233da440b7f997e6062f0acf6bb98431df52e8d94351aae4f471fbd739aebd54

Resubmissions

24/07/2026, 17:03

260724-vkryasvapd

24/07/2026, 17:02

260724-vkac9agr617

24/07/2026, 16:07

260724-tk35wsgn5x7

Analysis

max time kernel
4s
max time network
153s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
24/07/2026, 16:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cpc-daikin.apk
Size 6.0MB
Sample260724-tk35wsgn5x
SHA256 233da440b7f997e6062f0acf6bb98431df52e8d94351aae4f471fbd739aebd54
MD5 bac0bd5ab7ebd789cfcffb920d725c71
SHA1 75c1c6cc49f5a972b4f17479f8bb58b441ec9ebf
SHA512 7ec2a0711beb82d889e77c3c5de7520f45e54e3a8d3ec72388a0cc9ee079ab361a1b8a6996f4e64c424b1da7abb41e936a706e418e3a9ef2122609d794c37d3e
SSDEEP 98304:3AfCj8j3YBaywqn2sPbWpsrSJjlQFWlGUP7ylEylbOHGGQoa1IosdiSo/KrgUMVO:3MCgEI0WpxxlxwaylJuQo3iqoO
TLSH
T18856F1DBF7D8992FC87340B289AE52B1165B4D128A839F476D44371C38B75D81F8ABC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution persistence

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	dev.cpc.daikin

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	dev.cpc.daikin

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	dev.cpc.daikin

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	dev.cpc.daikin

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	dev.cpc.daikin

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	dev.cpc.daikin

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	dev.cpc.daikin

dev.cpc.daikin
1⤵
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:4388

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation5730540761206481139tmp

Path /data/data/dev.cpc.daikin/files/PersistedInstallation5730540761206481139tmp
Size 90B
SHA256 41ebced8a9b4e90a22b058a41986e043a49ea13145e0f0e1f0fb608e0a018471
MD5 b562e8b82ff3080e2642cf08148c35af
SHA1 d56e2c7902ba4c5b347d9b9973df27b3e226c2fc
SHA512 7653f445f16cf99946d98aea4d5df95b1688072a4d44f680cd14e52d57c8763b8d7dbe043bc2a72f0a9fffe15488bd20322723bfd93a446c9aa567255d799869
TLSH
T129B01284973041918C85BF071ECC93405E827C80144ACA184B0CD4C020822D881139A8
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation878781577077334424tmp

Path /data/data/dev.cpc.daikin/files/PersistedInstallation878781577077334424tmp
Size 570B
SHA256 f7434b132f1836aaa4e1c05c9f49974dabb4d9a879a110e0a28e296c92bd10b2
MD5 1fcf9bfd3666a4b0de0040608bfa0605
SHA1 98dededf085b89398fcabbffd3cd3df68cea8af5
SHA512 aa5656ceca4b19f1ee1b35ade6a530dea4e8a036866f5a29d3e14a8b26e89408a16b56a1a20f8eccddee60f29af19158ac7270b908e4c9a10bb719236afa7c6d
TLSH
T108F0E10F5B718522EC455707514D7C424E1A5C659E7988D46ECBACA09DC1ADE5A034D8
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb

Path /data/data/dev.cpc.daikin/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/dev.cpc.daikin/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 fca792231857b9d2d6674d18cca916095a0c84dab0aca02d7f2ab2b50cbd8203
MD5 d9b6834e05832f9c2c1e4e20d603314e
SHA1 83a4a72a51aa240a4ac3a85df73a15a7a3fc0d9c
SHA512 55b6297f727d42f9152da6543becbd3e86777b1d864e0340ff7e3751bd88a6a607fad2c6a02b74dbed5a173f943a7dc762563a871545dfea2eaa2bbcc9c43018
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/dev.cpc.daikin/no_backup/androidx.work.workdb-shm
Size 28KB
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/dev.cpc.daikin/no_backup/androidx.work.workdb-wal
Size 116KB
SHA256 2ccb7ca12c69b0cb0fbcb53325b570f47156e1376e469c9b730bc2dfdb187d43
MD5 46720ffd772d8a9eefe750445f1cff94
SHA1 8729ba5cbfb6b75238c4700a6654710e71fb9719
SHA512 af91f0bb2e66b1fee8133ffc44191b8cbef8b525cb1d9f46409d39a09b5e459e81286c323787e636fd781a5e5045a684ae3e6a81c818f56750b46e0562449fdd
SSDEEP 96:NH3I1S86+etidjnZRWzzb8/KeKcK+zSPddKz+ZD86u0ExV:NYwdtidjnfWzzb83zSPde+ZD86u0ED
TLSH
T1A0C3128E0F192600C5A958F4D4D02FB1BD3E413ED793EBD1A5A104B5ADE2921DE29CFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/dev.cpc.daikin/no_backup/androidx.work.workdb-wal
Size 261KB
SHA256 5bb147cef11463f4ea21fa0042b37afc34bcc022688b098112ceef45b41b53f8
MD5 65f56233cfa98bc99275811d389542a1
SHA1 f3108217043c8e9cfc0c9671d151fa5d974f311c
SHA512 95e13202e8e4a6e97b02d2c5820fb0b4b959189b2b746c8c153fc19f3e3320dbc2e26a83554b24ee4cd07e6a07bd313469449d31df1452ee06b2330049ee0ad0
SSDEEP 768:4DtYsDtY7DtYrDtYVDtYBDtYQDtYlDtYADtYlDtYy:4hYshY7hYrhYVhYBhYQhYlhYAhYlhYy
TLSH
T11244C7A732818361C722ABBDD4EB72DD9096BC70D4861E54D855BBA033B3706B4EE03C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/dev.cpc.daikin/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 9b69cfb37b9435f70cb1115f3f456b66fb72794c47e1094f25ea849d86abb065
MD5 5bb0083e5703ff2f0740fd24d7d6ddd2
SHA1 a83ffe97bc387d55d5ed0e8b18b4d978cdd38ccf
SHA512 e55fa7a36db915a3d93616869fd1d6c45b0081a3943180b6be9b5d76563e69615d095d05b86e4a1bc647caa4a8311fbf5a578fbb53b4c8c7d4389082d0ba9396
SSDEEP 6:KsZ0PpLeT0PSug9FZdrlOERX4PBX4ogLugMBX4suuK+/+0PILcTeY4/v2czHWTOD:KsKPpSAP+zdTRmBEyPbP/dPJaMOw2
TLSH
T1E472C246A3802522CB1953FE44CCF741BD7552394717CF0BD2601C552CA16C8E091D1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads