26c82215ce0501c0cf41121d7150971fbfb1894198024a6fee2d84845e47349f

Analysis

max time kernel
149s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
09/08/2026, 00:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
gama567.apk
Size 15.0MB
Sample260809-akjayaxarg
SHA256 26c82215ce0501c0cf41121d7150971fbfb1894198024a6fee2d84845e47349f
MD5 ef07bb3ecad43e8801ab0e423f84abd8
SHA1 6578c0b51d424005e367c1850ea59935a5e5e903
SHA512 9e9fdfed0b26dd5b40ae8c7f3acd941d7d4821097eea638ab3ec655efe17070ed33376af23aa9f25c83ed4782d5f81cd12116797492920b1056a974830edb9aa
SSDEEP 393216:P2Ricd3Qd+DYv+joEMsjXtJnEsFfwLASrV5h:PGim3yWJnaLnF
TLSH
T17DF6029AFF18ED2BC07A0072C55AA23232678E118F429777794C77187A735E90F45BCA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/data/local/bin/su	com.gammaa567.onlinemarketresultsupdatessss
/system/sd/xbin/su	com.gammaa567.onlinemarketresultsupdatessss
/data/local/su	com.gammaa567.onlinemarketresultsupdatessss
/system/bin/su	com.gammaa567.onlinemarketresultsupdatessss
/data/local/xbin/su	com.gammaa567.onlinemarketresultsupdatessss
/system/bin/failsafe/su	com.gammaa567.onlinemarketresultsupdatessss
/sbin/su	com.gammaa567.onlinemarketresultsupdatessss
/system/xbin/su	com.gammaa567.onlinemarketresultsupdatessss

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.gammaa567.onlinemarketresultsupdatessss

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.gammaa567.onlinemarketresultsupdatessss

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.gammaa567.onlinemarketresultsupdatessss

com.gammaa567.onlinemarketresultsupdatessss
1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
PID:4974

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

OneSignal.db

Path /data/data/com.gammaa567.onlinemarketresultsupdatessss/databases/OneSignal.db
Size 52KB
SHA256 e3dadf33a6c10a416d4fb885b9042f14a5e3f6a50746420f5dc1ba00c6dd29f0
MD5 290ded9f9567e7f67f4274850fd03339
SHA1 77ab1f96c76637bfbaebb7d7ea37a662b21e7663
SHA512 0d3b134ed90fe95d47e2d0c8e183cb4aa01143b8698dc450d734ce355e9cb98ce40086e902bd4f7cda406ed2621aa45b4cd67a9a487ea82461f7dd45a77960fc
SSDEEP 24:TLLS57ZBUWEaKdStdxyqOkPU/+XiByrBNDd2+32ISpvJqrEqjUix5+xGTrOPjwVy:TE7AcrA0oJxqrKcrObMoOS+
TLSH
T1E833BCCF4B822191EFC760B3105342E44E3B610E889317A63BF760245E83B06D72387C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.gammaa567.onlinemarketresultsupdatessss/databases/OneSignal.db-journal
Size 512B
SHA256 375156bf80fcc30aa6f786a39ed12dd33ff6be6a219b2932b9fa48e839853f23
MD5 eee5019dae7f895ca009abe7bc06f73e
SHA1 a23e116159527c156edca6576fd72c17ce223614
SHA512 f0e796bf68bafd0d006a6fb5e532ad2032c930647b2a7424d79a3fc91381694d539cb06e3a8c0f8dd88201940718a835e25f2bc1eb23c4d017279a07084d918f
MD5 SHA1 SHA512

Submit Download

OneSignal.db-journal

Path /data/data/com.gammaa567.onlinemarketresultsupdatessss/databases/OneSignal.db-journal
Size 8KB
SHA256 94810b312fc4f9a551b38e64f2b058cbff4e431f623733e7786f2d4cecbf45de
MD5 799e17cbeb4e77d0aeca41d139857e7f
SHA1 6f4a2ff5a95fa56edb18eb77a55bdaf5b8974edf
SHA512 d6ad78463b3b0499e75d4f4ea51e1d67d16e5145bcf6b61926c6f741d45cd23afed38002dac2a6655cef45176fd737409d05697159d44131ac962d48721bbc10
SSDEEP 6:7+/l9YHn1CWg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKyD3:7+tJWqLiuWdYRmBEyPb5
TLSH
T1570222A863800812C829177798D983444D00A73882B2CB6726900894AD079CCA4A0D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.gammaa567.onlinemarketresultsupdatessss/databases/OneSignal.db-journal
Size 8KB
SHA256 e35bdf361750debdfb9dd62ee6058188b7cc4ce2bd9ac6768a7466025fd38076
MD5 f215705aa0a206ca714e064cef1c9576
SHA1 617b62b4ba00aed440f322d71334d22c67b1a56a
SHA512 30a0eb6cf0f6774ae906024e7da1ce41d52fb5c3d9d6ee2bc8cec072da9878f55097475ea941d82b310941ed5eebaebb73df241c2f1ef6f1ddb07e549950b65f
SSDEEP 6:7+/l9xwPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKqf0//7:7+tUqLJdeWRmBEyPbbf0X7
TLSH
T14902228863400C03C23D1777A0EAC7441E10A7289223CF4757A10C642C0AECCBC90D80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events

Path /data/data/com.gammaa567.onlinemarketresultsupdatessss/databases/com.google.android.datatransport.events
Size 56KB
SHA256 dcffb7c9f015a7121fbca19ce6eb9266a3dd6d5aa1894a69646a870b94f88d12
MD5 dfc5293be77fb915a30fbf7fdfa2ebb6
SHA1 213f9ddd6973bd94fd4b90f17cc264d8ca29c844
SHA512 ea4af02d9a065e75f95e2c096bb8e4ce72ed406a9232f7b195670dc981f4cc6a934b4bac98ce0574e0fa814c55e52407287860e3efc8415cdb8d193ef59f254a
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSo:rAMEX0wIyNjao
TLSH
T1A743639D1A2C2221C57E283ED7E143635B7C93DF572392623E908CF98DC2469B4354AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.gammaa567.onlinemarketresultsupdatessss/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 b150b2191080ce820ccf0668cbb0ab623e9681ea657218332ff925f3b206e5f8
MD5 83dc82327cfe94693d7dab52b68eef6a
SHA1 bd23c83b678de73c83e96e2a94a9a2ec9803c87f
SHA512 86993ec664166d8a3f6d67d40b5dfe979bef7019ee8b118ef38767426812298eb778e79f6a66692f584a5cf703d535d98f75a6962356e337e9f1dcfb325a00fc
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.gammaa567.onlinemarketresultsupdatessss/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 29f89208dd749f81fbac640dc55be846f587ee9bd0d4b9a1f3f9143bd5ad6341
MD5 8fa4bcd11210b7936891d565728d506f
SHA1 a29084afdc8cf231f62bb12bcf70ec4723dd674d
SHA512 3fbe2b9dfc1c4f56e164c70039f3d1fa4b7b6d8852b78501364d074e8acd4eae4a578b64ce40a5da629d94b0fcb97c5075d77da66a82fb96c818bdd4bcece3e0
SSDEEP 6:7+/l9wl/gn1Itng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK48n:7+tu/JnqLiuWdYRmBEyPbS
TLSH
T11902228DA3810812C82917BFA0D4A3400D80AB2E8271CB2B26910898AC0B6CCACA0E04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.gammaa567.onlinemarketresultsupdatessss/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 ad29fd0343ccf3d506386fa9b97de80a6011a4b4c83530686b52037c457cd02c
MD5 67ceefb9f0916e0b63aaecd0dcad879f
SHA1 8a8b9f4f26d2648b899333495cbdc33b1531b87c
SHA512 803b21370da1827f2cea7764b9e32f6f0de3993181e0625304d514a2e148aef6b1b222c8fdedd8b84298fd1094b38391447a09f52f002a8784ce59c866c24d0e
SSDEEP 6:7+/l9xQPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKqc/b:7+tEqLJdeWRmBEyPbb8b
TLSH
T13C02228863400903C0299B77A0C9C3501E14E7289333CB0716910864BC066CCB8A0D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.gammaa567.onlinemarketresultsupdatessss/databases/google_app_measurement_local.db
Size 16KB
SHA256 97cb02da965fe288014fb420f57f8dfe260a065945edffd77af20a2f419984fb
MD5 3a30613963fbc61e03be98d809e38dc4
SHA1 e9e1e6660a8d02340b936ac4dd591f54df505b47
SHA512 a60b4818fe4f56ca81c524b8e99cab9b9ec155c16a60b2feb192aedd19b2740e0951d4939d8d7141de8e220ed1887b5a2618bb1c67114cae13091e238eb58892
SSDEEP 6:l9bNFl4/Sls1mGnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqNsvuoVNs3:TLWuEmO9zmzrfRmBEyPbB93k3
TLSH
T11A72C2CEDF102602C1760636F8CA93A55E64E22D8336EA472B950460AD42449A8A1F99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.gammaa567.onlinemarketresultsupdatessss/databases/google_app_measurement_local.db
Size 16KB
SHA256 6ebab8032d62b3b79f9425e2855bf4d2f8d45b953dd3e85a5b1559f484f9d7d7
MD5 e57902a475e14b0e948cb7eff7745c9e
SHA1 c820f42dfc493bc34a72b3131654a8e3f77c7220
SHA512 2763e22c8413272b10f059ddb2bcdccbe1b89ecdacac23f7b8377b1c3d3450f5a4149575b1a7e79e8ce4ed5997685e04128d139e1c734a2a1b8e64cb7af914f5
SSDEEP 6:l9bNFlsls12tnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6p:TLiEq9zmzrfRmBEyPbP/P+/0Fl6D867
TLSH
T1AF7268CC7B105703D1774B7670CB93E11C34A2194333DA0B3F450524AD871845142F40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.gammaa567.onlinemarketresultsupdatessss/databases/google_app_measurement_local.db
Size 16KB
SHA256 ff6b18f80462a13353755f9ef92d9c1b908bc8f782d2bee909e535d7d0888e89
MD5 e4a336b4d463607a70c5df1cd4cb5eab
SHA1 f4f415536b07b7ae9d78a903f9f1dc17a1f73224
SHA512 461d7f6c7b02f5fc1633b6f946ea7cf0f5150ff33c47db4195092678a2e6ea46be27dd664a921d3bcd9917c21d35ce7a78b145d8ffaf289ebdc1023a67f97ddb
SSDEEP 12:TL1E39zmzrfRmBEyPbP/hr/gW49blqYFlQmB+/0Fl6D867:TLopmzr0GSP/h1499FWelFg
TLSH
T16072E9897B149743E2774F3570CBD3E12C3872265723D5177E461B2C5D8B3855162F45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.gammaa567.onlinemarketresultsupdatessss/databases/google_app_measurement_local.db
Size 16KB
SHA256 ec184bc3ba0535edfc2ddd74b687514cc7ccc264fa14be984c695a726966b141
MD5 1966ec7d8ff0e06c10ad0a8468bc9bdf
SHA1 d1faff54c2a34e12b189c033e00b39fe67289f01
SHA512 7cf890beeee9ab5a40d18b8a293e1b56e95255fb7959482a7ad4a5393d27be01d54ec59bdd342590f1d443170305b6b5187942c3ab9bab6702d7524954c27a3c
SSDEEP 12:TLIEU9zmzrfRmBEyPbP/ZRhOLavnOAU7wU7UyWluIr449blqYFlQmB+/0Fl6D867:TLYpmzr0GSP/nhKamNZ28499FWelFg
TLSH
T1C37276C8B668D602F2770F3C60CBD3D2283872631723D2233D061B1C6E863818121F82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.gammaa567.onlinemarketresultsupdatessss/databases/google_app_measurement_local.db
Size 16KB
SHA256 260fe6fc1f2d968ca081ee5e545339954d7121dd40fa79e0920355086020a548
MD5 adb37d8add03518aef87662c51a11c24
SHA1 86f64e4de57a0136f98ca5f2cbcb204a4d7b1516
SHA512 68500e9c7898237675b8331bab5e8d6f39c525ef19249ea655c97e24e275b03971e5375e4e8b40c86b2716b29bce9f7b346852ddcf4d6dba5cc111cb95742028
SSDEEP 12:TL6uER9zmzrfRmBEyPbP/MDRhOLavnOAU7wU7UyWluIr449blqYFlQmB+/0Fl6DV:TL6vpmzr0GSP/M9hKamNZ28499FWelFA
TLSH
T1AB7276C8B668DA02F2770F3DA0CBD3D22C3972630723D6273D062B1C6D863828021F41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.gammaa567.onlinemarketresultsupdatessss/databases/google_app_measurement_local.db
Size 16KB
SHA256 cc7a3161c43b4ed6ec6c5c4df6786d70f383b2f2cfeef32fdd05a16644d65a15
MD5 9a8887ec7125ca3118bc6b5f9983b964
SHA1 525ceb343a8ac8b4784f26543ecafa576c5a7749
SHA512 5032cc5a82be6d0ccd95462b6851f82de8a04d6688946d851c7b785777dc929e0e90347bdf8da723871bfe9738667a72bf8b43e1e267959f77732c63bc433bd3
SSDEEP 6:l9bNFlkls16/nlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WUm7:TL6E6v9zmzrfRmBEyPbP/WUS
TLSH
T1B972C28D9F102606C5760672F4CD93616D14A22A833BAE572BA54460AD4258AA092F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download