Analysis

  • max time kernel
    9s
  • max time network
    155s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    04/08/2026, 12:19

General

  • Target
    watchgrok-phone.apk
  • Size 17.5MB
  • Sample260804-phancazfjc
  • SHA256 000b83308d647f0b4d46ee132401dd071ef9de68b620d40878c18b82b28612de
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • com.woni.watchgrok
    1⤵
    • Loads dropped Dex/Jar
    • Checks CPU information
    PID:4078

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        profileInstalled

        • Path /data/data/com.woni.watchgrok/files/profileInstalled
        • Size 24B
        • SHA256 8e237cfa7a718033bf0b8a5951b4ce25cc0dc7459819d1d2a641d99bac1bbb09
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.woni.watchgrok/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 b1bcc0e36e687fd6744c4ae1febdeb4f974ea4ef0fa1559fd68e4f172de7edb4
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.woni.watchgrok/primary.prof
        • Size 245B
        • SHA256 401195f02d60385a7146ebc6fc0eb019636bee13528f9d2c1a50ccb8270ba1f0
        • MD5 SHA1 SHA512 TLSH

        androidx.window.extensions.jar

        • Path /system_ext/framework/androidx.window.extensions.jar
        • Size 123KB
        • SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.window.sidecar.jar

        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 25KB
        • SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
        • MD5 SHA1 SHA512 SSDEEP TLSH