Analysis
- max time kernel
46s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
10/09/2026, 00:21
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
External_verify-debug.apk
Resource
android-x86-arm-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
External_verify-debug.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
External_verify-debug.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target External_verify-debug.apk
- Size 8.3MB
- Sample260910-anm4asvwat
- SHA256 ffbc7e4f759015ea2a0aea35b1dde85cfc89989c34b2ef000d47131af3b240ba
- MD5 f989e54b73860a802956923d27fe1547
- SHA1 a2a608624a3ab8c7bc257f7294765684e8543fcc
- SHA512 8200e9107ec7e67e8628175b739904771ce5ed6384f48b9b03c94ad990a963b323744b6453a49cf439110af994d9815a0e96a68b4f332da8dfd29ffe32f837f1
- SSDEEP 196608:5JgpKOGuomZUkHnXCMqjeIWHCiShtgyfxwliA/5HhAP8dULL:5C7HomZVHnStlWHCiShiyzABJdUv
- TLSH T175960286F798A92FC477503385BA63B5514B8C128A83DF476908771C78BBAD44F4AFC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.kisubi.verify.external - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.kisubi.verify.external
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.kisubi.verify.external/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 80f9ed7720062e1ff7bb953dd28a13cc7d70665efdb16d6e5e64bd53194f6f04
- MD5 9f85e872971e218de59a5c2d6268aeb5
- SHA1 fc119dbafe1ebdb5c05b148dcc4b70268ab265e2
- SHA512 9fa5b3e1d144ec23ceb46d33e63aa15390141d0be925ac8408a32a6dffb270838f8ac26b179b1c89bbe8eb8ef0f3c6c7db0ab44758d2946c03787c35c5b8f90a
- SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSlE9:rAMEX0wIyNjalS
- TLSH T1B643839D1A3C2220C57E283ED3E143635B3C93DF172392223D908CFA8DC306974354A9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.kisubi.verify.external/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 a9df9823a4e931a0b120f09857d40e59a732e0b9a58a9774e95010ca6757b16d
- MD5 e4af70347ebe323b8ab9c822b90279d2
- SHA1 a38dc786d2096f45e6ca9cd4278b4df739587672
- SHA512 ffe6abf26ee2b18ac7e3daf52e45dcf0d4e8601f425b068444a64637a60cb45504875c70b89a5dd4f0c9e618761a248763e2f6ba43aaa6f69517a7d58df000c5
- MD5 SHA1 SHA512
- Path /data/data/com.kisubi.verify.external/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 2377f0e3334dc8a9a369609752fa04cd0fe36ef84e40f3626ea1459ad7d23d0a
- MD5 4a136e9852c774289cf624a3e168dc1a
- SHA1 956696b19b61333d0e22cc896983ffed4f9d6ed3
- SHA512 611eb041de6286c40bd259509470f2878f8e4a0b2d4e51d4fcda61f739e84138831f57741c41c256bf082b19720bc32bc757e74e6448255e31c7f7bacaf8615f
- SSDEEP 6:7+/l9oGn1g/pg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKtn:7+tkRqLiuWdYRmBEyPben
- TLSH T19802C08C73820C23C92D177790D583900D00E72C81F1CB9F179108F43C074CCE4A0D04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.kisubi.verify.external/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 d50a920d30915fef6ba4b52c115945556e7d5f227a1454f7a91887cfe6200c63
- MD5 136588889706601c114102fad3836398
- SHA1 4b131269eaf9fb6c253a983675f37f40d6ec5e71
- SHA512 e201cced6c7c412328d72510a2193a027a7c639c106b15cf80be6d54c3aecb605516c15a951de6fb7ae34ac3bebb6342c11ecd6f98775b8d9e9fb08949a663af
- SSDEEP 6:7+/l9c5Pg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKN/F:7+taqLJdeWRmBEyPbaF
- TLSH T16A02228A63410813C229577FE0D883481E10A7289323CB472A9108943C06ACCA890E50
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.kisubi.verify.external/files/PersistedInstallation1285796956777700168tmp
- Size 90B
- SHA256 bc355c870e51e4937ab43a21e5f77bc30f2ced433fb883b586d3709190909b12
- MD5 8b0aebf47f9c00935ea76b5ef99e2b99
- SHA1 866c382953adb7c59ad7641c1bb544b215dd7a1e
- SHA512 33068dd5e3aed26fd4e367f098b093795762c2c75c0810d82d3294d7957eb95e51ceac53413f3c6b86be62a379e99bc7d04890b2bff2ce81aac9827a5833a42a
- TLSH T1DEB012009AB14183C8D9F2073D4DD1005D5014800809CB088A08945440821D182539A9
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.kisubi.verify.external/files/PersistedInstallation3734977028633817857tmp
- Size 565B
- SHA256 112f213b4988f0d55bacbd479ca0b791afeb793809c4b49be5192269665f8b11
- MD5 c0f373bc8c2dec83e6d065024619e213
- SHA1 4b0d262fe81fb0d73aabd2c6ca654281c5d0e735
- SHA512 e6fc8b09d3cd58e36285ec913cd1e36d569a2d286b48d59b11da3a268a681a211d6f5dee7e598f5553bb6a47720f530498825436bb154a904e01f88d2d1e70eb
- TLSH T1E2F0969827F0DD5688D4B5C23C9C4CCD4DC74EF03D35A8DEB6C22C24180D8D1C103005
- MD5 SHA1 SHA512 TLSH