Analysis

  • max time kernel
    125s
  • max time network
    137s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    19/08/2026, 01:53

General

  • Target
    eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5.apk
  • Size 10.6MB
  • Sample260819-cbg3mack2s
  • SHA256 eb46541e2991a20c20fca66e51a705a309e6576296c435126ac369ba41e6bff5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.pdfdocuments.quickscannerapp
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:5045

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1582435991586.jar

        • Path /data/data/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar
        • Size 9KB
        • SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        1582435991586.jar.cur.prof

        • Path /data/data/com.pdfdocuments.quickscannerapp/cache/oat/1582435991586.jar.cur.prof
        • Size 148B
        • SHA256 c5e6754556dbe01b055066f23c28ddaaf5fe67cee4baed00d59dc993335b3d97
        • MD5 SHA1 SHA512 TLSH

        pdf.db

        • Path /data/data/com.pdfdocuments.quickscannerapp/databases/pdf.db
        • Size 12KB
        • SHA256 885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pdf.db

        • Path /data/data/com.pdfdocuments.quickscannerapp/databases/pdf.db
        • Size 4KB
        • SHA256 edfa4ae4b326ad2b092ea797a2d596bd23b01ee2c47cea9cb9a451e6001a912f
        • MD5 SHA1 SHA512 TLSH

        pdf.db-journal

        • Path /data/data/com.pdfdocuments.quickscannerapp/databases/pdf.db-journal
        • Size 512B
        • SHA256 e33be5485138d263b20d4a0dada27681a873067d5887f1ca0add2cfd83575911
        • MD5 SHA1 SHA512

        pdf.db-journal

        • Path /data/data/com.pdfdocuments.quickscannerapp/databases/pdf.db-journal
        • Size 8KB
        • SHA256 efa16434cb44a298b11c65ac95da6e865d74848e10981ed1f46335a8a04649c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pdf.db-journal

        • Path /data/data/com.pdfdocuments.quickscannerapp/databases/pdf.db-journal
        • Size 4KB
        • SHA256 3f5216bdded40cd68445206172c729d4c3eb00eb820fc11bb3f0696cec149d53
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pdf.db-shm

        • Path /data/data/com.pdfdocuments.quickscannerapp/databases/pdf.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        pdf.db-wal

        • Path /data/data/com.pdfdocuments.quickscannerapp/databases/pdf.db-wal
        • Size 4KB
        • SHA256 cc6329cd98b9c991c7b316790fef82bb8b308b81b94fbc7e36bc4a58b3428ab9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        1582435991586.jar

        • Path /data/user/0/com.pdfdocuments.quickscannerapp/cache/1582435991586.jar
        • Size 20KB
        • SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
        • MD5 SHA1 SHA512 SSDEEP TLSH