Analysis

  • max time kernel
    42s
  • max time network
    150s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    20/08/2026, 09:48

General

  • Target
    47effa257006696bd58ff0ecdd67454f8346dfd83ea2ee627aacdccf3b23be6e.apk
  • Size 11.6MB
  • Sample260820-lss1wsxtby
  • SHA256 47effa257006696bd58ff0ecdd67454f8346dfd83ea2ee627aacdccf3b23be6e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Checks the presence of a debugger
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.personal.text.sticker.maker
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Checks memory information
    PID:5062

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        journal.tmp

        • Path /data/data/com.personal.text.sticker.maker/cache/image_manager_disk_cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512

        811eca8616ab8d3ae6620feaec565c37.0.tmp

        • Path /data/data/com.personal.text.sticker.maker/cache/someIdentifier/811eca8616ab8d3ae6620feaec565c37.0.tmp
        • Size 4KB
        • SHA256 12438986d02675d264cc14df88ebea3e84fe4f178dbf85c651a520aea8a85fe5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        811eca8616ab8d3ae6620feaec565c37.1.tmp

        • Path /data/data/com.personal.text.sticker.maker/cache/someIdentifier/811eca8616ab8d3ae6620feaec565c37.1.tmp
        • Size 9KB
        • SHA256 dc0a1944cb3d72f38309d22e5b08f9bf77de8a5df70873e1f11b5d1331ba8b65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        9cf5a6141b8b24b62eaa5bc38be2ee18.0.tmp

        • Path /data/data/com.personal.text.sticker.maker/cache/someIdentifier/9cf5a6141b8b24b62eaa5bc38be2ee18.0.tmp
        • Size 4KB
        • SHA256 6f44ea35e41a6bf88fa8ae0af893f4719ec7eca77edb9f2c00c6358225e26098
        • MD5 SHA1 SHA512 SSDEEP TLSH

        e8b0396de9bf1fd2aa26fb8ccc8c1441.0.tmp

        • Path /data/data/com.personal.text.sticker.maker/cache/someIdentifier/e8b0396de9bf1fd2aa26fb8ccc8c1441.0.tmp
        • Size 4KB
        • SHA256 54249b6a1dda81650b974de0c33555d030aeb28578132468ffedb6ed4674f708
        • MD5 SHA1 SHA512 SSDEEP TLSH

        e8b0396de9bf1fd2aa26fb8ccc8c1441.1.tmp

        • Path /data/data/com.personal.text.sticker.maker/cache/someIdentifier/e8b0396de9bf1fd2aa26fb8ccc8c1441.1.tmp
        • Size 9KB
        • SHA256 280b9c7c3562a70ae7fb4dfe11459827153a8284fadaed2af0a34febd2733897
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/data/com.personal.text.sticker.maker/cache/someIdentifier/journal
        • Size 124B
        • SHA256 6f753ad0bcd278817af15fdb1e894ba78388c2f5d4337d18d0edecccdbbbd804
        • MD5 SHA1 SHA512 TLSH

        journal

        • Path /data/data/com.personal.text.sticker.maker/cache/someIdentifier/journal
        • Size 300B
        • SHA256 de591c091ce738dbd811dca5d6f059fa530afa2154b36b296c7d1132b94a6306
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/com.personal.text.sticker.maker/cache/someIdentifier/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events

        • Path /data/data/com.personal.text.sticker.maker/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 3be76d246eecb1f0c3d89ea7355de02b7ae2360c748e6a776408c5084621fb1d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.personal.text.sticker.maker/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 5964dfe886701643816a82f950dd34a386f4a98e81d0d6e4c841860be365e131
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.personal.text.sticker.maker/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 a34c1abcf39289fa8250e5269b3124038bae063463fd7325352c3a8956b81ae4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.personal.text.sticker.maker/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 7780a075f5a80af855657e329b6d570c16f90512364b4b77906f940f6e61266f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.personal.text.sticker.maker/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.personal.text.sticker.maker/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 063bb6d2ea9a879918b769edbc73ac22ba43caae12a9de3cc2e3a023490b5c89
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.personal.text.sticker.maker/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1ff4b976267dc479bf35f0388191ebded7e9d2e11378dbd0ca76039cddfc6594
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.personal.text.sticker.maker/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 453af38ff96d9c38479fe6878db5b5e9e65841ddd68ede351b081fe48fc80e50
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.personal.text.sticker.maker/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 23e48e181bc45c5473dc112dab4d76ac7669cf07d52b969e79563755dbe2c5af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/com.personal.text.sticker.maker/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2f487362f09a35294f79add8b4dee3f5739ded320b4b8470e7d56db1a21fa44e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.personal.text.sticker.maker/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 cf685e1db85314c471238b2a290a42b8f30cad27509670960d5ba06f3df42b61
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/com.personal.text.sticker.maker/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 4fd6305d6abd005211b3a17cf476719cbe679e0a2a431b1bb64f56cfdb6da4f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.personal.text.sticker.maker/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 3a7519116eee96dee2dbb0c71e44f5fff77aa9a1535605e5bb8860bc46ea6e77
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.personal.text.sticker.maker/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 a622c04227718064fec113460e74d4c131f248858e1a467484b1f516e379f346
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.personal.text.sticker.maker/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 9b62d42341e515d7ac3904de242952f19e8c74fb005a89d72b0929a0c5802d67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/com.personal.text.sticker.maker/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 237f47aee470a4c34bba07b1cbb4bc70dda742a44bfa6bf63b659961c23711c2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.crashlytics.settings.json

        • Path /data/data/com.personal.text.sticker.maker/files/.com.google.firebase.crashlytics.files.v2:com.personal.text.sticker.maker/com.crashlytics.settings.json
        • Size 801B
        • SHA256 4490456f864401c0920d52ad9bfbab8dc73bcfdc20eef1c86ec0a5e126e24d84
        • MD5 SHA1 SHA512 TLSH

        report

        • Path /data/data/com.personal.text.sticker.maker/files/.com.google.firebase.crashlytics.files.v2:com.personal.text.sticker.maker/open-sessions/6A86CD62020E000113C60AD29AD597B6/report
        • Size 761B
        • SHA256 0529fdb619dac7d5b48060135e2008aa41930593bcb800627a706ecefcbd2ee3
        • MD5 SHA1 SHA512 TLSH

        userlog

        • Path /data/data/com.personal.text.sticker.maker/files/.com.google.firebase.crashlytics.files.v2:com.personal.text.sticker.maker/open-sessions/6A86CD62020E000113C60AD29AD597B6/userlog
        • Size 461B
        • SHA256 93d9dc186498c5ee5283368056cdb6a2b6e5441ba23220f5db2014470633a1f8
        • MD5 SHA1 SHA512 TLSH

        userlog.tmp

        • Path /data/data/com.personal.text.sticker.maker/files/.com.google.firebase.crashlytics.files.v2:com.personal.text.sticker.maker/open-sessions/6A86CD62020E000113C60AD29AD597B6/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        PersistedInstallation5329540557850810900tmp

        • Path /data/data/com.personal.text.sticker.maker/files/PersistedInstallation5329540557850810900tmp
        • Size 569B
        • SHA256 71a8a79700efa4ee65e144ce762f6585a1a757c168778801bd339275fe59d3a3
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation567214480127285863tmp

        • Path /data/data/com.personal.text.sticker.maker/files/PersistedInstallation567214480127285863tmp
        • Size 90B
        • SHA256 5550a598324e7257a6c876cda38e0a07a02050dc43e18d3b0f77e93b34f672ad
        • MD5 SHA1 SHA512 TLSH

        dso_deps

        • Path /data/data/com.personal.text.sticker.maker/lib-main/dso_deps
        • Size 176B
        • SHA256 c7a9412a65d5d557620de42de86a26f28550d6ed2997b2ab2a21f94f7dafc6a9
        • MD5 SHA1 SHA512 TLSH

        dso_manifest

        • Path /data/data/com.personal.text.sticker.maker/lib-main/dso_manifest
        • Size 5B
        • SHA256 957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
        • MD5 SHA1 SHA512

        dso_state

        • Path /data/data/com.personal.text.sticker.maker/lib-main/dso_state
        • Size 1B
        • SHA256 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
        • MD5 SHA1 SHA512

        dso_state

        • Path /data/data/com.personal.text.sticker.maker/lib-main/dso_state
        • Size 1B
        • SHA256 4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
        • MD5 SHA1 SHA512

        journal.tmp

        • Path /storage/emulated/0/Android/data/com.personal.text.sticker.maker/cache/xrequest/journal.tmp
        • Size 33B
        • SHA256 0ad79659af2f345e04a228fdf9fd7ce5144b5634fea9900ed8cbbbfa55128230
        • MD5 SHA1 SHA512