Analysis
- user interaction
yes - max time kernel
3008914s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
05/09/2026, 18:35
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
aegis-v3.4.2.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
General
- Target aegis-v3.4.2.apk
- Size 6.3MB
- Sample260905-w8bfwsfd87
- SHA256 5b9d496d21c5938bdd733b01583516d27cd556db0749357f58baa648ef8ef804
- MD5 67763ffb791b46f4d713743f35eb2627
- SHA1 78589ff8c49312bbe20186e89b30e63702cdc04f
- SHA512 e5047bb69ac94c71ee19602b23708cc2a50192fc3f16ff5eda373b945ee26ea81456b6a6498e62762835a8423c89cd4e8585d43d56c14f20108d7363316d31c5
- SSDEEP 98304:ZsMf6apdRBq+0Nn2aK+UCGNhYijgpccPwrnxF2:6MLTBq+0R1K+4zYGPU
- TLSH T19466DF8AB394DD2BC43331768D495A77265A8C759F43878364087F2C38B3AE84F59BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.beemdevelopment.aegis - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.beemdevelopment.aegis
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.beemdevelopment.aegis/databases/aegis-db
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- TLSH T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.beemdevelopment.aegis/databases/aegis-db-journal
- Size 512B
- SHA256 51e331d74aa9f9cd4062aaa92bbf897f32b0f32665e0ff90b674604301400838
- MD5 9161dfd2b1e5cd98bf92597b11f8395c
- SHA1 0aa6b9fb7f4fcd5e3c45cfa719b07cbf9cf0e282
- SHA512 9b7bc5f7c55668488635bb7f3420086d5fb7db0599bf87d5e849cff4c6d45ae36590af8d3903dfee3acdfe279745604753d341650c1a0018e465fee35a8fd100
- MD5 SHA1 SHA512
- Path /data/data/com.beemdevelopment.aegis/databases/aegis-db-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.beemdevelopment.aegis/databases/aegis-db-wal
- Size 44KB
- SHA256 262bcb8dccaad294913af8259635a3f18ff2f2317fa50e7af7128b79e3177ce2
- MD5 4c9bc8841868b98dbb8ca582e170fa05
- SHA1 e7c37f558945c46b691d88fd340a354daa6d92da
- SHA512 d8212c46d0cdcb865a478b7a422dbe1322c1f49f5f5b77310202ca3cd093846074596d4e1b065fa6020115b471f7b8fc6b9f8a89e62cf432baf684c775e38e07
- SSDEEP 48:MzNSP/U/NS66u/31B5UkgGDaBSP/Vr7PjI:00PM/T6kZZPhHI
- TLSH T12F13D0FA6BD82752D59543B9D8F7939D8EA2510EC7A7E3832AE60430AC036C46470DA6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.beemdevelopment.aegis/files/aegis.json.new
- Size 953B
- SHA256 a047a5ef83ef0251104834c388c860b90eb1a8d94356382af1b55dc2c739f760
- MD5 a1460882b1e4df66983c6dd537bbdc5a
- SHA1 2b2c8d9e5f1b73dfe2017f0879744146f720364c
- SHA512 5a286258f0999888c000faae07515719008110c8b40bb49ed3d7bc14dd33b427a192682aa4b010da6429b1b35c41f6ab403c0bb23171e0ee011085756a0a086f
- TLSH T193114E10E5308DF3489C222C9E3516039C20816FAD347C8C36AC610C0F0E0BE66BA28F
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.beemdevelopment.aegis/files/profileInstalled
- Size 24B
- SHA256 b703a32e6698712bbb7725c116bf8f269875a9d73455d70e410d685690ac566c
- MD5 dfd37220568a0a2eccc7c60c1cb2b0ae
- SHA1 5c41b2091263d4bc6d6c964534058782e8b02073
- SHA512 8f3889f856c50320664ed33c764815ae3571d0bcad7bc61d751cf7684f48545096da10baf3d00860007f8a91a58350c8a92648812989bf3e29529907dbd10643
- MD5 SHA1 SHA512
- Path /data/data/com.beemdevelopment.aegis/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 0d971d0fc52d6053b45c88305a3ee5f65051a4f1d28c7a97919bea4660d874a0
- MD5 f0350bf272fab195e1131e24abea9032
- SHA1 fc0f00c0e35eea046e47b523abb372450cc3346b
- SHA512 722c1f3a0525b707fc3102af08c02a968309da3a221e8587c8eaa2c06d335f67af0d151108465205603a99ea4461f1d70e738a9b0410cee2b355683413d3c3b1
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.beemdevelopment.aegis/primary.prof
- Size 2KB
- SHA256 01c6ff80993d3f6171b18ac6694ef6af0da23f6f285b71e93184ef1ab01f7ec2
- MD5 494e9caf17eb8074edb2c35a206c525c
- SHA1 d5ec318fa5e18bf4170ac7c4c2d17db7f17eec01
- SHA512 3442968d1f677862e29887edeeb52bc9f19bfa8d93bfebc1f58e9d80a1566219f1f8bf970d5a46642a48f7091fc14329adf8749d28a419b87b119e67fcb38bdb
- TLSH T1A2514C4CF3AC49238A088D9960ED2C299DED88A8B3F9926B4D6CB085CFD4814767B485
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.beemdevelopment.aegis/primary.prof
- Size 5KB
- SHA256 4a12d8c69228c8aad7cc69a63414e0201aa6c4ce6137a21c6b6e839aa2bb211b
- MD5 220445d269d6d1ee07291999b5e0138e
- SHA1 b3650ec51bf01ad4886f3583e19e55f9c7f590c8
- SHA512 c604c72be146288627ba217ab9c4b9584ef931042906f01ba55628cf7a325ccf70091c186516871881db9512c76e1bff49b49b4b4f557161610f8e96a0930e3b
- SSDEEP 96:uapK+z9zyjskJM62xA7ThQbxxnFtdbTYQwoSE1sYUOiP9SjRv3:AY9+jskJM34WvFBwo31tUOiPo
- TLSH T194C18D1534E94F7113F9EB20A0D2D397D2CCAA9C3DB710FA2E285D01FE4EA979902984
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.beemdevelopment.aegis/primary.prof
- Size 7KB
- SHA256 7f16b02c52a30d4cdbc27a35bb58bf1a0a2a65b13b43d9259ac94f3e5d661eb7
- MD5 1df60bb070e54ce2672c4f26f4583f84
- SHA1 b6088aec43ea2d99982431a7b15e49ad5863cc55
- SHA512 046168a3f7b32a9fb78423e0e461db9165258193488a1466e80a5344aeceef260e81fef406ef9149d0d847f156f7a63b1057f4fdad4393dba82742bc04e7f596
- SSDEEP 192:THmJ40hsDLP13kWn/xtTNtgfYb1tmVeggP4TWyEJuo/fgkhyp:THNDLN3kO/xtxtMa1U9tGh0
- TLSH T135E19FDDB3262A9401A4B230D57426A393C1852427FCF336AD15518E63BF375B3668BF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.beemdevelopment.aegis/primary.prof
- Size 8KB
- SHA256 1df7c1cc1e6b85ae4571848cbaaf0fc462632f677f04f267ad9e884f2c9c69f4
- MD5 44c4ef5eb4f8e0ed20f1e1f5bcb7cd76
- SHA1 7b2ca2db6c30bf61e7522c0b9e3b24badd8be3fd
- SHA512 427e0351392dbe8e80aa7742f1a415e935e7e03c75c76dfa78fd90a5130251dd201e7cb6005c8c95fcce0a38ea85b48e517cd9f09aa36c26af21fcc69e7dbe66
- SSDEEP 192:YSEU61G7UEYz8sDwbF29S7M/WT+/brVRTCBO/N0BD4zkVnMO3s:7Evz8qA7G/VROO/AD4dV
- TLSH T14202BF401B4CDD36928C0FD547A9C5B46B51DEC304A34FD8C8BEAEB80A9152FA53DDA5
- MD5 SHA1 SHA512 SSDEEP TLSH