Analysis
- max time kernel
122s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
10/08/2026, 12:12
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
daily-20260806-053349.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target daily-20260806-053349.apk
- Size 9.4MB
- Sample260810-pc6htsgr2z
- SHA256 0a3ab4f45cec4509eaf8d16038f629819a20531ba59daf02ce75db2cae7f72bd
- MD5 ec6faa6943766355f9689ee63e9d80d0
- SHA1 b1191d61346b1879caadcb8c5db82913e4ff5e76
- SHA512 e9f1422982863dfe292715083e5aca1c70d7d406bb953097186c06f88a4384671dd565a6ed9e95e77ce5b55cf2d4bdfff3f3039a31ded003b7333c80390d5507
- SSDEEP 196608:1kBQTB06Y2yPQP7Jd1h2SY8H5gktulzq93z/u3S+4vjJ75RtecXuf/fZp5Mtzcy4:1bF06Y2yPkJJaaW834ejJZeHfSi
- TLSH T1EBA601CDB79DBD2FD83E40310946D3A813599C15CA46924FA484335DE8B35E80EBABDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4804 com.example.foreignbrowser.nightly /system_ext/framework/androidx.window.sidecar.jar 4804 com.example.foreignbrowser.nightly - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.example.foreignbrowser.nightly - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.example.foreignbrowser.nightly - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.example.foreignbrowser.nightly - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.example.foreignbrowser.nightly
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.example.foreignbrowser.nightly/databases/LibGlobalFetchLib.db
- Size 4KB
- SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
- MD5 7e858c4054eb00fcddc653a04e5cd1c6
- SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
- SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
- TLSH T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.example.foreignbrowser.nightly/databases/LibGlobalFetchLib.db-journal
- Size 512B
- SHA256 c348dd7362fab68c80b1a5d8ab26b6b1d259c16e59b5156a012ac0996fdb7fa9
- MD5 ad666762205073ae19268d3170c84ac1
- SHA1 16b39eef9c6984179afeda6e774a2b76ebc1fbad
- SHA512 4c490f46be6f7fcf31df61362f96f1db32cda234fb7e6e76be433129ddda8aafebbf82c8f1a9ec30ee85f6014b5932fffda5ee9ec04d8e559f7b48f61adfc1ab
- MD5 SHA1 SHA512
- Path /data/data/com.example.foreignbrowser.nightly/databases/LibGlobalFetchLib.db-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.example.foreignbrowser.nightly/databases/LibGlobalFetchLib.db-wal
- Size 40KB
- SHA256 23231d3eb5b041371f079ebfe758e95851ad8939453dd5a167da0aed19bef239
- MD5 43372a8c6ef5993dfc046caf61972e93
- SHA1 2eadc26209fbc33109198ca41ca96baf273c8dee
- SHA512 e531e885e100bf0e31780c6fe7a019b014a7c4beacdbaf1d50953b02fcd5136bd970c8c47a62e79d38012eab2e81a47d992553adc6546332213990bca8a2b000
- SSDEEP 48:5nQ663/36+IaDl/G0UlDsDbwoZFGS4ZeUhAITySP/Ubka1j:t6vKCVUPXPE
- TLSH T1A703788E0F683741C8A05175ECD52BE22DBEB43E97E379A21E0C50FAEF4643594159F1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.foreignbrowser.nightly/databases/LibGlobalFetchLib.db-wal
- Size 16KB
- SHA256 533fa0ee6e4a25f23f6a7026b83d2e94d1d30bc65b35ce8a7a981fc4f32c82c4
- MD5 cb93618043284e99979ff956067fb4f4
- SHA1 8ed68fe5c764fb667784ccbbf1c11c8c24cbb1f3
- SHA512 96217d521b5f79dac4dfd4e8e26d56a7467562dfc3091677a8375edd28432def148f97dd858707f5737cba86dc9514ba5c94fdafd7bb3ac7d1e475c3a17dfb9f
- SSDEEP 6:KgwRCfG5l9FZde/kPlOERX4PBX4ogLugMBX4suuK+/9PWIlsv7tPzXEiOw2:KgDyTzdeWRmBEyPbP/VWbJPzXVOw2
- TLSH T13272C25063C92E83C418337AB08AF79C1D90766CD272CB4B5E531421AE017EC9450DD8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.foreignbrowser.nightly/databases/history.db
- Size 76KB
- SHA256 dbb521292c4d1921bcbb10851128905c2dbadd2150637f7c7c050ba8f906cada
- MD5 9841687a683b7e5fa3d551e3df00ad5f
- SHA1 9ac2af555b44e03f10af2024c6942ac70317412e
- SHA512 a8cd620878b7f1e1af87fc2bd99466ed42f0f92e38b5799a36abdbd4b33e926c46c70967df5aca0fa81452704af36db16e9f959e0432675e7d91e33035f038b7
- SSDEEP 96:ut/7JGAP+ycIxujeTfrhJQm94Swf3Zt7tkhzkptHT1UkuLyYVH+GWrpVjRG:6+yJCefhJF4SwvZt7utoTKkGOdhR
- TLSH T1C17361CF1D646861F7F008F2EA549846FC37815EAF037281B4EC20FFEB56A61593086A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.foreignbrowser.nightly/databases/history.db-journal
- Size 8KB
- SHA256 da89af60af6e3b3b793eea28571b4f94b7cd86e9b851b5ccafe31f89b225046a
- MD5 f84f04b8165934ad6560a3da2464f79c
- SHA1 df7a03f9c6ea8850a719478901f469715db42658
- SHA512 5cbbce9eed62c771fb53327b128b240800b3ba2971dea54c957264aac09d690c831e2fbf7b910dc3c8f1618084e084cf135c5826c2c5a34a22e761f1440483c6
- SSDEEP 6:7+/l9zOPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK41lU/7:7+tUqLJdeWRmBEyPbY7
- TLSH T18402C0887B800803C02D1777A4CCC3542E10A738B333CB0B16D108543C077CCE890D60
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.foreignbrowser.nightly/databases/history.db-journal
- Size 12KB
- SHA256 7c70965377003a0c0c7d40e2ee1cdad51017398a4125475f6db4ff1987d81e4f
- MD5 e248f09c6017e8dbf39ede4e010016b3
- SHA1 9cbf8b24b4f58fbe469a877c3b863ca9fba1ca3e
- SHA512 fa763beb3d93cd6a5940adceb79550aef5fe64effe7e5bb974cc7a5980addc4a37b21c9db441ba1e7051c7dd61570629ebf73d71e6cc41647bc9b6dc94698506
- SSDEEP 96:7CNt/7JGAP+ycIxujeTfrhJQm94Swf3Zt7tkhzkP:7Cz+yJCefhJF4SwvZt7utu
- TLSH T10242DDCF2A697622F1E804B1DCD10C62B879592F4F033B8079EC00F67B0E651E339569
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.foreignbrowser.nightly/databases/history.db-journal
- Size 16KB
- SHA256 418b3de1d0eb498313a8292ec1fd0b5dc4832c29388fc1ee0a103bad92ece954
- MD5 373c0b6a1431c8a526c766cd73eb0131
- SHA1 aee29e7f40101335405490af12080c1388804490
- SHA512 fba559e30afe64d76f6d638616750db2bfe22cc0f1037c4a123b7280328fb4f0ca7b98cb3c22e56da85373d0d7da79d6ec98810b03f87f8a4cb52cfe56e460e0
- SSDEEP 96:79dt/7JGAP+ycIxujeTfrhJQm94Swf3Zt7tkhzkc:79j+yJCefhJF4SwvZt7ut5
- TLSH T1E272CDCE6A687612F1E804B1ECD14CA27C79592E4F433A8079EC00F67B1F661E73956A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.foreignbrowser.nightly/databases/history.db-journal
- Size 512B
- SHA256 218523b287ee4ea962169643968689aa7227c015e8d91888ab157ff18242dbd4
- MD5 ebb0ea0f5230ac547cfc16ac9df5b3a6
- SHA1 4be1bb46458bb4f92b80d9c8eca23bf6f3462714
- SHA512 a34e646f7432aa55364dd38136eb84910d41ed4faefed798a122991e253e24e5c40683222b06f49b1bf138656cbae7f4c0be34f7490299a7a83b6f929f114335
- MD5 SHA1 SHA512
- Path /data/data/com.example.foreignbrowser.nightly/databases/history.db-journal
- Size 8KB
- SHA256 d26707fc1e3c0410d9882514194c3183a69115a5de084b401647129175f5598b
- MD5 099b727605634681f2fc7c6bbae16716
- SHA1 72dbb164db02a8aab6d0f89f47547d1843619fa2
- SHA512 7ccb189bd76991a7445443cedb7bf52c32d23b014ea4a56bdf9cb4604b01ae76e8c998c1d13109db4945c456ce7850fe5af9279a50228f6c82c0f79dc65786f2
- SSDEEP 6:7+/l9o88Fn1j/pg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKuln:7+tSxqLiuWdYRmBEyPbfl
- TLSH T1B702C08C73C00813D82D2AF7B0D483400D28EF288172CF1F1E9008D43E079CCE4A8D58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.foreignbrowser.nightly/files/adblock/list_-1025149380.txt
- Size 1.9MB
- SHA256 468203540ca74e4eb300a3a9a4d5ee3dc305ef9506950bbec35a3d94b653a075
- MD5 7e404b4503dc14a65f356459f4f26452
- SHA1 2bfa9ca907d2cd38f4c78c47d2a1ae24f2779eac
- SHA512 9060f20c488e7379e0b2b9e0beb2c41135818cfd3da542c86ce68c6ee8c3e3f60b42b18668ae04f5ea88477e6e7c94055397aa3b6ade083a5900d153d33d5f43
- SSDEEP 49152:rBLuRVNruLSaOwfBrVPwElv01ag7QPAN7ZGQas+QWS:rTKZ
- TLSH T1C895F8379F152A3D50F5025D14EAEB09C73117F89253FCEBAAE74209E24568A22B31FD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.foreignbrowser.nightly/files/adblock/list_1734146595.txt
- Size 540KB
- SHA256 0002d682896988bba827485e0d1695af5c8a096cc62449eb1b55b8399f8cb08e
- MD5 9a9aa13f96520911a742dbeb68ab8935
- SHA1 302e991623a9b473d0bdfb27ea147b0b76942b62
- SHA512 e042e210ebf9b1671185c24fc725c4c42f52017490557642f66e33b11ce48e970bb91063d0381db705409797f94e5904a68165d230ed79af0455e592719df69a
- SSDEEP 12288:uYgZjJlW+bwFF79t5Q2C8LStHoN+ZHKp6KW5ZYz6gBXSW/xCMc7:vgZjJlW+EFRBCXdoN+ZHKp6KW52z6gBI
- TLSH T1C1C4E4120F1014AA18F2095934FEF549D6306BF24643FCCBAE6B0B68DE6569B35B71BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.example.foreignbrowser.nightly/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 184760a76d100bc76cbbe438a9f53ffb71b467492ffab23575390386f4b9aaa1
- MD5 19e2417f0a6b436b67ab048ef7a7861a
- SHA1 086446cda057d53fb4865a81170e21fc3f4ea07d
- SHA512 9af82713b053113dca116f3ee262edcc5d7b932baa6895bcee0be8a95ab9bf20ee4b8d78adccfe134beeb0bf7afa582ce12ae43760be270e53bc53c21c53a4fc
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.example.foreignbrowser.nightly/primary.prof
- Size 7KB
- SHA256 68b58498640c1a13b9724ff1b4862f355e336bb1d2b67515eb56bd29b2430847
- MD5 59d0a3447fbc93051b23c73b7feca7ff
- SHA1 e182660f133effc0b84decdb72a7f231039e855e
- SHA512 9e2ea9fbd5d895cb679ac2c3e867bf6a9c6533d70800350d10ede0781b198cbac7ba09237d02de531b6b3b0c9f30e4c15f048de8003d0c6ad1faa88b60a99034
- SSDEEP 192:O78/vsv9u/hTlRHixAqnKC+BJY3DPEOnBsnPcFsrV:zkv98h5QR5milnBsPEsJ
- TLSH T1B1F1AE982487CCDC388E002069774AF34C4DB42869AD4C42B8A1C456B99BEEB754F1EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 12KB
- SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
- MD5 bdf3529e80318eb14e53a5bf3720c10d
- SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
- SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
- SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
- TLSH T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
- MD5 SHA1 SHA512 SSDEEP TLSH