Overview

overview

10

Static

static

10

d3c9c4214a...66.apk

android-9-x86

8

d3c9c4214a...66.apk

android-10-x64

8

d3c9c4214a...66.apk

android-11-x64

8

Analysis

  • max time kernel
    36s
  • max time network
    150s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    20/08/2026, 12:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    d3c9c4214a61d6c9f88e36f319515667d48d69057798cfda5e1d34de2be5a066.apk
  • Size 15.9MB
  • Sample260820-pjlr1acj2x
  • SHA256 d3c9c4214a61d6c9f88e36f319515667d48d69057798cfda5e1d34de2be5a066
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.tecnain.junksweep
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5153

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        shepherd2.config
        • Path /data/data/com.tecnain.junksweep/app_shepherd2/shepherd2.config
        • Size 5KB
        • SHA256 fe67e85742520f79cc2a7e89dfe96cda1233c56912539442052463ec0c299606
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cleaner-shm
        • Path /data/data/com.tecnain.junksweep/databases/cleaner-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.tecnain.junksweep/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 f2a201c2e22e05e5928f396121a7b16febd0a2504510ed0ec67547e44cb7c0b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.tecnain.junksweep/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 76ec92e1fc06ed30b2b6895773c58174d7dc29aa4d9700211ed355371bd3d6b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.tecnain.junksweep/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 abf72c84e7f8d47ea5c209949c88903b579d4c5148db000895afee1c0e7a0969
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.tecnain.junksweep/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 476c51c45ea615a412c1d96c97292f1df99df68914321bf2b73bc1fdaceb436c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.tecnain.junksweep/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 8fe65ea9fa8c73ad295c71438d8bbef7bee78c8bbf5d718bea7f8dca795ef5c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.tecnain.junksweep/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 a6dad1349965794029264d6b2cbe19316fa32927eb03492d0c750e383d7e3d49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.tecnain.junksweep/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 3d6f3d8883236ebb08a88fd3700578b715586d72b49565ec670472b9946a7b79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.tecnain.junksweep/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c5402b35c08417f63cb53fa24197116d81a0f1b2d3f59df3b098b3acbf6659e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.tecnain.junksweep/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b93685f3824f19c19bab392fb5be1a245a185857997672c4a554decdb05744ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.tecnain.junksweep/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 6fc55798d9e902f108c5218f820afa16eabb6d9ef6b07d05e4e9ba8799c9d595
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.tecnain.junksweep/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 0f7cc8dbc81b72f291434196952e0f77c1a52d905d0f54cf61405a7c8a93affc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.tecnain.junksweep/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 dac179f7170e7760b8b6cafbd24989ceb51b82e1cdce10db321de03bece00674
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.tecnain.junksweep/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 27e1906d7f21aa8973d2ff1d883582551f24ebd5fb1e5cd4d3de36d17c8f42ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.tecnain.junksweep/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 b5e222360a916403b755dd95643d8fd9c90d824f401dd6f2e315f6ab597a3405
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.tecnain.junksweep/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 458cccaf21462f253b667133227c45dd4f652ad1283aa41ab1893214436afec4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.tecnain.junksweep/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 86d68f833ee2673e477984891fa4b62b9fdb7ad328c03dbc4af939cae47c07b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.tecnain.junksweep/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 79569109797a6546199eec95b28692b29ce3171ca0fc405f331a68d761b96a21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.tecnain.junksweep/files/.crashlytics.v3/com.tecnain.junksweep/com.crashlytics.settings.json
        • Size 772B
        • SHA256 6db54426389225650176f2a57284d1d147deeb7ce6a97478a7e8c46304aa6cf2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/com.tecnain.junksweep/files/.crashlytics.v3/com.tecnain.junksweep/open-sessions/6A86F15E03A300011421216C00D9D7E4/report
        • Size 815B
        • SHA256 dbfc95cd324afd74daae38f6d261ef0e8bbe9712bb91ca4440101458b67892b0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/com.tecnain.junksweep/files/.crashlytics.v3/com.tecnain.junksweep/open-sessions/6A86F15E03A300011421216C00D9D7E4/userlog
        • Size 406B
        • SHA256 0a9552a17936dfdd1291ca3db5c3358310971c93f49def974384e96a35586798
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/com.tecnain.junksweep/files/.crashlytics.v3/com.tecnain.junksweep/open-sessions/6A86F15E03A300011421216C00D9D7E4/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation7892514454032934033tmp
        • Path /data/data/com.tecnain.junksweep/files/PersistedInstallation7892514454032934033tmp
        • Size 567B
        • SHA256 595add531f7363f602c3d4e88d4696880fc3d412dcd26f4107908d2478d9a357
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnRlY25haW4uanVua3N3ZWVw_data.preferences_pb.tmp
        • Path /data/data/com.tecnain.junksweep/files/datastore/firebase_session_Y29tLnRlY25haW4uanVua3N3ZWVw_data.preferences_pb.tmp
        • Size 50B
        • SHA256 27a665f2e533e2ee0349ddabcf943cd620ebee2b3e65402de65ce7961a6ea1b4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnRlY25haW4uanVua3N3ZWVw_settings.preferences_pb.tmp
        • Path /data/data/com.tecnain.junksweep/files/datastore/firebase_session_Y29tLnRlY25haW4uanVua3N3ZWVw_settings.preferences_pb.tmp
        • Size 33B
        • SHA256 a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6
        • MD5 SHA1 SHA512
        Submit Download

        firebase_session_Y29tLnRlY25haW4uanVua3N3ZWVw_settings.preferences_pb.tmp
        • Path /data/data/com.tecnain.junksweep/files/datastore/firebase_session_Y29tLnRlY25haW4uanVua3N3ZWVw_settings.preferences_pb.tmp
        • Size 75B
        • SHA256 1e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnRlY25haW4uanVua3N3ZWVw_settings.preferences_pb.tmp
        • Path /data/data/com.tecnain.junksweep/files/datastore/firebase_session_Y29tLnRlY25haW4uanVua3N3ZWVw_settings.preferences_pb.tmp
        • Size 121B
        • SHA256 232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnRlY25haW4uanVua3N3ZWVw_settings.preferences_pb.tmp
        • Path /data/data/com.tecnain.junksweep/files/datastore/firebase_session_Y29tLnRlY25haW4uanVua3N3ZWVw_settings.preferences_pb.tmp
        • Size 163B
        • SHA256 7495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnRlY25haW4uanVua3N3ZWVw_settings.preferences_pb.tmp
        • Path /data/data/com.tecnain.junksweep/files/datastore/firebase_session_Y29tLnRlY25haW4uanVua3N3ZWVw_settings.preferences_pb.tmp
        • Size 212B
        • SHA256 7437c589fefb5229e76b60d2ee9f24acee6c7891d99418d429643071c9e0e13d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:160285102118:android:993ec9afc348d384b756e7_firebase_defaults.json
        • Path /data/data/com.tecnain.junksweep/files/frc_1:160285102118:android:993ec9afc348d384b756e7_firebase_defaults.json
        • Size 980B
        • SHA256 a91f3008b3bd30a75cfd0b17d3f28223fe52e72d32cc7767990c162b24ba0f95
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileInstalled
        • Path /data/data/com.tecnain.junksweep/files/profileInstalled
        • Size 24B
        • SHA256 534d291e6ed8efdaf7edd7c66bb6f6a7a5081bcfd02e5c4a24260bef1fd2122b
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.tecnain.junksweep/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 c0e294c8e6ad4d6a006409595a3fb6b42b3942ac65a2e5542f94ea7b81d07bd2
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.tecnain.junksweep/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.tecnain.junksweep/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 b5349a80198de13ed042d6be77c1c31d538734aaf404e98b4778b9ba5dea9172
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.tecnain.junksweep/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 fda4598c32b88d9d8475ca4440d03853970d2f68fb067e22b0fd6c0a6a394a94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.tecnain.junksweep/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 19040204f82524a0a3a1fbeea98a8152ae902c9eb03b6dcd808a70e1843b1b60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.tecnain.junksweep/no_backup/androidx.work.workdb-wal
        • Size 189KB
        • SHA256 dc61ae4bb0c52da51b6544acee6e68697f35bd3fd4038a6a6d0f81ed14b83d10
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        logcat.txt
        • Path /data/data/com.tecnain.junksweep/no_backup/collector-files/logcat.txt
        • Size 5KB
        • SHA256 c49a2354921ce3798602662f00aa50944cb67e49f071e04b8b8a0c1cf012946c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.tecnain.junksweep/primary.prof
        • Size 11KB
        • SHA256 e8ffb0a34b699b060ba8609506cb2e210ec8d895dcdc9ffcab05adc5ef725d6d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download