Analysis

  • max time kernel
    131s
  • max time network
    152s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    18/08/2026, 19:20

General

  • Target
    bf965b33dabbf436747fa9ce347e2fcd1826b9de99391ddc0feeef10a6f99b4f.apk
  • Size 5.8MB
  • Sample260818-x2afpayfkc
  • SHA256 bf965b33dabbf436747fa9ce347e2fcd1826b9de99391ddc0feeef10a6f99b4f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.alang.campro.translates
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4823

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1598581401714.jar

        • Path /data/data/com.alang.campro.translates/cache/1598581401714.jar
        • Size 9KB
        • SHA256 d44cfb6b41231f150cf310c7c4d399be9587294e3727197e046db4a1c2c3ca3b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb

        • Path /data/data/com.alang.campro.translates/databases/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.alang.campro.translates/databases/androidx.work.workdb-journal
        • Size 512B
        • SHA256 0694837b6fdcd36873c4376cf6356dc346848694cd569a481313913a929aad8f
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.alang.campro.translates/databases/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.alang.campro.translates/databases/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 acbc2f4d3746edb7484135fc61ea6439efa4c9560cf2d23596939b33cae8e561
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.alang.campro.translates/databases/androidx.work.workdb-wal
        • Size 88KB
        • SHA256 fca745bd61d288aaeaee9a44a05e93cc29bf6d095d78828cdc6a7926a984db90
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events

        • Path /data/data/com.alang.campro.translates/databases/com.google.android.datatransport.events
        • Size 40KB
        • SHA256 100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.alang.campro.translates/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 9861b6ff72bec22a31be26d8ed06ba738e0a440493e3808f01e619a49d453de0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.alang.campro.translates/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 313e884244530cc199127e03a175e02569e6d34c82a57739e1aca8bb3b44ca82
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.alang.campro.translates/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 87f5a3c1d12521276fbc621e5799c6715cdbcbfcb79ee23bf6ce4831c9db7d29
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db

        • Path /data/data/com.alang.campro.translates/databases/google_analytics_v4.db
        • Size 28KB
        • SHA256 6e46f31d22b35e0ba0655145daa63963104b291c0e29ec70217c20410a67a5c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_analytics_v4.db-journal
        • Size 512B
        • SHA256 b2471f5a28938dfedb5a722713693d130fb6b88d02b9909cf2e41c220a29b699
        • MD5 SHA1 SHA512

        google_analytics_v4.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 a7de5a36ca1b4c4a3dcb5d42c91b6566fbe54facea1dcc498982320d705a6f82
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_analytics_v4.db-journal
        • Size 4KB
        • SHA256 78efbf9b82438bf11412d47831085fcae8a45ba31461f09a7f064abd66cbb584
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 3333233ad15c38e54e9858475b896de4cf7aeb45170739196848e01e35c826e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 2599e0fc03f72b01d863c2d93180c42969fc5b6d570f904b99aebb8b13d304a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_analytics_v4.db-journal
        • Size 12KB
        • SHA256 ee3d758b40035f1d25ad85cbf168c85e1cb7f3c8be2c63a006f517192f88eb43
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a7a1c4b1755f7aad6c9a058252a0d9d68a590bc40cec1628d7ebe175636b5c85
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 83b13ddb8dc8551c123d774d6cbf48a9140714f2e2fdfbf1b2e9a7425fde6d46
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 386fb93254cb1becd8d458391cf4fdc0e1d5b07ae5097fc9b1296f708f488aab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 416e859750f8b2bc3dda10c47beaee0b8438817a426167d5229e6e105f744690
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b4765a86f69c122307448d0c6e81cebd52ffbc59b0d19da42971e2857f773e6d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 ea33f83aae5c0de89bdb5e900c38777da263688c12cbc6768219b5c2f1bffe23
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 5f0e52e3f6f2044b8849010da34fe14649114b14a33366523f6fa07bb5389b3a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 b1f56c87a2d1d437e9e566d07f6ad998c264a009fc2ae0c5b34253fe37bd8b91
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 5debe943ef48723d00ff4fa659acaa6a05bdca9a5508885f523809f8a82cf45d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 8f989351de456fda9443dca3df1a90cc1cf7f817518554e90ddae0b6a47d4f48
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.alang.campro.translates/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 a1d3bcdab7c2b79fe7ce36bdb3ee13cfc4165eb077446cb52d17b8a0e31d7529
        • MD5 SHA1 SHA512 SSDEEP TLSH

        6A84B08201FA-0001-12D7-46374ECFB85EBeginSession.cls_temp

        • Path /data/data/com.alang.campro.translates/files/.com.google.firebase.crashlytics/6A84B08201FA-0001-12D7-46374ECFB85EBeginSession.cls_temp
        • Size 75B
        • SHA256 daa2bb2ec693eb2b7c883189e65461b5bcd2d64847cae1380ea8e42136facc01
        • MD5 SHA1 SHA512 TLSH

        6A84B08201FA-0001-12D7-46374ECFB85ESessionApp.cls_temp

        • Path /data/data/com.alang.campro.translates/files/.com.google.firebase.crashlytics/6A84B08201FA-0001-12D7-46374ECFB85ESessionApp.cls_temp
        • Size 75B
        • SHA256 4f607ceead129f4eb95a8bcc9709035e3f0ac62c8b837d8b711d77f018802d56
        • MD5 SHA1 SHA512 TLSH

        6A84B08201FA-0001-12D7-46374ECFB85ESessionDevice.cls_temp

        • Path /data/data/com.alang.campro.translates/files/.com.google.firebase.crashlytics/6A84B08201FA-0001-12D7-46374ECFB85ESessionDevice.cls_temp
        • Size 49B
        • SHA256 ec664092a3596d487e39269cc43b1c24502473f0c666e4f91b808394a974a60f
        • MD5 SHA1 SHA512

        6A84B08201FA-0001-12D7-46374ECFB85ESessionOS.cls_temp

        • Path /data/data/com.alang.campro.translates/files/.com.google.firebase.crashlytics/6A84B08201FA-0001-12D7-46374ECFB85ESessionOS.cls_temp
        • Size 15B
        • SHA256 94db7df32f7024d43abbedd5433d0a39a8dfe652621d40e7647af527fb5a2150
        • MD5 SHA1 SHA512

        com.crashlytics.settings.json

        • Path /data/data/com.alang.campro.translates/files/.com.google.firebase.crashlytics/com.crashlytics.settings.json
        • Size 768B
        • SHA256 946c1e4e8442e538ed71816291295e9ded0b8fa031fa8af65ff722982a457e5e
        • MD5 SHA1 SHA512 TLSH

        crashlytics-userlog-6A84B08201FA-0001-12D7-46374ECFB85E.temp

        • Path /data/data/com.alang.campro.translates/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A84B08201FA-0001-12D7-46374ECFB85E.temp
        • Size 190B
        • SHA256 0443dbef03645b96a1509e6240a72c0225fcf111d5df6b28289ebb818bdc840b
        • MD5 SHA1 SHA512 TLSH

        crashlytics-userlog-6A84B08201FA-0001-12D7-46374ECFB85E.temp.tmp

        • Path /data/data/com.alang.campro.translates/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-6A84B08201FA-0001-12D7-46374ECFB85E.temp.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        report

        • Path /data/data/com.alang.campro.translates/files/.com.google.firebase.crashlytics/report-persistence/sessions/6A84B08201FA000112D746374ECFB85E/report
        • Size 747B
        • SHA256 a72b05fc1f97567ced24ab5c97948bf62b73a2aa0547d1a7c42a80267a58acef
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation2790464427730780861tmp

        • Path /data/data/com.alang.campro.translates/files/PersistedInstallation2790464427730780861tmp
        • Size 90B
        • SHA256 bd593ed8f191a471861a020cf706b0ab3e977a454f4623a5a16007bff7ddcd06
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation9193620981362070494tmp

        • Path /data/data/com.alang.campro.translates/files/PersistedInstallation9193620981362070494tmp
        • Size 569B
        • SHA256 6852ad2e5cd584c5b8d7a942e34ba15a2f4ce479017ae8d6aebeece43dc5e92a
        • MD5 SHA1 SHA512 TLSH

        gaClientId

        • Path /data/data/com.alang.campro.translates/files/gaClientId
        • Size 36B
        • SHA256 30742cd72808cd7ff593a1919bc5901cb559fb94efd911cd3c2b06308ab55107
        • MD5 SHA1 SHA512

        1598581401714.jar

        • Path /data/user/0/com.alang.campro.translates/cache/1598581401714.jar
        • Size 19KB
        • SHA256 84009ae4f9125e2d61a670b88e41ad81bba2161dc0910b4506ef6356f0ebeb78
        • MD5 SHA1 SHA512 SSDEEP TLSH