Overview

overview

8

Static

static

3

com.i.am.c...im.apk

android-9-x86

8

com.i.am.c...im.apk

android-10-x64

8

com.i.am.c...im.apk

android-11-x64

8

config.arm64_v8a.jar

windows10-2004-x64

1

config.arm64_v8a.jar

windows11-ltsc_2024-x64

1

Analysis

  • max time kernel
    5s
  • max time network
    33s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    27/07/2026, 22:00

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    com.i.am.city.gangster.sim.apk
  • Size 209.3MB
  • Sample260727-1wl43ssbme
  • SHA256 fed7d8f61e0dede342b4548fbf012b28d26e2144fbe462c5732319338988ab73
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 8 IoCs
    defense_evasion
  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.i.am.city.gangster.sim
    1⤵
    • Checks if the Android device is rooted.
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4324

Network

        MITRE ATT&CK Enterprise v16

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        google_app_measurement_local.db
        • Path /data/data/com.i.am.city.gangster.sim/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a77e2213051f731648432c7de056949e0cd3a5cd88b1325313ca1a74e22de375
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.i.am.city.gangster.sim/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 e71dd4b4208912ff6ffa04c541a964597b86d19e984731ec571e2121792fb602
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.i.am.city.gangster.sim/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 e1f619dd792d60adf91a50e0c0f40fa86e1824ed222b32720eb48311fd1f979b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.i.am.city.gangster.sim/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 f998e7db996230de659de23ae4992982d253c9abdc1150013125ffc3dd9ec7af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.i.am.city.gangster.sim/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 bca3444e87fae49e555b0031be51f0497fb178e98d077cd5a6d7294b29430a11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.i.am.city.gangster.sim/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 b1c16d280094e7a77d777f80884fc48f8580dea37fa99ae0d6b418bd367ca24e
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.i.am.city.gangster.sim/databases/google_app_measurement_local.db-wal
        • Size 44KB
        • SHA256 a16d81dbf6e86a15813085f6a09573a856d82a2f8267af4e6dc0d775be75e69a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.i.am.city.gangster.sim/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 0c7a7fd9fb7e369e75e58a1693b344b6afbf7762a9ec88e14b8c9def645b7e5b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.i.am.city.gangster.sim/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 01fb40ad6931db81f9ce51b739241ccdf4a92cfe028066d311f12ba1785ae325
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.i.am.city.gangster.sim/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 d09f47e816508ada5edc08b30356a1cd3171cd71a00c019a6ba11464afbe4cb0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.i.am.city.gangster.sim/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 5febd8515189d8b48b77cba2337a7e729f5377bb3e8f03a5ca1db37a240e823b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation2371191072455202654tmp
        • Path /data/data/com.i.am.city.gangster.sim/files/PersistedInstallation2371191072455202654tmp
        • Size 566B
        • SHA256 4f5a907175dba31430c1b671b3922e7111dcfe88cd8140e5978bb0c20a64d6d7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation6273087368356591110tmp
        • Path /data/data/com.i.am.city.gangster.sim/files/PersistedInstallation6273087368356591110tmp
        • Size 90B
        • SHA256 046a8f38830293f49aa719e5723e6cfe643cb98114cddccacb50a8d8a0ebeca7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        audience_network.dex
        • Path /data/data/com.i.am.city.gangster.sim/files/audience_network.dex
        • Size 4.8MB
        • SHA256 07fef7ea41d84ccf44ef2e2a6de8d23e3d3dd5920c87979a1d501a9cb6272496
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo2MTQzMzY0MzgwNDphbmRyb2lkOjlhMWMyZTQ5YzQwMDY4MmVmM2YwZDk.preferences_pb.tmp
        • Path /data/data/com.i.am.city.gangster.sim/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo2MTQzMzY0MzgwNDphbmRyb2lkOjlhMWMyZTQ5YzQwMDY4MmVmM2YwZDk.preferences_pb.tmp
        • Size 381B
        • SHA256 10fe12ebfe2701e099308cc1cdeda06ff1b3915d184ef8782b44f3246679decd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo2MTQzMzY0MzgwNDphbmRyb2lkOjlhMWMyZTQ5YzQwMDY4MmVmM2YwZDk.preferences_pb.tmp
        • Path /data/data/com.i.am.city.gangster.sim/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo2MTQzMzY0MzgwNDphbmRyb2lkOjlhMWMyZTQ5YzQwMDY4MmVmM2YwZDk.preferences_pb.tmp
        • Size 357B
        • SHA256 2c0103f2b9b22ff27cacce0ed7e2521f994b28f704829a064a1d804bd553204a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 617e98a62f159311c08ab2121c16bcf8b6cc6a072d414fceea6a6e0141f92bc6
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 48ce1ffaaf060f16a8de096685b0672073d1e7fd1b160a79331a353c75f664f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 39ec98beacc77b3a069c1cd8898b70b5daba53aa9487fe182a7593ef39d88c6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appmetrica_vital.dat
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/appmetrica/analytics/appmetrica_vital.dat
        • Size 56B
        • SHA256 73ead7f6d60d9dc0d5de3e4ca86001406082aa2c91ae23e0a067d1ebccfe9486
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        appmetrica_vital.dat
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/appmetrica/analytics/appmetrica_vital.dat
        • Size 57B
        • SHA256 562f62d768bf0781fe2285a165979603fc0b8df21ee89143aca9744517c19ad0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        4324-b73e5baf-0e0d-4fd7-8ca4-b5022bcfb872
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/appmetrica/analytics/crashes/4324-b73e5baf-0e0d-4fd7-8ca4-b5022bcfb872
        • Size 44KB
        • SHA256 bf0b7ab80c9b94f9f382b7876511c4c6535a9ef1cbb23bbb562822c9a5dd75c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        auto_inapp.db-journal
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/appmetrica/analytics/db/auto_inapp.db-journal
        • Size 512B
        • SHA256 2cfc375f52b14da06ccab1b612a152433e7628b47d41b282f00d2326697e138d
        • MD5 SHA1 SHA512
        Submit Download

        auto_inapp.db-wal
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/appmetrica/analytics/db/auto_inapp.db-wal
        • Size 20KB
        • SHA256 b0f68233341e78b361454479bb93fc0cd5c643ed3ba8974ccd75169521be7222
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        client.db
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/appmetrica/analytics/db/client.db
        • Size 20KB
        • SHA256 bc746c9be4283116ce4d0f0abaeb440b7390b1cf94ad2fa6f2df25d387b67bbc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        client.db
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/appmetrica/analytics/db/client.db
        • Size 20KB
        • SHA256 72bf08e4f3379c9afd187c35e125e6f05aaa0756835a4d5d6b8c7e15507fc871
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        client.db
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/appmetrica/analytics/db/client.db
        • Size 20KB
        • SHA256 81f72d9dfd28c378109b5b349c649d0fe1e1d61bfbe5a1a047785338e8be069d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        client.db-journal
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/appmetrica/analytics/db/client.db-journal
        • Size 512B
        • SHA256 2026bf4d6a048c1310812ce95070e48e2734a94428e34f7f6f8a2173d4f8d3a2
        • MD5 SHA1 SHA512
        Submit Download

        client.db-shm
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/appmetrica/analytics/db/client.db-shm
        • Size 28KB
        • SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        client.db-wal
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/appmetrica/analytics/db/client.db-wal
        • Size 32KB
        • SHA256 90496287c0f45d2334e9ddc8a3b20cb526c0617020bee461337c2ce571bd3ae5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        client.db-wal
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/appmetrica/analytics/db/client.db-wal
        • Size 8KB
        • SHA256 1105c5b8f53adb32a9f5f6f345509b88a5260f507bab440663803c49967dc00e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        client.db-wal
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/appmetrica/analytics/db/client.db-wal
        • Size 8KB
        • SHA256 5e6fb427f8673a90bfcdb3cd5810db91b35cd66dec23bee21d602b7500630f5d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        service_main.db-journal
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/appmetrica/analytics/db/service_main.db-journal
        • Size 512B
        • SHA256 703399b294accaa806882be35002c7c0907afef387578d1cd59ba89d1f56bcf2
        • MD5 SHA1 SHA512
        Submit Download

        service_main.db-wal
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/appmetrica/analytics/db/service_main.db-wal
        • Size 100KB
        • SHA256 a8e66bcab7317872f2b8e1a2575f0f917f8bf2e6465d9c5687c96725b63f6c80
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        uuid.dat
        • Path /data/data/com.i.am.city.gangster.sim/no_backup/appmetrica/analytics/uuid.dat
        • Size 32B
        • SHA256 320e28f31c7f6ca87b24a7d8a0c30f224a3c8642c518f7f50e3a8dedae8017dc
        • MD5 SHA1 SHA512
        Submit Download