Overview

overview

8

Static

static

6

APKCube.url

android-9-x86

APKCube.url

android-10-x64

APKCube.url

android-11-x64

base.apk

android-9-x86

8

base.apk

android-10-x64

8

base.apk

android-11-x64

8

split_conf...8a.jar

android-9-x86

split_conf...8a.jar

android-10-x64

split_conf...8a.jar

android-11-x64

split_config.hdpi.jar

android-9-x86

split_config.hdpi.jar

android-10-x64

split_config.hdpi.jar

android-11-x64

split_config.ldpi.jar

android-9-x86

split_config.ldpi.jar

android-10-x64

split_config.ldpi.jar

android-11-x64

split_config.mdpi.jar

android-9-x86

split_config.mdpi.jar

android-10-x64

split_config.mdpi.jar

android-11-x64

split_conf...pi.jar

android-9-x86

split_conf...pi.jar

android-10-x64

split_conf...pi.jar

android-11-x64

split_conf...pi.jar

android-9-x86

split_conf...pi.jar

android-10-x64

split_conf...pi.jar

android-11-x64

split_conf...pi.jar

android-9-x86

split_conf...pi.jar

android-10-x64

split_conf...pi.jar

android-11-x64

split_conf...pi.jar

android-9-x86

split_conf...pi.jar

android-10-x64

split_conf...pi.jar

android-11-x64

Analysis

  • max time kernel
    604s
  • max time network
    804s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    14/08/2026, 23:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    base.apk
  • Size 48.0MB
  • Sample260814-3cte6atepg
  • SHA256 e86f4c8752be0aa54b79fd974b76e005e1a17815cdbdcd3653a148ab8a437d6f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    defense_evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • voicechanger.voiceeffects.soundeffects.voiceavatar
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:4789
    • getprop debug.dtid_result
      2⤵
        PID:5039

    Network

          MITRE ATT&CK Mobile v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          1785301552478.jar
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/app_yqzdkcache/rbp/1785301552478.jar
          • Size 19KB
          • SHA256 ed4d4cae0133a3dad1cdbd08010ac1d3cd946d67d100ceb3ff9871373bd487af
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          1785301552478.jar.cur.prof
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/app_yqzdkcache/rbp/oat/1785301552478.jar.cur.prof
          • Size 70B
          • SHA256 6cbcd695f08d5fff65bb3cf899d3a66b84a389a0883a88848be4ce1b5d86c320
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          com.google.android.datatransport.events
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/com.google.android.datatransport.events
          • Size 72KB
          • SHA256 fa15db8d0eb2f748df1461c7fdec180a36b9628ac8f153a7b77195ad106e9591
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          com.google.android.datatransport.events-journal
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/com.google.android.datatransport.events-journal
          • Size 8KB
          • SHA256 cb70f25cea35f7ef94e9362438f8522a7d2b7fa0c64d7d09e454ab24080b4513
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          com.google.android.datatransport.events-journal
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/com.google.android.datatransport.events-journal
          • Size 24KB
          • SHA256 96f2c0c3beca2a23d7902158ebef5ed674c5e6fa7464e39811c14a18e7be9953
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          com.google.android.datatransport.events-journal
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/com.google.android.datatransport.events-journal
          • Size 16KB
          • SHA256 e39243ac91f23bc282940554b86cd58924063a27cd42f0d2a299fbf0c22d2d6f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          com.google.android.datatransport.events-journal
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/com.google.android.datatransport.events-journal
          • Size 20KB
          • SHA256 7d30280122ef14de6fa57ce5aa9b16425833262edd5bfef5631ea67acddfd68c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          com.google.android.datatransport.events-journal
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/com.google.android.datatransport.events-journal
          • Size 512B
          • SHA256 813237d1cfe7a497432375aff07d287c94abc2cf02805568a9ab36c6b1178f93
          • MD5 SHA1 SHA512
          Submit Download

          com.google.android.datatransport.events-journal
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/com.google.android.datatransport.events-journal
          • Size 8KB
          • SHA256 ce2ccccefe58eb74e51623ce8bd569b684f5eb7b419ad6da034b8f2da484f3ea
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          google_app_measurement_local.db
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/google_app_measurement_local.db
          • Size 16KB
          • SHA256 fecda2e650a2cbb3652d60ee1843b2e8fa9858bab765aee964b59b80a73d5c97
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          google_app_measurement_local.db
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/google_app_measurement_local.db
          • Size 16KB
          • SHA256 a5ce4a5cbe75d76717fb042b500bd3f300b0b30e9a7cc0c690233c1f6210062c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          google_app_measurement_local.db
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/google_app_measurement_local.db
          • Size 16KB
          • SHA256 9f5cba5d4d202fbb5f78d2900c4d266eaaf7f2e4e6daec5ee084caa970d66fd1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          google_app_measurement_local.db
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/google_app_measurement_local.db
          • Size 16KB
          • SHA256 17c90ccbc6756b8276ce4015a49aa22a485834f88b3a6de8afc75cacda20ab2b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          google_app_measurement_local.db
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/google_app_measurement_local.db
          • Size 16KB
          • SHA256 aba37009399e4071779be5b4397068d0062a783a0f8b38d98b8f2dded1951591
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          google_app_measurement_local.db
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/google_app_measurement_local.db
          • Size 16KB
          • SHA256 0d3962c3f3cd84feb6786b660491b43cc53b860035bbc5970844f445f48967d8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          google_app_measurement_local.db-journal
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/google_app_measurement_local.db-journal
          • Size 512B
          • SHA256 35e03634f5e2c775aad4f3986ccf6ec5866de717fdeea86704eee534061327e3
          • MD5 SHA1 SHA512
          Submit Download

          google_app_measurement_local.db-journal
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/google_app_measurement_local.db-journal
          • Size 8KB
          • SHA256 40e9ad9328e7e8065dabd041761d16ddb549cd99437d88ae112d0672f86ed4cf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          google_app_measurement_local.db-journal
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/google_app_measurement_local.db-journal
          • Size 4KB
          • SHA256 228c4da8575675e07521af065d9a4440ba5b2ab12cc35513190e06ac02eaaebf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          google_app_measurement_local.db-journal
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/google_app_measurement_local.db-journal
          • Size 8KB
          • SHA256 7cff09c6f48591ee86b0ac4b524b5395f382b73423603a19d85253897c1fc1c4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          google_app_measurement_local.db-journal
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/google_app_measurement_local.db-journal
          • Size 4KB
          • SHA256 c9d47d018d325faf8c2e951de971666dcd88c79af29d78ac3aa86284b37638fa
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          google_app_measurement_local.db-journal
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/databases/google_app_measurement_local.db-journal
          • Size 8KB
          • SHA256 aa58c53979ffed634f75a466f83c5632c283ac2700993812a5577ee1169b6cdc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          com.crashlytics.settings.json
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/files/.crashlytics.v3/7e1ced77f03d8084c17fdc34b5d9cdfe4b02e8a5/com.crashlytics.settings.json
          • Size 799B
          • SHA256 dfa1aec28857cca609dfacb6563ef7b23ffe6ffba7c2ddfac3c850fc49558ac1
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          internal-keys
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/files/.crashlytics.v3/7e1ced77f03d8084c17fdc34b5d9cdfe4b02e8a5/open-sessions/6A7FA3AA0094000112B57E50B0700D66/internal-keys
          • Size 207B
          • SHA256 4db42285eaa3696a27c8769850cad741bd168770b9a60b36d9195a7416046a7d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          report
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/files/.crashlytics.v3/7e1ced77f03d8084c17fdc34b5d9cdfe4b02e8a5/open-sessions/6A7FA3AA0094000112B57E50B0700D66/report
          • Size 850B
          • SHA256 bc35f2cdfb1b8bdfcf9682e3a361a1bdec6dc76e757b4d57bdbdb0eb7179c730
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          userlog
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/files/.crashlytics.v3/7e1ced77f03d8084c17fdc34b5d9cdfe4b02e8a5/open-sessions/6A7FA3AA0094000112B57E50B0700D66/userlog
          • Size 918B
          • SHA256 3c8f6e5032dfd8b811ab91712505f9e299634d9efa53a60cd5fc755dfe6b394f
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          userlog.tmp
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/files/.crashlytics.v3/7e1ced77f03d8084c17fdc34b5d9cdfe4b02e8a5/open-sessions/6A7FA3AA0094000112B57E50B0700D66/userlog.tmp
          • Size 16B
          • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
          • MD5 SHA1 SHA512
          Submit Download

          PersistedInstallation5772387648301447009tmp
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/files/PersistedInstallation5772387648301447009tmp
          • Size 570B
          • SHA256 9f1525ab40250fc99c2adc8428f33738ab625c733611a7b69c47f93435c8d92f
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          PersistedInstallation8836093671153006077tmp
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/files/PersistedInstallation8836093671153006077tmp
          • Size 90B
          • SHA256 75de3e8319d6c9eab02dffbaf7511ef58e7dbb0949bfa7bc6faccc08a10d20d7
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          firebase_session_dm9pY2VjaGFuZ2VyLnZvaWNlZWZmZWN0cy5zb3VuZGVmZmVjdHMudm9pY2VhdmF0YXI=_settings.preferences_pb.tmp
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/files/datastore/firebase_session_dm9pY2VjaGFuZ2VyLnZvaWNlZWZmZWN0cy5zb3VuZGVmZmVjdHMudm9pY2VhdmF0YXI=_settings.preferences_pb.tmp
          • Size 33B
          • SHA256 a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6
          • MD5 SHA1 SHA512
          Submit Download

          firebase_session_dm9pY2VjaGFuZ2VyLnZvaWNlZWZmZWN0cy5zb3VuZGVmZmVjdHMudm9pY2VhdmF0YXI=_settings.preferences_pb.tmp
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/files/datastore/firebase_session_dm9pY2VjaGFuZ2VyLnZvaWNlZWZmZWN0cy5zb3VuZGVmZmVjdHMudm9pY2VhdmF0YXI=_settings.preferences_pb.tmp
          • Size 75B
          • SHA256 1e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          firebase_session_dm9pY2VjaGFuZ2VyLnZvaWNlZWZmZWN0cy5zb3VuZGVmZmVjdHMudm9pY2VhdmF0YXI=_settings.preferences_pb.tmp
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/files/datastore/firebase_session_dm9pY2VjaGFuZ2VyLnZvaWNlZWZmZWN0cy5zb3VuZGVmZmVjdHMudm9pY2VhdmF0YXI=_settings.preferences_pb.tmp
          • Size 121B
          • SHA256 232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          firebase_session_dm9pY2VjaGFuZ2VyLnZvaWNlZWZmZWN0cy5zb3VuZGVmZmVjdHMudm9pY2VhdmF0YXI=_settings.preferences_pb.tmp
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/files/datastore/firebase_session_dm9pY2VjaGFuZ2VyLnZvaWNlZWZmZWN0cy5zb3VuZGVmZmVjdHMudm9pY2VhdmF0YXI=_settings.preferences_pb.tmp
          • Size 163B
          • SHA256 7495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          firebase_session_dm9pY2VjaGFuZ2VyLnZvaWNlZWZmZWN0cy5zb3VuZGVmZmVjdHMudm9pY2VhdmF0YXI=_settings.preferences_pb.tmp
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/files/datastore/firebase_session_dm9pY2VjaGFuZ2VyLnZvaWNlZWZmZWN0cy5zb3VuZGVmZmVjdHMudm9pY2VhdmF0YXI=_settings.preferences_pb.tmp
          • Size 212B
          • SHA256 1313454dcfc3ff9a74e2227967781364bc775655324dfd355fe29bdd7916bb46
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          google_mobile_ads_flags.pb.tmp
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/files/datastore/google_mobile_ads_flags.pb.tmp
          • Size 2B
          • SHA256 27c24fcb8474773e2af799d0848495ff053272d33c432dc26277993df45c9276
          • MD5 SHA1 SHA512
          Submit Download

          google_mobile_ads_flags.pb.tmp
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/files/datastore/google_mobile_ads_flags.pb.tmp
          • Size 180B
          • SHA256 fe0788bbd61cfd6c97d62f1bc63ce5a3cc7d88427b99c227869c8a48726bd614
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          google_mobile_ads_inspector_settings.pb.tmp
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/files/datastore/google_mobile_ads_inspector_settings.pb.tmp
          • Size 38B
          • SHA256 0a0af3593b9bb1f2e0952c890f80ed9452a87769ddbc840438a031f7a20b4058
          • MD5 SHA1 SHA512
          Submit Download

          google_mobile_ads_sdk_core.pb.tmp
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/files/datastore/google_mobile_ads_sdk_core.pb.tmp
          • Size 703KB
          • SHA256 a536798355653ea4484fa2565c72d9cbcf148486b64f50019843eaea5ee4396b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          androidx.work.workdb
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/no_backup/androidx.work.workdb
          • Size 4KB
          • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          androidx.work.workdb-journal
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/no_backup/androidx.work.workdb-journal
          • Size 512B
          • SHA256 4ae28f72da1417e4a21634f1c9e67379e8169feb5687873940e435b5f411600f
          • MD5 SHA1 SHA512
          Submit Download

          androidx.work.workdb-shm
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/no_backup/androidx.work.workdb-shm
          • Size 32KB
          • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          androidx.work.workdb-wal
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/no_backup/androidx.work.workdb-wal
          • Size 16KB
          • SHA256 fd83f1caef6cf448d03015a3a09e430db32bfefe95acbb0791d708915c7d88d9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          androidx.work.workdb-wal
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/no_backup/androidx.work.workdb-wal
          • Size 108KB
          • SHA256 590e5ea68c2fe7c054f73f9b37a13499fe9379f4278802a82e1aa547abf6158d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          [email protected]
          • Path /data/data/voicechanger.voiceeffects.soundeffects.voiceavatar/oat/x86_64/[email protected]
          • Size 815B
          • SHA256 67a34abffe072743bcf71ffe1aff6aa53e519f9e68a92cf8fa4965b74adf64f8
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          [email protected]
          • Path /data/user/0/voicechanger.voiceeffects.soundeffects.voiceavatar/[email protected]
          • Size 5.2MB
          • SHA256 215dbef81a8373f008ab324db1d90458ccd44273b3621c331fa1f42374b6a70a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Download

          1785301552478.jar
          • Path /data/user/0/voicechanger.voiceeffects.soundeffects.voiceavatar/app_yqzdkcache/rbp/1785301552478.jar
          • Size 32KB
          • SHA256 81f3024096d175237039cab10bc0008042acb77f9f4cc44706ed847c8b8695b9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Download