Overview

overview

7

Static

static

6

BubbleUPnP...M).apk

android-13-x64

7

Analysis

  • max time kernel
    6s
  • max time network
    154s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-es
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-eslocale:es-esos:android-13-x64system
  • submitted
    11/08/2026, 04:30

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    BubbleUPnP v4.6.5.1 (PREMIUM).apk
  • Size 31.3MB
  • Sample260811-e469bswbma
  • SHA256 e516ce47e9ea08cec550663a8a1505cf2a09d60e5bf8320fe781fc9d20d17969
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
bankerdefense_evasiondiscoveryevasionimpactpersistence

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
    bankerdiscovery
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.bubblesoft.android.bubbleupnp
    1⤵
    • Loads dropped Dex/Jar
    • Makes use of the framework's foreground persistence service
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4199

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        PersistedInstallation4103094502536516971tmp
        • Path /data/data/com.bubblesoft.android.bubbleupnp/files/PersistedInstallation4103094502536516971tmp
        • Size 559B
        • SHA256 5b9733e840337a025aeb843e7840dca135c656bb1aefb08f57bb654b45ec667f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation7874138406677829884tmp
        • Path /data/data/com.bubblesoft.android.bubbleupnp/files/PersistedInstallation7874138406677829884tmp
        • Size 90B
        • SHA256 6c79e47a94f530f3cb62665ea8a937090cf4c0c85da8cb6339979063e6525f00
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo3MzEwMjMwOTA3OTphbmRyb2lkOjUwZWU4NjA0Y2M3OTNjYTE.preferences_pb.tmp
        • Path /data/data/com.bubblesoft.android.bubbleupnp/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo3MzEwMjMwOTA3OTphbmRyb2lkOjUwZWU4NjA0Y2M3OTNjYTE.preferences_pb.tmp
        • Size 313B
        • SHA256 d56a4d8ca09dd5a389fbf58e558d6696c19679af54a1795a6697b23b12d0bafe
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTo3MzEwMjMwOTA3OTphbmRyb2lkOjUwZWU4NjA0Y2M3OTNjYTE.preferences_pb.tmp
        • Path /data/data/com.bubblesoft.android.bubbleupnp/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo3MzEwMjMwOTA3OTphbmRyb2lkOjUwZWU4NjA0Y2M3OTNjYTE.preferences_pb.tmp
        • Size 337B
        • SHA256 6c260f10b8ce3bca5cbb4892958064eee62c1d752df27190e9f636904d9749ef
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:73102309079:android:50ee8604cc793ca1_firebase_defaults.json
        • Path /data/data/com.bubblesoft.android.bubbleupnp/files/frc_1:73102309079:android:50ee8604cc793ca1_firebase_defaults.json
        • Size 1KB
        • SHA256 10697352c557e03a824b28a23f4f8caa26617ac919ebc6cf5379b67c18eedb85
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.bubblesoft.android.bubbleupnp/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.bubblesoft.android.bubbleupnp/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 cf1a58448e9d8c2608b224e241e05ceb21519f89db41750d75b7556a09e3d245
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.bubblesoft.android.bubbleupnp/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.bubblesoft.android.bubbleupnp/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 721f52c226957b7d281ef66022dfc248a56d3aa7dbb2178ce38df92e315a720e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.bubblesoft.android.bubbleupnp/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 05d1d30913d29ff52f289d46ee5901229bb07621f41ac012becc3d141d95f68f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.window.extensions.jar
        • Path /system_ext/framework/androidx.window.extensions.jar
        • Size 123KB
        • SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 25KB
        • SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download