Overview

overview

8

Static

static

6

com.easyte...ms.apk

android-9-x86

8

com.easyte...ms.apk

android-10-x64

8

com.easyte...ms.apk

android-11-x64

8

config.arm64_v8a.jar

windows10-2004-x64

1

config.arm64_v8a.jar

windows11-ltsc_2024-x64

1

Analysis

  • max time kernel
    39s
  • max time network
    154s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    03/08/2026, 05:54

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    com.easytexting.messagingme.sms.apk
  • Size 27.5MB
  • Sample260803-gl3vasch38
  • SHA256 9dd592d5188c33ed3e54daec297cc05c3d01f03ebc61ee34465535611be369af
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
collectioncredential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 5 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    defense_evasion
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.easytexting.messagingme.sms
    1⤵
    • Checks if the Android device is rooted.
    • Checks Android system properties for emulator presence.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:5184

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        .    ​
        • Path /data/data/com.easytexting.messagingme.sms/code_cache/.    ​
        • Size 11KB
        • SHA256 d9e8fbb15c82b85f07ffdab7ee9790fbcb7392b9261498da0bcbceb73e51cf11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        .     
        • Path /data/data/com.easytexting.messagingme.sms/code_cache/.     
        • Size 7KB
        • SHA256 b6e0248c579f1e3fa69aad5302f5458bd36586cd44d220bb109dae2b9d5cc84c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        .      
        • Path /data/data/com.easytexting.messagingme.sms/code_cache/.      
        • Size 7KB
        • SHA256 8463699aa7be7462f2e02ffce18b6531c9a42d84fb804ed4969c15ba8c1f9c27
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        .      
        • Path /data/data/com.easytexting.messagingme.sms/code_cache/.      
        • Size 7KB
        • SHA256 3a01b56d05097c210de077959a48c143eb3034490e26a7777606300bd213b496
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.easytexting.messagingme.sms/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 8c030aed5e42e5b14fd053db9cba0e440c975715a123c7cc134845d85b7971b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.easytexting.messagingme.sms/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 03905fd66473dc4a19752edb7fed424cf288f507cb46b247d81f33a907d76b55
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.easytexting.messagingme.sms/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 f0ceaa84b698e6ac28227012f482d3aef059c7f4d66f8f9ce1c6d741c3d56fc3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.easytexting.messagingme.sms/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 0e5747b0219f747329a68ff83198010f6ef7d03ce2d433d7d1cc0bc52deeaa92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.easytexting.messagingme.sms/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 cfc06ff79f217676db2da48023efcd44ec4d5aca44774460afc54d5973820cd9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.easytexting.messagingme.sms/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 b2e1bb25ea9c73099cf7cd36d88c854f27ebe283aced7b12c2398d2f5ce47229
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.easytexting.messagingme.sms/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 249e323b9a007b8971b75465b8cdfa99ed21c0180099ba241bb894cb00ed3c7c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.easytexting.messagingme.sms/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 3f24b51a59b644c14e55996b34b5d66c070e26512b831bb9bd8b7bf4194c8073
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.easytexting.messagingme.sms/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1139ca4f61692e71b8a620345291ee37559bd23ab445a73d32eb16f42b122216
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.easytexting.messagingme.sms/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 fa1e1bdbb6d4f8aa7e8fb9609861ae24ec49cb55d5310ae42855ec6e61623821
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.easytexting.messagingme.sms/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 00c50c58f279cbd238e7bf44ac5dababb16cd785e3b772d4087dadfd42742929
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.easytexting.messagingme.sms/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a05959878e2bf91f3c8df726a4051f3356e0924bf170dfecd48d19d3b230ea22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.easytexting.messagingme.sms/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 f077a348a31954a1035f1d5700619d0e4c32b8181c56ab317f59d207d2d54d8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.easytexting.messagingme.sms/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 7e1d6dd1ea3621f29db022edcfef15274af6b1a34b71b27f8fa011c12bc6465e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.easytexting.messagingme.sms/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 497fedc63312a0f79f67174c85478fbf56e226564631ad1e392b190d63420494
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.easytexting.messagingme.sms/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 b740b737f36e2501bdeb2e600499dc3cb2742f3d89b54ece9556c7b4d54928c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.easytexting.messagingme.sms/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 9fcad708f8c513b7a289720653b9a5be275fe6d442e176830ff12d201ca1714f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.easytexting.messagingme.sms/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 5c232d07efd72c4f53445f593b0925ed5c526110d5f3ef9e546635e27b4941a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.easytexting.messagingme.sms/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 75e13b3327780b82819c05f421f78173db93bbed87b316157b2d3da00074d80a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.easytexting.messagingme.sms/files/.crashlytics.v3/com.easytexting.messagingme.sms/com.crashlytics.settings.json
        • Size 780B
        • SHA256 0e71d8a3d2106379ea10d97d4916a17336cddf557d569ec07cb29f2a4c8d3d77
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        internal-keys
        • Path /data/data/com.easytexting.messagingme.sms/files/.crashlytics.v3/com.easytexting.messagingme.sms/open-sessions/6A7365FB039000011440B31A055984E4/internal-keys
        • Size 107B
        • SHA256 2e5b79823384123598ae879303e552f5ae0bbb28f2c96b74e82a2e8abcb6840f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/com.easytexting.messagingme.sms/files/.crashlytics.v3/com.easytexting.messagingme.sms/open-sessions/6A7365FB039000011440B31A055984E4/report
        • Size 807B
        • SHA256 51e1bc0c26864c4d4c65157ab2fca1d1858b6d78569c28183eb79d3d862b0a81
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/com.easytexting.messagingme.sms/files/.crashlytics.v3/com.easytexting.messagingme.sms/open-sessions/6A7365FB039000011440B31A055984E4/userlog
        • Size 742B
        • SHA256 947106c3e7be8fae9bd47cee2fe2c0b0d3fdb8f408326fef8423eaca60cd27cb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/com.easytexting.messagingme.sms/files/.crashlytics.v3/com.easytexting.messagingme.sms/open-sessions/6A7365FB039000011440B31A055984E4/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        1785947652598
        • Path /data/data/com.easytexting.messagingme.sms/files/AFRequestCache/1785947652598
        • Size 2KB
        • SHA256 9de2f4e28087c32d63b85946514f11b8f0400161f37f30a2a5bdf0ffeab48ae9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        1785947653990
        • Path /data/data/com.easytexting.messagingme.sms/files/AFRequestCache/1785947653990
        • Size 2KB
        • SHA256 33a94c80e4c2cdfde60fa3f80f23306a81715c65a3fdfb8404009f33b25bbc90
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        1785947655599
        • Path /data/data/com.easytexting.messagingme.sms/files/AFRequestCache/1785947655599
        • Size 3KB
        • SHA256 80d803d7b0a879c114081bdfdd74d6f89b888a4d2a593459aee51d5c481d4f22
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        1785947657482
        • Path /data/data/com.easytexting.messagingme.sms/files/AFRequestCache/1785947657482
        • Size 2KB
        • SHA256 7c84ebc181c28f50ed1b8499e282c56811c8746e5a5ad15555bd6fe42b9d52e0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        1785947658565
        • Path /data/data/com.easytexting.messagingme.sms/files/AFRequestCache/1785947658565
        • Size 2KB
        • SHA256 78c79abf0a492943faf4c19be1c351f7be58252469a532d9fb88a491d19da208
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        1785947658664
        • Path /data/data/com.easytexting.messagingme.sms/files/AFRequestCache/1785947658664
        • Size 2KB
        • SHA256 257c4c77346acc1779774382f46ec79d3cac641bba5116eb97fadbc54dcc340d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        1785947658709
        • Path /data/data/com.easytexting.messagingme.sms/files/AFRequestCache/1785947658709
        • Size 2KB
        • SHA256 33b87afedd9021db15ec9df1f542771b7887910c4aa1db3c50813ae4f8857bab
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        1785947659700
        • Path /data/data/com.easytexting.messagingme.sms/files/AFRequestCache/1785947659700
        • Size 2KB
        • SHA256 8ddcd333943e13e7b94fbc8541958041b2484a2ebbc37bb3abad9009b6f0200a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation8936166336972486074tmp
        • Path /data/data/com.easytexting.messagingme.sms/files/PersistedInstallation8936166336972486074tmp
        • Size 569B
        • SHA256 22079771de6891c241408e0b08f5324baad34591a5008267b8a6715351033bca
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MToyNDg2ODA0MDQzNzI6YW5kcm9pZDozZThmNjgwYjA5OTE4MTQwNTg2Yjgx.preferences_pb.tmp
        • Path /data/data/com.easytexting.messagingme.sms/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToyNDg2ODA0MDQzNzI6YW5kcm9pZDozZThmNjgwYjA5OTE4MTQwNTg2Yjgx.preferences_pb.tmp
        • Size 452B
        • SHA256 51305409e53fa2703e191983dd5f7bd76d0925de9e83776a4c3884af6a36ca1c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MToyNDg2ODA0MDQzNzI6YW5kcm9pZDozZThmNjgwYjA5OTE4MTQwNTg2Yjgx.preferences_pb.tmp
        • Path /data/data/com.easytexting.messagingme.sms/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MToyNDg2ODA0MDQzNzI6YW5kcm9pZDozZThmNjgwYjA5OTE4MTQwNTg2Yjgx.preferences_pb.tmp
        • Size 469B
        • SHA256 072cf654e0850214a9b8f28dcf0db2fcf95c469176d95c9062c3d17bfe0538e8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionConfigsDataStore.data.tmp
        • Path /data/data/com.easytexting.messagingme.sms/files/datastore/firebaseSessions/sessionConfigsDataStore.data.tmp
        • Size 145B
        • SHA256 914ef36c250c9dcb58c44f54f55a41f908b33221ddd5e198d40a16cc140f6412
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionDataStore.data.tmp
        • Path /data/data/com.easytexting.messagingme.sms/files/datastore/firebaseSessions/sessionDataStore.data.tmp
        • Size 291B
        • SHA256 6c5758d0ce64375b395f713efdc256f29a577066a2310fd2cb46a15b2806be28
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionDataStore.data.tmp
        • Path /data/data/com.easytexting.messagingme.sms/files/datastore/firebaseSessions/sessionDataStore.data.tmp
        • Size 329B
        • SHA256 a647780cead802f146f686ce561485c5f4be3428c15a1162bfb11bd5b14e53a4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionDataStore.data.tmp
        • Path /data/data/com.easytexting.messagingme.sms/files/datastore/firebaseSessions/sessionDataStore.data.tmp
        • Size 329B
        • SHA256 96a4736922b5acb294a97f87ceaf68493cfbee357d1f578cc63c8b6f40059c68
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileInstalled
        • Path /data/data/com.easytexting.messagingme.sms/files/profileInstalled
        • Size 24B
        • SHA256 80140adc91ea6fdf5666ec09043873ac19602706bc3f04a8e5491e68ae12ac73
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.easytexting.messagingme.sms/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 8404ec54f99f3c5e6097b048fa7e18465f61bed88567f10f031d0c7ca46fc0cb
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.easytexting.messagingme.sms/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        [email protected]
        • Path /data/data/com.easytexting.messagingme.sms/oat/x86_64/[email protected]
        • Size 272B
        • SHA256 aab613a25c494800f97540558c8b13e2e3dea3104712f6bddaa28dd383ac91e8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.easytexting.messagingme.sms/primary.prof
        • Size 2KB
        • SHA256 6f1648d6378e92d61d9ada1117d0eccd34c7577b085838b2eb6aece7084af86d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/user/0/com.easytexting.messagingme.sms/[email protected]
        • Size 28KB
        • SHA256 cba3d55319db604b1a50b3f1113dc36e40b45f78ea92f33d75382813de9c036c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        .    ​
        • Path /data/user/0/com.easytexting.messagingme.sms/code_cache/.    ​
        • Size 21KB
        • SHA256 c0a41759056ddfc67f9168159a554b25689c1ddd1f3257a1bc5fd9ae85b0b8c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        .     
        • Path /data/user/0/com.easytexting.messagingme.sms/code_cache/.     
        • Size 13KB
        • SHA256 4e991ec6b0098cd576d0d90183457614a9251293a73c38a592cea4e5da11ffe5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        .      
        • Path /data/user/0/com.easytexting.messagingme.sms/code_cache/.      
        • Size 11KB
        • SHA256 cd8d89399eaaee342ed1a0ec83f7c968b158c3c38f6a3ae67f918fb84aeec32d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        .      
        • Path /data/user/0/com.easytexting.messagingme.sms/code_cache/.      
        • Size 11KB
        • SHA256 0ee9d1709d0b1297ef9216e1dbeef42741fbbab0598809120e98779e3915f50b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download