Overview

overview

8

Static

static

6

e5d785b528...35.apk

android-11-x64

8

Analysis

  • max time kernel
    34s
  • max time network
    154s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    14/08/2026, 04:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    e5d785b5281bee246231ba21484bb5573a93e1901d4b883b16c23d48697d8f35.apk
  • Size 67.3MB
  • Sample260814-e5g1tscp9s
  • SHA256 e5d785b5281bee246231ba21484bb5573a93e1901d4b883b16c23d48697d8f35
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasionexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • org.traccar.client
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    PID:4956

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 86009501038eded6e35efbcc3b3f59563ab99e017fc42004f4aa42de2b222b1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 6ba2c39f4d792ffbd468de7bbe8993d9a04c8446623c948934acbfb543484d2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 2f98222616d2e930146174c7e74f06bdb8d80db031cf9957f04209fc3cabfbb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 cdbd9645905bff59c0f84b7b6d7f9440cfd826a0f7f4cacd0ace7e9ff214de3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 0210fe61d1857dc8f44914f7c602eaef053940626ac02648a65e04fb5dd1c002
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 0f34b0403037f798a7c44532a8df05e21fa88e518f5012e302d554bba08637c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 670059170c227519df784838584566ff6fb59959ddb121b63ff9400bde165ff5
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 fecda2e650a2cbb3652d60ee1843b2e8fa9858bab765aee964b59b80a73d5c97
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 fc18c8a329c8b5daba9a5612c5bf06809c8a3b67bf8a4dbd8ed6e379e0db7634
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2230ad77e40d05f5bd7a85d2251043fc63ffdc0214a0c393c76a890e6101dcf7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5f039d053b03df60a1b95bbb2a58637603a3353a33dd15636ac3cf861d940795
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 fdf04cdc422fb66b002aab0c7594fd304461ec6c4fa8f388cbbb087a15d37b36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 8b476649983b8f64c9c1bbe651fdb646bee575cd914a230fd733facd0d0863ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 99012500431a7bc4c61dacc2dd86aa22967a8a8b4d6b890074a0da53268f90d5
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 c0c2ea9b0434c7fdadbd13652125e0138531d2067e2f9383e101aa85421582f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 9cc43a3ac0011543f997ba8b4e1b9182525c626a7505d220dd5d48bb155de195
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 fd9940d808c9f7cc3a578f696bce8a85845c03e2088b4a5c13ffecea93c62eb8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 b85dd290cc64adb48c754c93ef3ec1dd44bb2ec3fc58f129e54a74410a271a6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 e1c1c752d907d2ba73dec5cfce8bac1bcae4dd28331bcd40780bb6dc0bdb9c56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db
        • Path /data/data/org.traccar.client/databases/tracker.db
        • Size 32KB
        • SHA256 8386e05c77f03064b9e3a654ac7bd612c84dee00827823c63d18333507647514
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 512B
        • SHA256 0f273d2f371397459e1eaa59cec4fd5b21795e886e51d606422483d316c88161
        • MD5 SHA1 SHA512
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 8KB
        • SHA256 7e2e5e552e443bfce498e6f518229a26f6e61fd660282e0480c8ff3d5878bb25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 8KB
        • SHA256 f1212071008aa63be27e76932558a133dab9a77991a2be99324083ea18c3d700
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 8KB
        • SHA256 ade8cab3e056f5ea8a84e470171b7b8eba5f30b4efdfdf893b4e57ef4b36e1d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 12KB
        • SHA256 8c83237d510c7ff71747b963a930e7cd37e770e04537dce60c604c1eea6ad2ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/com.crashlytics.settings.json
        • Size 767B
        • SHA256 49113fe8e67078ba4ac36cd549f6803ad38febbea73beba417d190afdf013912
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        internal-keys
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/open-sessions/6A7E9A2E017C0001135CFD6043F43A35/internal-keys
        • Size 107B
        • SHA256 2e5b79823384123598ae879303e552f5ae0bbb28f2c96b74e82a2e8abcb6840f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/open-sessions/6A7E9A2E017C0001135CFD6043F43A35/report
        • Size 825B
        • SHA256 7479d35600df3c010eaa3a68fc6f3b984a7f4400c6d65fcc894f737b134eb27e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/open-sessions/6A7E9A2E017C0001135CFD6043F43A35/userlog
        • Size 187B
        • SHA256 69acbf7a66e5914412677c1fa2e96a0ab105f52411416c3b9f3fbde837a6a8fe
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/open-sessions/6A7E9A2E017C0001135CFD6043F43A35/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation4312436841680564660tmp
        • Path /data/data/org.traccar.client/files/PersistedInstallation4312436841680564660tmp
        • Size 557B
        • SHA256 182b130884f64a20bc9917c7516143f74778128d0fdf1f979f468b69770703f1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation648395233354787697tmp
        • Path /data/data/org.traccar.client/files/PersistedInstallation648395233354787697tmp
        • Size 90B
        • SHA256 18b6d105a35798cb3863c1ae064df61808a04bd9222949c6fe274536519a47a6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTozOTAxNjQ3MTM5NjphbmRyb2lkOmIxYzcxOTRjNjk5YmZhMjU.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTozOTAxNjQ3MTM5NjphbmRyb2lkOmIxYzcxOTRjNjk5YmZhMjU.preferences_pb.tmp
        • Size 481B
        • SHA256 55aa6d21a4392b7e53f980bf3a2c51f043f9817ceb4a8f64896ca229cb0d6562
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTozOTAxNjQ3MTM5NjphbmRyb2lkOmIxYzcxOTRjNjk5YmZhMjU.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTozOTAxNjQ3MTM5NjphbmRyb2lkOmIxYzcxOTRjNjk5YmZhMjU.preferences_pb.tmp
        • Size 505B
        • SHA256 837aab55e9dc2c89c87063592ea382af99008113d1c12b7e092a140ca453a917
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FlutterSharedPreferences.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FlutterSharedPreferences.preferences_pb.tmp
        • Size 34B
        • SHA256 d4836d202693543bea4837173e421a8c889b0da745621e2208efa2e741ca5ad5
        • MD5 SHA1 SHA512
        Submit Download

        FlutterSharedPreferences.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FlutterSharedPreferences.preferences_pb.tmp
        • Size 60B
        • SHA256 95b1434ab4383a13f31d4e373bc0626b5e9b7c998acf0224a852d2fd3fe20646
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FlutterSharedPreferences.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FlutterSharedPreferences.preferences_pb.tmp
        • Size 92B
        • SHA256 1bb9e93145448c3f03b8b66b73933707c46e5738414c0a3378125bc415648d64
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionConfigsDataStore.data.tmp
        • Path /data/data/org.traccar.client/files/datastore/firebaseSessions/sessionConfigsDataStore.data.tmp
        • Size 145B
        • SHA256 413d60632b641daef2cead2f3d48d86f54c5380f93c640e6001849b03288d845
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionDataStore.data.tmp
        • Path /data/data/org.traccar.client/files/datastore/firebaseSessions/sessionDataStore.data.tmp
        • Size 278B
        • SHA256 3ab0e0a74fee691bcff46b94d8cb606fdadceaef713df581a96f99dddc4b50d6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        flutter_callback_cache.json
        • Path /data/data/org.traccar.client/files/flutter_callback_cache.json
        • Size 226B
        • SHA256 d569ac2f32d1dc07ea9feb5fd881d78786e724bbd95743de69e2d82a940048c9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        flutter_callback_cache.json
        • Path /data/data/org.traccar.client/files/flutter_callback_cache.json
        • Size 389B
        • SHA256 cf90534b15b1f7497d031e5911bdc6a75578fb215f8d66beeaad72f9ad7e1fc3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/org.traccar.client/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 12f64e57559980f0b9023d67d9217fa455e6602ed902cd3643ed2d5d5a7e6fe4
        • MD5 SHA1 SHA512
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/org.traccar.client/primary.prof
        • Size 1KB
        • SHA256 09c583e578d92cb32f3c0a700123263b0664d47c5080c650cfbcf399f0245b90
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download