25ca14cc34a07441563a533e81d62242e66336ecee890162ac702dfe57c3fc17

Analysis

max time kernel
57s
max time network
153s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
24/07/2026, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
laxmi777.apk
Size 6.8MB
Sample260724-pf2daazclc
SHA256 25ca14cc34a07441563a533e81d62242e66336ecee890162ac702dfe57c3fc17
MD5 0e7c0c784692a909f8c1dab408e46d50
SHA1 b615cf027ed9d1745f185e0ef5cfa69453927d3d
SHA512 d247a3ee4e97f01a8152f4ad64f1740e65bf4543e5dccba7b351561f4f6055e1f195fd2a2fbc01d2a759c9282487f864b05e0f8607d3b91a59d64503051d74e7
SSDEEP 196608:nHCbe7Bct/J02nePZkg1IPxPHTvVoDB0WkKmvOdUR3:nHCcC/J02nehkgwx7VKaKVmZ
TLSH
T1E2660186F768DA2FC877703209AA5235524B4D128A87D747694C3F1C79B76E80F4EBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

collection credential_access defense_evasion discovery execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/sbin/su	com.example.laxmi777
/system/bin/su	com.example.laxmi777
/system/xbin/su	com.example.laxmi777
/data/local/xbin/su	com.example.laxmi777
/data/local/bin/su	com.example.laxmi777
/system/bin/failsafe/su	com.example.laxmi777
/data/local/su	com.example.laxmi777
/system/sd/xbin/su	com.example.laxmi777

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.example.laxmi777

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.example.laxmi777

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.example.laxmi777

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.example.laxmi777

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.example.laxmi777

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.example.laxmi777

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.example.laxmi777

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.example.laxmi777

com.example.laxmi777
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:5050

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

OneSignal.db

Path /data/data/com.example.laxmi777/databases/OneSignal.db
Size 52KB
SHA256 ab03de5564295f5ec34e2fccba9811cff818911b07798e9e456a58309deeb3a7
MD5 e1941e84ac2269c7b1b8bb7041b14001
SHA1 aed569ddb068a94e893702c297683c233d841f6f
SHA512 99124fc5347f6a7e19e0e30330c4e2f0f2d9074a0fc6a0ab7be25c5bd90d8dfdc66e8abeb1852be871dadb7a5945d7046d2e72ffb4f179c385ed7ffded33c2b7
SSDEEP 24:TLLSRZBUWEaKdStdxyqOkPU/+XiByrBNDd2+32ISpvJqrEqjUix5+xGTrOPjwV+x:TeAcrA0oJxqrKcrObMoOS
TLSH
T11E338BCF4A862191EFC765B3155252E44E3B610E889317A63BF760245E83B16D72387C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.example.laxmi777/databases/OneSignal.db-journal
Size 8KB
SHA256 c1d5a76281edc6b5d4ed588c9fcb1ac4d559b92cddfbf4209786a2b91594c57d
MD5 d9a5071e9e863e2efe6ff6602bafd792
SHA1 6f744fee04fb31df3325aa1be837381a5c09744b
SHA512 733a9a305b16bd6e64f3694e7b14567d6bb4499e6c8cd79c98515b7ad64b760d196e715473f2ddf6a5e13af2b0f4b5a430de646a856c7af44fdfa5fa65d7f040
SSDEEP 6:7+/l9mn1hg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKC:7+t0qLiuWdwRmBEyPbV
TLSH
T1DD02228973800822C81D16B7A0D483480E00E77A81A1CB17156048E83C035CCA4A1D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.example.laxmi777/databases/OneSignal.db-journal
Size 8KB
SHA256 b6578db67ad4229693de0a661dd2a68559db604136278746df7244cda9b0a262
MD5 d8c81d84c2ae827136443c826bc9c60d
SHA1 64787b6caf4ef0e43fdcae5cb6ac8a867a34c4aa
SHA512 f9b6788ad3d7a460869da9285a76b6eb7909111ac765a1c3be47391c928b5404c14fd31f6b598ab46a3caa3e23ada3a93d2d93cab9c1adec844ff5c15c3c8d46
SSDEEP 6:7+/l9mW4Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKkrQ/eS:7+t0WwqLJdTRmBEyPbWN
TLSH
T163021289E7410A13C52997B790DDC3552F60E7158373CB67ADE009E87C466CCE891D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.example.laxmi777/databases/OneSignal.db-journal
Size 512B
SHA256 b633f880a41dca618ad4707d0b9fedc8bee12326023d9bc5504d6c27e70d3a98
MD5 038bd46ab6fbf4581852a7e2eb97e15a
SHA1 7aafc4a1e6822c2b1f142f44d3ec2609c7cdea2b
SHA512 fd0b6ddaa136b66666b51b8c4195873a0478c02682933b8d36c58f253ecc8534a4b93489e0995444204dd071f560e4eae3b32259e975e7efb76fc2a2360be6eb
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events
Size 40KB
SHA256 e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
MD5 15d5b92dcbda7ef7f9ca327a903e46e4
SHA1 ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA512 2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
SSDEEP 48:Tf+3u59MENZBdUdndVd/7T9IvdldHlq8/JqYpqPS:z+3KMEX0xIyNYMa
TLSH
T1E703F05D4A202611C2BE083FD7E257531B3CE35F5B2387612E904CF6DDC68B6B831998
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 b31c3de7da30b59cbf3341dd6d0e56f407dce38b663da02951d6048934d32ff0
MD5 59b33c54278bfdf83b40aefeb52a72b3
SHA1 f3eadfc311debd5d351c8d1cc589a6e8daa7c784
SHA512 14f5bda6db59f4abf4105cb2e11bf976b3d8f79cdfd7643b78902a40dc324131ee411add73d90d07d578d29a48e84e2d6902aa325c2cdaedc865e93bdc3bbe19
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 593c66f8e8425e52e83a3c685240e3a209972cd3b45d07fb6ab06791d41c4a83
MD5 056a39e56a6986449e1e08851515cc13
SHA1 ae911038afd203e2c9dd9e763172dbb1e8c246bb
SHA512 404f3fe2a415f88b67310f670efc7b8b8d581d7cdfbe10d55ca78020c679b89804a27ceb93a68d653d0b0fa113b9e6ca09f9527be4b7de22157420fbe03297d2
SSDEEP 6:7+/l9nqHn1gWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK8Z:7+tFqFqLiuWdwRmBEyPbL
TLSH
T1FB02228963830823CA2927B790DC83400D30E719D561CB4725A008A83C034CCA4A0D14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 0ca43efd28bcee063b028f84be0c40ca00d7c675c284e6cacd6945e5ce2693f0
MD5 78ad6fb21a0b4267e7232286260bb835
SHA1 b8732a8cd67ba54bbdc04d88a17e4816d34906b1
SHA512 cc76f626f9b0fc495c9f639b4f6b09d0b5d61ef0a067fa4e28318bc20220f42011dfde9e70aeb8e4a49f782296c706d3219cd7b9083f8559fae1ce15cb576788
SSDEEP 6:7+/l90Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKwnC/J:7+tiqLJdTRmBEyPbXnSJ
TLSH
T1B3021289B7410923C61D57B7B4DA83952E51A7158263CB573560189ABC466CCA890D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation5478572926834829912tmp

Path /data/data/com.example.laxmi777/files/PersistedInstallation5478572926834829912tmp
Size 567B
SHA256 e557d6aba18b13f4208edb7775005aac8fcfc091b46161565c65894575d936d7
MD5 e21b64d93c5c4294727bdfa6e0de1d77
SHA1 825247e1b33430de6e723835373347ee4cc890bd
SHA512 c30487b72af48df4245738a040ef0de87f7ff72541aa394fd419c3957508c57166fe4074575be95b6dc5a340e570095954ec336f4ada4418431d39b8c38c9d2e
TLSH
T175F0264A23745719C8A5070B10CD7C04CE31455A0B05A5E5FFB48E14956ADEE278F590
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation7147730820772180733tmp

Path /data/data/com.example.laxmi777/files/PersistedInstallation7147730820772180733tmp
Size 90B
SHA256 191fea303ef2a6152b0ac932dad1d0e19a28bf233755bd9eb64e7506b2231f9d
MD5 6f8bf7bc01ba348de2e3a2bee934c253
SHA1 2bdab29965db65a7d657aca74face24822c05ff2
SHA512 d16566166ca9b91fc44d0e63c6e333ceea3f372277369303f02443b42bfcf50032e559698644f60019a5165158f77aebf759122deba586e1aacfee87b97e629b
TLSH
T1B4B0125146348162CC86B6025CCDE1455D5224400809CB448A08904001865D4A153994
MD5 SHA1 SHA512 TLSH

Submit Download

profileInstalled

Path /data/data/com.example.laxmi777/files/profileInstalled
Size 24B
SHA256 990ffa587fed6c44fb9f0142aa05595ed5741eeaf9ad3ff73be28187986aa8cd
MD5 a0a589b97441f98adfd1e505c1e7e60a
SHA1 d4c9d40b87aa0742968d0b8227cc81e07bdece5b
SHA512 dcff2efaff5ef24f8738ba6a15c86dd4c5b954e6a177499cd149d0c6f0adf34ea6943e25fe433933b1163c34439c1492df850b9dd2a4a1d2e4bf9c1ddd6f0812
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.example.laxmi777/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 f57a943f17ea53361b96c044ce5ac3f93029b3b60196f911357e336e50198282
MD5 2d195660122eee2d1f08571f182da86a
SHA1 7ff4c3ce2ba887a22b0e117487ac3903bb5e049d
SHA512 1c09fb12d165dfda76b149a9959ea1a6d4de89bb8277a77679ffa7931300e256d04b9792f1b6d7f89d213bb9e9780020105be05b404d88c1c6999976f6563860
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 63c4e0bc8c4af2d80e19b8ef1567431eaf494d029942dadc078af4667a7a9e06
MD5 149064b2b3c6c518db3860c8fa398b0f
SHA1 ce1e17ac4fd43dca33eecbf2395529591b01c645
SHA512 a62efd0a3a840671b8d55cf09ad63cbf3e4eefdeebcf6115cfe9d4cf35aa1c65346f535c99983006d2444ff2f3678b1ac6db2c238734252438c4d82c4a9bc83a
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 9de4df41e3f9efca01942792e9254991a9e67a3866d9560e4a003f4b1b9d45f9
MD5 9df4b8b3de09e7fe1a6ef210b36472b4
SHA1 eb0886b17b07a8b67b6521c29f91cb7fa8dc1e7b
SHA512 b401dcf2e6fc646f6ec4a1d86445dfe12664b8855464d95086b97e8928c7b479398d3b40b5f185e21147cf6ecc10ab20f7441861bd2c8b88299bad5dccf3f837
SSDEEP 6:K0WOkaKw9FZdrlOERX4PBX4ogLugMBX4suuK+/SDsYzHqXWOw2:KqzdTRmBEyPbP/8sYTqmOw2
TLSH
T16072C2BD57402A93C01C03FE51C8D3808E605B2F527ACB0F3690082ABE62A89A5E4DD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-wal
Size 112KB
SHA256 6ce57145a54b6b25306b6a6eb038ce0019609c44ed6a5f911ce2933b46d0e574
MD5 841b9a1e6f3c08400dc0a81c01b12376
SHA1 8f874fe64512d5a466a53f77983f7c5c93381bdc
SHA512 82e955365d3d664a6095128e2b842e6df74d97a7e3ea436d734f0b054d1c54f0bb29e8381fdd66fc07b61f0b7e5d030ec20b299122eeb9f5723693e62b8abdc6
SSDEEP 96:AuuGWYDP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:AfGBndjnHt9S/f8JzSV+6D86T0ED
TLSH
T109B3009D0F592500C0AD64B094D00FE1B93E413E93A7E3D575D1007AEEE2922EFA9CF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-wal
Size 193KB
SHA256 9c61c50686a28894f04192edc7dd651895659741e3428db5b887ca1a5a5941f4
MD5 965c9fe5c503a6b08d1a00b023c09a87
SHA1 c546b1f49eced96e4f926e14a52ab7860fedb730
SHA512 357ebe4135eb2b36e2d8d733de5da7e6ea37fb6b7ec4df8e89e554be6956f8aa8b7dbfd2bc663f776dcadcdf027fe75dd6c19b18ee544cadbafe0f74a0970f24
SSDEEP 96:gE21DtYQUE0ESUuDu9E21DtY7kxblE21DtY7FE21DtYg:A1DtYQ+G1DtY78l1DtYx1DtYg
TLSH
T1AA14B0EB626E8020EF8F037FE86350E00A7B14E71E7A2458F4BB13657AD5145E397593
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.example.laxmi777/primary.prof
Size 3KB
SHA256 4eebd4ccc10a0bd43b9c3384d3c9bff56a887c3715f207da8477e425ee9d906d
MD5 ce9dc936650aa845cdf81b57b70b488c
SHA1 e2ef0714d5b30edb9dc72a7ba6dcc3bce1845b87
SHA512 946aea4a8474f93a2944d770970f5f1d38ee14f3e9e793ea99e5707db1fdaae73b348b862d0f6d6b088c20417bb65cd99aec022c8f4c8bf3b4e40fa08b836487
TLSH
T152516D4F829E76C049697DF0CE32BE5955E6C644341D2B02CCBC2F7808A872C2F4660D
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.example.laxmi777/primary.prof
Size 12KB
SHA256 4a1e61bd8208de8a1efc76d969282a3e3c3c6c53dc135469ed1ebf6e692d022d
MD5 84b0f0f0a4a40b47f147fc536a91cad8
SHA1 95bac4646864618a0046f7ee1a1f4329d4862057
SHA512 52494319f2175173244481e15cdce4cc56b3ab966c5de1bf0a1bbb83d9da9f09666b00416632595210d9b8a55cb21b8dff6f6752d921e1c7b7548050e9a233b1
SSDEEP 384:KS2nQkM5PF33qcsfulJHgepY0ng2Z4ED4X:KS2nQDUu9Z4PX
TLSH
T16042D1A3CF0216E3982642BC1BFFCEC045ABD4F113E402680DB07475848697C965E65D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads