fae7fab0a39aaea498462baab3721a3e2f1f385fd20a5774ddce1b4577eb921f

Analysis

max time kernel
149s
max time network
153s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
05/08/2026, 05:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
App_TemanWD.apk
Size 6.8MB
Sample260805-fty1msdh58
SHA256 fae7fab0a39aaea498462baab3721a3e2f1f385fd20a5774ddce1b4577eb921f
MD5 13126821046bf007360d787e5f7e1597
SHA1 f1eaf7abe90ec0bb98dfb7f3392790c1341eef3c
SHA512 c881102eb74f298dd5ddfe6f16c837d5e554e4703fd32ff47b987aec18aa5500dfed1b31d6c1cba30289526d7b93986558096564a170cf989787a92336704ea3
SSDEEP 196608:1EH3YxmWaGWH+ejrRS7K1oD3WfIxuewot:123YxmvGWH+QF1oD3WfNot
TLSH
T15676128AFF5CBD2FC47F40320B6A923236564D15CA8297476944376CB8776E80F99BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.temanwd

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.temanwd

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.temanwd

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.temanwd

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.temanwd

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.temanwd

com.temanwd
1⤵
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4323

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.temanwd/databases/com.google.android.datatransport.events
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.temanwd/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 314e9ea00c7c3a89684c112706e1d34061f93dcb30fce496536cc86fe58b6f9c
MD5 b7423f797b054ca08591402ac9d91850
SHA1 0723e9cf038fdf57b0b11d929893cf5777a3c80c
SHA512 c5e95e26f3ff6c346b6886c6955cad2bd69b59a7af8ce07a08539533b98eccd5a68dd523ce98670617747446442f6606d2de693d90735fa8d940c051b0b5ecf1
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-shm

Path /data/data/com.temanwd/databases/com.google.android.datatransport.events-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-wal

Path /data/data/com.temanwd/databases/com.google.android.datatransport.events-wal
Size 68KB
SHA256 9ddf2b44d3fc5d874929b4e06bcffeca9c983977ec8f7eb8b8f0de11faec5a4e
MD5 e415b9c3c6de321d329ada86160c09c1
SHA1 2df4e5ee43b2ea4590d3fd430d8cb851a705d566
SHA512 087db84d57c410977eb9bd493476a58d66585bd91e2b0489bd7b5c8bece34c39d11bcc26451a281e63dd973c277d716f7fea6a58e520fdc3f32349921f36b4ed
SSDEEP 48:1VzNSP/Q+1g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSP/pJ25EhA:1R0P6MEX0wIyNjaPTy
TLSH
T17D63409D5B282621C66E243EC3E543531E7CA3DF5723822229D84CF98DC216DB131A9D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 e514c2b94a8613aa0142d424a53b614c9f3c5973173a00a1f6324900a3826ad4
MD5 d7dd8ea88e5e5a471cdd41ca0c88ff9d
SHA1 4bdb6f1a6b94ceb4bec35f14e1b5b34bb7ce3fda
SHA512 f1e67d167288e64ebbcd92856ce032e0ab885e88266abeea2c9da5613a772a76173c35212598f675c2ddbb18c659660335b85cc49cbdbdc12ad9049623cba0fa
SSDEEP 3:qqb/NjghzY+/lzyliMlTXmDWxlPHzMlklKllgIn:LCM+/lulvl6y/Qlrf
TLSH
T1B17292823291C702F127867592978BF21830A6812A02A21A780516182C812C11A26257
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 45308986f7862e7596e11136492f40ca0426f260e2c5eadac96a2e982f4cb93f
MD5 9d5200802b686fdef6651f116163cbd4
SHA1 a0e2c227571ea566b70bf0cf0010c25778c8b0d8
SHA512 192ee268c01304168586594fde4a10a38a73f81a8e9e460667175d0fb8f209a4796451cdf2062e3b051e55a299e7696bcd69fed7474eb87c3877dc6dcc3bd70d
SSDEEP 6:rLP/gEhV71m/9blDqlrElvlCjQlr2UrCM+/lulvl6y/Qlrf:rr/gW49blqYFlL7+/0Fl6h7
TLSH
T10F725ED23664C702F6274B3892D7D6E2243976921B43E21A78066F1C2CC63C20535703
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 e42174c5dadfd2daa0e59c6a8423a20f67c1600c293d8072206cc96a0e833de0
MD5 af7ed004a8ec63f2898aea58d5cc7470
SHA1 ee2a70c7c2b0ac6956a35d2f9a2ee60efe1f8916
SHA512 d61b4d9368bcfdde89acab37a19b772c365ef2b37d55f485d8c1bff305711a7ded820955d60e45051a5c78c2142af7bd4608ca824f3afb8d9c4b966474335515
SSDEEP 12:qolhOLauAUZw2qc7UyWlla49blqYFlL7+/0Fl6h7:qovKaufEi499FhlFg
TLSH
T1F772E59171B8C612F2738F3842E3DAD2353975A21B43E31B7C062B0D2D823828571707
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 c6635ed04ab034db769dafd39b4789cd58b8ccee6bde6e07fab00061f2ce27f6
MD5 d254573a751dc29db9b64c7f6ff49296
SHA1 f6e5e5e57b764f497670f2d2d0f2e08a9f2a704d
SHA512 1221bde12c2df599b0346f26fc7d3ba3f6f6e0e00f43df422381cd5c51e4ef53d2bd091781e644dff1c7342a402647780d29a04bfc963f8becc3ed8289a438ec
SSDEEP 12:a6olhOLauAUZw2qc7UyWlla49blqYFlL7+/0Fl6hv:a6ovKaufEi499FhlFA
TLSH
T17172A09172B8C612F2738F3882E2DAD2353A75A20B43E21A38066B0D2D813828131703
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 f66894ddf922e0c7488228e52fafad4f1d1fc79f13a43e9239b909764fd5de37
MD5 2a3ed542d084bac60de4bf87494f61a6
SHA1 cb57d963063f80299126e096873a15b67ce1b61c
SHA512 b85c966ee450db26330f0cf68a32adcb8133c6bc0558d32171ce7aa5bc258b84fd54be905b9e5ec7eda7982c42b6048c63db692b30b5b1f7ae7a620a2952f39a
SSDEEP 3:o1MbX6lXXl1:oMWj
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.temanwd/databases/google_app_measurement_local.db
Size 16KB
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
SSDEEP 6:l9FCls1ulO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TgEu9zmzrfRmBEyPbBvOwk3
TLSH
T16772C2CE9F102647C6660377B4CAE3916DA4A12D872BEB472BA50464AE42609A861F98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.temanwd/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 f49507caff245c36ea09d9dc40b2611b4dc718b1556fca13004d1d715ff088ec
MD5 05d07fc4011b4d212bed0adf9983c95a
SHA1 41e32819c956d04188c3517b98b87a50f8d9d702
SHA512 deb4b25707a704cd07afcd5a49765bafad969bafc3a422824b185106bdfd8212a40150c2aeb556c3fa7cf87f010d04b8d1bd82a84d471cb51ebdec804edd25d3
MD5 SHA1 SHA512

Submit Download