8910f907e11539a2320c40186ed16f8e45c208fda60f987b1329f37e365fc01d

Resubmissions

13/08/2026, 18:31

260813-w52tnsvybz8

13/08/2026, 15:01

260813-sebb9abl418

Analysis

max time kernel
45s
max time network
153s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
13/08/2026, 15:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
GRABADOR .apk
Size 4.7MB
Sample260813-sebb9abl41
SHA256 8910f907e11539a2320c40186ed16f8e45c208fda60f987b1329f37e365fc01d
MD5 86f8c116489a523d7eba9acf6da7f090
SHA1 3eb98e42f3ff318bcecafa91a4c00337cdf25710
SHA512 d5663df1d7bbeab2c7c8a959af6df40b2c863f8a181bee745300c5acba7dbd26a49ff05f60444a8592eb579b4d25c236306e2794c6b47e11b680924530d0620a
SSDEEP 98304:B4LlWO1xg+M6pP5kDsgxjHaMNQhbalFc2WECfrWEMtmZ:B4ngL6pP5oxjH2RalK2SMy
TLSH
T1A436CE86F768DF2AC87380374DEA6632155A4CA79E82D7923905734C38B79F44B49BCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.kimcy929.screenrecorder
/system/xbin/su	com.kimcy929.screenrecorder

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.kimcy929.screenrecorder

Checks the presence of a debugger
defense_evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.kimcy929.screenrecorder

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.kimcy929.screenrecorder

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.kimcy929.screenrecorder

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.kimcy929.screenrecorder

com.kimcy929.screenrecorder
1⤵
- Checks if the Android device is rooted.
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4260

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

1582435991586.jar

Path /data/data/com.kimcy929.screenrecorder/cache/1582435991586.jar
Size 9KB
SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
MD5 e8e0527a01aefdb89afd2c508f131da1
SHA1 f1103e6b260c657ceb3d95f1b023af3fda8b133a
SHA512 fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34
SSDEEP 192:uGJqbQwgQYuNUnEV4bAa0s/ombgmdxjX5fGpTVHb3qX:LkMwTTNdlns/ombJB
TLSH
T1C412AEB4BF77093CD0DB0DB8CA67E800A05F25841AA7D514E0656066BFD47B5F1E315A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events

Path /data/data/com.kimcy929.screenrecorder/databases/com.google.android.datatransport.events
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.kimcy929.screenrecorder/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 393a41660517961c2f125b5a23d94bf5862a5c73ea2393e397868edc86071de4
MD5 81016e3d6ee7d887b42a67a9a5fd14ef
SHA1 f63624f09d42d90a50993fe9aea4702322357432
SHA512 f4afcc7eabcddac187a453b829d7504fc1151fc5813875d5a04e021fe7ff38d3fdcd23231f8db33b178f6fab7c1dd879238d2ab2b358a42259fc62de70bf451d
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-shm

Path /data/data/com.kimcy929.screenrecorder/databases/com.google.android.datatransport.events-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-wal

Path /data/data/com.kimcy929.screenrecorder/databases/com.google.android.datatransport.events-wal
Size 52KB
SHA256 67da77fa2fad76628f3c4a216a203f49919c001431cd26d51e7bb2a07087b1f1
MD5 7f591c6848ddd77155d71aad958520d7
SHA1 9d0289f4afe84514d762824175ec82feb7de5b13
SHA512 530a496103e568ab86c53f293f7e69801ecbfbc4b814a3f99470aa75df19bc4eccbed7afeaa7964c65a57b761b80b9ade4efcb82b4b93a62aa5dc3f74b8ebfd6
SSDEEP 48:XEuzNSP/CwI+t3u59MENZBdUdndVd/7T9IvdldHlq8/JqYpqPSP/eZTN:t0Pdt3KMEX0xIyNYMaPmZp
TLSH
T14233BD6C9B102712C37E083AE7E257831B3C935F572397663A600CF6DDC56A9F461A9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.kimcy929.screenrecorder/databases/google_app_measurement_local.db
Size 16KB
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
SSDEEP 6:l9FCls1ulO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TgEu9zmzrfRmBEyPbBvOwk3
TLSH
T16772C2CE9F102647C6660377B4CAE3916DA4A12D872BEB472BA50464AE42609A861F98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.kimcy929.screenrecorder/databases/google_app_measurement_local.db
Size 16KB
SHA256 f0a1cd713690265c3d31883c04f1b3b7b0c1f51bbea604ef713c96dd04818d65
MD5 cc62f8bbad4b891e6e635dc458d7ed18
SHA1 bd93725d7d8163b19d180146566592db2c38a595
SHA512 7d0f7882ae9849ed967114195e8ec9fc4f37e753e7c4eea49fcff5f383e4b6df59f2242ba2b4759ed940fdd2613e163bcdc9a6dbdabc88d87b816937c6d38fa7
SSDEEP 3:qqb/NjghzY+/lzyliMlTXm25XNnqfzMlklKllgIn:LCM+/lulvl62pNqfQlrf
TLSH
T10B7292A53181C702E127823992878BF31430A2813A22811B784923085C812C02A5A21B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.kimcy929.screenrecorder/databases/google_app_measurement_local.db
Size 16KB
SHA256 61d00e33c7325a41d2bc0e7375057ee16938732290b6ca3d9c6b805faaf8063b
MD5 d96fa3084e5149118cd0d0f19e7e6dd6
SHA1 bb609fcc380aa4049fe8e7edff48570ab71d5bc8
SHA512 131e531231c9ae08776155e18952b7427b3d974c447dab6a39c1300610c31178a4e17919613494d64f198aec11473ad79ed0b2cf2b174f309a085dc0409b2ce3
SSDEEP 6:rLP/gEhV71m/9blDqlrElvldQlr29AhCM+/lulvl62pNqfQlrf:rr/gW49blqYFl2D+/0Fl6SNqo7
TLSH
T12C725EA53164C702F6274B3CD2C7DAD2203971522B23C116784A7B0C18863C15969707
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.kimcy929.screenrecorder/databases/google_app_measurement_local.db
Size 16KB
SHA256 09ea5bd20710ffee653dc39fc43e1bdf7d2cc53cf5778ec427e76c5b4d362cd9
MD5 e5828d5c543286440a51f698d771ef70
SHA1 b5284c5517b3e6aa61da9fff183b3c0921de1eae
SHA512 331aa8829095ed0a24503795b906fbdfe4863ce486d344c06c46567e2518aad29bf542a242929344778f6f16797d17abfc7d8414d573b61f0da4331abbd87938
SSDEEP 12:fOLabCAUEWlCuUyWlIYIf49blqYFl2D+/0Fl6SNqo7:fKabCCbiJf499FelFVqM
TLSH
T161726DA571A9C712F2B74A3C83D7DED2303971A31B23D2177C4A7B0D69423928975707
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.kimcy929.screenrecorder/databases/google_app_measurement_local.db
Size 16KB
SHA256 7aef2a4166f9ff28b01f2b344646bc22051b368d056322fbd67a39566669f1af
MD5 ae401284d4b188860374e11d4ca22300
SHA1 fd6befe4e81319dad4fa716db0d25365c710d196
SHA512 0ac36aba54669c261d3551137eacaab1f194e309d461aa23c37d5011e745bbc8726a3d5ba076b816a97ef205f858259ee46ea96582ac9b1d1b4e3a46afa86a1d
SSDEEP 12:oOLabCAUEWlCuUyWlIYIf49blqYFl2D+/0Fl6SNqov:oKabCCbiJf499FelFVq0
TLSH
T1DC726DA571B9CB12F2B74A3C83D3DEC2303A71A31B23D2177C4A7B0D69423928975702
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.kimcy929.screenrecorder/databases/google_app_measurement_local.db
Size 16KB
SHA256 5832643f8f75423493769eead8c6d2d4392927d880a1be4d5c44fe00e26ed3a1
MD5 f87f9d3476840a4eba9244039008a22a
SHA1 78210744e2c002ff39f6e0a206f07cf7301c8264
SHA512 c7b446ef0601b05eabeaf0c1e65210ad3394dea627780a30e144ea6a539ab06f6d912cc27c01ba417b3c419dbed1b8b5cd379776e450bfba546cfa62e15478e7
SSDEEP 3:o1frz5ElllG:oDzWe
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.kimcy929.screenrecorder/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 92cbe505abe95224600561c2277ebc968e2cdc431bbc3f02cc7ac8328cb4cfb3
MD5 3c44444dbd54f333ee5e22031defbe69
SHA1 83113c29832ae2d78b166df2263b6dd912b7b258
SHA512 e1e28c1f1ec062784eb6a76e53e0a3669b71ea707dd18ee85203e16f8e3c6f87a41f00e093bdb9da339d99880037bb5064925f2d5fd5ad7a18a790bd6862fe8d
MD5 SHA1 SHA512

Submit Download