5dbf56c7eb444b3dc68d5b2afa65020c6f3599a71dc128a3a518a306267cc910 | Triage™

Resubmissions

10/08/2026, 12:30

260810-ppsshatxay10

09/08/2026, 20:51

260809-znkevacd8810

Analysis

max time kernel
1s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
10/08/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
گالری.apk
Size 8.2MB
Sample260810-ppsshatxay
SHA256 5dbf56c7eb444b3dc68d5b2afa65020c6f3599a71dc128a3a518a306267cc910
MD5 b1ae0b36fed08299868ea02469147e77
SHA1 d133876c284ad3bf3e9531c1f64a3d3a4442611a
SHA512 ff5e01bd8f56546c4ba2d709dbcd5cb09569a61315f4416e1b9b17f07a15bdc3c2e8cf5158658531fa8b5afbde0e8812db697948ffc467bd5e5708edc6be88a8
SSDEEP 196608:ARCWfAnRc418UJ4PSCeNHvlIYPgUNLUepLsJVdKUDC/:kBfwCe4bMvlLPBvV+VdKU2/
TLSH
T152863346FB971999C8E2833041B94B3932375C68D31B938B6374B2F62CB7ADC9B461D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.elgfus.app

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.elgfus.app

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.elgfus.app
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4829

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 1a2d5dd0f486021b5c66fc075ab93fe45ad860cad1a2bd41b42cbba01b9539aa
MD5 a71ec173b86c77e2ef0fb606ade74935
SHA1 5afdd53524c1f0c8e68a936898fdd25896aaee9e
SHA512 2efb7f7a0c91e5874bb701f23cabe48f367ba35922b8e13cfd0e68db3fcf44534035718510a9c88e7e60369a13092f189e2d79e9c597268a50480da97fc745aa
SSDEEP 6:l9bNFlqls12tFP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0DqiOw:TLwEw7LzmzsRmBEyPbBvOw
TLSH
T1657220CD8F106216C167033B7486D3950F68551E43B7964727A404705E53198B051F58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 0641bab55cf2080b29cef346912021c3e40ba349881f144f846459f804bbd128
MD5 f7135c502e170183a636d1c3065f2725
SHA1 56a861516194deaf4f0a81c20611b64cefe96117
SHA512 1d4cfcca54c39623c235914817f9de7e16864f6bd9064c3a4c8b8457c92a8c1ca76db71a485ae62f9b8dea6e8d3cdf5395de7e214a33b0b64858b7b14333ed40
SSDEEP 6:7+/lxg9bNFluls1EnlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKsr1Kn:7+txqL8EA9zmzrfRmBEyPbu
TLSH
T11891EB8C8F103A03C13B0B33B0CF83801C28A22CC337AD032BD80830ED430889091F90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 4d7c9193d47cf22e748b65dd6edb8653ac210e335511b62058b4a29c53597df7
MD5 e5080dbef4dd74c3e1babe139a333f80
SHA1 955737320ad7ebe86bdcb6bf535f84f86a0a5605
SHA512 de13b9462da5d3c90e2fba723434745fa855473e385ca67e75114063ac6ab2d51ef58aa44bc9eaffa668357b0af99fba337a72b22a4019f3133e8ca5b589b23b
SSDEEP 6:7+/lf8g9bNFl4/Tls1mG+EpFyAgLusi2JLnGLNcERX4PBX4ogLugMBX4suuKX:7+tf8qLWBEmmzmzmRmBEyPbk
TLSH
T18591CD8DCF206657C16B1777B4C653915D14522E8377DE4717990460AD425D8A091F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 42ab60f3ceed03b961f9e377fa1e346bf64a5047f17158c43290e10cf370a4e7
MD5 1a664a43e6a5b7b64e90b35d9a9f2f1d
SHA1 bc363c9ccc42f3e9a8606f67eb0e0f5142eb7240
SHA512 c06796f46ddcfe00b27eb978c46d82c1f69fae5ea6557ec6dee8cbf57433dd2b8cf4d7ef08128e94fbc4cb5c608fd5ccb43d63dd99e0e46116c7dd6378ee84b2
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 6f596ebb61abe22c7bfb4f1c02cf4a2f031d11c1fd03025da3f389f9abd1e64c
MD5 9aea326aa0e62ef73898461ccebb44ec
SHA1 f48339b94e06fd3ab1fd02a27d50dbeece4055db
SHA512 520a6119e0b0041793267ebc1df1eb59d8b5149a12004766ae3711a4eb5a90caea8c6db33a017cd34f5cc022f12d568a19ac33dfe1c08c7f4d361bd14d7f5ee0
SSDEEP 6:7+/l964n1Wg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKKm:7+tEqLiuWdYRmBEyPbpm
TLSH
T14E02228CA3810812C82D167BA0E883400F10EB298161CB171E9008943C4B5CDECF2D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 a510c748d98092079bc93e5c4a027c8559a99d38ddd4fd601f4ecb0a5422e56d
MD5 f78eb2abaef6844c5a204383808d2d45
SHA1 446332b556da081739cb181091b5b2c5a559c3f1
SHA512 3fea70f7c91c033cd20797757cf1250cb954c6a907efb3907fa4c30c15fd7b6c9c66303d01f06d53e767abf77c023c0375308b9321e780766463707ff86b20d9
SSDEEP 6:7+/lZPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKe:7+tFqLJdeWRmBEyPbp
TLSH
T12F91808967411913C5295BF7A0D583541D147729E373CB5B16990C547C477CCFCD0D44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 f385bb30f9244ba32d0953101b076dacbdcb45d642b300e33e5c778930c9f338
MD5 405091aa831b0f44b59fd0d50a31e95e
SHA1 654203409f797c64b047d2cad808a5b5c0eacf19
SHA512 63db6d4afe55987ae023eb3ebb5007b261a40861082d63206d16db179f5832fc0295409db1a76cbe93605d5a7cac902819beb31364f4a9cffc79d1e02cc1da22
SSDEEP 6:7+/l970uHPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKgp/Y:7+tZ/vqLmqKRmBEyPbbY
TLSH
T19702C0C873C00D03C02E57B790C883402E10E324C2B2CB0B1AE108E47C074CCECD0D50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation985970301196777996tmp

Path /data/data/com.elgfus.app/files/PersistedInstallation985970301196777996tmp
Size 90B
SHA256 513b62b2e93dbc3bc08542e88de450d003f2276af26dd45cbbebac6e3c8b80d8
MD5 72af499505a8d85997e940c9d36f2760
SHA1 540329b713f6ba6d37cf201a4a6584839a5a8770
SHA512 d5f56b125271a026f395cbdf76064449bca674730be86a02d0f123d2ece4cfa80823142d7427da83c46c6d4982f2f335906ff27dfa635024aca2f8cfb27353f5
TLSH
T1F1B012C08E31C2C284F6A3431C4E91041D6134802949CA441F09989000C31D0D2839D4
MD5 SHA1 SHA512 TLSH

Submit Download