62f93c74b4f4718560b3d68cf28d53cc0e4fc9661eeff3a70eaff8811c7c6dce

Analysis

max time kernel
46s
max time network
152s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
17/08/2026, 01:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
62f93c74b4f4718560b3d68cf28d53cc0e4fc9661eeff3a70eaff8811c7c6dce.apk
Size 8.2MB
Sample260817-bngf7a1blh
SHA256 62f93c74b4f4718560b3d68cf28d53cc0e4fc9661eeff3a70eaff8811c7c6dce
MD5 22c90e1be761de86e96e409073fee778
SHA1 a043a6ed3e02631aa3e5fdfea76a2e4d87381908
SHA512 72414a5f1b5146f93fed7d59bb3319a5b5644fcad5433bd51c6d75871f94bbd6ce8d2b19cd3845ab9966d5cffcd571d6221c941e53680285fbd2e114184ceeca
SSDEEP 196608:/r4lU2ceS9+PiGVlMIX+dhSoKKXfdOgGEXbBD6SOfK4HNjl4lQ:/i3BpPF8NKKdJXNDcfTjlD
TLSH
T1CD96125AF7A9A96FC8FB93320979123411574C268B43EA876818727C18B7ED44F47BCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

google defense_evasion discovery evasion execution impact persistence phishing

Malware Config

Signatures

Detected google phishing page
Potential google account phishing
phishing google

Checks if the Android device is rooted. 1 TTPs 2 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.fully.lantranslate.camtransltor
/system/xbin/su	com.fully.lantranslate.camtransltor

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.fully.lantranslate.camtransltor/files/audience_network.dex	4323	com.fully.lantranslate.camtransltor

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
9	sites.google.com
8	sites.google.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.fully.lantranslate.camtransltor

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.fully.lantranslate.camtransltor

Checks the presence of a debugger
defense_evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.fully.lantranslate.camtransltor

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.fully.lantranslate.camtransltor

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.fully.lantranslate.camtransltor

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.fully.lantranslate.camtransltor

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.fully.lantranslate.camtransltor

com.fully.lantranslate.camtransltor
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4323

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

1624498498047.jar

Path /data/data/com.fully.lantranslate.camtransltor/cache/1624498498047.jar
Size 9KB
SHA256 51dd5ff34a950c026bd39ba3b923c4c47126c097e844951ab1b71ea7c0ed824f
MD5 af1f7507b04b896dc31dc05d6ab5c0e9
SHA1 f8a8409a9bcb3e3163b0098e432f061ae1c300d8
SHA512 14d9057dadb87ae71e9dab793092b551cd97e42bc6bdbdef57e93d676b7c8f918719e5b7b232ec55ecd0c4d10bb99e84f84b071d182e2bfe214aab7ca0fddaec
SSDEEP 192:kbqBDqbd7rbu2KUGdA8rYxvDeM3Q711pu0sp4veyGRI3xtZx9+9g:kbqMd3a27G3Ex7eM3e1ztfGihp9L
TLSH
T1A412BF5D3F5427E5CA5B3B3ECD1321816A4B0A9E848DC12B2422D0E5E35F4EF6DC42E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

journal.tmp

Path /data/data/com.fully.lantranslate.camtransltor/cache/image_manager_disk_cache/journal.tmp
Size 31B
SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
MD5 8c92de9ce46d41a22f3b20f77404cc1d
SHA1 8671a6dca00edb72be47363a7071be65cf270373
SHA512 30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-journal

Path /data/data/com.fully.lantranslate.camtransltor/databases/androidx.work.workdb-journal
Size 512B
SHA256 d0113f978bcbcc138e89420148f3cc09fa7d44705fe2332affcb0f369c277ec2
MD5 5b1b3c71576a6f9ce2f960596b5e9fab
SHA1 8415fcb4d9d0277fb270ef9574654fe0c2ca1a25
SHA512 0e50cbb38fb72213041e5d463ff0de6455e0b48b3a1334912d35908f6db30e92dfc271efa8a84624cad534093b905008da94dd4f50910f42e6327df590707217
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.fully.lantranslate.camtransltor/databases/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.fully.lantranslate.camtransltor/databases/androidx.work.workdb-wal
Size 88KB
SHA256 e40d79b0ae135bf34a14dc34fd234198bc92c9b3f4f409e8495fdae153d722d3
MD5 13fce2dfa0d5dbdd86c520c1acbd7686
SHA1 c392d3e435bb43b22c5b94da09bba69e3a52f0c9
SHA512 730b1daeca1f7b9f19b875dcc8eae7e819119550867c526e79153bf13fd813376ea93f9f45f399bd5f76ecc9c07475790493fa0c4e050f1ec245a082217808a1
SSDEEP 48:5P/ymmumWAhrBlOymdlWJWKuWwN6xl73JcXSMmchI9a7WKZ+Pjw2cwgO69g82luJ:lRMpf83wS0+aD8Nn6266mPR3I9
TLSH
T1FB93108E0F5D7601C05958F1E1D10EF1793E492EC793E3E1699100B9EDC6821EEA9DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.fully.lantranslate.camtransltor/databases/androidx.work.workdb-wal
Size 16KB
SHA256 090e73f82bef41d2697bbcc527e580db79d72a2ddddcd5b7393248989afcc5e4
MD5 fa9e5bc7308b42c0b00f367fac9d1d60
SHA1 da7745d59675e8ec0d932f99b9d5326147a649bb
SHA512 de00bf88b602a4c60a8dd56ac1d7f20d67bd34c649815b35ca859301a149989ce9b439b7648871d2fef35c3eec8d300368f94493ce8c91ddfa9a4445212bc6f1
SSDEEP 6:KCX7Ng9FZdrlOERX4PBX4ogLugMBX4suuK+/dyml//34t1DDZiOw2:KCLwzdTRmBEyPbP/1l//34tWOw2
TLSH
T1DE72C2CA53494B23C1480373D0CAC3221DB89E1DDB52CB0B2A911494ECC3388B5F0F09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events

Path /data/data/com.fully.lantranslate.camtransltor/databases/com.google.android.datatransport.events
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.fully.lantranslate.camtransltor/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 48caa92284ab2992467dcb46ac3bd8ac40cae585e56088b699c30ccd1272e78c
MD5 18e4da9cd7cde58c940e13ba81eae9c4
SHA1 e0e61666bb9a84f4b09b64834c714f37924359c4
SHA512 a9784e2ca831ba29724c16f9f3f1c00541f95f1218677c45963c14255010647600f570d96d2fece800f5ef9f01770c63a05c2e7f6657f76415eb7dcc6d95af98
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-wal

Path /data/data/com.fully.lantranslate.camtransltor/databases/com.google.android.datatransport.events-wal
Size 52KB
SHA256 a552745d61b1ad67309814ce5154b943ce66dde1b6693428e08712da21d11641
MD5 bcca2cf8113ac8dcc98c03be4e698f7a
SHA1 e6d8b5d9c944798bf12fa5f3d7eb6fd668cc5a98
SHA512 9e010a228e0c66684d73116e875149d0d4a482cc3509ae9aa4cec3fb9ee1eb87fb26b1c092f2ac855d7e3aabd148ced0de7dfe4f4c97d610417cdcdda8488034
SSDEEP 48:WXzNSP/js+t3u59MENZBdUdndVd/7T9IvdldHlq8/JqYpqPSP/V76:A0PJt3KMEX0xIyNYMaPt76
TLSH
T1DE33F05C47102623D26E583AD7E247431B3EE35F971787632B901DF69CC2AA9F422D98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement.db

Path /data/data/com.fully.lantranslate.camtransltor/databases/google_app_measurement.db
Size 116KB
SHA256 4c63e5848cdb39d7b67bacf7b2646efcc7bfb8ba62b6b8a605dbb67c9075b4b4
MD5 8b6f80ea6bdd5fef388a667f578039a2
SHA1 295b63a6af7feae0352481ced3ef6b03ed56c02f
SHA512 9c93ec2108b493b0d94c1a77b26b5f75d4af5395ac8642ca08ee23741a8bcf1dc7c0674637f9f3896555f44a7cc470a8c92f5ee17a29df04dae55eff0d357b76
SSDEEP 384:Fpqwa1/dzv2xZQRrlD3d9CQAzgpQHWYnblAtkCP:FpwvV5LCrrbqeCP
TLSH
T12DC3EE9E0F14AA51D4EA047DF6C202939E3C436D676B32622DE80DF69D87462B42D8E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement.db-journal

Path /data/data/com.fully.lantranslate.camtransltor/databases/google_app_measurement.db-journal
Size 512B
SHA256 587e8a950bfe1d8b4b4b4f0b034f0b0db1330d19753e804fe7b4171844d6be73
MD5 7184787ec6818860cf7ac693280472a5
SHA1 14449775c350110d0184734f6bcaf87e5d706ed1
SHA512 2d0efd0e55dc383bb8b7b459e558ac14c6e09969e3400c1aa53e1c3d4b50f0d5b58d74f694c91c7a0070e66257cbc76a1d4615a807e2b78732454600e0b3c5c7
MD5 SHA1 SHA512

Submit Download

google_app_measurement.db-wal

Path /data/data/com.fully.lantranslate.camtransltor/databases/google_app_measurement.db-wal
Size 414KB
SHA256 c5df8ebf0a0471d726fda88588c034cff9030f52c05b56a952cb33ff3117b74f
MD5 204d2471f0022bee0079c78d7dc9b50a
SHA1 984c10227f3f6d334ce4176c86da698c30dcad24
SHA512 2ffe03da8509f01b692a0cf1e49fab686223c49069554ebfe238f6698d2da4109d8733d73413222cb4e00bb910b0996a40e3ceeccfabedf2dc8ccb607da2b82b
SSDEEP 3072:grGQW4LUbFbjbUsb+sbvsbi9sbX9sbQ9sbh24QWHsQW7IfQWaK7QWP:uG5Yn14Xskf17f
TLSH
T1CE94108E4F14A792D0EA0079F6C112D34D3C976D5B7B3A613E984DF79C820A5B01E9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.fully.lantranslate.camtransltor/databases/google_app_measurement_local.db
Size 16KB
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
SSDEEP 6:l9FCls1ulO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TgEu9zmzrfRmBEyPbBvOwk3
TLSH
T16772C2CE9F102647C6660377B4CAE3916DA4A12D872BEB472BA50464AE42609A861F98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.fully.lantranslate.camtransltor/databases/google_app_measurement_local.db
Size 16KB
SHA256 16e347a860f7649ea70bdf8eab2f4f1573b4e89eb1cbf8372639a2b313d667c7
MD5 cc09a5a82046c760c08633bd50123a04
SHA1 5b97c26b021fcecb618b430030b1ac48167e48a5
SHA512 5f225b13d6cb34428d7533fd323ee406d60d92baf32d683882a28ff2d2916d765542af776dbb3f9ca6527e5a30f54550e427888d4ba06c9c76c82fa7199549e5
SSDEEP 3:qqb/NjghzY+/lzyliMlTXmyxYk/Bfd/4fzMlklKllgIn:LCM+/lulvl6y//Bfd/4fQlrf
TLSH
T1E77292813291C702E12B8274929787F21530A2942A02921AB802928858812C02A1A21B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.fully.lantranslate.camtransltor/databases/google_app_measurement_local.db
Size 16KB
SHA256 b92fd798e2c229624405361b0933107b86b58cb52b42dd6561f58e85bfe28187
MD5 d89d75585d723dbd88d71740019ef261
SHA1 d1fd8403a9f5bc86f9da47a5540a3b4d42da76cf
SHA512 dae8d8793988b45297fc4ed447aa5c3ffb15676772c6d5e0e8474d5baff770592234bd819476d90a2f835d5930a1fe11a66f2de6dd81a1e21eb9f93b08f298c4
SSDEEP 6:rLP/gEhV71m/9blDqlrElvl3t7Qlr2ze/rCM+/lulvl6y//Bfd/4fQlrf:rr/gW49blqYFl3t85+/0Fl6sfd/h7
TLSH
T152725EA17264C703F62B4B3892D7D3D2203932A21B03D115BC03AB4C18C63D1152970B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.fully.lantranslate.camtransltor/databases/google_app_measurement_local.db
Size 16KB
SHA256 2928f5e6d828ee2fcf190c50485578e190a45ab0e497810509009658957f08f6
MD5 515f9f76aa3a9bece525c967b88ec479
SHA1 1c2fb5d171d88713a94b1f3b13bde339607f909c
SHA512 5b7eafe1c0615f6f22c9d98ca6efdd0dd2df4c6f908a734b600b274ae187e830888e3f6e7869b370d7b737ee53635e0eb315469391a6a52f2e585f8a9a046e6f
SSDEEP 12:fOLabCAURw2sWlCBi49blqYFl3t85+/0Fl6sfd/h7:fKabC3JV499FZtwlF/lh
TLSH
T1D0726DA171A8C613F2774B3842E7EAD2313972A31B17E2567C03AB0D6882391853570B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.fully.lantranslate.camtransltor/databases/google_app_measurement_local.db
Size 16KB
SHA256 81879b55aca9c3a5316a2ca84f7a97ad0fb325ff65c7e25d86c11412913176da
MD5 32a86c4094b457d743d435bb10ab4305
SHA1 8e89d57cf58ac577f3767d3937661fe3d143995b
SHA512 d9a3e101f9dd41267225685bb3cfcc26b4a27c9149660dc2fc3d2892f90073bbaa74304a3a08825e2092a08bb47f5d0ea4c6864044a0127454509086ce1b70eb
SSDEEP 12:oOLabCAURw2sWlCBi49blqYFl3t85+/0Fl6sfd/hv:oKabC3JV499FZtwlF/lJ
TLSH
T1B072659171B4C613F2774B3C92E3DAC2313971A31B17D6167C036B0D68823918535706
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.fully.lantranslate.camtransltor/databases/google_app_measurement_local.db
Size 16KB
SHA256 b3f2773140d6bd25eadf027b2d831b25ece974292cc21e4aaa19998d6db872f4
MD5 dc872d95b9b1f4017e857edc094a844e
SHA1 f4cea7e8dc66a646a2af40e211861f0551963f91
SHA512 c0ddb54296d57e18201f518b9fa262c9c8c1a2c73c87601684f7819c183c69b25d4557ad1fd7ab7f4a9aa8d88271eaefe2d8aead45fc7692ab32c79d62b4e1bd
SSDEEP 3:o1TrHrZElllTlc/:onHr27l
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/com.fully.lantranslate.camtransltor/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 7c3478486fec230e8b2053ff8b5e90237fda5e24e5e31d71bd20789202bc9e1f
MD5 b64fdc7e1ae1ef8631749c5a05cf3214
SHA1 e3aed4d5a87a2f6cb7bcd8a950cd157fb2cd5324
SHA512 c0e046752b01ad8b2e40fc7a65545c845fa0f44bbf9e203953d5845007fe2c674447fc6f878cb8b3e8047c92c92eb462ab403752420d2d9c16fffc2117ac2507
MD5 SHA1 SHA512

Submit Download