8498388ee5425aa54998a83268381685c9651788d978a4314b8d7075e154e129

Analysis

max time kernel
149s
max time network
151s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
08/09/2026, 18:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MX-Ludo.apk
Size 3.1MB
Sample260908-wxyr2swtbz
SHA256 8498388ee5425aa54998a83268381685c9651788d978a4314b8d7075e154e129
MD5 80973f5008ee8ebd601e482b6a962593
SHA1 b129b98d4d2acb583460993854cf85f1c02dfd4b
SHA512 52d8bc8182e7b8b0faa0a2ec46ce17c35f39dfc17a1ff421a9e14dd278e10d814bee2329bb478d41776ce68056d694239bfa361385d6e4f11998d887ae16aeb5
SSDEEP 49152:D/V6sy/0nvYfD//mb01lHRGjbimx9wMvhoBTGSZIFxphUc3h5C:DAsmcGjmb0xJmx9VoBySCUc3hY
TLSH
T1FFE5E08AF768992FCC7750320DAA527152578CD68E839B477848372C68B76D80F5EBCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

collection credential_access defense_evasion discovery execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/xbin/su	com.mx.ludo
/data/local/xbin/su	com.mx.ludo
/data/local/bin/su	com.mx.ludo
/system/sd/xbin/su	com.mx.ludo
/system/bin/failsafe/su	com.mx.ludo
/sbin/su	com.mx.ludo
/system/bin/su	com.mx.ludo
/data/local/su	com.mx.ludo

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.mx.ludo

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.mx.ludo

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mx.ludo

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.mx.ludo

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.mx.ludo

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.mx.ludo

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.mx.ludo

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.mx.ludo

com.mx.ludo
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:5061

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

OneSignal.db

Path /data/data/com.mx.ludo/databases/OneSignal.db
Size 52KB
SHA256 ab03de5564295f5ec34e2fccba9811cff818911b07798e9e456a58309deeb3a7
MD5 e1941e84ac2269c7b1b8bb7041b14001
SHA1 aed569ddb068a94e893702c297683c233d841f6f
SHA512 99124fc5347f6a7e19e0e30330c4e2f0f2d9074a0fc6a0ab7be25c5bd90d8dfdc66e8abeb1852be871dadb7a5945d7046d2e72ffb4f179c385ed7ffded33c2b7
SSDEEP 24:TLLSRZBUWEaKdStdxyqOkPU/+XiByrBNDd2+32ISpvJqrEqjUix5+xGTrOPjwV+x:TeAcrA0oJxqrKcrObMoOS
TLSH
T11E338BCF4A862191EFC765B3155252E44E3B610E889317A63BF760245E83B16D72387C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.mx.ludo/databases/OneSignal.db-journal
Size 8KB
SHA256 210c51111f3f4eda178d2d975c3359dcadb530d85d2f8d9ea921148fc64f7e94
MD5 7115e4badea6fc54b8dab0e0e1ac0592
SHA1 a3bf52a3353a41011a5a9f09758bc08f8033afa7
SHA512 34f9457804ecda524902b4b5137515087424d1fc8ce0f63a929f0d6d3354a54605f9dc4306a2f640fce2113efac607adc653be9d83915898b32051bf0293bd75
SSDEEP 6:7+/l9Ntgn11lllng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKkln:7+trw/pqLiuWdwRmBEyPbzn
TLSH
T19B02228A63802823C81956B7A0E883400D04F7198262CB8F656008983C036CCA4A4E6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.mx.ludo/databases/OneSignal.db-journal
Size 8KB
SHA256 4defce173b8f3bf5077ebec5c8c05288238c6d88e9e98c970e22fb98e0db137f
MD5 94726ef81f56f72387ab07a3c8466fde
SHA1 b6c5e382f19cc71dd8d682d201bbfb21d70f7a38
SHA512 ade2e25c94d35c5e14d0a044f0fff5e8cbf428c8b8a4105f1b0fe0a315302edea9bb5166c12b0e9e8510f86b8a45df5bbc11efc60545a577c17db2e8e16205f0
SSDEEP 6:7+/l9JPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKa/y:7+tDqLJdTRmBEyPbNy
TLSH
T1CD02128967410953C51A57B7A0D983952F50A725C363CBDB1A601898BC46ACCE890E54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.mx.ludo/databases/OneSignal.db-journal
Size 512B
SHA256 2ffc97874522650ffc1708e92a8675e27627547f818da83fb7d62bfbbb358ebc
MD5 e0e334d44e0384d2c238b9f9c1ec44fc
SHA1 ee926b3158bdafe4a38b72c636b46dc60d8af4b0
SHA512 c721833e3b60cee7c3259499e73c3124a37d649e87c37c07ad370f99e8af8a8f4bbce93e62a507ba979892180195610afa3a70dba02b9cddde876e85cca0688c
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events

Path /data/data/com.mx.ludo/databases/com.google.android.datatransport.events
Size 56KB
SHA256 84bdbb865bf371928986f57b55757bf446113e92d99eee3ff0f3974dd7ae15d5
MD5 1bb9296d53690334fd353cb86826b974
SHA1 8b08431bd9fa855f61819ea9b3b0900317b46ef8
SHA512 b0628307f00fbbf29a5b36c1cd6aa82fc71e400fe2c013c2c0a84f5b3090518d363bbd52bfb80fd5467b89da2ddf26ae489a25fd6184ea3ecc04d65d2fa22628
SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSA:8MEX0wIyNjaA
TLSH
T14443619D5E3C2221C57E283ED7E243635B7C93DF572392623AA08CF98DC206974358A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.mx.ludo/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 ba69dac4e77b8b871885cc0ead694086f3a1932940a1fe51cc54294ec27c1dca
MD5 df7d949fdf1f0f37088813b633561732
SHA1 e8a75a7b8a07b18a8569f0f86015a3c55e038423
SHA512 68cab6577933caa3b4a0d00de94da010a0a59589303387c9a65c03116b7a083135c3999edea7400bbadd68c213356620834ccc4d834f763a45ab2a9fd9a748d6
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.mx.ludo/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 8524f422b8b10012af03241f46d816c5b4fa5d073b866ccbae49dd6485ca8a56
MD5 226cc24d72853b8b365a9bbd9eecec66
SHA1 b41e600c7195cae3531570a54fc867332e367077
SHA512 ba7184146e26a4045f4f63882961cf75335fb2c72d2e02ba15243f35d0d448e4beb7585c98bb916a08dcbe883d64cdbcd35b8cef82607dbd11276e910f266c93
SSDEEP 6:7+/l99Hn1isWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKz:7+tssWqLiuWdwRmBEyPb8
TLSH
T11C02228963820A23C81916B790E483400D00EB298965CB0B1AB008D87C174CCE4A0E44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.mx.ludo/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 d4ece629c70ff45a2a032d9ddc84e2467017120cfe896d21c7b196cc374f07bd
MD5 59ad74a91ea3fb6a234292521a51d2f1
SHA1 78ba2374ba83bb825bcb5d4171f75c45e2c420ad
SHA512 c05f49cb83b307cc907cb0784ef303064b921bd77bc9d42f7444e789c54accd884cc8e4c01d75651f0c7f34591eddd7b7633aa07530616844e119cd3f9e6e2ce
SSDEEP 6:7+/l9JHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKZU/Sn:7+tPvqLJdTRmBEyPbpSn
TLSH
T10002128967410923C61967B790DA83552E50A71D8263CB571FE208987C87ACCA892D98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation3478392713964472036tmp

Path /data/data/com.mx.ludo/files/PersistedInstallation3478392713964472036tmp
Size 570B
SHA256 d25a0aeb2827bf98c209f532895c87ce2d099a2a9f99c51542c425d4a0339f84
MD5 45d79e20a9dd376ea269c22c693dd739
SHA1 5cb1a7c0a46ac041ea5a605ea912be35876a6fd2
SHA512 1deefd3151ea63231863b3e07c0b951b6e912d1745bbea00bd2384ec4c3f1532e0c1d20ce98998e6053d8117b672eab2a8890ce92182374906d57aef12f83bb7
TLSH
T1F1F026076BE14518F0C5134B31C87C841C85C4E92BDD59FBBD554C988CA066E779F746
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation7512855306723394842tmp

Path /data/data/com.mx.ludo/files/PersistedInstallation7512855306723394842tmp
Size 90B
SHA256 b207b76dff924d90ae38ade54bd19bfd7b4a41cc42cfe72cc29e544fefdfc48d
MD5 4e6220a1f6013e49e508d2b9f1204972
SHA1 1222526bf652be039566cbd918ecefcb9cd58b01
SHA512 2b4be57e393cf87b6bb45ec750176a1e6d14218d4383a241b7850fbaa7c9b40947134563fc9c83a346ffd468c1de7ad795a9b734e3eb043952f1b81136f1434b
TLSH
T1B0B0120687348151C48AA2031C8CD1002DC024C218CDCE164A1AA85001932D18253998
MD5 SHA1 SHA512 TLSH

Submit Download

profileInstalled

Path /data/data/com.mx.ludo/files/profileInstalled
Size 24B
SHA256 b58f5ad139641ba53ae101f7a6cb2375f0f9f16e041a8e0a908ec86cd238bdfb
MD5 783c6df2c71801fc3a9ea6ffa31c4cb4
SHA1 4fc066fa89f1b9ea26ca5ad7dfe0682eba75d07b
SHA512 f52b0b9598c0730251b5b7486f66598eb2882afb86a84fd3f2c06bf1dc2de12fc34abc5bdbd19e079f72d1955af83079081dc630e1239792dd42f4e06418d743
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.mx.ludo/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 4d329b9a6fe25ea90faf9b38afbbf6d19d5266469056bb72ceab242e36fd96ee
MD5 a0e74096e39d477f2ec575709e78d9df
SHA1 a98f856c42ebbcda7f0ad0de44e5dc2b5e3255b5
SHA512 5094d0cc61d2b97fc2c6d48fe1cf6557b20a409f9d91e51a332ae9755ee32d9b452966412dfecdc33530f821637bb347e341281a487d3a3e930391eecbed6009
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.mx.ludo/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.mx.ludo/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 987432ad290675d9f3e8317ca26968c09ee3c707f3d54cb958d7bd98b88fe32d
MD5 331b6aebf4c6ab467f4de70b63a7dac7
SHA1 ec7ce88fbb464a3e01803955ac14ee66e89a8086
SHA512 71b5b138a227298f74ad14c73af5367d6e06deaf5295869d4d5d54462101412fc7e407184885678563ba503a3d2542e86b605234d2f3537b6d511287650f5ef2
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.mx.ludo/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.mx.ludo/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 1e486a44690547e37e3ce264f2df9dbc0ab5d11c2d6ac42b7c1863324810fe39
MD5 e6f2af0fa3a5a8e94dc25d0930d25068
SHA1 1f1ad6460c0fb2fe278ba7450eb55f428cf6e7c6
SHA512 07b1c0ad341deb46784d4ee1f29cbda6f5f4d870f908e5480eae791e777bf38cbdd7708819f2b445d5ef7f9f636252269949f1b66fb46df0f76f5252a8808f4d
SSDEEP 6:KRg8TJ9FZdrlOERX4PBX4ogLugMBX4suuK+/iduZK/y4A+TdTt+Ow2:KRTzdTRmBEyPbP/isZs7pgOw2
TLSH
T1BE722B5893404953D4390FF2D4C8F3492E92AA1D4BBBDBCB11940597EC427E8A56CE8C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.mx.ludo/no_backup/androidx.work.workdb-wal
Size 112KB
SHA256 38d04769ecb6d24d7e45ce1da68a4131bffdebf6cb9800cd622af2104b2408e7
MD5 a53208aadd2f09e9579c612bdb6bfa24
SHA1 dce30aba7be5baa86dfb995c80361f272b5471a8
SHA512 f03c0bfa9a40577e3b93914c480f0ff45f80cb7e54ad2f99d4a78743c23a0527ce7e8dd6051091181598b4ea97ca275046a18e8b0144a11620fa513129c6eb6f
SSDEEP 96:OKNeRW3DP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:OyM+ndjnHt9S/f8JzSV+6D86T0ED
TLSH
T13CB31F8E0F592601C4BD6CF0D5901EA1793F492D83A7F3E165A10076EDD6930EE29CFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.mx.ludo/no_backup/androidx.work.workdb-wal
Size 201KB
SHA256 0bc810fe643a6bbc766c9717dd53d9d71519cc81414e8bbd0ec1d35b4638b88f
MD5 09e52700fc86f6da08d61b6ed48dc22a
SHA1 d3e6892397b1a943eb4b0f32c16e977c577eb874
SHA512 e31e8ab8ccbc2cc3e9f7ad05b484a055add2b3c4678f0c707c5f52630bba29cb5fb4d304c2f014cf7227b32deca0135eb13b3037ccafdd898e82fcb37eb16dea
SSDEEP 96:ujE21DtYNQUEsEqUukuZjE21DtYPEljE21DtYlDntE21DtY:21DtYNQWd1DtYPEp1DtYlp1DtY
TLSH
T184149EC6219E8931FB4A0AFBFC6355F20AF714EE0EAFA480565F471449C324AC75BB85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mx.ludo/primary.prof
Size 2KB
SHA256 34834bf0e694fbbcce64111c53ae8cebe13decbac651c9c94be5126a22be51fc
MD5 bde409ec48292038ba2d548f33bb6747
SHA1 e95bdf3b227d62347445f675f49f58ac43810a8d
SHA512 bf8b67d3c8eec6c870677fd51c6d64339cd18383ba526224d944dc220fb26ab34ec51549d558c2c1a180691b24051c743628719b677c16873a3a34b3d5cb92ac
TLSH
T154411A205421C035BDD6FC14FEFA9BC20580757D1AFD5502203DA49DB88CAE1D47C412
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mx.ludo/primary.prof
Size 6KB
SHA256 0b64ce79a823f5df23365cf8b1938c4c7ef5a88b813c1cf7dc10dd3d5170cddc
MD5 403a88a226b63b805104cb9d3757701a
SHA1 6bf2a08afbe0d21256b4554cf2570ca489ec66da
SHA512 3491f6b1a1d49b3629ae8a913c8371621a910e38db2d0ae8ac9bdc2b35cc68c2ea305740de8fa5399b0f52b609b7f7256f1c83952c97fef2a2b4e3b15730c52a
SSDEEP 192:Gz+S2mjq0gNNndJdC4L2scBR0oPUeAClh3VItMv:vH06ndC82scbnUeAClh3ia
TLSH
T1FAE1AF9ECA3C8B134CCE7D76E8EB94127DCAA6197F081AC6A6DC15720D1728CC730656
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads