Overview

overview

10

Static

static

10

b008e30590...11.apk

android-9-x86

8

b008e30590...11.apk

android-10-x64

8

b008e30590...11.apk

android-11-x64

8

Analysis

  • max time kernel
    35s
  • max time network
    150s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    20/08/2026, 11:44

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    b008e30590725d6a5bde09ebad2cfe6ff0b002b16b3b93fe9150a608a180f511.apk
  • Size 11.8MB
  • Sample260820-nwbbcsda47
  • SHA256 b008e30590725d6a5bde09ebad2cfe6ff0b002b16b3b93fe9150a608a180f511
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
collectioncredential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.text.chatting.messaging.messagebox
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    • Checks memory information
    PID:5194

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 fb36761da6b30aaa5308a988b8c366b9919384d6f4e9de11e6ac27acac18c0d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 fb730ecebfd39fd8c8c61aba5488b3f243fc9540711dbbcda335b74e02e6b3d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 6ce5c347b88ec3fee909f120bac17f69aec037a26c9b477ae0465b0a86bdce64
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 88e0259527ab3e78101bcecec6f8f84ce76bfd827050497441e937bf62f5fb02
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 9b26151e7e3d440e7c2662ea6dcce018b3aed34bd26ff0f4fa412cc8d2a693f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 eefec14bbead9b3a045bfc079b2e09544247d9102eebc11f2338946ac0dc5886
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 5057747daa635d6d1d171dd38fb057933d1b4e3379cd56081f91c18c40399f01
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 f3280ef2f3cf1f2c561b5527b3576016f7d096570e4c44f22fe27fab2ec6ea2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 bba0f506ac484a1be96d5771768268d91fe3acffe362ca560ad79f9e88b863a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c518cd39f1e4eacb40e418a290c8343e7a3c9621504001e33ea4928350b2e3ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9e50dda1cf97c30b1fb3ee1c302a10d574bd3075180645d5bc12dcc5c02a61fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 599f9583d2b46a49caeb6fed19823c0f1375fa636894c7101a42909eb84c576d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d24599040889338b10a32b2c6f01c8697a94dafdce47267d1face3d7fdf25705
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 755751cf52c6d76d025ed42f17a5e6c5c247fcc1640e257d90707dd759e64a71
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 156d97449bdf52575711838e1d30cbf245bf7b548f98e5171bc0a0d6cabf7e42
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 d3a87166ac43199456a02a9dc9be904dca59b1c295eb3b3b10aca2b5e2ade409
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 281077b215be0e3e782110bbba0c1599d255df7b6ed5c84119d73a54865bd99a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 23602cfb197effc6bcaf33df3ed96b27f2a4afd2c43c006c8cecdddb4064a34a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.text.chatting.messaging.messagebox/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 47d2740fc8d9da43ba891c110e847bd8dd965de3142f84716a99ee9b6ce9707f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.text.chatting.messaging.messagebox/files/.crashlytics.v3/com.text.chatting.messaging.messagebox/com.crashlytics.settings.json
        • Size 796B
        • SHA256 9cf87e014403e27cb9025744138ee6a30500e8daa9d322adfcffb4376fe4a11d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/com.text.chatting.messaging.messagebox/files/.crashlytics.v3/com.text.chatting.messaging.messagebox/open-sessions/6A86E8A101220001144ADD6B894ED01E/report
        • Size 814B
        • SHA256 9f438aa9a5a8e081f706e7827a0280d386ecf3ed95909356f70b28237675ceb1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/com.text.chatting.messaging.messagebox/files/.crashlytics.v3/com.text.chatting.messaging.messagebox/open-sessions/6A86E8A101220001144ADD6B894ED01E/userlog
        • Size 532B
        • SHA256 4c33147ff835b87e03621f03a7c6068695ee8e5ade855ae837573c87b142c910
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/com.text.chatting.messaging.messagebox/files/.crashlytics.v3/com.text.chatting.messaging.messagebox/open-sessions/6A86E8A101220001144ADD6B894ED01E/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation570187079050039412tmp
        • Path /data/data/com.text.chatting.messaging.messagebox/files/PersistedInstallation570187079050039412tmp
        • Size 567B
        • SHA256 f688631edb90f7dca6a278fbf61cd9833251640ba88a8a6befb8599572a9e385
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        audience_network.dex
        • Path /data/data/com.text.chatting.messaging.messagebox/files/audience_network.dex
        • Size 3.6MB
        • SHA256 581ea975c0ab7a38f4d0f7fea8573ac3bbb795201b9e81a36b24ec299a82aa0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        firebase_session_Y29tLnRleHQuY2hhdHRpbmcubWVzc2FnaW5nLm1lc3NhZ2Vib3g=_data.preferences_pb.tmp
        • Path /data/data/com.text.chatting.messaging.messagebox/files/datastore/firebase_session_Y29tLnRleHQuY2hhdHRpbmcubWVzc2FnaW5nLm1lc3NhZ2Vib3g=_data.preferences_pb.tmp
        • Size 50B
        • SHA256 109ee9f4382860258c4ed8dd24760befc7c5789c9bd1f8442ed31e58fc313f35
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnRleHQuY2hhdHRpbmcubWVzc2FnaW5nLm1lc3NhZ2Vib3g=_settings.preferences_pb.tmp
        • Path /data/data/com.text.chatting.messaging.messagebox/files/datastore/firebase_session_Y29tLnRleHQuY2hhdHRpbmcubWVzc2FnaW5nLm1lc3NhZ2Vib3g=_settings.preferences_pb.tmp
        • Size 33B
        • SHA256 a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6
        • MD5 SHA1 SHA512
        Submit Download

        firebase_session_Y29tLnRleHQuY2hhdHRpbmcubWVzc2FnaW5nLm1lc3NhZ2Vib3g=_settings.preferences_pb.tmp
        • Path /data/data/com.text.chatting.messaging.messagebox/files/datastore/firebase_session_Y29tLnRleHQuY2hhdHRpbmcubWVzc2FnaW5nLm1lc3NhZ2Vib3g=_settings.preferences_pb.tmp
        • Size 75B
        • SHA256 1e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnRleHQuY2hhdHRpbmcubWVzc2FnaW5nLm1lc3NhZ2Vib3g=_settings.preferences_pb.tmp
        • Path /data/data/com.text.chatting.messaging.messagebox/files/datastore/firebase_session_Y29tLnRleHQuY2hhdHRpbmcubWVzc2FnaW5nLm1lc3NhZ2Vib3g=_settings.preferences_pb.tmp
        • Size 121B
        • SHA256 232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnRleHQuY2hhdHRpbmcubWVzc2FnaW5nLm1lc3NhZ2Vib3g=_settings.preferences_pb.tmp
        • Path /data/data/com.text.chatting.messaging.messagebox/files/datastore/firebase_session_Y29tLnRleHQuY2hhdHRpbmcubWVzc2FnaW5nLm1lc3NhZ2Vib3g=_settings.preferences_pb.tmp
        • Size 163B
        • SHA256 7495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnRleHQuY2hhdHRpbmcubWVzc2FnaW5nLm1lc3NhZ2Vib3g=_settings.preferences_pb.tmp
        • Path /data/data/com.text.chatting.messaging.messagebox/files/datastore/firebase_session_Y29tLnRleHQuY2hhdHRpbmcubWVzc2FnaW5nLm1lc3NhZ2Vib3g=_settings.preferences_pb.tmp
        • Size 212B
        • SHA256 1776cc58e4190f9a6afcfd1dda3380e64f21c1e5ba6ac9ff2b16923a5f733e16
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        logs.txt
        • Path /data/data/com.text.chatting.messaging.messagebox/files/logs.txt
        • Size 43B
        • SHA256 73a0aa736f10b6f9598f0ef69f53895b89640b2a0e4aeb0c4dff2133a790c26e
        • MD5 SHA1 SHA512
        Submit Download

        profileInstalled
        • Path /data/data/com.text.chatting.messaging.messagebox/files/profileInstalled
        • Size 24B
        • SHA256 6ef6d96fee6a946159de9518f3f5a6a9c9bd15592a85ea970d00e1ef5d3324cb
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.text.chatting.messaging.messagebox/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 6019bff7e5c0ee33f77a395bde6d1178eca12efcb415bb9c58728eafe75029b4
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.text.chatting.messaging.messagebox/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.text.chatting.messaging.messagebox/primary.prof
        • Size 1KB
        • SHA256 15dbb3b81f71cfe41257343643dc2de73992bf311ca4dc0b40962f837598c13a
        • MD5 SHA1 SHA512 TLSH
        Submit Download