419b4ad8016140763fa85d48f5cfc86cee54484fcef6142fddb949c693590e6d

Analysis

max time kernel
1s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
13/08/2026, 03:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
419b4ad8016140763fa85d48f5cfc86cee54484fcef6142fddb949c693590e6d.apk
Size 7.3MB
Sample260813-dpeebsgd97
SHA256 419b4ad8016140763fa85d48f5cfc86cee54484fcef6142fddb949c693590e6d
MD5 3c35a26da2a5381674c23520dc9b0b10
SHA1 1cf74b0aecb52cdb478353a3c69f60b019c3cc35
SHA512 d6bb0c6913fb640e49e3ed498127bb8ccc6925205dc60193c8f7d908d65b40ebc8731985e452fd3652ad5d5b9310807b9752f3b9cfc49d82b9271027f4096744
SSDEEP 196608:BdiBkJ2ZpWnG52xQsneTe1dOLnLIEfzGN:BdcUxG52qSOnLUsza
TLSH
T1B5760147F358B92FC4F7C3320A7A163621874D2687439B876E68723C28B76D44E5ABD4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4721	com.scrolling.bannerLED
/system_ext/framework/androidx.window.sidecar.jar	4721	com.scrolling.bannerLED

com.scrolling.bannerLED
1⤵
- Loads dropped Dex/Jar
PID:4721

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

androidx.work.workdb

Path /data/data/com.scrolling.bannerLED/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
TLSH
T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.scrolling.bannerLED/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 00c07ac0e562913ae0142047a124916a1ccec9053a317301958378f815e8b3f4
MD5 c0572e12a6575749cb93984c9eb9b672
SHA1 77acfa6745acf3986f971befd04e4aa8cc12a828
SHA512 24398333ae90a17fba34e7c9f6cd509dd7ad8ac42076399e535cae612a5ad8b4ee7ca2543ffd330f2e7cdb9004028edae265ecce3545a96800ef6758fdce6cc8
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-wal

Path /data/data/com.scrolling.bannerLED/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 57eaa7427f46b2165bc5c7f3f1d99b06ab9782b296892703e966542b7c6e1fea
MD5 1935d974cd94d7437a22678f726d4c23
SHA1 9b7941bb049bd8117ded1ddb84e20fc277969d87
SHA512 0fc156d75b6f60444bc9c1687cf595c3dea815df879d2f00a4cbd1ae54e74b026b3d57a063c317827179713d27333b687ea5344bfaab3c2c4910d2c141425b56
SSDEEP 6:KaZQv26v9FZde/kPlOERX4PBX4ogLugMBX4suuK+/07x51srdlWtiOw2:KSKlzdeWRmBEyPbP/07mrbOw2
TLSH
T18772C2AAB3886E52C11D13326484D3CD8DB8A62937E2C707166214136E026C8A461F4D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.window.sidecar.jar

Path /system_ext/framework/androidx.window.sidecar.jar
Size 12KB
SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
MD5 bdf3529e80318eb14e53a5bf3720c10d
SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
TLSH
T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads