25ca14cc34a07441563a533e81d62242e66336ecee890162ac702dfe57c3fc17

Analysis

max time kernel
46s
max time network
153s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
24/07/2026, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
laxmi777.apk
Size 6.8MB
Sample260724-pf2daazclc
SHA256 25ca14cc34a07441563a533e81d62242e66336ecee890162ac702dfe57c3fc17
MD5 0e7c0c784692a909f8c1dab408e46d50
SHA1 b615cf027ed9d1745f185e0ef5cfa69453927d3d
SHA512 d247a3ee4e97f01a8152f4ad64f1740e65bf4543e5dccba7b351561f4f6055e1f195fd2a2fbc01d2a759c9282487f864b05e0f8607d3b91a59d64503051d74e7
SSDEEP 196608:nHCbe7Bct/J02nePZkg1IPxPHTvVoDB0WkKmvOdUR3:nHCcC/J02nehkgwx7VKaKVmZ
TLSH
T1E2660186F768DA2FC877703209AA5235524B4D128A87D747694C3F1C79B76E80F4EBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

collection credential_access defense_evasion discovery execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/sbin/su	com.example.laxmi777
/system/bin/su	com.example.laxmi777
/system/bin/failsafe/su	com.example.laxmi777
/system/xbin/su	com.example.laxmi777
/data/local/xbin/su	com.example.laxmi777
/data/local/bin/su	com.example.laxmi777
/system/sd/xbin/su	com.example.laxmi777
/data/local/su	com.example.laxmi777

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.example.laxmi777

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.example.laxmi777

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.example.laxmi777

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.example.laxmi777

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.example.laxmi777

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.example.laxmi777

com.example.laxmi777
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:4874

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

OneSignal.db

Path /data/data/com.example.laxmi777/databases/OneSignal.db
Size 52KB
SHA256 491c9687657ca71661a5cf42a763249f88fa222edaef20eaf552c4599458f99e
MD5 f1427539ecc4cedfa892efc1776ba3ed
SHA1 814607670e99768ae6212224860b0a1fb93733db
SHA512 c3ebbf63c4e876e471848f810e7ad7c0cb56a946230073b5196f7b3ce5d1f144c800ec5787992ff2ee057f712d7c7f1b92b47761294aede13183c796e5ab043d
SSDEEP 24:TLLS57ZBUWEaKdStdxyqOkPU/+XiByrBNDd2+32ISpvJqrEqjUix5+xGTrOPjwVw:TE7AcrA0oJxqrKcrObMoOS
TLSH
T194338BCF4B862191EFC765B3155252E44E3B610E889317A63BF760245E83B16D72387C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.example.laxmi777/databases/OneSignal.db-journal
Size 8KB
SHA256 586e88ee0d78b3b1a288ce5270924e99ebd4525fd8e9b758e96e2833787b7b70
MD5 fd71a15f316d66bed7d56d904947e3c0
SHA1 0a6c8924b0ac0b16a3cdba930bfeb6865db21661
SHA512 874d2fc52a52fcf8a6a323ebaf16271c593322c34e0c7c66b93dc31278d016af990070a7ece95e6ee34ede9431d4afbab89af93f2b254d640edc7efa59b70652
SSDEEP 6:7+/l95xlgPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKijnM/D:7+tQqLJdeWRmBEyPbTbsD
TLSH
T18802128967411953C52A9B77A0DA83541F14B7299263CB5B269108546C466CCA891D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.example.laxmi777/databases/OneSignal.db-journal
Size 512B
SHA256 6bf2d878f83a154337308c4781c57ae10156c2c7688f0690769227f7410eaa71
MD5 9f40b6987eae528e2a5f994e6dc69754
SHA1 26c1ef10c161870269f727a6a17afe9b3de8aa2e
SHA512 b890add2510807d9b05fd85a5c7dec9b9474edf4c8cf5bce61a7cf6c4707ae681a274bc8d3f2c8d5b28b9e160c6724803b623de37568d193a435fc8bd9be51cb
MD5 SHA1 SHA512

Submit Download

OneSignal.db-journal

Path /data/data/com.example.laxmi777/databases/OneSignal.db-journal
Size 8KB
SHA256 3257bec2566580ed7dfdea96bdd974ee2c19c35a6d3fc4715d02decae5b63683
MD5 116f1c41e37d9bafdf7b44566ed1f142
SHA1 3a78ff69bf3cd4623805638d23813991e2938b89
SHA512 5242e2ee54c119a7f9e7ccb8f78c570a642b2ec0bd3acbc45b896bef0008fe49fc305d5f5e1248e3bd138fe9b1bf417d80ebe16a991b04b4b7ab54f11b218c5e
SSDEEP 6:7+/l99x4n126g9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKmr:7+tB6qLiuWdYRmBEyPbXr
TLSH
T14802228863810832C82D56FFA0D4D3841D00A72D8161CF1716D008987C075CCE4A0D48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events
Size 40KB
SHA256 100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
MD5 1cf3f63c021d755a21623e6d0e86dbc6
SHA1 e40e0f1faa61abcca7ba3394c54c92ff7334b49b
SHA512 38d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466
SSDEEP 48:TfkL3u59MENZBdUdndVd/7T9IvdldHlq8/JqYpqPS:zkL3KMEX0xIyNYMa
TLSH
T1AF03EF5D4A202611C2BE083FD7E257931B3CE35F6B2387612E904CF6DDC68B6B821998
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 003aea29ca90fe87a5a94a3cb80838d4f76513a996d33f6a49da3812b439eb7b
MD5 0cfb4172839eb832c15c9c5175db6e81
SHA1 539b2a9344e3b34b52b7a1ed355122fbc71bcc6e
SHA512 173d3aacfca226e2730410b938913b03c5134b4a0fe640fd92fa429590a7d14895f37baa5a6cf3349bac801711627b32309d97767762be8ab2a119e4a1a7212a
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 c5be79bbb81fe1ababfe1610501972dc1abe998e41646c27a3a077eff673fa2e
MD5 4e64aafe9b77f7ad3d268559529a2a62
SHA1 4bee60606236825f02b6ec5f54913a59471a1c51
SHA512 6d66abfa1ae937d05cebe97c6c2473b4725caa32d72b1e5434a1f2c96c9412a1ea0b4e879e55008cf431de0c918a1a9c5bffa5c1bf694876418879d11b167298
SSDEEP 6:7+/l90Gn1Ig9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK2K:7+tQqLiuWdYRmBEyPbHK
TLSH
T1FD02C0CCA3800827C82E9F77ACD583A00D00F7288771CB17169008943D07CCCF4B0D14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.laxmi777/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 cdf25321c6a4aaf2d836b5883b2ad6be12a01ffb8a279f77fb38c2611f861ecc
MD5 64dbee88de1817ced0aecc2b0169b975
SHA1 c4b02603faf63b798585fdc3d724375dbf053d39
SHA512 5a97a60f7d42174fe2a5784deac9ce27f02f86d6dad12f0af166b2c8c0e31a970a6290b931ebae6b026792ad9383a3fa41d31152440c7e322269cec1999fbc08
SSDEEP 6:7+/l9DoFPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK1t//:7+tAqLJdeWRmBEyPbE1/
TLSH
T1CA02128967410913C67A57F7A0DA83681E14B7299273CB5B16910C586C466CCA891D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation1132162734906064025tmp

Path /data/data/com.example.laxmi777/files/PersistedInstallation1132162734906064025tmp
Size 90B
SHA256 fafda0d5f6fb1ae980f3a81413f96aff71e1c75bd4bc1199ff348fb6e7f21bf2
MD5 ac178bd5cc0658a63795335a94a4370e
SHA1 e2f85c39130067631dbfd419ffcc0daa0c228a00
SHA512 a4b9f79d10e6aa895a381e91c3fd8ca73d19dfc5f8137bc80d58a7314c73231da4df9d853eb35cb197a860bf7e5fe027b775c1e1e726118ad1c594bba70b9927
TLSH
T1AAB012009A71824285DDA2022CCCE2002F80244118C9CF241F08908090832D092479D4
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation8224136332930599451tmp

Path /data/data/com.example.laxmi777/files/PersistedInstallation8224136332930599451tmp
Size 567B
SHA256 63d71b6376d5d173c8539da852eea0e88eceddfe1ca1119fdbd9dfe82487b760
MD5 15989c18982e0caad519bc0e80b53f0a
SHA1 9ed9a036603144c6d18203cfd5853b84675deaa8
SHA512 b95f471fdc0bc55c831d701552770229a5c561a8f418b2898ef6b161d4eb1864cfe9e795090c012cc27bbde9b67b0e975c5a83596415c3f3a4d0320cc9c2e52b
TLSH
T1F1F026876752051488DD730F1189BC444D1419849DEE0AF9FF85858996D155E725B840
MD5 SHA1 SHA512 TLSH

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.example.laxmi777/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 04b583bf113d4816968bd61e7bea5bfeb35f346a8d3c03444ab5c37a619d6db5
MD5 9aa914986691fa7d27505a6f11b422c8
SHA1 f95abaae597dc4205a816f6d4b57c87d7a769e21
SHA512 001017d635592617a4641de69a9b8c2dc70c0522af2461012c9a911cb08be324d900ec711f550fc6ca9839d2e0b89d004333cd2d01f31b592da6864448f56a59
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
TLSH
T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 86200c4a20861c2ea9dcd09553a41d221364dfccdc32049f3b118460c6c8c99e
MD5 d80cd5b38441051867a67274b334a4f3
SHA1 3a62bc64c7d8e6cf1d1966365d183cefe701294a
SHA512 1d0650e010ebcca461f8a5e0d18718f66c132a6508cff3bccfcdca27d4fc712a40505027056969b9e28b2a75b95e803597047def5a6a6ea4ee4c32a435107aed
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-wal
Size 185KB
SHA256 1046e0eb1fbfda95c7bfce2252ecaa30e56b5be8444c44b54580050e8d6b7aa8
MD5 33bffe22f3eb8e8300fecc5cb63513e3
SHA1 1ce98a51216627b858012cc0ce2f0370b0b9b57a
SHA512 ea7d613be0b3e2bc96b7e3cf3192bd900a9ed77c9bfe4ae15f52bcf2ea68d6319673a2cbb7bbe06d08cfa711388f88fa8545e687cc03db4d7ce5da06135f8d5d
SSDEEP 96:mE21DtYLUEUEkElUuputE21DtYDKME21DtYahE21DtYV:G1DtYL4Elg1DtYDKs1DtY01DtYV
TLSH
T117044BF6B22ED464FF0E113BB57A00B31EB363E90F429052B39B926852E7145DB17651
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 5e6fe0bee540100422d127e04e16a5a2446d70f7a2f25223169dd90a78412f6d
MD5 efe64dc045b59091314194c9ea2eab05
SHA1 c920dc34096d486886b7121d59f925fbbfdd4d32
SHA512 2ce9255ed786c869a297a72df8f4d1de8403250e1b0dd7b3d1d900ff25ec93b9ffd0a7ccdce265b4bc3349b87da39fd2aa6b31d4dbebf6f814e4336f120ee880
SSDEEP 6:KCYdQuVRy9FZde/kPlOERX4PBX4ogLugMBX4suuK+/A9h8sPjTOw2:K5dQg8zdeWRmBEyPbP/IxPjTOw2
TLSH
T1EC72C274A3880A5AC115767350C493167E50771C2252C747769128353C733C8E4A0EC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.laxmi777/no_backup/androidx.work.workdb-wal
Size 112KB
SHA256 44afc9874fb064b47f67ce97df088a3ed23e0ab0b5519b1d6b14f211af6ffd83
MD5 4b6a8aa6a52ad8ec90317dcbe7b7a851
SHA1 76adb001febca5ce083f680e6ebd4e5e0a975ddc
SHA512 49be2131a5abdfecb21a9ca1055d8dbce4c7fd34c88fe6c9919fdbcf9eab9ffa1831040a43df69c6ad18865f614afb93b5a227d710a54d39b8848b90bb7cc87b
SSDEEP 96:+4qgcZ7yvB5FW2MDP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:7TQndjnHt9S/f8JzSV+6D86T0ED
TLSH
T135B30F9D0F5D2604C0A974B0D5D00FB2B93E562E9393E3D275910075ADF7A21EE29CFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.example.laxmi777/primary.prof
Size 3KB
SHA256 4eebd4ccc10a0bd43b9c3384d3c9bff56a887c3715f207da8477e425ee9d906d
MD5 ce9dc936650aa845cdf81b57b70b488c
SHA1 e2ef0714d5b30edb9dc72a7ba6dcc3bce1845b87
SHA512 946aea4a8474f93a2944d770970f5f1d38ee14f3e9e793ea99e5707db1fdaae73b348b862d0f6d6b088c20417bb65cd99aec022c8f4c8bf3b4e40fa08b836487
TLSH
T152516D4F829E76C049697DF0CE32BE5955E6C644341D2B02CCBC2F7808A872C2F4660D
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.example.laxmi777/primary.prof
Size 12KB
SHA256 99246120a28c4262ecfb42b4322d427ce10d95329a1eaa54302e7e4dc6c3b06e
MD5 0ed24ee1e3077891e8bcda4712bd28cd
SHA1 3e9d89f5e727ca8f7529782d8d8968265f31ba45
SHA512 dfe147e809d4b49ba6826a8a1d813290bef5b55adfee4f375e09fef6a37d4a5c07dcb8b6aa43e9c9663d428a7fc5bbde347938e083aaccc414f5509aad326dd5
SSDEEP 384:sLTzAxVo/pAQWJ6hoStqq5gMvNYsce56wb6IXpHqM:sLnAzWAQywg6sPwOsxqM
TLSH
T12542E0628A22C777B1EC1BE5FF244C0BA49E1E835681B3EC2B8D995D75C1412D0F0C32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads