0a3ab4f45cec4509eaf8d16038f629819a20531ba59daf02ce75db2cae7f72bd

Resubmissions

10/08/2026, 12:12

260810-pc6htsgr2z7

10/08/2026, 10:34

260810-ml8nfafe597

Analysis

max time kernel
122s
max time network
153s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
10/08/2026, 10:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
daily-20260806-053349.apk
Size 9.4MB
Sample260810-ml8nfafe59
SHA256 0a3ab4f45cec4509eaf8d16038f629819a20531ba59daf02ce75db2cae7f72bd
MD5 ec6faa6943766355f9689ee63e9d80d0
SHA1 b1191d61346b1879caadcb8c5db82913e4ff5e76
SHA512 e9f1422982863dfe292715083e5aca1c70d7d406bb953097186c06f88a4384671dd565a6ed9e95e77ce5b55cf2d4bdfff3f3039a31ded003b7333c80390d5507
SSDEEP 196608:1kBQTB06Y2yPQP7Jd1h2SY8H5gktulzq93z/u3S+4vjJ75RtecXuf/fZp5Mtzcy4:1bF06Y2yPkJJaaW834ejJZeHfSi
TLSH
T1EBA601CDB79DBD2FD83E40310946D3A813599C15CA46924FA484335DE8B35E80EBABDB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.extensions.jar	4160	com.example.foreignbrowser.nightly
/system_ext/framework/androidx.window.extensions.jar	4160	com.example.foreignbrowser.nightly
/system_ext/framework/androidx.window.sidecar.jar	4160	com.example.foreignbrowser.nightly
/system_ext/framework/androidx.window.sidecar.jar	4160	com.example.foreignbrowser.nightly

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.example.foreignbrowser.nightly

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.example.foreignbrowser.nightly

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.example.foreignbrowser.nightly

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.example.foreignbrowser.nightly

com.example.foreignbrowser.nightly
1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4160

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

LibGlobalFetchLib.db

Path /data/data/com.example.foreignbrowser.nightly/databases/LibGlobalFetchLib.db
Size 4KB
SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
MD5 0eb157e1a86d4d00aa601dd2f6ff3ee3
SHA1 fee434f784e73cc7916322e949f727caf8363102
SHA512 b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8
TLSH
T183810250534000E1D05446B354E113080F06D19496428B03550100428C415440C60E88
MD5 SHA1 SHA512 TLSH

Submit Download

LibGlobalFetchLib.db-journal

Path /data/data/com.example.foreignbrowser.nightly/databases/LibGlobalFetchLib.db-journal
Size 512B
SHA256 d2a7a27bdcbd863500a8fd763be08aa97e85fcaa88eb98df9c85f2e84a679e9e
MD5 5fee0e86c13298b2c2f82ae7e0d644b7
SHA1 7ce57b57556022f37199e945ca376948cec1a99b
SHA512 1e24536baa67a3e8621feae16f865995084a65dce1b5bc095303a4d441d08bd611e4f64faa9840c62814e92113dd683b2e06751187b5e9f0e44c27c471bac948
MD5 SHA1 SHA512

Submit Download

LibGlobalFetchLib.db-shm

Path /data/data/com.example.foreignbrowser.nightly/databases/LibGlobalFetchLib.db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

LibGlobalFetchLib.db-wal

Path /data/data/com.example.foreignbrowser.nightly/databases/LibGlobalFetchLib.db-wal
Size 40KB
SHA256 70c915012e405d4d02d6343788d1b06a68bd1ebc7c08d378813c07f329bf2b9d
MD5 1ece9f0c20710511904476466764b18d
SHA1 705ca8c3258ded4aea1d8fca66dfcb0fdf3dfc5b
SHA512 f31f86a47ca2827786f244ffbfca685e72ddbb4b23bc7610911d4e035b18a0afeefeea0bbab95973ec72ba75531a6ce0d0196d3f5fe23412f01f35053bd15442
SSDEEP 48:JAQ663/36+IaDl/G0UlDsDbwoZFGS4ZeUhAITySP/0hDo1j:I6vKCVUPXPMO
TLSH
T1D103C08E0F243341CCE04175ECD54BD26DBEA43E57E375AA1A4C40FAEE4653294099F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LibGlobalFetchLib.db-wal

Path /data/data/com.example.foreignbrowser.nightly/databases/LibGlobalFetchLib.db-wal
Size 16KB
SHA256 d89b962fd55d4a96d8d550202cf09ed081ede936ab0cfde53a4d4c189a4930a4
MD5 e412956c647ec20ebdb0b61e33e3e109
SHA1 7f3f6780fa23108b7c5fa7446ff8cd7302230aca
SHA512 cffb74370c5ee39e5193505393d4cb6f81d3b6620a98d1756a62be17bf03dd9b736092a44b173b1b3841ff23ae3be8d88b4f06befa17eefc190de8e1eb06bf97
SSDEEP 6:KmqQwiWwnv9FZdKEAlOERX4PBX4ogLugMBX4suuK+/EXksXDTtZb2Ow2:KXQwi/lzdKBRmBEyPbP/eXXDTn2Ow2
TLSH
T1C072C2E553800913DA08433BA8CAC3C69DA09B2BC317C74F53901611FC82BCCA1A0E8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

history.db

Path /data/data/com.example.foreignbrowser.nightly/databases/history.db
Size 76KB
SHA256 3976fd6009cc9ff4025583480c12e5568fa87a03197dbda2e48d1d18c6f0e4a3
MD5 15dcdeef96cfb56a5b991f8a8a21d9f0
SHA1 3e978ee7eb8d8b36d4fcb7ff4d1ce6a48048115c
SHA512 ebaba45128ea797889cc9d7da099f555460d73adfa08c530edb7b7cb8297c87f5f44d2fac447b60c2a0fb44310f1da7e2b98f9e7710872db7b914dbe318fd636
SSDEEP 96:ht/7JGAP+ycIxujeTfrhJQm94Swf3Zt7tkhzkbfBTsV0l+ayr23XRj3jRG:/+yJCefhJF4SwvZt7utQ5Thlx3lzR
TLSH
T1427362CF1D6428A1F6F004F2EA656856FD27806EAE037281F4AC20FFEF599715570C69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

history.db-journal

Path /data/data/com.example.foreignbrowser.nightly/databases/history.db-journal
Size 8KB
SHA256 f4df14558f6a1dd82670637d30f33aa3c3c825bbb815ef8417d3ba8c1f05ee09
MD5 07a3a0420109912ee0814ebaea22702d
SHA1 55d34ac01e019c3d49318cc6e2b578a82dc4ca8b
SHA512 304abef90f2729e608325302b129142020b237b9c5a7f7510967b6c534d6fb2dfb0fd2750605e577bc0233f3c937e22f3455a6a43cda9137951b16ffeb797fb9
SSDEEP 6:7+/l9CGPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKqN/oN:7+t86qLJdKBRmBEyPbZoN
TLSH
T142022288AF400803C0195F7BD0E883401E20A715D363CB074D5008943D02ACCE890D20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

history.db-journal

Path /data/data/com.example.foreignbrowser.nightly/databases/history.db-journal
Size 12KB
SHA256 67e38447d1d405c3aef433b13c467fa194403573fc361c3f2da39f13b230a1d0
MD5 8d91293e7545ca044eb184752fdc4606
SHA1 3e51aaa9242c2ebfa29febad094a1f1798e11eb0
SHA512 d62c2ea080f4c0231d0dd93a6da84ac12facfbf9519a6799e08a0926639339a8dc8e29239e84964b5428c234317ee5e1c256c3626e7e4114f022a60190113cf5
SSDEEP 96:7jcOt/7JGAP+ycIxujeTfrhJQm94Swf3Zt7tkhzkv:7ga+yJCefhJF4SwvZt7uta
TLSH
T11E42DCCE2A697612F1E904B1ECD14C627C79592E4F037B8079EC00F6BB0F651E33A56A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

history.db-journal

Path /data/data/com.example.foreignbrowser.nightly/databases/history.db-journal
Size 16KB
SHA256 521b1edca0c7b17c516ed8ade83df96a2e6e24fa05488d975a90d2c24fcc9ee8
MD5 868cbd6bdfb94c3027695d80f0bdf987
SHA1 27b17ff7c557f254e6669eca280cf5286e6d7368
SHA512 3a9a059f57b71c7aab851d0e0a89cc3ca48a945f68d404eed82e4298274e24df80e2f55ee5948a9d1ca2e5fd41807628fb5de6e090bca5f7b431aa38b3b98084
SSDEEP 96:7R+t/7JGAP+ycIxujeTfrhJQm94Swf3Zt7tkhzkV:7Rq+yJCefhJF4SwvZt7uto
TLSH
T1B572DDCE2A697612F1E804B1DCD14C627C79592E4F033A8079EC00F67B1F651E339569
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

history.db-journal

Path /data/data/com.example.foreignbrowser.nightly/databases/history.db-journal
Size 512B
SHA256 28c4baf98250a4d50a56fbf0a13a28a1728069483df3ff64e50d78c64eec29ab
MD5 978a69978478459863591e10cfe60692
SHA1 891c76a94c0810da21f80e2df8b73eb55fafba25
SHA512 92d879ed7d7518434d554043355a4ca0db953eebd3d7bd5eaf900ca70aa00a3d48c88159bf539dcd2ba5857f5273d50c684e6efc55170fcb30cc30a1932dba9d
MD5 SHA1 SHA512

Submit Download

history.db-journal

Path /data/data/com.example.foreignbrowser.nightly/databases/history.db-journal
Size 8KB
SHA256 197bd16e3edff440f6b8598988679f6b45220b02ab4f023901345d460b6a24c6
MD5 2ce5c453ccc4895ebf93708bf3604721
SHA1 4d6cddca4e0e0fdd644d42690124a76c5b0b2f7f
SHA512 88dcdfe22295c2b7c2827958eb074556f261173c4264e946a8d81e1bc905365ae16fb0f734015f82d6eda5e23f224d0c1cfaa41ea11a4d22d9e3cc5ead401e72
SSDEEP 6:7+/l9Z0SFn1CD/ng9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKH:7+tI/7nqLiuWd7RmBEyPbA
TLSH
T19F02C09DE3800E13C81D56B790EC83D90D02E728C672CB07056408943C034CCE4E0D8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

list_-1025149380.txt

Path /data/data/com.example.foreignbrowser.nightly/files/adblock/list_-1025149380.txt
Size 1.9MB
SHA256 d6ea58c338dca110535d6d3029022d3c7858d7b6a87604940ee86ff7b0a8e0f8
MD5 ef16496c36ab7d30e09783c4791fcc63
SHA1 7aaf5bd948894b170f364deb25991700d8b846df
SHA512 b1339c2c9938efe4e5ea06ba5a8af52f1aa6526d06bb0e33b497fa1ed51c941683a6f28dc3439cd9b9077bdfc59b101b42346069f9916a9d7c0983e603e36630
SSDEEP 49152:lBLuRV9NuHSahwmBrVPwElv01ag7QPANwZGQas+QWS:lzKO
TLSH
T1DB95F8379F152A3D50F5025D14EAEB09C73117F89253FCEBAAE74209E24568A22B31FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

list_1734146595.txt

Path /data/data/com.example.foreignbrowser.nightly/files/adblock/list_1734146595.txt
Size 540KB
SHA256 b02329e1c61938738ed3bd57f73a5110f6b471f330ea335962449a8745f41570
MD5 d8de86c140655cb4d36f3a3ec9a87191
SHA1 fedc14a149c4a180f0ee70ae51891815767cb509
SHA512 9b9ca0b51fd63c04a001c9c69fbc37ee6e1d1a7403335168e1d3b9d1e99fe8a52be553a21940cb88868826a6649ad9ba12670c09c64005b17b90c2ccb2366b79
SSDEEP 12288:0YgZKJlW+bwFF79t5Q2C8LStHoN+ZHKp6KW5ZYz6gBXSW/xCMc7:NgZKJlW+EFRBCXdoN+ZHKp6KW52z6gBI
TLSH
T101C4E4120F1014AA18F2095934FEF549D6306BF24643FCCBAE6B0B68DE6569B35B71BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profileInstalled

Path /data/data/com.example.foreignbrowser.nightly/files/profileInstalled
Size 24B
SHA256 fd075b82856317b184cb0a7b190d57c3c8b2593431029bffd64dd114a776ae48
MD5 832a49a116dbbd6b1eb451cc6393e0a0
SHA1 0ec3b812d670bf25ae8d8fb32d75e4067a6c7285
SHA512 d4a3430ca404a37b94bae9446a3a74823bd869c327cac0c7e7871a013290ee786db38afc6e88bd20a95a7951abb9d16676241f12b0aaf7b282612003b655a681
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.example.foreignbrowser.nightly/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 ecce17d7eaefd4d5e269955999d85d862bd0227dfc0d76228a8a8f7ccfe56ae3
MD5 57c76ab035d73b11abb27e5fb3372c82
SHA1 eae7c3682719fbea0f3fe3528698b38544a2435c
SHA512 0a8dfa04bca56f1c5f8799df02b09abf665aabf5ef911c5a0af6c2a1e30a05fedc78291a136eb7eb43efc8f33b553cf72a2d432455871a318bf649006cfd9627
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.example.foreignbrowser.nightly/primary.prof
Size 7KB
SHA256 763c63af314de0b3791ed557f3ae841693d702b5fbca4e3e3773b5f3b98a8bdf
MD5 1185e65d115db9cd6599d1e5b57b2309
SHA1 8c10834e68e1279e121a2acd474138014d092b91
SHA512 b6d0f02ba7d0e4b921b8951d48f00b26d38db1c33ffb7666a6518cb3ac743aba82cf83bb39b599eb52fca88eaaa3c146fdea8b875a57bd91b3e08311e4dd48a4
SSDEEP 192:MtiwsR6mrofQ5teG9/8lwGs5bXSSiOGTkFv:x55teDlwG4XBoev
TLSH
T1E4F1BF402E6AECB9E9C9ED2980FE707ECF0B52A7450E7A0085F4BD3935182436E79194
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.window.extensions.jar

Path /system_ext/framework/androidx.window.extensions.jar
Size 123KB
SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
MD5 3056e1bdb7d4e19789d0319eff484bd0
SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
SSDEEP 3072:8Pmsa8v0v8FYNMhpjLXZ/pziNQdysk4p26PQ:Qmsa8vXhRLXXOQGJ
TLSH
T19DC31951FA4159A1DEAE933B959B1301AB30A648AB2383137654D0BCFCD73C39F87AD4
MD5 SHA1 SHA512 SSDEEP TLSH

Download

androidx.window.sidecar.jar

Path /system_ext/framework/androidx.window.sidecar.jar
Size 25KB
SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
MD5 29469324e59dfcc052f24b5af4e7b2c4
SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2
SSDEEP 768:bjydnTmp8WNAupUuvkg5NrtsESOMXIpc3dRwQA0:bjydCpF0uhtsxOQIqdSj0
TLSH
T1A5C2F716E7400C63E9FF9A3B6A5B13009F35E3A4AA43471B640585A4BDC63D3D9EE7C8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads