Overview

overview

10

Static

static

10

e939e9c32b...00.apk

android-9-x86

10

e939e9c32b...00.apk

android-10-x64

10

e939e9c32b...00.apk

android-11-x64

10

Analysis

  • max time kernel
    129s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    18/08/2026, 23:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    e939e9c32b65e10e295056d8d535e78b0a9efd26da3de036e83b3b0e9147c000.apk
  • Size 12.5MB
  • Sample260818-3a2nrasemf
  • SHA256 e939e9c32b65e10e295056d8d535e78b0a9efd26da3de036e83b3b0e9147c000
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
googlediscoveryevasionphishing

Malware Config

Signatures

  • Detected google phishing page

    Potential google account phishing

    phishinggoogle
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
    discovery
  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Processes

  • com.leeqin.coolmms.sms
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    PID:4703

Network

        MITRE ATT&CK Enterprise v16

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        google_app_measurement_local.db
        • Path /data/data/com.leeqin.coolmms.sms/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.leeqin.coolmms.sms/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b29ae1ae334f32a389e6f294eea1c769ccaf3c3bbc7df173991737d0c3f48773
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.leeqin.coolmms.sms/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9fc4fff2aa535187af66192f739a0cd1542f49997be9f0ccde3cb64d145abb33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.leeqin.coolmms.sms/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 cdfc298d2a3b9d272fef2aa00372cd99d51bf7b0f5d2af113b4bd7ce150fb4dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.leeqin.coolmms.sms/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1d91907005b378bab2dc4af77959556cc74c403f4ce3b0112869df2c2cf47af1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.leeqin.coolmms.sms/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 7abe12df7626bec5812816e3094f23cd5a81e8bfadf53cd204399c35ff3b9ae4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.leeqin.coolmms.sms/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 774be50aa80cda8a7a0c681fee4d11899ff4549c328a0d7a7218735b94eadb4f
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.leeqin.coolmms.sms/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 d66dead7ee540152a6032fefde4f4650221412be72a2720c3e0372825ecc22a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.leeqin.coolmms.sms/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 6a60824b013bc7ff85a88e798ce3b4f68905509a082449e73056d2ea09f06d2d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.leeqin.coolmms.sms/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 aa16c797584215488ca706e218019b66e61643cecda0e7b98494ea0094f55a6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.leeqin.coolmms.sms/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 cc416ef37af0121010a60aa2d127f71d73a300537c1f66b8643cf47b2028b30b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.leeqin.coolmms.sms/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 570a56eae7fa32ec56b416bc1b07aa05e8ed1aa632150fe7de6663bdba2c656b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation5764662334243578077tmp
        • Path /data/data/com.leeqin.coolmms.sms/files/PersistedInstallation5764662334243578077tmp
        • Size 569B
        • SHA256 083f252776bcc5c389d4a0f5309fd494e3fdf155173fd670d80f01f16d72a46e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation6101083881916810812tmp
        • Path /data/data/com.leeqin.coolmms.sms/files/PersistedInstallation6101083881916810812tmp
        • Size 90B
        • SHA256 6925ed31de98a739cd9db3c14f8328da99deed5474fcbc9d1ba13aba0b735b23
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.leeqin.coolmms.sms/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.leeqin.coolmms.sms/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 a88635a7603513c0ae1a02fbaea3e741687f43eb12f7b34fa609f1dae6a223ff
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.leeqin.coolmms.sms/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.leeqin.coolmms.sms/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 7b3aa9190618042d2cba1266ea1a8496cfbf018988c696cf4016a7642ffadad9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.leeqin.coolmms.sms/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 69309b87ab27672bd624c0c688641fe4ed057fbdfd67dfc094576e03b4c7f958
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.leeqin.coolmms.sms/oat/x86_64/[email protected]
        • Size 527B
        • SHA256 d027b39f5ecf2e3c6082ca43b438a90a4342ba74a9127940e927b4086f5212bf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/user/0/com.leeqin.coolmms.sms/[email protected]
        • Size 3.2MB
        • SHA256 920e465a87a2409fc8d7186ea4e319c613c04d156bec75e8b91cb4d07b1deb75
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download