Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    18/08/2026, 19:08

General

  • Target
    bd2126954c6838ab954220d287eb89ede8109a7f942dc9b8b073abdc1bb68be5.apk
  • Size 9.6MB
  • Sample260818-xtltraah39
  • SHA256 bd2126954c6838ab954220d287eb89ede8109a7f942dc9b8b073abdc1bb68be5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 17 IoCs
  • Acquires the wake lock 2 IoCs
  • Queries information about active data network 1 TTPs 2 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.bring.pressureback.tostability
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    PID:4763
  • com.bring.pressureback.tostability:Metrica
    1⤵
    • Checks if the Android device is rooted.
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4844

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        OneSignal.db

        • Path /data/data/com.bring.pressureback.tostability/databases/OneSignal.db
        • Size 52KB
        • SHA256 c776d1acf90c60f95a89ee4db8222acedc8e0b097d5606297aa641a3403821ee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OneSignal.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 fb398f584f18bfae201703c3cdda228668e7e699bc8319708a97de1d25a80fc5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OneSignal.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/OneSignal.db-journal
        • Size 20KB
        • SHA256 f4efff1b445dff5663d161970545203a680d8e3fc406d56761f19ebb64fa7631
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OneSignal.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/OneSignal.db-journal
        • Size 20KB
        • SHA256 44ac4d170cff12258021ffcb238de00b249b5ce3b5c6d9488b3aec085d21ce95
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events

        • Path /data/data/com.bring.pressureback.tostability/databases/com.google.android.datatransport.events
        • Size 40KB
        • SHA256 100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 2486860e5797bb08dc70b59ba90e104115f7d3487440177248bbf41c1ede3001
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/com.google.android.datatransport.events-journal
        • Size 12KB
        • SHA256 0bec98d9d35261ef624f6e4279f0810a4df443dd2926cfa3bf8b127f76bde45a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/com.google.android.datatransport.events-journal
        • Size 44KB
        • SHA256 fd961b8df86a6304d2568217f210b4555eee500dfdd8d9e3b72154aed53b9f4d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1180cacea01aa1c94eb8402f19aac308458ef366b05aab172e20fe3a68149af8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 6bdf3b212d47efa0f9bfcbbdaca53aceded154c9c54ddbf744aa1eba0ed2c9ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 e9fc0c5a7a08df464a53e7841a989d1e996a2be15adb8d30f0a3cb4c64f50d93
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1fc5d74844c603ac7d0e85f713c4eb2bc50c78826300f79ed6527b1b9f7dae57
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 6b48747e1ccd069e78904ebe1545b94943d834c195441dd0e897b03636199055
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d4312c8c7928bf2ad57b8e892a88b116adc9e56937fdb58f0ed0d23c1991d391
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 430d3c924231311b8a26a77ea19f07b51cc65bfa5d10d4abcd42ec98d4b2013a
        • MD5 SHA1 SHA512 TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 b8f02148b03d6c581f50986c585aaea03ae151c338cd6b8c88c69e131096c97a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db-journal
        • Size 12KB
        • SHA256 23dc3ffdb64fcc11f49d79bd2fb36c647746df6a23e3f3797cf88dd96e04ae4f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db-journal
        • Size 20KB
        • SHA256 1d44fc165486a0ec41fadf5f3b24b32ba2d09d3f89d78883fd6a7881ffc1f81f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 2bf34bcf3a4b05b21cc1e91352ed1e0224cc06ac0273ebe77a1317a676361b09
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.bring.pressureback.tostability/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 487939119dfb4ab7d52e5ea67dd1f08d457a34e010068091f10400bfb22b0940
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation2484060674395082131tmp

        • Path /data/data/com.bring.pressureback.tostability/files/PersistedInstallation2484060674395082131tmp
        • Size 12KB
        • SHA256 3e253cb8020a33e98849895237fcef021e960e53c522b2629ddd386fc7a66d15
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation5127969906739517266tmp

        • Path /data/data/com.bring.pressureback.tostability/files/PersistedInstallation5127969906739517266tmp
        • Size 12KB
        • SHA256 9e77fd7aefd84190fda315680e5010897f38841fda40d0199e81511a03f65968
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation7546238755458455172tmp

        • Path /data/data/com.bring.pressureback.tostability/files/PersistedInstallation7546238755458455172tmp
        • Size 8KB
        • SHA256 ebff78f33a8e3ef74c9bff0b5bf9cd516cd46f066b3d168873575890be3c7d2a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation8524712077880993887tmp

        • Path /data/data/com.bring.pressureback.tostability/files/PersistedInstallation8524712077880993887tmp
        • Size 12KB
        • SHA256 be61eb6605ded95eef7048ab64c197eb971721b1c284addb70024a44464d5aa5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        frc_1:354462630105:android:171c2278a4a6fab4e47ec8_firebase_fetch.json

        • Path /data/data/com.bring.pressureback.tostability/files/frc_1:354462630105:android:171c2278a4a6fab4e47ec8_firebase_fetch.json
        • Size 108B
        • SHA256 096e0ac433d5c130e2ff23496c4cad82708e9c49aca0bf7aeeda608fc2d153ee
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb

        • Path /data/data/com.bring.pressureback.tostability/no_backup/androidx.work.workdb
        • Size 20KB
        • SHA256 52e47b0aa0c26ca6cb3cfbdcb90e3635a6f69cc3b2db45956461a1ca2d3d8cfe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/androidx.work.workdb-journal
        • Size 8KB
        • SHA256 bdf401a89710d8f3f514f49606e778cb8b414a3e72d1d05be70a2975a809edbf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-shm

        • Path /data/data/com.bring.pressureback.tostability/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 2f67dce0765c8a10836560653f852725a190779057a1f492e8f1f1334a1995fd
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/androidx.work.workdb-wal
        • Size 36KB
        • SHA256 bed7b66f7327a873efea7d48a0c4eac097516bf2ef3fb24e5e7c6b4e000bed67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 33b9a64c3a5b6440582bd69d0e15992323e75c2b5f4b8bad032c6b5f5c2d7445
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/androidx.work.workdb-wal
        • Size 181KB
        • SHA256 66613fdf705699d116644ef8c6e4044c2610b91af0598bc9500c61de4aeee448
        • MD5 SHA1 SHA512 SSDEEP TLSH

        db_metrica_com.bring.pressureback.tostability_20799a27-fa80-4b36-b2db-0f8141f24180-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/db_metrica_com.bring.pressureback.tostability_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 512B
        • SHA256 2b99767263304b2ccafa62531d916eb081fec27ad9c9962197cdf1b8b1ffe223
        • MD5 SHA1 SHA512

        db_metrica_com.bring.pressureback.tostability_20799a27-fa80-4b36-b2db-0f8141f24180-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/db_metrica_com.bring.pressureback.tostability_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 8KB
        • SHA256 4351905916ddceab5b2504e43fc067fcd71dc3c79539dd978ec3a8c79f9c2d05
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_aip.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_aip.db-journal
        • Size 512B
        • SHA256 5673b404beeadecd6ef35d2e486ad131c8b2a3c68ffbbf6d0d814dfe2449f3ef
        • MD5 SHA1 SHA512

        metrica_client_data.db

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 e17555bbbf301e65b820c0a6038a2b575ff8856e5c637cd3b56f999b5c56baf1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 0d4d80efd3fb029ad994d81eaa75448504584fc3dabed696e253294e09c0a2e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 f10b19a0beef17f3e418f60b7f69de039276f0885998eaa57e01155a33713454
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 9b2703215a042c45fa2ee52758fa4a5e87cb6800b55103b6fabaa9118d519545
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 394cc6948bb57f133131882e5d22131b8faf3282c2d84b585a6ee7cdbdefa581
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 cbc27f80a1fcb0d98e290762bbe37782b05b2769d304c439abc628fbb3c85c1e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 853fa67c78453c3505e2df553c09846f6ce80c3799476315aa383a395ab833b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 f388128dfe5ec09b7b5c3a43dbaa9aebd95d968559e7178195b624e22fa38ab4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 fbd0f4263f3e676769193ce4138ca2c1fa4cdc37ce5c62b9617d778dca4e2709
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 9bdca6f2d452f730f58c7250863a7b74d3d8f0244f4a38561a1b003026d7bed2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 e998294b015718da7db3c92008098c2b0208c7f4b0a9b07d80e99f755a99c926
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 2df585d7a65ea369c01c4fd9fe27d0095e62af2da3dc5a1695fdf535bbce731b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_client_data.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 a5ef2cabf64343a44bb95bfbf29bc562ca4b1faccc3c8ce72595c6a8ea87198b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_data.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_data.db-journal
        • Size 12KB
        • SHA256 02f07637a777a8cec7b79c55ddaf36b2d014aa2073d8dfe054d665bafdeaa035
        • MD5 SHA1 SHA512 SSDEEP TLSH

        metrica_data.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_data.db-journal
        • Size 512B
        • SHA256 b802b2ec487e82e905035ac48a9a315346422e01e8e7bbe1b305e6a364fa0b5a
        • MD5 SHA1 SHA512

        metrica_data.db-journal

        • Path /data/data/com.bring.pressureback.tostability/no_backup/metrica_data.db-journal
        • Size 8KB
        • SHA256 3ce17944049adcca67b144da792e3303f682ed35b79d005671cc7af21da38810
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uuid.dat

        • Path /data/data/com.bring.pressureback.tostability/no_backup/uuid.dat
        • Size 12KB
        • SHA256 e748290d31c4a8ee5df1d484222eae5cac08358e12cfa82c781fa11786126a4c
        • MD5 SHA1 SHA512 SSDEEP TLSH