Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    20/08/2026, 09:57

General

  • Target
    4da0bc22754f1141d939184e6a031b92f9b8f90599b23efc46d11700a67563c4.apk
  • Size 6.4MB
  • Sample260820-ly9wlathlc
  • SHA256 4da0bc22754f1141d939184e6a031b92f9b8f90599b23efc46d11700a67563c4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • barcode.portable.reader.qrscanner
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Checks memory information
    PID:4942
    • /system/bin/cat /proc/cpuinfo
      2⤵
      • Checks CPU information
      PID:5006

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        crash.log

        • Path /data/data/barcode.portable.reader.qrscanner/cache/crash/crash.log
        • Size 42B
        • SHA256 513ccaf145e853b57a0b73fb8403f1163a0ff23fa703b1bf285bc4c223d877c8
        • MD5 SHA1 SHA512

        crash.log

        • Path /data/data/barcode.portable.reader.qrscanner/cache/crash/crash.log
        • Size 85B
        • SHA256 af791c1d12e68bab4d7aeb432a014b0846f4997da26b747de7872011c2b49865
        • MD5 SHA1 SHA512 TLSH

        com.google.android.datatransport.events

        • Path /data/data/barcode.portable.reader.qrscanner/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 0be3fa32bfaa1ebe60b00b54b8583fd27870091abb556c2f76f1751ae36d85e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/barcode.portable.reader.qrscanner/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 56aa823f9eeb039816332b1e6462fc929ab28ee84be7007c05aa85721a37f2d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/barcode.portable.reader.qrscanner/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 0ac1c53f520d722317c9341024ec7dc1fcac960e0f8fa49886a40123830ced2d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/barcode.portable.reader.qrscanner/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 4d80f43c2faca180d9016670a510545c78963f1c9e77f635522ceb916163b11c
        • MD5 SHA1 SHA512

        google_app_measurement_local.db

        • Path /data/data/barcode.portable.reader.qrscanner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/barcode.portable.reader.qrscanner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 363e29507d6d74d1895b9ea03e703e3df1289ad8098655166f8e93669c440d5e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/barcode.portable.reader.qrscanner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d6564716d24b86c86a53feaf0cfe54a3ae658f75b7071ad7b0088b293185b653
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/barcode.portable.reader.qrscanner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 970ef287392ac74cb992a69259e72039850ee7c35a110e9d6329949c557a8fb2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/barcode.portable.reader.qrscanner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d14d7f67f75c28dfefe18479cad41cac17111120415cbb84e42e1bdccb511dbf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/barcode.portable.reader.qrscanner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 26c403c3659e7f8e43701810096a700d1522bff3c058babd3cf11e32ab214656
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/barcode.portable.reader.qrscanner/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 7117764fd27a7c210b95497730ac18a6877c3c8b70627372222a45d7c1353253
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/barcode.portable.reader.qrscanner/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 a87aa8d4b8623951a652cda11e0c1f8a8589a9a9970d1dfc1c6dac0d96f4822c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/barcode.portable.reader.qrscanner/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 a158a8e875355b5ff01be64be5f539e21db4160514cb20c56eeeb64a7d8ac9cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/barcode.portable.reader.qrscanner/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 166d82668fc4fbb58af0b8481335cc76d0a8b1eb627abbfc05a2c1efdb7fbae6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/barcode.portable.reader.qrscanner/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 42bb2abe06f4cc1754587fe172b71866a594efdb135ae3557a162665d27e3a82
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/barcode.portable.reader.qrscanner/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 f9613c9f66c4ae312db75dbdadf751df989a4da8d0b8abb9ccc328586af5a3e2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qr_database-journal

        • Path /data/data/barcode.portable.reader.qrscanner/databases/qr_database-journal
        • Size 512B
        • SHA256 6d01c3644a45cbdfffc9a6a6f5883f40a582fe9c4035fe4ddff965bd3b69afb1
        • MD5 SHA1 SHA512

        qr_database-wal

        • Path /data/data/barcode.portable.reader.qrscanner/databases/qr_database-wal
        • Size 16KB
        • SHA256 0a48f7de7c679dc101c5e2aa244369f5f2ee25730fb1ce2bd1f869b8f836fcdf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        qr_database-wal

        • Path /data/data/barcode.portable.reader.qrscanner/databases/qr_database-wal
        • Size 40KB
        • SHA256 1a1d513660558e89fde7a56cd0389ef657e2ea849d861f3a1c556b3ad96db12c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        report

        • Path /data/data/barcode.portable.reader.qrscanner/files/.com.google.firebase.crashlytics.files.v2:barcode.portable.reader.qrscanner/open-sessions/6A86CF9C02290001134E9F89C4DC9C31/report
        • Size 755B
        • SHA256 462d6ca617b9c16fdea788884ceac94e33766f43f27a9b8352f0e6de0b569ec4
        • MD5 SHA1 SHA512 TLSH

        userlog

        • Path /data/data/barcode.portable.reader.qrscanner/files/.com.google.firebase.crashlytics.files.v2:barcode.portable.reader.qrscanner/open-sessions/6A86CF9C02290001134E9F89C4DC9C31/userlog
        • Size 412B
        • SHA256 c92d02ce975463f94eac02c64fea5ce996dbe484749fcdd448bc2a9802e2126b
        • MD5 SHA1 SHA512 TLSH

        userlog.tmp

        • Path /data/data/barcode.portable.reader.qrscanner/files/.com.google.firebase.crashlytics.files.v2:barcode.portable.reader.qrscanner/open-sessions/6A86CF9C02290001134E9F89C4DC9C31/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        PersistedInstallation319327759250986616tmp

        • Path /data/data/barcode.portable.reader.qrscanner/files/PersistedInstallation319327759250986616tmp
        • Size 90B
        • SHA256 0988e5412e1d79e74dddbce4b2899ec13c8008ada73a609900670c262ad817a4
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation5780923527221955611tmp

        • Path /data/data/barcode.portable.reader.qrscanner/files/PersistedInstallation5780923527221955611tmp
        • Size 567B
        • SHA256 ed2d4ee698f55a6a4796f52989ccac2f92e91d0e038081c8d5f594604b7f47bf
        • MD5 SHA1 SHA512 TLSH

        frc_1:720420507984:android:b547090222f698a435dc55_firebase_fetch.json

        • Path /data/data/barcode.portable.reader.qrscanner/files/frc_1:720420507984:android:b547090222f698a435dc55_firebase_fetch.json
        • Size 1KB
        • SHA256 a9cc6badecba0866a6d7a1239fd8e1c8b5fdd4f5bfcae6dc3dae4e7774d54c6d
        • MD5 SHA1 SHA512 TLSH

        0e800621fc8ef43910f9a6f60f341cca

        • Path /data/data/barcode.portable.reader.qrscanner/files/lib_promote_ad/0e800621fc8ef43910f9a6f60f341cca
        • Size 2KB
        • SHA256 f652d7a2d04f8f070b4e97fe9016880d5798b0539f0c684fbe559ec981445bf5
        • MD5 SHA1 SHA512 TLSH

        2a0b3fc11ebc65336e1e01a2aa5c43a7

        • Path /data/data/barcode.portable.reader.qrscanner/files/lib_promote_ad/2a0b3fc11ebc65336e1e01a2aa5c43a7
        • Size 33KB
        • SHA256 9edd1e10dfa8510f32d5fa8201982eccc221cff858384783f2bc0941967ce30b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        8721f70ef471f97eda07a2da91d76776

        • Path /data/data/barcode.portable.reader.qrscanner/files/lib_promote_ad/8721f70ef471f97eda07a2da91d76776
        • Size 16KB
        • SHA256 7f4d7ccd4d61c7c84c3b387c3516bac7a590f0c28498775200b59be73cca8cc9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        c11be2792e3e03aafc9aaba55e606c1a

        • Path /data/data/barcode.portable.reader.qrscanner/files/lib_promote_ad/c11be2792e3e03aafc9aaba55e606c1a
        • Size 46KB
        • SHA256 10c6c35707282106e232746cc02c7e16887699a81eadc8c55bf18dbffd63a99a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        e6de3829d53a6c5646c2876fcd5e254f

        • Path /data/data/barcode.portable.reader.qrscanner/files/lib_promote_ad/e6de3829d53a6c5646c2876fcd5e254f
        • Size 3KB
        • SHA256 2f426f0247345e3b08a0005c209c73443c5e9d843ff3a5ba9e7bf1cbcc164374
        • MD5 SHA1 SHA512 TLSH

        fa5f8f0b0ca0b01968f66ee0f566ab74

        • Path /data/data/barcode.portable.reader.qrscanner/files/lib_promote_ad/fa5f8f0b0ca0b01968f66ee0f566ab74
        • Size 3KB
        • SHA256 b6e39da4693f2833e6c50d27422d77d2d818fe54937fabd86e247507802a8016
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb

        • Path /data/data/barcode.portable.reader.qrscanner/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/barcode.portable.reader.qrscanner/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 156bbc14eebace6b93f0ae7ba84173fdc15c7bd3d22779e776b2cba65b676eb3
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/barcode.portable.reader.qrscanner/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/barcode.portable.reader.qrscanner/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 8d12b231d968eb1c84587061625efb467b79f812720911433a9e59295abd8d36
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/barcode.portable.reader.qrscanner/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 309a367f630cac54ccf79146716ecff4129899fc0abe18b38d0faf9eb93117e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/data/barcode.portable.reader.qrscanner/oat/x86_64/[email protected]
        • Size 421B
        • SHA256 6a8a533d3ff07fac107dbbfbdee9997cb156b80ce388bcc2227bffffb9f62424
        • MD5 SHA1 SHA512 TLSH
        • Path /data/user/0/barcode.portable.reader.qrscanner/[email protected]
        • Size 3.2MB
        • SHA256 be87bb0a50395917f973b4b2691d62037c7c7c6bc8aef060b49240680f82ec06
        • MD5 SHA1 SHA512 SSDEEP TLSH