Analysis

  • user interaction
    yes
  • max time kernel
    14s
  • max time network
    33s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    21/08/2026, 13:01

General

  • Target
    com.mumu.acc_overseas.apk
  • Size 28.5MB
  • Sample260821-p9bdyseq8x
  • SHA256 87c79ea24a75cd83c389391b583a4b537df58595295a4056446949ef35cdc4ae
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 18 IoCs
  • Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Queries information about active data network 1 TTPs 2 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 2 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.mumu.acc
    1⤵
    • Checks if the Android device is rooted.
    • Checks Android system properties for emulator presence.
    • Obtains sensitive information copied to the device clipboard
    • Queries information about active data network
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:3258
  • com.mumu.acc:core
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about active data network
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:3463

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        base.3258.tmp

        • Path /data/data/com.mumu.acc/cache/oat_primary/x86_64/base.3258.tmp
        • Size 701KB
        • SHA256 b4c42d705a826b4d41645932d5e5c87746b84b3ba981e0518c26b1103ed173d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        environment.json

        • Path /data/data/com.mumu.acc/cache/sentry/20a4ffc1dd7cc74a26a46732920d61aca2c33fcc/.options-cache/environment.json
        • Size 9B
        • SHA256 6a8a1de59e3fdcc288829040c3ca048914e95ea36c8a2b2ddd316ae8b77a6582
        • MD5 SHA1 SHA512

        proguard-uuid.json

        • Path /data/data/com.mumu.acc/cache/sentry/20a4ffc1dd7cc74a26a46732920d61aca2c33fcc/.options-cache/proguard-uuid.json
        • Size 929B
        • SHA256 108e7fe2202624fd247520c3ddc936849f1938e001ea6d32e238325dd996e9f2
        • MD5 SHA1 SHA512 TLSH

        release.json

        • Path /data/data/com.mumu.acc/cache/sentry/20a4ffc1dd7cc74a26a46732920d61aca2c33fcc/.options-cache/release.json
        • Size 38B
        • SHA256 ae87e2f15a8f01ab5faf1f687a55e5a816a269f271e5168ca92c5cc6bbb341e0
        • MD5 SHA1 SHA512

        sdk-version.json

        • Path /data/data/com.mumu.acc/cache/sentry/20a4ffc1dd7cc74a26a46732920d61aca2c33fcc/.options-cache/sdk-version.json
        • Size 929B
        • SHA256 aa69fef812766b80944f5fb4f2ae4fd704fe066da073dde86f86b1587f57f12c
        • MD5 SHA1 SHA512 TLSH

        tags.json

        • Path /data/data/com.mumu.acc/cache/sentry/20a4ffc1dd7cc74a26a46732920d61aca2c33fcc/.options-cache/tags.json
        • Size 2B
        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
        • MD5 SHA1 SHA512

        breadcrumbs.json

        • Path /data/data/com.mumu.acc/cache/sentry/20a4ffc1dd7cc74a26a46732920d61aca2c33fcc/.scope-cache/breadcrumbs.json
        • Size 1KB
        • SHA256 56a81bf9f8758c2cada458cd2979ade3cd2989a2db628406102be8965bac408b
        • MD5 SHA1 SHA512 TLSH

        breadcrumbs.json

        • Path /data/data/com.mumu.acc/cache/sentry/20a4ffc1dd7cc74a26a46732920d61aca2c33fcc/.scope-cache/breadcrumbs.json
        • Size 2KB
        • SHA256 38bd6ed99a72733484b744a7139ef48681c3af149b38f79d465ad33261636054
        • MD5 SHA1 SHA512 TLSH

        breadcrumbs.json

        • Path /data/data/com.mumu.acc/cache/sentry/20a4ffc1dd7cc74a26a46732920d61aca2c33fcc/.scope-cache/breadcrumbs.json
        • Size 4KB
        • SHA256 7d901901eb1fb124b660f7b36646c2b6932c7ee2727e6d31ffc5b53ba7fa219e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        breadcrumbs.json

        • Path /data/data/com.mumu.acc/cache/sentry/20a4ffc1dd7cc74a26a46732920d61aca2c33fcc/.scope-cache/breadcrumbs.json
        • Size 508KB
        • SHA256 93b2f5621a1d2fd3ddc7568a4dc681a828d19860ea749cceb652a0d036fed24e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        contexts.json

        • Path /data/data/com.mumu.acc/cache/sentry/20a4ffc1dd7cc74a26a46732920d61aca2c33fcc/.scope-cache/contexts.json
        • Size 79B
        • SHA256 0928400e11cd44b8a3fcbb37f08712ceb11c18ead7168b019539c6d0c86c8317
        • MD5 SHA1 SHA512 TLSH

        trace.json

        • Path /data/data/com.mumu.acc/cache/sentry/20a4ffc1dd7cc74a26a46732920d61aca2c33fcc/.scope-cache/trace.json
        • Size 119B
        • SHA256 3433473eaca562ea830de66ddec45353df9ba2c54a004e95152ed5021d7a1082
        • MD5 SHA1 SHA512 TLSH

        transaction.json

        • Path /data/data/com.mumu.acc/cache/sentry/20a4ffc1dd7cc74a26a46732920d61aca2c33fcc/.scope-cache/transaction.json
        • Size 17B
        • SHA256 2ae0a075e8bb7374f34584e9f9833b44df33121af00662153c989e8edae3bd14
        • MD5 SHA1 SHA512

        fbe61fbb-f752-4502-b4b0-73eda8e8b796.envelope

        • Path /data/data/com.mumu.acc/cache/sentry/20a4ffc1dd7cc74a26a46732920d61aca2c33fcc/fbe61fbb-f752-4502-b4b0-73eda8e8b796.envelope
        • Size 1KB
        • SHA256 9eeeaa739c9a90b9e51c22b1ecb4a41ae9de5e99cce424666f24a5dfb3545f3f
        • MD5 SHA1 SHA512 TLSH

        session.json

        • Path /data/data/com.mumu.acc/cache/sentry/20a4ffc1dd7cc74a26a46732920d61aca2c33fcc/session.json
        • Size 273B
        • SHA256 fd2af4e6f9a9d5057366b15c79d2fd9addc5c9097eb56047160002bc97c2d65b
        • MD5 SHA1 SHA512 TLSH

        uukit.db

        • Path /data/data/com.mumu.acc/databases/uukit.db
        • Size 24KB
        • SHA256 072f545993176f57afc3c02d173e6f7a5864be17f646a7cbc980a9963c84ae5b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uukit.db-journal

        • Path /data/data/com.mumu.acc/databases/uukit.db-journal
        • Size 512B
        • SHA256 0c000574a105b16c831f547bd8c45feb6a43f2320267195ee8dd3c8aaec37724
        • MD5 SHA1 SHA512

        uukit.db-journal

        • Path /data/data/com.mumu.acc/databases/uukit.db-journal
        • Size 8KB
        • SHA256 19bd8d1ed3e778428b29467ebabfc7effe4c8980db92d58c7abf0c66d54e9a56
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uukit.db-journal

        • Path /data/data/com.mumu.acc/databases/uukit.db-journal
        • Size 8KB
        • SHA256 e617ccad277e0510cc838505849038c41b2e5db59b54021b802e3d22c82ae55b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        INSTALLATION

        • Path /data/data/com.mumu.acc/files/INSTALLATION
        • Size 72B
        • SHA256 faa569e95da6f5c13a4c5a1531f52d16b278cb6dfb82ffb24472e083d56a325e
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/com.mumu.acc/files/profileInstalled
        • Size 24B
        • SHA256 bbc34ca0a3da4cc069c25d59511e130e4c0adf908ca406b93df93194d2fc2aff
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.mumu.acc/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 71b89dee06c08b8c585c70376f2e16759974a76f381ebf1b9bd3b25009e29348
        • MD5 SHA1 SHA512

        op-2026-08-21_140158.log

        • Path /data/data/com.mumu.acc/files/romsdk/feedbacks/op-2026-08-21_140158.log
        • Size 104B
        • SHA256 05962ce6b28558e7206839bae3d616884eb6af121fcfc0bf84e7631d4d4328dc
        • MD5 SHA1 SHA512 TLSH

        op-2026-08-21_140158.log

        • Path /data/data/com.mumu.acc/files/romsdk/feedbacks/op-2026-08-21_140158.log
        • Size 374KB
        • SHA256 6a45e94de514bcca43ea6d2dbe9ff960431184c26c6ec2da4c4d1b105bd75ed4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        op-2026-08-21_140158.log

        • Path /data/data/com.mumu.acc/files/romsdk/feedbacks/op-2026-08-21_140158.log
        • Size 76B
        • SHA256 f4b054fc06d3a9ac64236b4e62981584802f381fb258158afdb87e43756da60d
        • MD5 SHA1 SHA512 TLSH

        op-2026-08-21_140158.log

        • Path /data/data/com.mumu.acc/files/romsdk/feedbacks/op-2026-08-21_140158.log
        • Size 428KB
        • SHA256 c27dcfb8b0f9e9d90f7f799273c58c54fcc450e9f59a3bacbf5fc78c7573d8fb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        op-2026-08-21_140158.log

        • Path /data/data/com.mumu.acc/files/romsdk/feedbacks/op-2026-08-21_140158.log
        • Size 58B
        • SHA256 51f8f576f74bea5509847c58311dd7431f1817fb053bf2e54a1ab2d84913269e
        • MD5 SHA1 SHA512 TLSH

        op-2026-08-21_140158.log

        • Path /data/data/com.mumu.acc/files/romsdk/feedbacks/op-2026-08-21_140158.log
        • Size 98B
        • SHA256 6ab6311b61575914727294e3bb217c80f9b4fb61bc1ee9eb84ab5ed3167ef83f
        • MD5 SHA1 SHA512 TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.mumu.acc/primary.prof
        • Size 6KB
        • SHA256 e3b259419f2bf3a5503795396ed4cd68c3c1f9182de5e7f1cd31f5ebd8afc320
        • MD5 SHA1 SHA512 SSDEEP TLSH

        2026-08-21.debug.log

        • Path /storage/emulated/0/Android/data/com.mumu.acc/cache/log/debug/2026-08-21.debug.log
        • Size 127B
        • SHA256 bf5a2e199cf708d0cc830617db16e1ca7776e19d16e5f5f428cfe1f6a6882c32
        • MD5 SHA1 SHA512 TLSH

        2026-08-21.debug.log

        • Path /storage/emulated/0/Android/data/com.mumu.acc/cache/log/debug/2026-08-21.debug.log
        • Size 78B
        • SHA256 48d2b7833f77749abf47ac13defee0694490ee80fa81de7b2398c365c97f509b
        • MD5 SHA1 SHA512 TLSH

        2026-08-21.debug.log

        • Path /storage/emulated/0/Android/data/com.mumu.acc/cache/log/debug/2026-08-21.debug.log
        • Size 362B
        • SHA256 b398c32d43eace1a31c8882433c9613a8574559d11e949fa943f644633ef3775
        • MD5 SHA1 SHA512 TLSH

        2026-08-21.debug.log

        • Path /storage/emulated/0/Android/data/com.mumu.acc/cache/log/debug/2026-08-21.debug.log
        • Size 78B
        • SHA256 553c84388a79388ef7c95403536ce5aafc6ff54fd06d856dbeb7ae37b4bd826c
        • MD5 SHA1 SHA512 TLSH

        2026-08-21.debug.log

        • Path /storage/emulated/0/Android/data/com.mumu.acc/cache/log/debug/2026-08-21.debug.log
        • Size 104B
        • SHA256 06a12c1eaf61aa3e4ad5a546d760f0f8b971a56792d139ae9938abd47ab22846
        • MD5 SHA1 SHA512 TLSH