Overview

overview

10

Static

static

10

afc0be54d9...cf.apk

android-9-x86

8

afc0be54d9...cf.apk

android-10-x64

8

afc0be54d9...cf.apk

android-11-x64

8

Analysis

  • max time kernel
    11s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    20/08/2026, 11:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    afc0be54d90c0e3ffa73ac9078e8d37b086fc9088827b19fbb9f588a189d2fcf.apk
  • Size 32.1MB
  • Sample260820-nrsd3swcle
  • SHA256 afc0be54d90c0e3ffa73ac9078e8d37b086fc9088827b19fbb9f588a189d2fcf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasion

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 3 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Checks the presence of a debugger
    defense_evasion

Processes

  • com.bilcicore.cleaner
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    PID:4986

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        google_app_measurement_local.db
        • Path /data/data/com.bilcicore.cleaner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c0e201e41ed3f83aaf516644cd10b215a14bf26936ab798f56c7b56a99ddd616
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.bilcicore.cleaner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 0514770d838f6f8b7715d4bb45a8c35a6f92bc18294d2f5cde6a4283638faf73
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.bilcicore.cleaner/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 751329b3b1fb9a75b85b85dfa5d8d5b1a1f4501522703687196ec99f683b3fbc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.bilcicore.cleaner/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 58aadfbf3457c104e6c64e81da8208a6f8071c6f62f0101efada3aedd2c7d8ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.bilcicore.cleaner/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 26a0cb730821a3015f69a8418443cb7ffa767779d797325d5c458b1f561561bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.bilcicore.cleaner/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 9402db4c433ea09de2c5dcb7d450f0e9922de560c897ff0d65129ea9880bf702
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.bilcicore.cleaner/files/.crashlytics.v3/com.bilcicore.cleaner/com.crashlytics.settings.json
        • Size 776B
        • SHA256 1349838042a8b08f36b7ec575aa2322081c7a8e76c8984ea4cd36ebffce7b7b5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        internal-keys
        • Path /data/data/com.bilcicore.cleaner/files/.crashlytics.v3/com.bilcicore.cleaner/open-sessions/6A86E73D00B30001137A9413D4EB534F/internal-keys
        • Size 207B
        • SHA256 77465e55f9406b8ca3b7fad84d3c3a70e86be302455ca1bceddf447010fbe7aa
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/com.bilcicore.cleaner/files/.crashlytics.v3/com.bilcicore.cleaner/open-sessions/6A86E73D00B30001137A9413D4EB534F/report
        • Size 799B
        • SHA256 6f544e76aee1e9879fc3b340ea6f799a0037431e8d58cdeba98f8682a1fa5339
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/com.bilcicore.cleaner/files/.crashlytics.v3/com.bilcicore.cleaner/open-sessions/6A86E73D00B30001137A9413D4EB534F/userlog
        • Size 88B
        • SHA256 16dbb7b7a2fb29b31d10e9509676b278731e838c28f661b4b117446724ea2b40
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/com.bilcicore.cleaner/files/.crashlytics.v3/com.bilcicore.cleaner/open-sessions/6A86E73D00B30001137A9413D4EB534F/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation2121144445542675831tmp
        • Path /data/data/com.bilcicore.cleaner/files/PersistedInstallation2121144445542675831tmp
        • Size 569B
        • SHA256 1699eef8382b2a5a2404a1dbc1ddfdd4465c5d0b60e9201401f62f5b2f075f84
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmJpbGNpY29yZS5jbGVhbmVy_settings.preferences_pb.tmp
        • Path /data/data/com.bilcicore.cleaner/files/datastore/firebase_session_Y29tLmJpbGNpY29yZS5jbGVhbmVy_settings.preferences_pb.tmp
        • Size 33B
        • SHA256 a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6
        • MD5 SHA1 SHA512
        Submit Download

        firebase_session_Y29tLmJpbGNpY29yZS5jbGVhbmVy_settings.preferences_pb.tmp
        • Path /data/data/com.bilcicore.cleaner/files/datastore/firebase_session_Y29tLmJpbGNpY29yZS5jbGVhbmVy_settings.preferences_pb.tmp
        • Size 75B
        • SHA256 1e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmJpbGNpY29yZS5jbGVhbmVy_settings.preferences_pb.tmp
        • Path /data/data/com.bilcicore.cleaner/files/datastore/firebase_session_Y29tLmJpbGNpY29yZS5jbGVhbmVy_settings.preferences_pb.tmp
        • Size 121B
        • SHA256 232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmJpbGNpY29yZS5jbGVhbmVy_settings.preferences_pb.tmp
        • Path /data/data/com.bilcicore.cleaner/files/datastore/firebase_session_Y29tLmJpbGNpY29yZS5jbGVhbmVy_settings.preferences_pb.tmp
        • Size 163B
        • SHA256 7495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLmJpbGNpY29yZS5jbGVhbmVy_settings.preferences_pb.tmp
        • Path /data/data/com.bilcicore.cleaner/files/datastore/firebase_session_Y29tLmJpbGNpY29yZS5jbGVhbmVy_settings.preferences_pb.tmp
        • Size 212B
        • SHA256 a3dcc83b141167f48fff4ab2f23cb41b4b9c769d6848c67d48b8f5240f2e3740
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.bilcicore.cleaner/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        [email protected]
        • Path /data/data/com.bilcicore.cleaner/oat/x86_64/[email protected]
        • Size 1KB
        • SHA256 c29dda16828a8b7a13e8229927b49ded1320ff038842f835810870be307d830a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/user/0/com.bilcicore.cleaner/[email protected]
        • Size 4.8MB
        • SHA256 07fef7ea41d84ccf44ef2e2a6de8d23e3d3dd5920c87979a1d501a9cb6272496
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download