acf27eb8d2570f5a209dbf9b93d7448743bb408d01a82456b0444c75ad77bae5

Analysis

max time kernel
7s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
06/08/2026, 03:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
DouGrid-v1.2.0.apk
Size 1.7MB
Sample260806-dnmpbafe63
SHA256 acf27eb8d2570f5a209dbf9b93d7448743bb408d01a82456b0444c75ad77bae5
MD5 ef7de59f96b171990cff9f1742593682
SHA1 9b0842df881a78d5533316806a051cf96fb98c0a
SHA512 943fde89c3e221fc2638e716b6d255639dec0f00d43313fa74e20508f75030ae60abc04e6b9d84ebc2d4eafa968f7184f1b1c86a64405d3bc2ec778e2c904e35
SSDEEP 24576:jc9SRWh/skahXemJxpXNzjikQq4GDjj+E2cR9sys3Sw2TE85qJEsvDHMUtVAMn:jFRCrkXFfFWsj6DOsysQbeEsvDHMW
TLSH
T1AE851249F764D92EDC3342710D9A86B0562ABC628E03C38BF52C779D39772E48F952E4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4721	com.qiao.dougrid
/system_ext/framework/androidx.window.sidecar.jar	4721	com.qiao.dougrid

com.qiao.dougrid
1⤵
- Loads dropped Dex/Jar
PID:4721

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

dougrid-state-v1.json.new

Path /data/data/com.qiao.dougrid/files/dougrid-state-v1.json.new
Size 857B
SHA256 9131c95f78c8b19205e94f226496f3465b43a284c2cf741b02f42cce53bbc825
MD5 dcd609468f786b3f2f31ba96ce122124
SHA1 f0c32663dd1b8e65c8790d317ec521381bf6b421
SHA512 9672be5d06f1fb1d655b931374cd59dbc54f3d10a376878dab94b2127cb119130e595785c601b7a9a91525bd89ca5221693a1247c31240fb345a0e2304aab720
TLSH
T12D1152F5221A98BC8A40F54BDA08CFD04DA828B31328AC31DDCC8A0035EFACD4705552
MD5 SHA1 SHA512 TLSH

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.qiao.dougrid/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 37e3a8c32ea8698bc63d2d46edd5881183f9f4d5cd5e9c7b83cf335bea3ddfec
MD5 b98ffaf14bead470ad3b76311bcb37ff
SHA1 80374e6ab191b8fc59df2248ded3634db3f9b8a3
SHA512 14f386f102a646211401da0a2ee2cf23627480a958ff8a7c74e1a71e8b02e3b2c56e18b751b4d4e18982f0e0edfc9ef3f9dbe93bf50174066a9a1489793ca68f
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.qiao.dougrid/primary.prof
Size 7KB
SHA256 f767450f4605c00bfc69c601eaf54d028d97bb90ec4e8ce7ae2319ed05b3b96a
MD5 48fd7c7333fa6e4176e12ff859dc41a6
SHA1 b6fb0c3548322aa3c9d71995a7cf19d345ac566f
SHA512 1962de81c68fe89dfca4e47024bdbb2b1e378e4a0c9ddbfeb4ed17a934dd2da3eb1a0e6bd501adac9d3508060400ad2e5c0846fef856f693dc31f15f92b0d6e7
SSDEEP 192:UjEpmRAgPo21S43p5plEukznqBGoUD2lnzdOqA8R:UjTRpA2o43L3ENznWGOlzrA8R
TLSH
T10FE1AF9CA2AA005CBE055D62F35F3AA78FBEFC5F43156AB2525E37704023BD47042910
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.window.sidecar.jar

Path /system_ext/framework/androidx.window.sidecar.jar
Size 12KB
SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
MD5 bdf3529e80318eb14e53a5bf3720c10d
SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
TLSH
T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads