Analysis

  • user interaction
    yes
  • max time kernel
    3008914s
  • max time network
    152s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    05/09/2026, 18:35

General

  • Target
    aegis-v3.4.2.apk
  • Size 6.3MB
  • Sample260905-w8bfwsfd87
  • SHA256 5b9d496d21c5938bdd733b01583516d27cd556db0749357f58baa648ef8ef804
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10

Malware Config

Signatures

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.beemdevelopment.aegis
    1⤵
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5056

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        aegis-db

        • Path /data/data/com.beemdevelopment.aegis/databases/aegis-db
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH

        aegis-db-journal

        • Path /data/data/com.beemdevelopment.aegis/databases/aegis-db-journal
        • Size 512B
        • SHA256 51e331d74aa9f9cd4062aaa92bbf897f32b0f32665e0ff90b674604301400838
        • MD5 SHA1 SHA512

        aegis-db-shm

        • Path /data/data/com.beemdevelopment.aegis/databases/aegis-db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        aegis-db-wal

        • Path /data/data/com.beemdevelopment.aegis/databases/aegis-db-wal
        • Size 44KB
        • SHA256 262bcb8dccaad294913af8259635a3f18ff2f2317fa50e7af7128b79e3177ce2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aegis.json.new

        • Path /data/data/com.beemdevelopment.aegis/files/aegis.json.new
        • Size 953B
        • SHA256 a047a5ef83ef0251104834c388c860b90eb1a8d94356382af1b55dc2c739f760
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/com.beemdevelopment.aegis/files/profileInstalled
        • Size 24B
        • SHA256 b703a32e6698712bbb7725c116bf8f269875a9d73455d70e410d685690ac566c
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.beemdevelopment.aegis/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 0d971d0fc52d6053b45c88305a3ee5f65051a4f1d28c7a97919bea4660d874a0
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.beemdevelopment.aegis/primary.prof
        • Size 2KB
        • SHA256 01c6ff80993d3f6171b18ac6694ef6af0da23f6f285b71e93184ef1ab01f7ec2
        • MD5 SHA1 SHA512 TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.beemdevelopment.aegis/primary.prof
        • Size 5KB
        • SHA256 4a12d8c69228c8aad7cc69a63414e0201aa6c4ce6137a21c6b6e839aa2bb211b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.beemdevelopment.aegis/primary.prof
        • Size 7KB
        • SHA256 7f16b02c52a30d4cdbc27a35bb58bf1a0a2a65b13b43d9259ac94f3e5d661eb7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.beemdevelopment.aegis/primary.prof
        • Size 8KB
        • SHA256 1df7c1cc1e6b85ae4571848cbaaf0fc462632f677f04f267ad9e884f2c9c69f4
        • MD5 SHA1 SHA512 SSDEEP TLSH