644c35d3ab03cd927e64e3891b67812b93e5c039221abe5ff7ad96adfbf912a6

Analysis

max time kernel
21s
max time network
154s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
04/08/2026, 18:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ADS_android.apk
Size 18.2MB
Sample260804-wweb1svsct
SHA256 644c35d3ab03cd927e64e3891b67812b93e5c039221abe5ff7ad96adfbf912a6
MD5 8cff3535be386c7116c796d62819e8d0
SHA1 81d8730f740b84353479f8d7fd30648da3d45ae1
SHA512 4129263e038518ff7f36284d95fdf33c108a098da99cbd48cf5b87d62cb72e686f8102b7888e9d4330888f01f90e64f7325b6843e2285e71c89a08afd0c9ede4
SSDEEP 196608:+katidRDTRs2Z5zKF8GnMSv65M4fWL+huFr19tIp0hkcp:+xIdRTRbZfhSv65M4fWLd119up0p
TLSH
T15617AE52A6615D31C6AF433948FA4B513B316D966B8383131008B67DBCB33D2ABD97CE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	app.adsplay.android:process1

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	app.adsplay.android:process1

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	app.adsplay.android:process1

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	app.adsplay.android:process1

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	app.adsplay.android:process1

app.adsplay.android:process1
1⤵
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4324

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

exoplayer_internal.db

Path /data/data/app.adsplay.android/databases/exoplayer_internal.db
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

exoplayer_internal.db-journal

Path /data/data/app.adsplay.android/databases/exoplayer_internal.db-journal
Size 512B
SHA256 53e1d3b7e625f4e36adf24564b28ea5256bf3f38cb87c7e3cfafb10eec4dbbcc
MD5 f3f014bcc4e23dbd6d822189a91e2014
SHA1 547de491f260390483c9d6842753fc559b1cc5cb
SHA512 2e02cd4b8fe61b4145bbbfd5db21844e12afc261828ae98f62c74424a8eaa649f49be08559ffc86978e20d2f2b6f1cf949e6cd62538aaab4adafde6bba803fce
MD5 SHA1 SHA512

Submit Download

exoplayer_internal.db-shm

Path /data/data/app.adsplay.android/databases/exoplayer_internal.db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

exoplayer_internal.db-wal

Path /data/data/app.adsplay.android/databases/exoplayer_internal.db-wal
Size 64KB
SHA256 ccea9c60acbbfb2ff93f51dfc7c5aa90da737f1fcdac2370386a723eee9dd978
MD5 9e7d14ff0d235b6eec89cab2be0cad27
SHA1 f148e2ca66c3083b07301da97855e0f419b097b6
SHA512 4c72815e9e455df7e292bde6283a93bfd25433c63d5c2dd42eb4da5266850d6fc874fcb37ee6bbd69094c4cdd05b3b43ce780e685e4b0e8f4b292d6a64f12ff1
SSDEEP 48:KzNSP/276vHz6SP/1n372sjooGEwSP/JCZ5ojZ8zRv1rb2sjooGEwSP/+k:a0PFvT/Pt3F5PBCZ605Pm
TLSH
T11C536A8E2B2C2F32C05A43F2E4D247A63FFC96284752CBE27A70649B6CD750C6295C74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads