Overview

overview

8

Static

static

6

SpeedtestPlus.apk

android-15-x64

8

Resubmissions

16/08/2026, 22:30

260816-2e7j5aydpb8

16/08/2026, 22:26

260816-2clvmsgc948

Analysis

  • max time kernel
    97s
  • max time network
    119s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    16/08/2026, 22:26

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SpeedtestPlus.apk
  • Size 31.1MB
  • Sample260816-2clvmsgc94
  • SHA256 ae84d01b9ce922ff2ce778884002aa22e5a38e0b3520d8355b502bf96b3ddb5a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 4 IoCs
    defense_evasion
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • org.zwanoo.android.speedtest
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    PID:3358

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        resource_GTM-KTR2658
        • Path /data/data/org.zwanoo.android.speedtest/app_google_tagmanager/resource_GTM-KTR2658
        • Size 38KB
        • SHA256 f6e18e6442a1649c7bf4a37f91f8b588e968e264d6a8f97f7d11fe5ae87fa576
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base.3358.tmp
        • Path /data/data/org.zwanoo.android.speedtest/cache/oat_primary/x86_64/base.3358.tmp
        • Size 1.9MB
        • SHA256 e44b4ed7d0630cc3b5df215399aafe42c218230d04722dcddf5943a6a683d65e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/org.zwanoo.android.speedtest/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 c5e2822b9e5d78d1f36fdbd266bc2c4b25bbc16c2fd85685d57c9757b0cabc7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 87221fe064d48a33a33644477e7d6f159c3fff887c04300798c53fb90a187920
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 3ddf4eb4b1c2660d0810bfc9536aeae4aa263fceab93f47e4d2b8718f59dc1c4
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 3796bd50937e8c8a65b205a4e337d56271db6ae2dbd5003bda33b62480dc9e4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 40aee8ccd8febe39bc8710c6704afca8f5589b1611fd39e405ec985aca773dbe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 b3084b539fbc3f00be861d6a92d6eed246f4030e07522489e76e4a2711470cdf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 1a3de5a5ae0807da8a2305c19f1b0617d15659d3119b4adb3508bee5108e0fc8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_analytics_v4.db
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_analytics_v4.db
        • Size 28KB
        • SHA256 d24ad1ea671ec7f699ab89e91b917904c1467bfc51e7f550b9afbc1ed2193da4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_analytics_v4.db-journal
        • Size 512B
        • SHA256 0cdcae313b455e065acede8cf052e0f2702b071519349116050e86d73b547527
        • MD5 SHA1 SHA512
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 6c31529059410ab9c2dc7f2f456a045d9d3dc2b74a812cae2276df0a22aa3362
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_analytics_v4.db-journal
        • Size 4KB
        • SHA256 3051ae6fe8fbd590d0ab193f947ae4c8e348c4129555c6d0dbdf9772ff61ecfd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 8c825f4d540c40c556048179cab268946f759c01d46d9265578e21199107f0be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 9f991f16a308fe98501f7871ffe938043da56e2c1d59fc9d97b9addc20286360
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_analytics_v4.db-journal
        • Size 12KB
        • SHA256 60f69dde33a60854604fed880ab781b85cccd7a4f87c7837ab704854835b9044
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 7107dd1a7a90aa2bd1aaf9f399b76c63525d3b06395168043931c1e18fd62c45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 90c0ac134e762d67a09042dfa4f62ab1a043e0ee77b740760b315c1534a02aa8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 001bd3d572952240f71d2b313cf0fd5ce5117b2af276f85a282ef7968d129b5e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 34f0bd638aefc39a1cdae12626d0e4ba7034b88500c7155f2bcecbb05a239bad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 50dc480bbdf16b704bb8b4cccf29bcf45ccc249fdc1342a0302355169552a0d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 77a214d498ff431af96c892071aa5e9bb16a8764eddad247e44c2bb11e9f5ba0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 73191d2ff9fe2ae97348e13a8f9940b16545c6d5537caac4f78b1bf3c5810766
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 c3f5a5dc10b05f9f68616380ca0bd263223a0be697dc157718a5a8c572a72348
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 8c95d28605fc5899e625b1c393b07a8352a5174119a13e03a1b32ba48314b826
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 10e5fce6d5390500ef0cf90511190d6b3ff748145120c2995ba9ec8fcf30faec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 e604969664aadfe78c0971c1d1bcdca6831b68717fcd5be06ddff204ef89f28a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 90ff50b14271befca34685e1e0e628f8b8b7e40c3b0adaa4a43ae88a342e089c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        speedtest
        • Path /data/data/org.zwanoo.android.speedtest/databases/speedtest
        • Size 36KB
        • SHA256 36de10b759cc26d8acaf9303e6750cd38504d40db548db49cdde70d1ea94ec31
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        speedtest-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/speedtest-journal
        • Size 512B
        • SHA256 8c0e4fb5e07b2a553fee7f5a25e9a8e837cdf6dbc633be2e6022f0902dd8c1bd
        • MD5 SHA1 SHA512
        Submit Download

        speedtest-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/speedtest-journal
        • Size 8KB
        • SHA256 2beda694ae6e2c1c81dce08e9f310f4fd0ffd9cdfe82b97023f7a4fc21bacdd3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        speedtest-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/speedtest-journal
        • Size 8KB
        • SHA256 3d804a97ac848c193a6f3d89647f356055671536425579b82e6f505c881181c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        speedtest_app_db-journal
        • Path /data/data/org.zwanoo.android.speedtest/databases/speedtest_app_db-journal
        • Size 512B
        • SHA256 b5fa88aa58cecccb647a8e56207017ca08a9e25a43f783655cc46942a7fb15e3
        • MD5 SHA1 SHA512
        Submit Download

        speedtest_app_db-wal
        • Path /data/data/org.zwanoo.android.speedtest/databases/speedtest_app_db-wal
        • Size 40KB
        • SHA256 663548f466dfe55e93d0d65f10520a61576c00ddbd9ccbca8fb61e9683f9b99c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        report
        • Path /data/data/org.zwanoo.android.speedtest/files/.crashlytics.v3/org.zwanoo.android.speedtest/open-sessions/6A82392500C100010D1EF6E1C733BD0F/report
        • Size 759B
        • SHA256 e4d0d87048c1a02b3cfb2fac109bfc19e4aece42224b9bf88c61448b53e2131a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/org.zwanoo.android.speedtest/files/.crashlytics.v3/org.zwanoo.android.speedtest/open-sessions/6A82392500C100010D1EF6E1C733BD0F/userlog
        • Size 388B
        • SHA256 abf699e2afb458dccdbc7895ca34f28263a7f947166f670d2c78b42e51f3d88b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/org.zwanoo.android.speedtest/files/.crashlytics.v3/org.zwanoo.android.speedtest/open-sessions/6A82392500C100010D1EF6E1C733BD0F/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation6454729724573736563tmp
        • Path /data/data/org.zwanoo.android.speedtest/files/PersistedInstallation6454729724573736563tmp
        • Size 114B
        • SHA256 abcbadfcf9ee971109b5fa93af4058760dc77bee653229c52f5faa2c8550b034
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation7727900135645605996tmp
        • Path /data/data/org.zwanoo.android.speedtest/files/PersistedInstallation7727900135645605996tmp
        • Size 90B
        • SHA256 3dad7c8cc14f4fdc9ebed7a1c73859fb4bac63415ab7088acdf645b714ff8132
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:1013234426872:android:76ca05c3e57b5a3b_firebase_defaults.json
        • Path /data/data/org.zwanoo.android.speedtest/files/frc_1:1013234426872:android:76ca05c3e57b5a3b_firebase_defaults.json
        • Size 386B
        • SHA256 256b9a7194f8bae68174e0976b69d4ec341e6daffa3d9a57585565b7c972a5f3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        gaClientId
        • Path /data/data/org.zwanoo.android.speedtest/files/gaClientId
        • Size 36B
        • SHA256 9f4214046c9a0806256248460257d81e09b94aced88346ef142bcaba599e8aa6
        • MD5 SHA1 SHA512
        Submit Download

        profileInstalled
        • Path /data/data/org.zwanoo.android.speedtest/files/profileInstalled
        • Size 24B
        • SHA256 68a73bcb02c5a0c9119a33638b0dda06a6b2369d280a9efa3fc808c5db1db8eb
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/org.zwanoo.android.speedtest/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 4b4e6c28487bfddaf1cb1a32eba3dfece3aee145cac81b75100c191dc1a65011
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb
        • Path /data/data/org.zwanoo.android.speedtest/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/org.zwanoo.android.speedtest/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 0021fbf742a75ea8ade167bd6a867aca472b54412b9aa8c2e515d44ffa2b9501
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/org.zwanoo.android.speedtest/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/org.zwanoo.android.speedtest/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 c0b2eeda8d7aa1be74ea1bb2bc91348b0693836fe1fb53e713b7b026154d8430
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/org.zwanoo.android.speedtest/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 6c76a726f46f93c15126e6dbd606e53e57d1eb55759baa8f4c5f19c49be797b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        [email protected]
        • Path /data/data/org.zwanoo.android.speedtest/oat/x86_64/[email protected]
        • Size 92B
        • SHA256 242799ce1bd3d94e24f2014140d9730d8d034600561843e33de607e27b2837d2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/org.zwanoo.android.speedtest/primary.prof
        • Size 9KB
        • SHA256 2287556c49cd60384540a22dff22517cf446c1bb57dd5c7d7360b14b4ea663ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof.c3EHe2.tmp
        • Path /data/misc/profiles/cur/0/org.zwanoo.android.speedtest/primary.prof.c3EHe2.tmp
        • Size 22KB
        • SHA256 6595b8923b1ebbf1dcc9c8d42b133c9b6bc6381ab65d6052093ce8c5ed90cc72
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download