Analysis

  • user interaction
    yes
  • max time kernel
    60s
  • max time network
    65s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    10/09/2026, 13:03

General

  • Target
    Chevstrap-v1.9 (1).apk
  • Size 5.7MB
  • Sample260910-qasdvstfkf
  • SHA256 447d96f145f64ae744f42062140a582ae0265deb278a8d11bb478b097b16847b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

Processes

  • com.chevstrap.rbx
    1⤵
      PID:4266
      • su -c echo rooted
        2⤵
          PID:4293
        • su -c echo rooted
          2⤵
            PID:4398
          • su -c mkdir -p "nullexe/ClientSettings" && chmod -R 755 "nullexe/ClientSettings"
            2⤵
              PID:4417
            • su -c echo rooted
              2⤵
                PID:4437
              • su -c ls "nullexe/ClientSettings"
                2⤵
                  PID:4456

              Network

                    MITRE ATT&CK Matrix

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    ClientAppSettings.json

                    • Path /data/data/com.chevstrap.rbx/files/Modifications/ClientSettings/ClientAppSettings.json
                    • Size 2B
                    • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                    • MD5 SHA1 SHA512

                    profileInstalled

                    • Path /data/data/com.chevstrap.rbx/files/profileInstalled
                    • Size 24B
                    • SHA256 1e8fc22d83e490f895cf75797572565c6aed91d1228e04ab5d51202a7f9d05b2
                    • MD5 SHA1 SHA512

                    profileinstaller_profileWrittenFor_lastUpdateTime.dat

                    • Path /data/data/com.chevstrap.rbx/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
                    • Size 8B
                    • SHA256 6018fff11f5c309cb60aafc13c595f823a29e4760244f1b5585189b7120077aa
                    • MD5 SHA1 SHA512

                    primary.prof

                    • Path /data/misc/profiles/cur/0/com.chevstrap.rbx/primary.prof
                    • Size 2KB
                    • SHA256 5049d643a30f7a93e17743eac3f6eb457c746c769f678417af0c02c637420fe0
                    • MD5 SHA1 SHA512 TLSH

                    primary.prof

                    • Path /data/misc/profiles/cur/0/com.chevstrap.rbx/primary.prof
                    • Size 4KB
                    • SHA256 831c937a01aaa4a8946fa366d4944d4cfb504ee90944b5e91f2d77993debd9db
                    • MD5 SHA1 SHA512 SSDEEP TLSH