Analysis
- max time kernel
14s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
04/08/2026, 16:13
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
app-release.apk
Resource
android-x86-arm-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
app-release.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
app-release.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target app-release.apk
- Size 5.2MB
- Sample260804-tpggpavaqb
- SHA256 95072605da50a241f29df50c46d4ded2b00587f4ca815a2efe52b7390878bffa
- MD5 0995ef37375330d5630ab0c828a743dc
- SHA1 61ae3a822451a53855c8ddb488c08ba5dd31db1c
- SHA512 7177b7f358c95387a330e85da750fe02847c24067662c0c86c1039ef2bc55386b1d2b4598263cbffda9c0e2463fff939e3f1d31dec4d0553aa0d0bc2242ec03d
- SSDEEP 98304:eYQwLBNqpNM9BQwhVawSJSq/XmzOQ+Lwbp6p5cMgEoQE33oJ:rlN/9BQgEzzmiQ76px5Z
- TLSH T161460182F719AA2FCC7751730DDA523122964D978E82A7477858372C79736F80F98BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.example.ofl - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.example.ofl
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.example.ofl/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 57a136585d8a2cfc87613f7e39de1d3be0e8775664e7a836d8c936207e47417c
- MD5 2717ee883c46f846519eb8a79c26ac27
- SHA1 6ec778eb5cf2708717feef62a2bb09863f1da332
- SHA512 bdeb2e4042bd3ddfd69d16b1a565c4615d1db86c2f1c9beb1df93f67a6e63118f69e3394f1520e58e27f461c8f3785b52602ac6d7bec7a2b1f58349151f849b5
- SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSk:8MEX0wIyNjak
- TLSH T1F843529D1E2C2221C97E283ED3E143635B7C93DF5B2392623E908CF98DC206974358A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.ofl/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 25ff604f067248d5e906adb1f3e572d6b51a1e30d242fac0462e2aec645d38a6
- MD5 dccd725b93f03c820f2c124dc36fea05
- SHA1 e34e024d9516863075c595db08e89a89ade6c423
- SHA512 87a90ee935630084f76574daf5f13939ceec8ced7455c919bc790e27feda08be8dc550c2f6baeef1cd1eeeffc7b2b50e526341426757326f9ae8ec54e22ba424
- MD5 SHA1 SHA512
- Path /data/data/com.example.ofl/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 136868162110272fe42c49c85fc71533172875de7dc4a1a260a72a5d136c50b4
- MD5 269c009f9aeac781160ebc0a282bdd17
- SHA1 a248d7d1e46e42c802afefd74a2f356477eb2696
- SHA512 974d9abe9a34a670f14dbbfb03429ddbed42766cc699cfca2a39f21ca0b4b4273491b39f84fc9a6ba68efda33a37244fc9f4a798d0414e2a0c07459622947453
- SSDEEP 6:7+/l9tiOn1Ag9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK2i:7+tgqLiuWdwRmBEyPbHi
- TLSH T1AC02C08F6B800923C81D36B7A0D4C3D00D20E71AC171CF0BA5600CDC3C438CCE4A0D18
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.ofl/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 6f2ad7b50ac5d0a247f10f2d83358ed11b8cbc7ede055731257b221b246a7fcd
- MD5 e8290149ab6a44c9f02bef2c08dcda68
- SHA1 f8975bec99dceada315d1dffc88ee10ec5ab8a74
- SHA512 1247283d009eeb5e09d9d624e3b42bbca813102baf3da689fe2f679aa0df48ecf125f8be2d9f54e677d1ecd537bb7850b84f22eb5ff4b9c2836ec3862b623171
- SSDEEP 6:7+/l97SXPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKgnlU/Dn:7+tZS/qLJdTRmBEyPb5l0Dn
- TLSH T1DB02228DB3431EA3C02D17BB90C983503E10A7158223CB07166008983C076CCAC94E00
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.ofl/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 6aad11f3a1f836604f8a51a48588e1e0d970735206a6ed0b9de726371fc85953
- MD5 54268a13bd9c9b8e0934b6cefc6cbb77
- SHA1 10cf39407f2a2aaeb1f602d9c599e5a946697122
- SHA512 99237b1999a09884e0693588f894f4a46c7d85079d480542f57b22adff619af20727e7d430cca3c1fb4f6833a5cab82f34f0b0900875de31e704315963d4b9ba
- SSDEEP 6:l9bNFlsls1ylO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6+QN:TLiEy9zmzrfRmBEyPbP/P+/0Fl6N7
- TLSH T1797268CD7B105703D173477670CB93E11C30B2188723DA0B7B940468AD421896052F40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.ofl/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 10f93286c0e6dfb235f49c96306666dab4e2db254d3500721d60db57bcd82134
- MD5 c9642ae8e83dace0d98354c2ead04311
- SHA1 2bc95731b715e9e3afc2c4aa4e97850ee9afd243
- SHA512 af5cf1ec362b3f2b959dc17737eff0813c8d6b23498116ec248fb4cd2bb2d0f8d48a60b874c257db4fc21eea54e535b09ddc9d04df1b9b9f39417fa03d9400e2
- SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hr/gW49blqYFlUC+/0Fl6N7:TLQpmzr0GSP/h1499FdlFs
- TLSH T1CB729EDE7B20D707E2334B7570CBD3D12C3572255B23E6073A551A6C6D433865022F01
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.ofl/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 184c72c078ccc5dbf4fdc1aac568e504bc1fd9c9efe85aeba064e98d7395c4d7
- MD5 715bb94c84cb59933ea620ad0217f775
- SHA1 2c105d3d4a755245056642430251ecd7ac50e019
- SHA512 0b644f294643a3621c836b79ad4aea41bef920cf6d3ab2b288c7f2093673f955767d77185d98d5f8b16a5b37308b758e74ebb702cd1c0940ee9fa1833b642427
- SSDEEP 12:TLIEQv9zmzrfRmBEyPbP/ZRhOLavnOAU7wU7UyWlrsG+h49blqYFlUC+/0Fl6N7:TLEvpmzr0GSP/nhKamNZ2VO499FdlFs
- TLSH T1FD7249D9B664DA17F2734B3961CBD3D2283971665B23E2173E461B1C2E427869171F02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.ofl/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 c7ac2e49eddcaae7fd28b8a13ccf88192e23fbe73e190eea5a8076d8e53e568c
- MD5 d617623b5bf8e06dbc81eb7bf6424f83
- SHA1 0211e11e6ba5d767c5307d300c268676a16bf7bb
- SHA512 4557aa17a4859bd0578c29d90d60bb62334f68572f27f37a88eb3d99df8fe791e7c6d0cceb44ba6e2434a9f2cdd4ffb2d27abae34af5123f252a27aa2cb332e8
- SSDEEP 12:TL6uEp9zmzrfRmBEyPbP/MDRhOLavnOAU7wU7UyWlrsG+h49blqYFlUC+/0Fl6Nv:TL6Xpmzr0GSP/M9hKamNZ2VO499FdlFU
- TLSH T1CA7226D9BA64DA12F2734B3961CBD3D22C3971665723E6173E462B1C2E427869071F02
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.ofl/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 dddd24fe03bb4916d4c74e47aa46a1d9ce3c63c745643468682e1c841d1dd01f
- MD5 de50a4574b0837d2b186d808e288a2c4
- SHA1 b08ec652de8687cb0d1c8d9867837149042a5529
- SHA512 4a2a581a71f9d74033836701b05ce7838c3766a8158822dc1013e6793e2e9e8b1da9e720588edd0c23131ca5fb0c967b977cee3695fb87e644206790ee0a1fa9
- SSDEEP 6:l9bNFlkls1KlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/W4mNt:TL6EK9zmzrfRmBEyPbP/W46t
- TLSH T15E72C28E9F103602C56606B2B4CDA3616D24E219833BAA572AA404A4AD4254AE092F44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.ofl/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
- MD5 eb52a90bb70b76e946b62f50b6f7fb85
- SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
- SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
- SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
- TLSH T11F727DCEDF002202C1360733F4C9D3901D60921D8336DA0767940460AD02108A451F58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.ofl/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 ba9a38e20a8072587d0a281625b090d19bf5c2e6dac60e2300276bf8e6e09aa8
- MD5 fd493331da480ebfecfc15b6ab821ecf
- SHA1 969deaf0170e7d54ee5e07f3057c7b1287ea536d
- SHA512 9e38cab649098ec8905bd18a83ed34f46ff8f293c5103fa3b1f26fe59011d0619dc2f0b1170133ebe8044fb094c347d7eb142e2a394c0ce9018a15e47ebb31ad
- MD5 SHA1 SHA512
- Path /data/data/com.example.ofl/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 d294cc8737bffecfa7122c47aa2cb6347a2778659dbce085248b98f9c92c0f05
- MD5 3ca5f2a8cbc760e88ba7ef5bda89127a
- SHA1 6c493fa0897f27284f0abf5ef219a15621be3f6c
- SHA512 d283e72bea4002f8f74ade59675d4105c11aeabd1ff3a314fb468fb3b77cf74ac7304ee1e14d65c724ea5f49e086c0ecfd881680bba10c4b28f609529e5945d7
- SSDEEP 6:7+/l9nFn1Wg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKb:7+tlCqLiuWdwRmBEyPbs
- TLSH T11C02228963800832C82917B790D783801D20EB198161CB8B156008B83C035CCB4A0D14
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.ofl/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 e58b9962d291ab4582dce5ff75c92776e742f14162dbd9067cd6fde4a16249e5
- MD5 57bba6a94da6ef0860de34fbf3dab03a
- SHA1 5dcd58ff154baee7904b6ea371665a3e72cc28f1
- SHA512 3a62d543395e044590a18956ad58f0f9b26c825c2720752957acb78717ca27c20d07e28164b6619b5aa355e1aac3f9dab300a86d65658e4ba4ecee34da90acae
- SSDEEP 6:7+/lLoFOPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK2f:7+tfqLJdTRmBEyPbHf
- TLSH T1CD91808967410913C5195BB7A0D583551D50AB15C373CB572A6008987C476CCE894E54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.ofl/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 c4834765fdc8d2b14469b71aed47eed24ed193c7360c8abec786d34627192a45
- MD5 e6fb60343eded7d7c4d2ebfe0d4a7aeb
- SHA1 36db0da3e93669711a858f68c14a8ab9abe3a9b3
- SHA512 b637775d73d248c64b581134cd42a2ada11fbfc32b418d469728701ffbf6d36ab30ba022a151540118941a309b660a3424183d25c3ab19e513f73d4e9daee8d6
- SSDEEP 6:7+/l9FoPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKEs//tt:7+tIqLmqCRmBEyPb/sXtt
- TLSH T1D902128A67C10D53C61F77B7A4D983941E10E7258161CB5B156108A8BC469CCAC98D94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.ofl/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 00cecff6b06faeaf996a10e9d61672bc3ff455791fedd5b91b93a8bd8d7a6b37
- MD5 3bedcfb3dcd7a801b8da7b09c9a8dde4
- SHA1 e0a587311cda9e0e486165046065192bfa022216
- SHA512 134ea17beb0206e15d289aac0a99573c3b0055e178d190ca571e2d25ac4c2f5838894aee3a47a3dbc058405f9b5d92a808d6ed36af4b6452a08c8df25d747cee
- SSDEEP 6:7+/l9ILfg9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKln:7+tEfqL8EEh9zmzrfRmBEyPb6
- TLSH T1CF0272CD8F002A03D27B0B73B4CB83A02C28A3188377ED632AA40864AE038489051F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.ofl/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 c669a95ed70e1fc0f79f3e4b8b3b0533b3ffd5b96221add20f178f5759844974
- MD5 557447e4931cd3db8a55a12e3e5efe7c
- SHA1 16e8534213f573d8578bbd9b1e297c9f21b3170c
- SHA512 9bb68073ff203028695a456f72a4b82cdcefc94718d95ff42cee5b4c7a651b6fe5f64f257a16fe7c59804af2757231916da7c0958c08df2adde48e5189f53e16
- SSDEEP 12:7+tXqOLaxtv+o1GtYwU7UjKOMEWlCuUyWldGzqLuLKEt9zmzrfRmBEyPbb:7+tXqKaxMJtYZ7OboqLwpmzr0GSb
- TLSH T1B1028B497E9A6B12F5B30A3960CEC6D41E2861994227F6173955166CAD42A898071F06
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.ofl/files/PersistedInstallation2020151207172061273tmp
- Size 570B
- SHA256 48abd1e8d9b76fb0db93133cf39eb266c013ed42679abebffb9d64b5430c58f8
- MD5 03f644a74d43c13ae610b6b0174a9a78
- SHA1 6eefa2a68b5e327169010a1c7117922e612c0c2e
- SHA512 4cea20ca677fc0b329c5b18b4484bd3906d8e1b80170e72a170959b2c8a10abc50b7d8e1413a36bd5501a9f4e80896ae801b23293d4c71f8b7bcfce82e48eda3
- TLSH T16BF0205F3AA05686C45D624324C87DC11E094DBE0FBD19A26FCB68F05A6C2B9C606A8A
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.example.ofl/files/PersistedInstallation641661718656493479tmp
- Size 90B
- SHA256 3ca6d429f788e18fed8e7ab2b093108f7c380d2c7bf7b14e57d5a13b06a59e51
- MD5 ddccc2096d61607ad415062d8e7645d4
- SHA1 a90ff117c07b358b8baedaa8f030ff9168146505
- SHA512 3d3376df923130d47257f22fa6640d9c6e1e6b67dbdecbb35c728b5624b7effbca2281af367fd36032d1440969d0448e43c7fb3fc4e070fcc6a74d24c8eef4d8
- TLSH T1B2B012019A714145888DE3021DCC92007F5418454D4D8F944B08F0D041912D5C117AE4
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.example.ofl/files/profileInstalled
- Size 24B
- SHA256 f194afb40541b9674fd745a609f37b115be325f427c192cc5089f231dab8fb5c
- MD5 93e7e48a790b90f7634d72da175659c8
- SHA1 6ad596efeb315121ecc521c849bd514422ac6176
- SHA512 020fb57dcbc155adc0be00ddba773f9329e3f5110ef5108d3888d89a7ae1eeb7d55dbc29b0981139a85126b44818e5b89843d2f63f4f5661ac98ca7d373b6076
- MD5 SHA1 SHA512
- Path /data/data/com.example.ofl/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 bce91dcada552ce3e6cd5ddd7d91bcafa617e1e62f401e03b419ea93d88571b3
- MD5 acc3a9844f00e818ad67bdf93f4d0d48
- SHA1 b16b9bd580526851f0240d373ba40e588266d07e
- SHA512 3171404dedaca20638e241aa9a116626e9401b547bba875c72c34db4dcaffeacd3b89c542574ca7fa945635b6e5ea56cfdca57cfafdd71918fbd586d2b4cddfa
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.example.ofl/primary.prof
- Size 2KB
- SHA256 1c002e8685d4cd1c51a9c9f0fd695f9bf44374340d7dd50d51cb23d86300cb4b
- MD5 72fb9a18d628efa7da0ba920264b8734
- SHA1 3041e0b23ccb878dca30c19d3aff101908ef5d8e
- SHA512 6a68a21c9b867f0eb1d884274dffa268851dc66c8730459dcb1caaca41f20a98b60e232aac6f00a26a0854525da6b88956f92c722d7de52b8dc6ff7b8f04861e
- TLSH T1F7515B32D5B082FC4BA6FE9C31BBC5DCA650117599248CAF05883A20F5341642A3ED9B
- MD5 SHA1 SHA512 TLSH