Analysis

  • max time kernel
    147s
  • max time network
    153s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    18/08/2026, 19:08

General

  • Target
    bd2126954c6838ab954220d287eb89ede8109a7f942dc9b8b073abdc1bb68be5.apk
  • Size 9.6MB
  • Sample260818-xtltraah39
  • SHA256 bd2126954c6838ab954220d287eb89ede8109a7f942dc9b8b073abdc1bb68be5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 17 IoCs
  • Acquires the wake lock 2 IoCs
  • Queries information about active data network 1 TTPs 2 IoCs
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

  • Reads information about phone network operator. 1 TTPs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.bring.pressureback.tostability
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    PID:5048
  • com.bring.pressureback.tostability:Metrica
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5127

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        OneSignal.db

        • Path /data/data/com.bring.pressureback.tostability/databases/OneSignal.db
        • Size 52KB
        • SHA256 5459c7bd04b9c7ab4880a2ede508a4e1c690c35dd7f98d839d5ed9d75a4684f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OneSignal.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/OneSignal.db-journal
        • Size 512B
        • SHA256 ffddc85509553ed283a3b12b25871350752bb6c8835b17a9fcb1e58d215d1e40
        • MD5 SHA1 SHA512

        OneSignal.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 0a15c199426868daa36e49754625017e3278fe26c3916be5650e10a8315b2827
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OneSignal.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/OneSignal.db-journal
        • Size 12KB
        • SHA256 e79fda638c9cc83a503fcb6cc91e110a7bb552701f4593b9426532a38c5566e5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events

        • Path /data/data/com.bring.pressureback.tostability/databases/com.google.android.datatransport.events
        • Size 40KB
        • SHA256 e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 e7c292890a27a14d97d4ce04b1454827d18032d2e36065b67a69ae485f9d6be3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 3bc8fe1c6c6e7a14fe83aa8863bdf4ba8cefb45198100d5a96c08613e6041852
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 073a5f4b2f33f4adc8bc2b5d23771d5fdf2013a7669dbd0099323becb74c2268
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 370977f97acba2bb7d7d48158dcda667e10fce38148ea4b3a469f0ac0f34e21e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c710478bbb21647c17eebaf61daa33de82596b546efdbd92050c83d1895ad7a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b14df793ceda0319d18e42719971c4530f6a7554f37a7e95e05b4aa315156709
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 3a5ba988d0c0db5d3991acab550e53e0d52d323b3696aaa8b0cc73134a88b8e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d54a80fc1c5adcdef8cd623a5fc95236fbc8fbed733c662577bbd689ca55bf4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2f487362f09a35294f79add8b4dee3f5739ded320b4b8470e7d56db1a21fa44e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 77fa99f3970aeae0ead003fb2af7d70513292abfb3dab899034b3f953c729731
        • MD5 SHA1 SHA512 TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 981c07330f0391c8ef17f8faea5bcc86c7f36c03207d2316fb5d6f71c2f43eea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db-journal
        • Size 12KB
        • SHA256 4043753f559d0be920e99de8678fe6e1f4b8627d6fb6dc4c5054bb417587557f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 2fe0c6455ebcfa9b8eed56a3f749103dac57814fc579402d089fa50c7e89d233
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 3b58e8323480c91a0d992a439af5f21a1064a32e18474cad4b156a9e1eae85e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 8749d3c32caea3fa98162470a92d38d468483def26603c4c9ed2a73963194b60
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation1870629074036385282tmp

        • Path /data/data/com.bring.pressureback.tostability/files/PersistedInstallation1870629074036385282tmp
        • Size 567B
        • SHA256 729bffec059aab6963ba6a2238792907590ad11fb817a90a146b39ae61488f3b
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation5046998194762256624tmp

        • Path /data/data/com.bring.pressureback.tostability/files/PersistedInstallation5046998194762256624tmp
        • Size 20KB
        • SHA256 9c7ac460446763e0e8655a45a58133fb619955fbd805b27ab7373f5e9ee29713
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation7502276428380148550tmp

        • Path /data/data/com.bring.pressureback.tostability/files/PersistedInstallation7502276428380148550tmp
        • Size 12KB
        • SHA256 9c00a035f456f3d34be3f424382290aecd46c677e1c3ba679f5f26f66adaeb7a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation8603249442645055327tmp

        • Path /data/data/com.bring.pressureback.tostability/files/PersistedInstallation8603249442645055327tmp
        • Size 568B
        • SHA256 3dc0196c0d7886010e1663f9329f1a47a5a81590aabb93fbff6edb2af0eb1a16
        • MD5 SHA1 SHA512 TLSH

        frc_1:354462630105:android:171c2278a4a6fab4e47ec8_firebase_fetch.json

        • Path /data/data/com.bring.pressureback.tostability/files/frc_1:354462630105:android:171c2278a4a6fab4e47ec8_firebase_fetch.json
        • Size 108B
        • SHA256 c53e8c04ef72a256e4b16968fc225a9afef12810501f45c372f3ca6e58dea50b
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb

        • Path /data/data/com.bring.pressureback.tostability/no_backup/androidx.work.workdb
        • Size 8KB
        • SHA256 254d08d3ce00bf8a035ea14e377af8073246e6c2accdb7756549786b588583d3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/androidx.work.workdb-journal
        • Size 12KB
        • SHA256 15f3fcd6bf6d74541d5812d72203cd039c81ce51ee8af826b1f11eb30ab4a23b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-shm

        • Path /data/data/com.bring.pressureback.tostability/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 2709500e2061de16d0c8d3630da949d0ac27ab330f28e413eb337893ca8bfdb2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 6a26bcce02a52b32f572ea2e9e637fdf41342d0ba127381bb7b5ba259d10569d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/androidx.work.workdb-wal
        • Size 181KB
        • SHA256 37f57a95d4b00090c75a2d34a362436b349010ce94308a07030ae9b064fd9b97
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/androidx.work.workdb-wal
        • Size 20KB
        • SHA256 d29a07fb2f2e2c49b8c6304c3cba9cac9f252f2e153047a8b0e71b3a9fca8eb3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        db_metrica_com.bring.pressureback.tostability_20799a27-fa80-4b36-b2db-0f8141f24180

        • Path /data/data/com.bring.pressureback.tostability/no_backup/db_metrica_com.bring.pressureback.tostability_20799a27-fa80-4b36-b2db-0f8141f24180
        • Size 36KB
        • SHA256 cdaae2c54a97a0b62dd977b9c9f4f3aacaf701c670d67915eb741dc2b7360ef9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        db_metrica_com.bring.pressureback.tostability_20799a27-fa80-4b36-b2db-0f8141f24180-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/db_metrica_com.bring.pressureback.tostability_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 8KB
        • SHA256 f571f7471876e43365dc2d2a652b28f1dfe2252f5e2b6a2d62a1c9a45acec547
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_aip.db

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_aip.db
        • Size 20KB
        • SHA256 7ad1c5b9e544fffa69dc62e0ffebdddfa9e86162683d7ff64b840a2d9919511c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 9ed38b925ee08ba2ca995e2839857b5b2cb1fe015699c8fe1a8ab445f6349607
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 33d641692c8b6e5203ebec80c90a374150bb13937cadeb73a1dff5892b248a54
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 63eb0c6b4db35062c2b226ea12c7fcd6c5807696c04f55f4456d79e447896493
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 a46f84c25f026aedc6d30f4b817cbe4a8fca30ab88440a801ea00cf83b771cd2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 af2941d05f2bb91c476f1e30b6a03199d4f28fe33df40f1e67c521bdc7f4913e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 68ea178bd1ae24a4f7db8760054f7773a65d3c6b6d63a9699805e1573a2f36da
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 21b399c2309e912a7a73003020df82ce3d2b1b5f3af86fb4242b0ff0d99e644c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db-journal
        • Size 36KB
        • SHA256 a4878a8665e68499344d8349899e5865d5f3b3b1573e35033a087b02cce0710d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 29702d0ae8d9a2b21e8d468d86c3f3a3b619a29302c8c987fef7fdc8f702b796
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 156dbea04e105c773414b8907acd1ba112e943584e00c03e8f5e07a7ee148beb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 ce716d85f7ec25a3b2b55daa994a3a55fa661a57ffc46936e2116d710efa308d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 1edf7813d2b07f2f0b0d6f48941035b353958eced60679acbad673541f7b0708
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 a6ca9b0c8dff00458242e3e372559d65e7c2eea198c3c32f947846f68670c5d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_data.db

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_data.db
        • Size 44KB
        • SHA256 7dc914a2bc652d4d6085187e0a6c95fe95795553cb521ac8602b5206ddcea22d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_data.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_data.db-journal
        • Size 12KB
        • SHA256 d579d56542a923df2fef16c9c147dbd09e6f682f3f1ffbb6a1b4a27bddb7d2c2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_data.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_data.db-journal
        • Size 8KB
        • SHA256 19ab783ebf9e277dafee23a89f50892e00728b26c0d5e171634e51715c7ac133
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uuid.dat

        • Path /data/data/com.bring.pressureback.tostability/no_backup/uuid.dat
        • Size 512B
        • SHA256 e0f2dc3e1cf1d088787e743c419e33ffa60b750cd63eb93549c99228113ea952
        • MD5 SHA1 SHA512