Analysis
- max time kernel
9s - max time network
155s - platform
android-13_x64 - resource
android-33-x64-arm64-20260708-en - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system - submitted
04/08/2026, 12:19
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
watchgrok-phone.apk
Resource
android-33-x64-arm64-20260708-en
2 signatures
150 seconds
General
- Target watchgrok-phone.apk
- Size 17.5MB
- Sample260804-phancazfjc
- SHA256 000b83308d647f0b4d46ee132401dd071ef9de68b620d40878c18b82b28612de
- MD5 f2f5a9fe8664135f130407763c134f74
- SHA1 3c3086d988cd654a097129cb41874aeeedbfc67b
- SHA512 ec3ffce84ded9883bcc646b142b3fcee70987dbb5f803bccb88f383ca22a589165eb06e74dde56e09b69223a04474abe2c2981bf015a3ac8979baa6e18dd4c03
- SSDEEP 196608:L/sQB+l9qP2fYLCz8Rr95OJ3HzvgR9IBeq:ow+aCA195OBv2IBeq
- TLSH T105079E0AD51DC532E5DFF17C6F7E0A27B238246805AAC456B91DA148FB9B2F101B2FD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.extensions.jar 4078 com.woni.watchgrok /system_ext/framework/androidx.window.extensions.jar 4078 com.woni.watchgrok /system_ext/framework/androidx.window.sidecar.jar 4078 com.woni.watchgrok /system_ext/framework/androidx.window.sidecar.jar 4078 com.woni.watchgrok - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.woni.watchgrok
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.woni.watchgrok/files/profileInstalled
- Size 24B
- SHA256 8e237cfa7a718033bf0b8a5951b4ce25cc0dc7459819d1d2a641d99bac1bbb09
- MD5 5a11d50f9b73a9c61da72881b3402e63
- SHA1 a741c69491ed38bca0fe5a3318520246f1764cf8
- SHA512 0eaab8c9c877c41d98e753421d0f5888d388ad540da0c60a926d9c4c9f9e695c2eeef1ddece2e81eda7b3b865df2f0b42c5bedd93a6740ec993286e9095653da
- MD5 SHA1 SHA512
- Path /data/data/com.woni.watchgrok/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 b1bcc0e36e687fd6744c4ae1febdeb4f974ea4ef0fa1559fd68e4f172de7edb4
- MD5 cf5c35743308707cf3b2caac9279f0e2
- SHA1 be2dd90ffa6ce4bf4e175c3845eb10395da5642f
- SHA512 ac39b68dac542eaf5ca79fe9570fa712adf14955e1ed2a97993efda692e5689720f622b8fb6bb993ffed1e4646a1efa74e1f6fea4df397062501260229d33b89
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.woni.watchgrok/primary.prof
- Size 245B
- SHA256 401195f02d60385a7146ebc6fc0eb019636bee13528f9d2c1a50ccb8270ba1f0
- MD5 13faf2726f65433a04f4dac47041373e
- SHA1 cd6d86099d6d519442dd791f131c764dc8b48e6a
- SHA512 742f67f3b8824032a73c77335e4919a3ee8f8b18b79d242a50c284dcbbe0371955e24715e774b1508ef46c06e76fc53cc7dd40f6027852ec550250118a80f3ab
- TLSH T11DD0A71D1FF31557DD485035725E518644E3D088939802EA06AA969448955E7467E08B
- MD5 SHA1 SHA512 TLSH
- Path /system_ext/framework/androidx.window.extensions.jar
- Size 123KB
- SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
- MD5 3056e1bdb7d4e19789d0319eff484bd0
- SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
- SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
- SSDEEP 3072:8Pmsa8v0v8FYNMhpjLXZ/pziNQdysk4p26PQ:Qmsa8vXhRLXXOQGJ
- TLSH T19DC31951FA4159A1DEAE933B959B1301AB30A648AB2383137654D0BCFCD73C39F87AD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 25KB
- SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
- MD5 29469324e59dfcc052f24b5af4e7b2c4
- SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
- SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2
- SSDEEP 768:bjydnTmp8WNAupUuvkg5NrtsESOMXIpc3dRwQA0:bjydCpF0uhtsxOQIqdSj0
- TLSH T1A5C2F716E7400C63E9FF9A3B6A5B13009F35E3A4AA43471B640585A4BDC63D3D9EE7C8
- MD5 SHA1 SHA512 SSDEEP TLSH