Resubmissions
15/08/2026, 11:08
260815-m8kj5avzgv815/08/2026, 11:05
260815-m67xmsvbqa820/05/2021, 16:06
210520-nawe82mqce1Analysis
- max time kernel
1s - max time network
18s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
15/08/2026, 11:05
Static task
static1
Behavioral task
behavioral1
Sample
smart_3.0.apk
Resource
android-x64-20260325-en
Behavioral task
behavioral2
Sample
smart_3.0.apk
Resource
android-x64-arm64-20260325-en
Behavioral task
behavioral3
Sample
smart_3.0.apk
Resource
android-33-x64-arm64-20260708-en
Behavioral task
behavioral4
Sample
smart_3.0.apk
Resource
android-34-x64-arm64-20260325.1-en
Behavioral task
behavioral5
Sample
smart_3.0.apk
Resource
android-35-x64-arm64-20260325-en
Behavioral task
behavioral6
Sample
smart_3.0.apk
Resource
android-x86-arm-20260325-en
General
- Target smart_3.0.apk
- Size 1.5MB
- Sample260815-m67xmsvbqa
- SHA256 4395f1d6ba0ae4c512630ecaf367593a6f14c81cb1589173a1c2b8262a474b1c
- MD5 8b509d59a5448fb32e8a5680aa29b141
- SHA1 12fb01a8d7f16878a9cae500563de5b8c5dfdf9b
- SHA512 d7befa76d4d6da25961ff953e4af707dc57ef4d8ab70acc1197761aab210efa2fa0bc684da72ce8907c8e9915bf261e31c652d0a5044d6934c21894ce09cc0b7
- SSDEEP 24576:dBEO5TEy9yuJ4qKr2Ir5RQ4zr2Lp6PCUxBqqtYaRyiDuBg2AJfW:dW+h9y1qQ5/zSLyqqthRFDuBg2As
- TLSH T1B975E086F3D8AC2FCDB785320BB60B6E41564C4ACA46D71786B4B12C9D7B9C05E85FC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /system/app/Superuser.apk com.wagd.smarter - Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.wagd.smarter - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.wagd.smarter - Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.wagd.smarter - Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.wagd.smarter - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.wagd.smarter - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.wagd.smarter
Processes
-
com.wagd.smarter1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about active data network
- Queries information about the current Wi-Fi connection
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
PID:4292 -
ls /sys/class/thermal2⤵PID:4330
-
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.wagd.smarter/files/b.tmp.jar.dtm
- Size 20KB
- SHA256 d6462b51a36b560c4cd694d6472f61a80ef456e77b0c0cfcff3e66d4e899e130
- MD5 bf44bd32316d4300eafdf3437850182a
- SHA1 82d5fd192c100dc988ae01915a94d3f5d8ac577f
- SHA512 029571ce28b27fb4f423b8c7a0c5529a924639bbdac6a92cfa48cfab545b3458b65f2e0ae01b9ab75c77f681ea392718c1d32615023a2df759c82a8b1c2aece7
- SSDEEP 384:3kMZ1hkfjj26jus3Pj9ItThn3OubxUNTaTDyuYiLjHdiI0Zc0aWR0/uY:0MZ1QG6p3pIt9n3OuEuTDyuRfr0+es7
- TLSH T102A2E1AD2FBD7038F642EDF52DD042899FD4E21B2AD2417A29945C908DC8F3CB54B674
- MD5 SHA1 SHA512 SSDEEP TLSH