Analysis

  • max time kernel
    132s
  • max time network
    152s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    18/08/2026, 19:20

General

  • Target
    bf965b33dabbf436747fa9ce347e2fcd1826b9de99391ddc0feeef10a6f99b4f.apk
  • Size 5.8MB
  • Sample260818-x2afpayfkc
  • SHA256 bf965b33dabbf436747fa9ce347e2fcd1826b9de99391ddc0feeef10a6f99b4f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.alang.campro.translates
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:5059

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1598581401714.jar

        • Path /data/data/com.alang.campro.translates/cache/1598581401714.jar
        • Size 9KB
        • SHA256 d44cfb6b41231f150cf310c7c4d399be9587294e3727197e046db4a1c2c3ca3b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        1598581401714.jar.cur.prof

        • Path /data/data/com.alang.campro.translates/cache/oat/1598581401714.jar.cur.prof
        • Size 153B
        • SHA256 f789d835e16992722abd153f23ad683832e740b04d4411ecb1abe10aa9541b80
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb

        • Path /data/data/com.alang.campro.translates/databases/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.alang.campro.translates/databases/androidx.work.workdb-journal
        • Size 512B
        • SHA256 ad0cb39eb126fc1c3b1e616d5b24de53849e326ae7b368c55428079451c2f309
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.alang.campro.translates/databases/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.alang.campro.translates/databases/androidx.work.workdb-wal
        • Size 88KB
        • SHA256 d759c672a098e1d1b150673849e3e5ca68716ffa93680c7f26cf41c7ab685f28
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.alang.campro.translates/databases/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 f5a10b12fac3eeaa10b7c4e7c968af2d8499e2cd486958b51598e98f3c512f28
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events

        • Path /data/data/com.alang.campro.translates/databases/com.google.android.datatransport.events
        • Size 40KB
        • SHA256 e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.alang.campro.translates/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 bab2f918af5599acc7c7a61a16ea11ee95435e3912689d39388119ee0f50d40f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.alang.campro.translates/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 135095375f6e6342716f0ec0a65e1882f44ced5c8910818bbc18e8d8068bad4c
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.alang.campro.translates/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 af5aae7916c41c2f2cc0b2c0f33fb59e5bff61971b6d6d67e47132978eae1d62
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db

        • Path /data/data/com.alang.campro.translates/databases/google_analytics_v4.db
        • Size 28KB
        • SHA256 f1ea0173670044c6cb238e94cf9b0553ebfce269e8fd78d4ad13d900d84e22f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_analytics_v4.db-journal
        • Size 512B
        • SHA256 43462ac5e3ebde20da57a190da7d09452c5ece696ca8171c80da7597fb7ccd96
        • MD5 SHA1 SHA512

        google_analytics_v4.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 a6bd3dfcc0abc367cdb0dfef4b603a0efa7018b2caa1f7141a9dd20d78fbeb57
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_analytics_v4.db-journal
        • Size 4KB
        • SHA256 5de9b153c303be974bfaa93156dfb14ff2622c0ec96a2dd9937a495fa77f152a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 16daa59787d2fb5ec9aeefe0b3e9a3d32e67d781f227b9385cf1b29f70c9a5b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 15c3d0af43403d0c6a7b564d2f3f703b1caff7982c3bdec2673bc3925f2004a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_analytics_v4.db-journal
        • Size 12KB
        • SHA256 e39b0b4aa03b32892d0e414ecc1ec95b5f86a1197adb3a70d69de32ce1ea2ccb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 cd998b8efd58bb1711c688c95e2e131a63bd261bcf1515173f432d36a09720c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 dd5b189d90bff4b43961fc5505a6aa72c1e29cb9e6e1b6caf6ce12fafabb7fb2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 8ec6dc4ffab2b8f7f67c421aff7bede6fe32e40ce319cfcd8693b96dc90b8816
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b64ea8b931f62d4fceb3f32bdf8a3e480f9880eccdb87a85ce6bd39416cf46a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 458aa953a9e0adbf5b8765ebcf6b51bc5b5a48b7664e85d25c7a8ce9781a2d5c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 d8f7dbeaaf57eca4a105cf6b5e7240d69889fa841bf300d68d0208a2ac5f6864
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 587a6ec71a3fd0d7223c14083e771ec602b89e1817edefd04b0e57b2b85aea25
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 e87f5d0debf01761756688930249e4ab9d15760ec796f0d62b99256c545f76af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 de9d241040986383bdfbfc2156069c424a9200d4e2e80c2853b7003ef685d4c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 35fee1c6bbb0e5bb003e0f7bab451190f5b477a589f3a2168f274edb85b357a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 8f4c8059ed87fd8c69cf8c773c9b824ff13332751d74ca84e0768faa0722e7ee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        6A84B0830103-0001-13C3-978703BEAAA9BeginSession.cls_temp

        • Path /data/data/com.alang.campro.translates/files/.com.google.firebase.crashlytics/6A84B0830103-0001-13C3-978703BEAAA9BeginSession.cls_temp
        • Size 75B
        • SHA256 7c927b5150caa08b5df7f0afb83101138fb6c438a719fd1e6099432a0d994964
        • MD5 SHA1 SHA512 TLSH

        6A84B0830103-0001-13C3-978703BEAAA9SessionApp.cls_temp

        • Path /data/data/com.alang.campro.translates/files/.com.google.firebase.crashlytics/6A84B0830103-0001-13C3-978703BEAAA9SessionApp.cls_temp
        • Size 75B
        • SHA256 07ba01965e70ce154232eda36b831fcd1f35f7a07f994c399ac3fa53233dfa4a
        • MD5 SHA1 SHA512 TLSH

        6A84B0830103-0001-13C3-978703BEAAA9SessionDevice.cls_temp

        • Path /data/data/com.alang.campro.translates/files/.com.google.firebase.crashlytics/6A84B0830103-0001-13C3-978703BEAAA9SessionDevice.cls_temp
        • Size 49B
        • SHA256 8103c28e4cddc0f3581e6189c4fc01bdce57c4c4ed292222989d5d1f765fb20b
        • MD5 SHA1 SHA512

        6A84B0830103-0001-13C3-978703BEAAA9SessionOS.cls_temp

        • Path /data/data/com.alang.campro.translates/files/.com.google.firebase.crashlytics/6A84B0830103-0001-13C3-978703BEAAA9SessionOS.cls_temp
        • Size 15B
        • SHA256 e78068dac7c1adce8676a309d60abb8be4d31ab3dd5c6bdce85284b7ca8e8761
        • MD5 SHA1 SHA512

        com.crashlytics.settings.json

        • Path /data/data/com.alang.campro.translates/files/.com.google.firebase.crashlytics/com.crashlytics.settings.json
        • Size 768B
        • SHA256 70064e8721f271f76101d51873601aa069b494cd1000242b37f7187cfcf71610
        • MD5 SHA1 SHA512 TLSH

        crashlytics-userlog-6A84B0830103-0001-13C3-978703BEAAA9.temp

        • Path /data/data/com.alang.campro.translates/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A84B0830103-0001-13C3-978703BEAAA9.temp
        • Size 190B
        • SHA256 1eb998f46203ae94a99e2522d9fef994ec1be6dba6fd48d65503cf5fe797fc36
        • MD5 SHA1 SHA512 TLSH

        crashlytics-userlog-6A84B0830103-0001-13C3-978703BEAAA9.temp.tmp

        • Path /data/data/com.alang.campro.translates/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A84B0830103-0001-13C3-978703BEAAA9.temp.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        report

        • Path /data/data/com.alang.campro.translates/files/.com.google.firebase.crashlytics/report-persistence/sessions/6A84B0830103000113C3978703BEAAA9/report
        • Size 747B
        • SHA256 4f462f7dcd6446f2251674a3aec63bc07d6f585c7ccf9a95e592abbcccbe331d
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation2076591364590624940tmp

        • Path /data/data/com.alang.campro.translates/files/PersistedInstallation2076591364590624940tmp
        • Size 90B
        • SHA256 dd86517cbc47c14592e9b4747b4b0fc58163f50e9d4805302f869c97d4e76861
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation4707756665213234879tmp

        • Path /data/data/com.alang.campro.translates/files/PersistedInstallation4707756665213234879tmp
        • Size 568B
        • SHA256 12c277bb4170fc445421092bd2dd1b09720f4853f79f7652e93473b8917d34aa
        • MD5 SHA1 SHA512 TLSH

        gaClientId

        • Path /data/data/com.alang.campro.translates/files/gaClientId
        • Size 36B
        • SHA256 c2b9e06cdb2ab579198605c350d90f1f63c229f518b62b7cc7d7b0dce4131f77
        • MD5 SHA1 SHA512

        1598581401714.jar

        • Path /data/user/0/com.alang.campro.translates/cache/1598581401714.jar
        • Size 19KB
        • SHA256 84009ae4f9125e2d61a670b88e41ad81bba2161dc0910b4506ef6356f0ebeb78
        • MD5 SHA1 SHA512 SSDEEP TLSH