C2 1 TTPs 59 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.battlenet.showguide
    1⤵
    • Queries information about running processes on the device
    • Queries information about active data network
    • Checks memory information
    PID:4876

Network

        MITRE ATT&CK Enterprise v16

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        2.2.3-0.stacktrace

        • Path /data/user/0/com.battlenet.showguide/app_stacktraces/2.2.3-0.stacktrace
        • Size 1KB
        • SHA256 4990ac076c6b2dbe476757eec24145c4a1f4e9e3a07bdbce622e2df18014fda2
        • MD5 SHA1 SHA512 TLSH

        google_analytics_v4.db

        • Path /data/user/0/com.battlenet.showguide/databases/google_analytics_v4.db
        • Size 28KB
        • SHA256 3ebf64ba01d7c79523164eb5f9fe7efbb5f49f0d6bd095a47187a89e101593fb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/user/0/com.battlenet.showguide/databases/google_analytics_v4.db-journal
        • Size 512B
        • SHA256 75141d788226cd0486c7f0e306a27f432925055d22c8e900f90a825ab9a83473
        • MD5 SHA1 SHA512

        google_analytics_v4.db-journal

        • Path /data/user/0/com.battlenet.showguide/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 8f24a5c22a902309569ff74d478defb989e6bb5de143cdfe3046900ad045f3f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/user/0/com.battlenet.showguide/databases/google_analytics_v4.db-journal
        • Size 4KB
        • SHA256 a7529e6ed653fe2ce5398952d5af838b2e79ff0cd65d8a46b7b3b45a49ca0c24
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/user/0/com.battlenet.showguide/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 10d15dbdca8e56db71de6d1862ccdc1925c61a3dd42a7e634c063ba4c64c9675
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/user/0/com.battlenet.showguide/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 33091d44fb3704b770b95e3b13887beaddaedcf0cf3655b61a871cdb4581d47c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/user/0/com.battlenet.showguide/databases/google_analytics_v4.db-journal
        • Size 12KB
        • SHA256 f67d6b375c381420d4b833448d216997850e336bb7f617203d81146158e953a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        http_auth.db

        • Path /data/user/0/com.battlenet.showguide/databases/http_auth.db
        • Size 20KB
        • SHA256 6e7b95a553c2528d6c564296a9e481a6d913074c35011a19f2da8e4807c53bb2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        http_auth.db-journal

        • Path /data/user/0/com.battlenet.showguide/databases/http_auth.db-journal
        • Size 512B
        • SHA256 84f3a419f2f91123ecca033a4bd724ec2af40e5afdb13244479c9711196a286a
        • MD5 SHA1 SHA512

        http_auth.db-journal

        • Path /data/user/0/com.battlenet.showguide/databases/http_auth.db-journal
        • Size 8KB
        • SHA256 00b8557fbe06249b450a820570e7eba06d9d1ad9649b8e20de35715438bca038
        • MD5 SHA1 SHA512 SSDEEP TLSH

        http_auth.db-journal

        • Path /data/user/0/com.battlenet.showguide/databases/http_auth.db-journal
        • Size 8KB
        • SHA256 fbc9127acab2e535ed267fd2b34150ec93eeb2303f233b66637029a3d403450b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        presage.db

        • Path /data/user/0/com.battlenet.showguide/databases/presage.db
        • Size 24KB
        • SHA256 e50fc3d4ee451d694f11736a32e4d10e6250cc1e29efab47f174b2a723231680
        • MD5 SHA1 SHA512 SSDEEP TLSH

        presage.db-journal

        • Path /data/user/0/com.battlenet.showguide/databases/presage.db-journal
        • Size 512B
        • SHA256 934cf5c46e108f27dd37ddae600665e4f08b4a62241c1f39290505cc3b49cb2a
        • MD5 SHA1 SHA512

        presage.db-journal

        • Path /data/user/0/com.battlenet.showguide/databases/presage.db-journal
        • Size 8KB
        • SHA256 626a2e2d1ab7d5afb14ce9884cd1e66dfa4aac8629c799f62eb0cbe8a822963b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        presage.db-journal

        • Path /data/user/0/com.battlenet.showguide/databases/presage.db-journal
        • Size 8KB
        • SHA256 9b85bfc9609ec7f2cb4d572ef58ccaf8f9d027e8a7849ee3af950723564432a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        presage.db-journal

        • Path /data/user/0/com.battlenet.showguide/databases/presage.db-journal
        • Size 12KB
        • SHA256 8e7cf475eb2f837e68afe43721aa07dd5885c131428cc0325c392235e86c01d5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        session_analytics.tap

        • Path /data/user/0/com.battlenet.showguide/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 405B
        • SHA256 d38008e47cba9972fcb1b329e0d7f200020b1d64bad1419c7e885622d5baa9f3
        • MD5 SHA1 SHA512 TLSH

        session_analytics.tap

        • Path /data/user/0/com.battlenet.showguide/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 835B
        • SHA256 88bfc1cedc984c2e8f81ec9c65024f7c91cdc1d591d4666e33f4038852fc9553
        • MD5 SHA1 SHA512 TLSH

        session_analytics.tap.tmp

        • Path /data/user/0/com.battlenet.showguide/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        sa_a4d3b064-b7d7-4224-b2c2-1affcb5891fa_1784884655996.tap

        • Path /data/user/0/com.battlenet.showguide/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_a4d3b064-b7d7-4224-b2c2-1affcb5891fa_1784884655996.tap
        • Size 326B
        • SHA256 79577c27c570b09b5717054d4dcae4d1e249053d7f45cc98ab06393e9b2d26aa
        • MD5 SHA1 SHA512 TLSH

        gaClientId

        • Path /data/user/0/com.battlenet.showguide/files/gaClientId
        • Size 36B
        • SHA256 b98407ddc7a62643992fd0e206fef6526a2642a9378fac9710667b78cf02f9c0
        • MD5 SHA1 SHA512

        shared_prefs_sdk_ad_prefs

        • Path /data/user/0/com.battlenet.showguide/files/shared_prefs_sdk_ad_prefs
        • Size 181B
        • SHA256 323711ea097e99a032b55fd7c52e319f64c28762778f63760046ba3f368bc082
        • MD5 SHA1 SHA512 TLSH

        dso_deps

        • Path /data/user/0/com.battlenet.showguide/lib-main/dso_deps
        • Size 208B
        • SHA256 7a503c1e2ac3dbbf1737f4ce829a4c53db59366fcb616d5720541ddee2b45657
        • MD5 SHA1 SHA512 TLSH

        dso_manifest

        • Path /data/user/0/com.battlenet.showguide/lib-main/dso_manifest
        • Size 5B
        • SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
        • MD5 SHA1 SHA512

        dso_state

        • Path /data/user/0/com.battlenet.showguide/lib-main/dso_state
        • Size 1B
        • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
        • MD5 SHA1 SHA512

        dso_state

        • Path /data/user/0/com.battlenet.showguide/lib-main/dso_state
        • Size 1B
        • SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
        • MD5 SHA1 SHA512