Analysis

  • max time kernel
    15s
  • max time network
    33s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    09/08/2026, 13:44

General

  • Target
    smart2.apk
  • Size 77.7MB
  • Sample260809-q153msaf73
  • SHA256 8450e6043ca621fd73a0e295a31736b37c5136a75ae8904cf7dd50ac136d287a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • com.nst.iptvsmarterstvbox
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    PID:4258

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events

        • Path /data/data/com.nst.iptvsmarterstvbox/databases/com.google.android.datatransport.events
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.nst.iptvsmarterstvbox/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 f040aac2b6fec1467cc5c064b9193147cf4f24ccb0989c66a79f75e02a88607d
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-shm

        • Path /data/data/com.nst.iptvsmarterstvbox/databases/com.google.android.datatransport.events-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-wal

        • Path /data/data/com.nst.iptvsmarterstvbox/databases/com.google.android.datatransport.events-wal
        • Size 52KB
        • SHA256 70d95f5ebe593edbdf45843de5ed197b6a64cccf544c7469e4a160d64f153938
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.nst.iptvsmarterstvbox/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.nst.iptvsmarterstvbox/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 55c95eb2897b61c01c13253afad5101db1bbd3fc3e07cf1fe40350abcd2b4da7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.nst.iptvsmarterstvbox/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 f8524d4bfe9c7c84c683d98afe1987e981056bb7e4befe02e6994604cfb51b38
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.nst.iptvsmarterstvbox/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 03a9b7d85430feb0a6599eadceb80da6aa6ed8499f09a2a947c90770a6982465
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.nst.iptvsmarterstvbox/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a19ce0b5e8ba454de1db1bbc5f37dee902c6ccb446f9f70b784c6cf0b9cf7728
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.nst.iptvsmarterstvbox/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 95b34bc086226d184917fd5a557c6ac3181b4ffdedb193afbbf06276122d1254
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/data/com.nst.iptvsmarterstvbox/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 8da90da4aaa57f17ea41213a5733751f3d3bc8fa53b54e7da28cb578af69d3f0
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-wal

        • Path /data/data/com.nst.iptvsmarterstvbox/databases/google_app_measurement_local.db-wal
        • Size 36KB
        • SHA256 c8fadadcf58ad7fe90a955f4d5f48c578d219221ed3f28e9533ef35982b2236a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/com.nst.iptvsmarterstvbox/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 6b5b15265d25e9c0aac1e12d6726acd6af28c8e0776472ff56d9522e6fce42b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/com.nst.iptvsmarterstvbox/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 cebe1984d6f160f6023134cee7b788f9cc85acb4ae5f8d84d4c14afc10e61b35
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/com.nst.iptvsmarterstvbox/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 cd225e7164b29b350352f010cfc82faadc0b7960d3b34f645d1661642ea63db2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/com.nst.iptvsmarterstvbox/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 0a9b638d56d465f52ce4f13e662c750ebb8f369c67a4747fad07d11995a89dde
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-wal

        • Path /data/data/com.nst.iptvsmarterstvbox/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 961a9d41cc8955b8f1b807477de46bb6a706bb40edd090602dfc9d2a4167af99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation1195003228534975361tmp

        • Path /data/data/com.nst.iptvsmarterstvbox/files/PersistedInstallation1195003228534975361tmp
        • Size 90B
        • SHA256 1f34a721a6ed5093193efebb52e5c49105bd1687d9576ec1c394b0318d626bae
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation2611425373085371547tmp

        • Path /data/data/com.nst.iptvsmarterstvbox/files/PersistedInstallation2611425373085371547tmp
        • Size 569B
        • SHA256 06eecedfe71d7cefd68cb6a57258355f0e14c51f40ad12d5e4e0a0f69a60f3c1
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.nst.iptvsmarterstvbox/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 683a6358e89475871b53914870b30a43d6744a98a99ded876b6c890a12fab412
        • MD5 SHA1 SHA512

        androidx.work.workdb-wal

        • Path /data/data/com.nst.iptvsmarterstvbox/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 4382d8a47363150f8b023f0e986ff16d798a9e563706ca00cc4c7b658d17f594
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.nst.iptvsmarterstvbox/no_backup/androidx.work.workdb-wal
        • Size 221KB
        • SHA256 198d125c3f62175b0ea88ee72be53f181b8acc0fc05021348792b2c2077b50b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.nst.iptvsmarterstvbox/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 2b1f20f8fe45e0a52a170d36e4c58d7b600c5ca540d6b55451cb5473a5a42125
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Anonymous-DexFile@0xc8585000-0xc88af3dc

        • Path Anonymous-DexFile@0xc8585000-0xc88af3dc
        • Size 3.2MB
        • SHA256 cd93973550917ea1acc9683758d66ccd7f03b3401d26eb385b65613987cbe90d
        • MD5 SHA1 SHA512 SSDEEP TLSH