Overview

overview

10

Static

static

10

422d3be1c5...00.apk

android-9-x86

8

422d3be1c5...00.apk

android-13-x64

8

Analysis

  • max time kernel
    144s
  • max time network
    153s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    16/08/2026, 22:46

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    422d3be1c543777281c9a97154afdf523230259855daf7837387e0a7db69c600.apk
  • Size 24.0MB
  • Sample260816-2px4fayxft
  • SHA256 422d3be1c543777281c9a97154afdf523230259855daf7837387e0a7db69c600
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
collectioncredential_accessdefense_evasiondiscoveryevasionimpact

Malware Config

Signatures

Processes

  • com.irregularly.message.box
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Reads the contacts stored on the device.
    • Acquires the wake lock
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4164

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1596060835607.jar
        • Path /data/data/com.irregularly.message.box/cache/1596060835607.jar
        • Size 9KB
        • SHA256 d44cfb6b41231f150cf310c7c4d399be9587294e3727197e046db4a1c2c3ca3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        1596060835607.jar.cur.prof
        • Path /data/data/com.irregularly.message.box/cache/oat/1596060835607.jar.cur.prof
        • Size 210B
        • SHA256 95b513c125b2e5311b98ab2efde896172fd3278a7725f1be444fc66797aeb6c1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        1596060835607.vdex
        • Path /data/data/com.irregularly.message.box/cache/oat/x86_64/1596060835607.vdex
        • Size 920B
        • SHA256 13c5a83973ea8cf2db22ae881f1f19aa7bd7a3962a8826633c8269ea3e0ed9d2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.irregularly.message.box/databases/androidx.work.workdb
        • Size 4KB
        • SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.irregularly.message.box/databases/androidx.work.workdb-journal
        • Size 512B
        • SHA256 f47b6299b546f0513587751a660ba836a8df7af1ae274d604a1c0a235630af21
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.irregularly.message.box/databases/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.irregularly.message.box/databases/androidx.work.workdb-wal
        • Size 88KB
        • SHA256 0b4c1d1955d759bc336e0c0fe09bc958cfcb709a5859b6b2b50f0848045be0a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.irregularly.message.box/databases/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 ae488f8452035cb88a4f2f480f1c46af937e93adf5f996648e7eb88a9ca8ff86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.irregularly.message.box/databases/com.google.android.datatransport.events
        • Size 40KB
        • SHA256 632907b2357e6d3e99c86012795c6a2eebd1e8c1ee0a64c64878c5c1201413a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.irregularly.message.box/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 42a8477a4623b985ddac37d8be98337d83f959e18934b85ed9cbd566cadb45d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.irregularly.message.box/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 9bfc9888ffa2f5a35a21c16166cda075c1f3a806ea33844ef3ed423b6aaeebee
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.irregularly.message.box/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 a0c416d0ea65cf64a3bb577fa709ab6996bdd1963d5325fb8b58e439f5954d24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.irregularly.message.box/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.irregularly.message.box/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ee37a0430cd2988e7c541576444e7c7fdb084d45dfc0b0e04fec8302ce340e19
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.irregularly.message.box/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 35210439976df4df44648be5a593cd9159485fbcf79603169d65024dd0c59375
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.irregularly.message.box/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b0512b04a9637fea3f67dbf69c69509f6bd221dab0aa0d3eec6cdee47e7da721
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.irregularly.message.box/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5bd23fa46dc51f3a73c32fc254b823315ac40f15e61d04dde89c1ed2d0d977e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.irregularly.message.box/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9f2e51e97251e7f90cc916d7a80b5650cc0ccacdb4bc8c5a97c4bb9347c9563b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.irregularly.message.box/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 2afe9dbd29284dcbdf13142862e9e36e5d5dbd878afa1934d1dbc051e846bd42
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.irregularly.message.box/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 5e3c70d5f38c08a7d41661efb53867f354fb502a1ebbcb3fd68f5bbcb95215da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.irregularly.message.box/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 b6ac41a75d13d8cb703fcc0ddd0d4e0c395e07d0699bd52da2bc988f93efd0d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.irregularly.message.box/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 8165d4f89be62ddad4ad410a4bc9839b479bd65e8415ed1a7ab99c9b5947939a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.irregularly.message.box/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 82a7619283ff14511d5e770ecc38184280f60485c7c6d1917cd0078508a74166
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.irregularly.message.box/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 c49de07f770ea4668fea0180fdf6f87980c159450d18be06f6999df21b1d1a93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        6A823DBF02D7-0001-1044-1471EE439A42BeginSession.cls_temp
        • Path /data/data/com.irregularly.message.box/files/.com.google.firebase.crashlytics/6A823DBF02D7-0001-1044-1471EE439A42BeginSession.cls_temp
        • Size 75B
        • SHA256 5f6a14e860226aa5c77a3badaa94c53ca6ee3385b5e319f2a433e2717f64c8f6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        6A823DBF02D7-0001-1044-1471EE439A42SessionApp.cls_temp
        • Path /data/data/com.irregularly.message.box/files/.com.google.firebase.crashlytics/6A823DBF02D7-0001-1044-1471EE439A42SessionApp.cls_temp
        • Size 79B
        • SHA256 a36e1544aeb028d19cf9a35e8f6eade2ef6933f6ef7107ac030fb90d983389f0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        6A823DBF02D7-0001-1044-1471EE439A42SessionDevice.cls_temp
        • Path /data/data/com.irregularly.message.box/files/.com.google.firebase.crashlytics/6A823DBF02D7-0001-1044-1471EE439A42SessionDevice.cls_temp
        • Size 49B
        • SHA256 4394de237aac50bbc0172728f1298edae4a0062f0a1f82b6383929a5c8612840
        • MD5 SHA1 SHA512
        Submit Download

        6A823DBF02D7-0001-1044-1471EE439A42SessionOS.cls_temp
        • Path /data/data/com.irregularly.message.box/files/.com.google.firebase.crashlytics/6A823DBF02D7-0001-1044-1471EE439A42SessionOS.cls_temp
        • Size 15B
        • SHA256 b7869422f5dcf3f24ae91560cec05ebb39852ed45baf3a31176f9b90de87aafe
        • MD5 SHA1 SHA512
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.irregularly.message.box/files/.com.google.firebase.crashlytics/com.crashlytics.settings.json
        • Size 792B
        • SHA256 5dabb3ebdaa122cb9bfd33e942885eb69e48e22b9a2be7077c19dcee7a4fd3b5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        crashlytics-userlog-6A823DBF02D7-0001-1044-1471EE439A42.temp
        • Path /data/data/com.irregularly.message.box/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A823DBF02D7-0001-1044-1471EE439A42.temp
        • Size 492B
        • SHA256 9d7dd2b009fdf06c17f8946d1872535c6c8ea143072a22673251cc078d45c613
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        crashlytics-userlog-6A823DBF02D7-0001-1044-1471EE439A42.temp.tmp
        • Path /data/data/com.irregularly.message.box/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A823DBF02D7-0001-1044-1471EE439A42.temp.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        report
        • Path /data/data/com.irregularly.message.box/files/.com.google.firebase.crashlytics/report-persistence/sessions/6A823DBF02D7000110441471EE439A42/report
        • Size 754B
        • SHA256 7f41be0ef3644a5a503547385485085f4b16a35161e7fad056266ec4018055e9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation4748111555668473557tmp
        • Path /data/data/com.irregularly.message.box/files/PersistedInstallation4748111555668473557tmp
        • Size 567B
        • SHA256 fca219e8d8f3f4cc2875fddbd6a1098cac1d10286f2b0f59f993a8254da3dee5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation5925858408946334222tmp
        • Path /data/data/com.irregularly.message.box/files/PersistedInstallation5925858408946334222tmp
        • Size 90B
        • SHA256 f913a6a39b3bab2e726da31886b870eb97a34b58c748db7646baa50cf685ce30
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        default.realm
        • Path /data/data/com.irregularly.message.box/files/default.realm
        • Size 8KB
        • SHA256 5d8ae1fd453715a03763bf8e0a0e7a09eb2c971890c7613a80e331539dad3ea1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        default.realm.lock
        • Path /data/data/com.irregularly.message.box/files/default.realm.lock
        • Size 1KB
        • SHA256 7081ba3d8887be22551f56b5f50da675bda7dd02f40e9fcb150ac84fccbe387f
        • MD5 SHA1 SHA512
        Submit Download

        frc_1:88184730964:android:add10b9495a809e88ac4c1_firebase_defaults.json
        • Path /data/data/com.irregularly.message.box/files/frc_1:88184730964:android:add10b9495a809e88ac4c1_firebase_defaults.json
        • Size 173B
        • SHA256 26a41517481d042056e315be809c0128ac69bd1b72c7dfc880c5cd8ce2a7f18f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:88184730964:android:add10b9495a809e88ac4c1_firebase_fetch.json
        • Path /data/data/com.irregularly.message.box/files/frc_1:88184730964:android:add10b9495a809e88ac4c1_firebase_fetch.json
        • Size 42KB
        • SHA256 c6fbcaffa64ffe3cf5875507bc126e2a0ebed7efe1ab01b701f6efcb7abbfc0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        frc_1:88184730964:android:add10b9495a809e88ac4c1_fireperf_fetch.json
        • Path /data/data/com.irregularly.message.box/files/frc_1:88184730964:android:add10b9495a809e88ac4c1_fireperf_fetch.json
        • Size 1KB
        • SHA256 96d0a7bae442d731808206d511623b16aa23cc58fbc49584b8c0338d755f07df
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        1596060835607.jar
        • Path /data/user/0/com.irregularly.message.box/cache/1596060835607.jar
        • Size 19KB
        • SHA256 84009ae4f9125e2d61a670b88e41ad81bba2161dc0910b4506ef6356f0ebeb78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download