5dbf56c7eb444b3dc68d5b2afa65020c6f3599a71dc128a3a518a306267cc910

Resubmissions

10/08/2026, 12:30

260810-ppsshatxay10

09/08/2026, 20:51

260809-znkevacd8810

Analysis

max time kernel
1s
max time network
248s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
09/08/2026, 20:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
گالری.apk
Size 8.2MB
Sample260809-znkevacd88
SHA256 5dbf56c7eb444b3dc68d5b2afa65020c6f3599a71dc128a3a518a306267cc910
MD5 b1ae0b36fed08299868ea02469147e77
SHA1 d133876c284ad3bf3e9531c1f64a3d3a4442611a
SHA512 ff5e01bd8f56546c4ba2d709dbcd5cb09569a61315f4416e1b9b17f07a15bdc3c2e8cf5158658531fa8b5afbde0e8812db697948ffc467bd5e5708edc6be88a8
SSDEEP 196608:ARCWfAnRc418UJ4PSCeNHvlIYPgUNLUepLsJVdKUDC/:kBfwCe4bMvlLPBvV+VdKU2/
TLSH
T152863346FB971999C8E2833041B94B3932375C68D31B938B6374B2F62CB7ADC9B461D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.elgfus.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.elgfus.app

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.elgfus.app
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:5100

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 c1ccc325c2699ed7f556cf171566317f706a911c4d02b1644a2a7908b93da58b
MD5 188c0542bc062e48b614e5ca8c1081af
SHA1 0eb9b89a5c92957cd1fe748cc063b32853339774
SHA512 62a67f2c56bc3b40d49c80094f160d355a8f67130e1924109426e0481008bc2cd11a9e2675a901abd03cad1e7fe0028031e20d826437edcf35b6f86e2499c2b4
SSDEEP 6:l9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOw:TL8EEh9zmzrfRmBEyPbBvOw
TLSH
T1C772C2CD9F102606C6660773B4CAE3905DA4A22D837A9A472AA40464AE42559A051F98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 bb57ac918ae43b451866505f85101d766ee33b2f9798cf868d338d6f9510f718
MD5 994ecaff2592b3767f36f2d69e29b208
SHA1 25e9d8639ceb069cd93e4589317ccdb5fb400f73
SHA512 c38357a000d52f90145838de8310928d879a13f1dc00336d3c182851a945f78c1647167824f9e763e3a95de2d70f6555064c2cb8383307ad818f9d31ae653d6f
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 b013a64e9e39c6c67874befcc3d48f2c4ca99be4da991675a1cb97402a2baac2
MD5 b54b0c76876dcf7c78e168513b75315f
SHA1 d31bc150da428349dadde74c0b8c67c133e2d677
SHA512 ee783103218bb36f054a50766b35496f23d350f7743b8fedfcb45d03090b34547214b3664896fd89558000ee02ef94545528407388af5bbcbd4e7d51baf154e8
SSDEEP 6:7+/l9dmHn1EwlkWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK2:7+tfxWqLiuWdwRmBEyPbZ
TLSH
T18202229D63800822C81917B790D683D02D00F719C9A1CB07257008E83C034DCE4E0D48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 1b344970d0da274ed378cdff4474b2cdeffab448d4d98792bf3fdbd5dea684d3
MD5 53bdd15260464877dd839fb32c05f739
SHA1 f28889c17dd1a56b78121371bf741aa21e7cb75e
SHA512 cf4b0b8995c5bc2b8912259d9bb9c725d16dde8888baa8c945eca6d05386b5f76974add5671f8979f1c1acb4d1bde78536dcad840bf04c93f2d346db28383ad1
SSDEEP 6:7+/lFG4Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKw:7+tF9qLJdTRmBEyPbj
TLSH
T13F91808D77411D13C61A5BB794DD83551F60B715C373CB57157008987C476CCF490D44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 438c2f2bae98cbf57003d6d7ff84a4b9ee6ae280e516a75e2ca63dadb575d6cf
MD5 0f8fc6586c4eeaf40d79c010a5c93c10
SHA1 d580d2b9bc1ec0e306b8e1ef05e60d3258f199e9
SHA512 98241eb78f1f5fa76fb86b2675875a96083bbbf6042f1938445b2446f6505912fbcf70e1310df6a5af61dac6e7c76d1dd6b6aa758acbcff56e58ad31cf1319f1
SSDEEP 6:GtgPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuK5M/:C4qLmqCRmBEyPbks
TLSH
T10802808573C40D17C51D567750C983551F14E7158231C75725F00DAC7C075CDE8D0D84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation131159585751750446tmp

Path /data/data/com.elgfus.app/files/PersistedInstallation131159585751750446tmp
Size 90B
SHA256 5f711b39c5d15a2011464ad10b43fb73abeed25251fb37093008f478dbac508e
MD5 2debf6073cf29321a86c2ec3d29c77c6
SHA1 83fdf8523a4f38ee7ebd59100dee0d49b4899dea
SHA512 86ee75424174f4273fd613032a808e536806fad34aa803859d670c80dfe3740c7146d44e11f6fb248f583477a39ed73e7aa59672374dfdc67d525aa41a63bded
TLSH
T10FB012804732865384D5A6022E5CD1001E941E424C0B8B088B29A18001C19D29103AA4
MD5 SHA1 SHA512 TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads