Overview

overview

10

Static

static

10

587fe50c08...9d.apk

android-9-x86

8

587fe50c08...9d.apk

android-10-x64

8

587fe50c08...9d.apk

android-11-x64

8

Analysis

  • max time kernel
    72s
  • max time network
    152s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    17/08/2026, 00:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    587fe50c0824024c3001c819fba417e23be921ab3fd6ce3b052e84136ee5229d.apk
  • Size 3.9MB
  • Sample260817-ap998acm2w
  • SHA256 587fe50c0824024c3001c819fba417e23be921ab3fd6ce3b052e84136ee5229d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistence

Malware Config

Signatures

Processes

  • com.text.document.scanner.pdf.camerascanner.photos
    1⤵
    • Checks if the Android device is rooted.
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks memory information
    PID:5092

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 06dcff58107b6183d7fbb4a3a937e01570de96ec285a23dfe65c40be9f59e0fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 edfdc757d90dbd14a59b0fb6c2ffa35bc37dc7b34170b59b5660f0dec167eb36
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 1531b44a423c43d5f33de99a959c487fd02dc834970e94fc3bd840d4fd795f1b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 d7176832195b8e5504e7c20d74afa3eed40bf7d1d61b2aa3906820ee90c71d2c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 536a352170216ab0c52cf9c951bb9506c351247d34161b9a9f4cfdc52802d40d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 04dbcc7bc46e84ea738e3d670699c680eaf6df59ba78b7348ef0c944d2a9e5e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 62c96bcb49009a2ce3ca4c569d961828f26500dfcdeeb7296616bfdb5d4c061c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 e30fbaf508223bc4da73913897117e5ea51e0ff7ad7f37b3dd24ec4891900b63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a37b221a44256e38240623260b82a3e81360c6b165ab536522727c7789f772f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 5871c8903854e066011c4e19ad736bb32ecd4e8e92f3d63514990389832b91ad
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 0c6b2b5d459819ed9c2e210a32ab6a18599a64dfedb52410fe882782475deb2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 c9082350173932212962f4b19acf24d51c7fbc1e6d6fb9e3f2e2896a43991008
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 ac7d00415d3ce8722a19665c0bc5606ffb4791a0a50ffd025cf7fbbadcb593e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 1014a1eec0aa78fb538b21ec86ecd52b868657cf1a412e526bcd4d7777dc886a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 48870370ead94b2c212be996a26bb6747a0518717793eee2566f956b0ac4c135
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        report
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/files/.com.google.firebase.crashlytics.files.v2:com.text.document.scanner.pdf.camerascanner.photos/open-sessions/6A8254C1029E000113E49ABB6DB7259B/report
        • Size 778B
        • SHA256 d5cbcfd7973260d2eeb3ea2b3490687dba3890e97934b8a216b0604edf42fc64
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/files/.com.google.firebase.crashlytics.files.v2:com.text.document.scanner.pdf.camerascanner.photos/open-sessions/6A8254C1029E000113E49ABB6DB7259B/userlog
        • Size 191B
        • SHA256 704fae2812889a252921695899f4252fb42772b3e13433592e9b7fd446bb04fb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/files/.com.google.firebase.crashlytics.files.v2:com.text.document.scanner.pdf.camerascanner.photos/open-sessions/6A8254C1029E000113E49ABB6DB7259B/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation1927567093336328722tmp
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/files/PersistedInstallation1927567093336328722tmp
        • Size 90B
        • SHA256 653699dda55de180d524cd8adc1f9907d7798e22bc090bd96c349abeb141451a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation55744117490576809tmp
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/files/PersistedInstallation55744117490576809tmp
        • Size 569B
        • SHA256 1c9431201287485291c53243066ca9634970fbc4d645b6ed8fd2be24200bb6ff
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:829433424857:android:2bc2df385ec271900307c8_firebase_defaults.json
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/files/frc_1:829433424857:android:2bc2df385ec271900307c8_firebase_defaults.json
        • Size 147B
        • SHA256 0849bdd8d536938fd57834d88813653de05169f73d8c06d8782a357fbaefa26d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:829433424857:android:2bc2df385ec271900307c8_firebase_fetch.json
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/files/frc_1:829433424857:android:2bc2df385ec271900307c8_firebase_fetch.json
        • Size 37KB
        • SHA256 343e9caf4fae5cab517ad3120ce028277a533a30711a4824b0226b05ae0ee95b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 8e720c94c08d0632917a45bef80bab1a15829e9ec9a64948155ea795943cd592
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 4c1e077ae6804064e0deaa2ffc6b21dfd7d866da3d89ec8ce0ef32120fd40a7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.text.document.scanner.pdf.camerascanner.photos/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 448b7942b3a782a198dccb09f79ae50b11e89129ea0dcffd73ffe4c0488ebec7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download