Overview

overview

8

Static

static

6

330b139178...e1.apk

android-11-x64

8

Analysis

  • max time kernel
    35s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    07/08/2026, 04:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    330b139178b03b92d85b3365cc6bd6fff526e12a99b7a2ebbcf553c9b0b4b5e1.apk
  • Size 66.6MB
  • Sample260807-e1p6mszydx
  • SHA256 330b139178b03b92d85b3365cc6bd6fff526e12a99b7a2ebbcf553c9b0b4b5e1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • org.traccar.client
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    PID:4865

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 7bd84238ae8d9f781f2c832b8f4ccf238d7f3a7b9417f0acfab53da4f5eb34e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 e13b70236b8a9733f6e73ffe31eb5f77a4ba9b683b4d3d859e1c7521c349cb97
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 124dada2be157ccc6022e14a1de35ee29ae09fed5b5b1734ed760eb53ea24c3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 ce56a14568b56f0e29b15679aef0b4ede887e3f0071efeca2b30c15bd8604dcd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 362417a14d8e38f0d81c6c4e56e8094378a44cac3ce6027d808f2dbaa21e701f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 94de5236ecba60b06e82bc52f1e60d021f0c0359d4b0328d392972c4fa8e66a2
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 5bc6d371aaf6dc812861411c88ce904f1f60aeb04c96e333142102f7cf7e5b59
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 fecda2e650a2cbb3652d60ee1843b2e8fa9858bab765aee964b59b80a73d5c97
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 261f90bfd96951d01b4a5a238c9cc9360e4826f4b5f896fc823cea1c3fac63e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1aaeeeb83ad6d18688c809d6319ac559dc62a3d4ed5608dfe559921ff500c633
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 364043574eb7a016c6c838fe14da69a8b3339ef6ab406560ff4f7668a32a0c77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 8108d7c7cafaba2f57db5b142ac1010d443d88dece36c73b9857739038a2d114
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 afb0219478a622b16684e464458a1b811b01d12dcbc6771e384416faf44e5ffc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 c90ad9b9787d1a7a2a74bfba1f5cba1e6873eeb993456747b16cf7763b110017
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 38b5c51a0d316749dcee921a33a1d4ca4fe33961492fc969c1d86735c5c79f49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 ad0052baf9c3724bf48f10c7b8547d267ba07aa355d3661c949a6c21da00e204
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 388bc48977a9126c295ae092d0b7e428e3d430fbc84009cab9de26ab75dc98fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 6cacf3848ffc95e1c68b1c3eeb5cc5e41ed89eef1d3a0ab23e171e32adf19d48
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 4cf3ef435356cd38e0c38694d4e83a60d9a90b71692a82fd5cf45862bd0a312b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db
        • Path /data/data/org.traccar.client/databases/tracker.db
        • Size 32KB
        • SHA256 442d5c259361fdeb3e639e293e83c3658f6aba397b96753c12930e6787972343
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 512B
        • SHA256 ea014b7ad9045aa28c32905dab93ed8c9ddb0fbbb76a2800f5175c274c183faa
        • MD5 SHA1 SHA512
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 8KB
        • SHA256 6bf2860b65c8ac13a4641a4b5622e5a4eb149645395a18a12c69b91a8a4cd9bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 8KB
        • SHA256 e65fe46a1e9691b3f3e9e818333e624d1d881b461260dc342b56517481ab6159
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 8KB
        • SHA256 aa9b9c70f8f011114b4f54a8c4fd0c2cbe1487ea4671532624ddf59856f7ef24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 12KB
        • SHA256 6fce7e0bdfa570f4b7ee5efaab7760c8d5ce3d260775a971082d89065ec56c66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/com.crashlytics.settings.json
        • Size 767B
        • SHA256 25169e1b0be91cf2b612f79e7403ce310b55973cb6860cc8a99fc42a3e994957
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        internal-keys
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/open-sessions/6A755E2201120001130195C304FE1CED/internal-keys
        • Size 107B
        • SHA256 2e5b79823384123598ae879303e552f5ae0bbb28f2c96b74e82a2e8abcb6840f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/open-sessions/6A755E2201120001130195C304FE1CED/report
        • Size 823B
        • SHA256 bb31b1339493b989ad0f696252ba15cac482cf01752ef96360e8879cd6ed7bb1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/open-sessions/6A755E2201120001130195C304FE1CED/userlog
        • Size 187B
        • SHA256 723f4e0db69dbc9299ef44b931ac0881381b886d1c99029092f7e26f812a81d0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/open-sessions/6A755E2201120001130195C304FE1CED/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation2624608169002027243tmp
        • Path /data/data/org.traccar.client/files/PersistedInstallation2624608169002027243tmp
        • Size 90B
        • SHA256 f463bfa0d25b3375087051aa2f162271a1bb9cf78fbeb4f96ed777d6316615e5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation5555591497480155822tmp
        • Path /data/data/org.traccar.client/files/PersistedInstallation5555591497480155822tmp
        • Size 559B
        • SHA256 d7f2b9db5ce171bfcf484fc1ad0bbfd9097d329100733eae38a6bf471d2883a2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTozOTAxNjQ3MTM5NjphbmRyb2lkOmIxYzcxOTRjNjk5YmZhMjU.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTozOTAxNjQ3MTM5NjphbmRyb2lkOmIxYzcxOTRjNjk5YmZhMjU.preferences_pb.tmp
        • Size 481B
        • SHA256 7ec3e48eabb8827a8a245a465e9db45ebee8b4624e81aae27f7d7b1b1249beed
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTozOTAxNjQ3MTM5NjphbmRyb2lkOmIxYzcxOTRjNjk5YmZhMjU.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTozOTAxNjQ3MTM5NjphbmRyb2lkOmIxYzcxOTRjNjk5YmZhMjU.preferences_pb.tmp
        • Size 505B
        • SHA256 1a1ccd261ce4ad7286b28165a9de790268ef863edba2279f4f6e1bde394c8b02
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FlutterSharedPreferences.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FlutterSharedPreferences.preferences_pb.tmp
        • Size 34B
        • SHA256 ce1fa500da1a64d41fc783924a1823cc9865be68abae48bc4065b3a7cc6454c8
        • MD5 SHA1 SHA512
        Submit Download

        FlutterSharedPreferences.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FlutterSharedPreferences.preferences_pb.tmp
        • Size 60B
        • SHA256 ee61fd5acdb5691a9abb6099fdf70f058da43907b5f4b44c913a150cea3c7a34
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FlutterSharedPreferences.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FlutterSharedPreferences.preferences_pb.tmp
        • Size 92B
        • SHA256 78aa6e00ce0dcd90238d0d21672576f30379149d55c163cdd68114d5ea498321
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionConfigsDataStore.data.tmp
        • Path /data/data/org.traccar.client/files/datastore/firebaseSessions/sessionConfigsDataStore.data.tmp
        • Size 145B
        • SHA256 12fd34dfc424d2bad95a6acf1f13bed17c28dde9666d852c339ae61a2dd955ce
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionDataStore.data.tmp
        • Path /data/data/org.traccar.client/files/datastore/firebaseSessions/sessionDataStore.data.tmp
        • Size 278B
        • SHA256 586c1744e157085f39a3aab74a15e75fee8f62cbcb0a17bb3d490063ad80184d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        flutter_callback_cache.json
        • Path /data/data/org.traccar.client/files/flutter_callback_cache.json
        • Size 226B
        • SHA256 d569ac2f32d1dc07ea9feb5fd881d78786e724bbd95743de69e2d82a940048c9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        flutter_callback_cache.json
        • Path /data/data/org.traccar.client/files/flutter_callback_cache.json
        • Size 389B
        • SHA256 cf90534b15b1f7497d031e5911bdc6a75578fb215f8d66beeaad72f9ad7e1fc3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/org.traccar.client/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 00d2766554fce90d5ef57401f02cbd4f1657caa824e06289f33912f9948f9191
        • MD5 SHA1 SHA512
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/org.traccar.client/primary.prof
        • Size 1KB
        • SHA256 32f6af0061ee9ef595a154939844c945667985cfc227493355fff77876b2aa72
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download