Analysis

  • max time kernel
    147s
  • max time network
    150s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    13/09/2026, 00:20

General

  • Target
    piabet.apk
  • Size 18.6MB
  • Sample260913-am19jacf36
  • SHA256 f35f21715394e370f02cc5c5668a6e91de7a3d8ac855452c193a49f7e5c5d114
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.piabet
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:4762

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1c4d37dd050b8b49b6a44d29b0855c837cca605a48ff430a417d85fbd969db81.0.tmp

        • Path /data/user/0/com.piabet/cache/image_manager_disk_cache/1c4d37dd050b8b49b6a44d29b0855c837cca605a48ff430a417d85fbd969db81.0.tmp
        • Size 964B
        • SHA256 fd01cfa0b4f11f3dc1ac1edeaa054a3e15573db3078e2ec0f3b29e8544e8f618
        • MD5 SHA1 SHA512 TLSH

        2115a973b5596caca0aab6a7c6b16d0e3db56d61957c8db1284a853cbda3ff23.0.tmp

        • Path /data/user/0/com.piabet/cache/image_manager_disk_cache/2115a973b5596caca0aab6a7c6b16d0e3db56d61957c8db1284a853cbda3ff23.0.tmp
        • Size 4KB
        • SHA256 006216f1ad8e821ae2368cadf392ca2f49877d14be17855ea9b18114c638b115
        • MD5 SHA1 SHA512 SSDEEP TLSH

        3ec3cf001886b135415ab0cc77ba21cf37d42103ef26aa35f4a1bf86e6e68c00.0.tmp

        • Path /data/user/0/com.piabet/cache/image_manager_disk_cache/3ec3cf001886b135415ab0cc77ba21cf37d42103ef26aa35f4a1bf86e6e68c00.0.tmp
        • Size 627B
        • SHA256 7cef6870db777756cb6e84ab8f485c48ad39da21a9357e0be2ed8d8e9886d119
        • MD5 SHA1 SHA512 TLSH

        5f427aa15cc54df4a0eb1733ce721326794bce45ff2b0be03ce091437539be54.0.tmp

        • Path /data/user/0/com.piabet/cache/image_manager_disk_cache/5f427aa15cc54df4a0eb1733ce721326794bce45ff2b0be03ce091437539be54.0.tmp
        • Size 879B
        • SHA256 005e60f59fc5d37d454646b907fe5d7436154efd456584e8f11d83bd8f56bdf8
        • MD5 SHA1 SHA512 TLSH

        76d5e47e5d6ce6ad8877561c8df9176b5d6af97a6194692a5b5bacf144134605.0.tmp

        • Path /data/user/0/com.piabet/cache/image_manager_disk_cache/76d5e47e5d6ce6ad8877561c8df9176b5d6af97a6194692a5b5bacf144134605.0.tmp
        • Size 749B
        • SHA256 15d37db0af780b26720980038c001fdec1d011ee30cb966092af223699289fe2
        • MD5 SHA1 SHA512 TLSH

        80dda20783d0e3b4a911460dc987ef8618d043f5af0ca20df2d7d7030eb8a650.0.tmp

        • Path /data/user/0/com.piabet/cache/image_manager_disk_cache/80dda20783d0e3b4a911460dc987ef8618d043f5af0ca20df2d7d7030eb8a650.0.tmp
        • Size 756B
        • SHA256 2082b85568ba71377a201e987a4414e646c826a37454b6e7f7be137c0bd3edd1
        • MD5 SHA1 SHA512 TLSH

        9fa6a86f3224d9b1463c66660901273c4479f924996a77709ae14b3c76a9d0bf.0.tmp

        • Path /data/user/0/com.piabet/cache/image_manager_disk_cache/9fa6a86f3224d9b1463c66660901273c4479f924996a77709ae14b3c76a9d0bf.0.tmp
        • Size 379B
        • SHA256 c60257caa6d84c88b7c45fdffc84d32988d2192ff6e279fa4d267b65f5ad9628
        • MD5 SHA1 SHA512 TLSH

        af386ae3353490885a73ff8c01e4317539285b54018b30d48770bfac3b38e793.0.tmp

        • Path /data/user/0/com.piabet/cache/image_manager_disk_cache/af386ae3353490885a73ff8c01e4317539285b54018b30d48770bfac3b38e793.0.tmp
        • Size 629KB
        • SHA256 6aa4255851b0ee28cfa2c5bf300d666b87ccc24b478eb1a6c82c5e09b802aa3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dda4fe10194ac5dd31d18c0bbf50aa480e9ef890af4c2a323ed2ddd5d714542a.0.tmp

        • Path /data/user/0/com.piabet/cache/image_manager_disk_cache/dda4fe10194ac5dd31d18c0bbf50aa480e9ef890af4c2a323ed2ddd5d714542a.0.tmp
        • Size 1KB
        • SHA256 520bae1e29066c3d761bcb0627f8e3cee21a696d84604ee686465b8fa5399bbd
        • MD5 SHA1 SHA512 TLSH

        f304553b5bab779504da37035d4af80893957579a1185115e0e860222e27df4d.0.tmp

        • Path /data/user/0/com.piabet/cache/image_manager_disk_cache/f304553b5bab779504da37035d4af80893957579a1185115e0e860222e27df4d.0.tmp
        • Size 720B
        • SHA256 c7d8af3fe0d3a0ab3e6ccea9ecb21fd1f1c6f6a4e75e98afd19c11009dae323f
        • MD5 SHA1 SHA512 TLSH

        journal

        • Path /data/user/0/com.piabet/cache/image_manager_disk_cache/journal
        • Size 1KB
        • SHA256 1eb45a6da9ec014cae47d305ff717d473c3c37176f494674175b47dc0ea90394
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/user/0/com.piabet/cache/image_manager_disk_cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/user/0/com.piabet/databases/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/user/0/com.piabet/databases/androidx.work.workdb-journal
        • Size 512B
        • SHA256 311bd24b0a1ff3d8ec7478c119e833cf9349d5bcc61668c3e956763ee6e60486
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/user/0/com.piabet/databases/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/user/0/com.piabet/databases/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 9c9b2f79cd93192848343d6ed78584a4252186d96b75e7679eca5ec484ee487a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/user/0/com.piabet/databases/androidx.work.workdb-wal
        • Size 88KB
        • SHA256 8cc629f6ec99c78ce0d4ef607a0abc4837c0c0c4f5391b636b0364d9236cd905
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/com.piabet/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b810959cba07c16217ace2f4c9a9cc7d85bbb5a294584a449a1b483551439f51
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/com.piabet/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ed3420372ecf7ae52236d827997f5614aae367f27c3d8331a0a7eedd532e8ddf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/com.piabet/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 000bdc55fa93726c861387d58a4581efb4709ad2797af49286b4cde6e986569b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/com.piabet/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 0a9c56315346b4a34a7fa754594d95481539b5e5017bd95a364c5257e3002dc0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/com.piabet/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2c0bcfcfb5fbcb236fb50d61ee20f63af08f7cbe51c2dc9d7d7824a53527b5da
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/user/0/com.piabet/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 63f64be51ed4bf15a19dc97b4e3e5b1fdafd7609e30df37726b9cd5359b7e64a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/com.piabet/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 58062d00a5cd62a3a54852eb948e13d2b007da81033f2eba007e5f9b3c514f70
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/user/0/com.piabet/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 60859d21f1f3d9661e567cd24bab494bd8b08ffd2983726efa5491aa1efa8e28
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/com.piabet/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 66a0961bfbc1fd66e1db7b094dd08d00ca8cbba56c4b2ecfcde65b0614416114
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/com.piabet/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 eb984c0fb6cac4f90aff3f526f9688a880374c1c60e3601fd57705a8e9e4b3ba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/com.piabet/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 c1d4c3cca49b7167e2506b2b37fc4f30ddb733ac0c10a3761c6a5c1c5a2d4a8d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/user/0/com.piabet/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 4e67a33bb5626d4eb4e7107bc7158d6c191b0c5fbae03124cafdb3a51a567e30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        6AA5ED490228-0001-129A-3D3E06661537BeginSession.cls_temp

        • Path /data/user/0/com.piabet/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6AA5ED490228-0001-129A-3D3E06661537BeginSession.cls_temp
        • Size 77B
        • SHA256 017ef6c639b3731d9bdf695d67d88ee3903f5f4dee5e7a1abe5de0c76e85ddcb
        • MD5 SHA1 SHA512 TLSH

        6AA5ED490228-0001-129A-3D3E06661537BeginSession.json

        • Path /data/user/0/com.piabet/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6AA5ED490228-0001-129A-3D3E06661537BeginSession.json
        • Size 132B
        • SHA256 d4d676a59f58c32b1be22ba88d634209b743684b79b99b12e6575795f310dc41
        • MD5 SHA1 SHA512 TLSH

        6AA5ED490228-0001-129A-3D3E06661537SessionApp.cls_temp

        • Path /data/user/0/com.piabet/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6AA5ED490228-0001-129A-3D3E06661537SessionApp.cls_temp
        • Size 107B
        • SHA256 cfc5bf4e2fdf684cd771cbc3a722ffe675ef1e9225fe717e0efb16a6ffad0e12
        • MD5 SHA1 SHA512 TLSH

        6AA5ED490228-0001-129A-3D3E06661537SessionApp.json

        • Path /data/user/0/com.piabet/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6AA5ED490228-0001-129A-3D3E06661537SessionApp.json
        • Size 221B
        • SHA256 11ffcee6f4dbba5a0eea1979bf5e2f85240fdb0ab8fb2f80ddadb9915f8ed31f
        • MD5 SHA1 SHA512 TLSH

        6AA5ED490228-0001-129A-3D3E06661537SessionDevice.cls_temp

        • Path /data/user/0/com.piabet/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6AA5ED490228-0001-129A-3D3E06661537SessionDevice.cls_temp
        • Size 49B
        • SHA256 ec664092a3596d487e39269cc43b1c24502473f0c666e4f91b808394a974a60f
        • MD5 SHA1 SHA512

        6AA5ED490228-0001-129A-3D3E06661537SessionDevice.json

        • Path /data/user/0/com.piabet/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6AA5ED490228-0001-129A-3D3E06661537SessionDevice.json
        • Size 203B
        • SHA256 17cfcb8518203529de6e288ea03820ab37b30b226e335de7ff507a0c4a945a23
        • MD5 SHA1 SHA512 TLSH

        6AA5ED490228-0001-129A-3D3E06661537SessionOS.cls_temp

        • Path /data/user/0/com.piabet/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6AA5ED490228-0001-129A-3D3E06661537SessionOS.cls_temp
        • Size 15B
        • SHA256 94db7df32f7024d43abbedd5433d0a39a8dfe652621d40e7647af527fb5a2150
        • MD5 SHA1 SHA512

        6AA5ED490228-0001-129A-3D3E06661537SessionOS.json

        • Path /data/user/0/com.piabet/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6AA5ED490228-0001-129A-3D3E06661537SessionOS.json
        • Size 56B
        • SHA256 3a5df913db77290768c5dfbdfd65b218dfa34b7999441f5cc87797e4b65e445c
        • MD5 SHA1 SHA512 TLSH

        session_analytics.tap

        • Path /data/user/0/com.piabet/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 425B
        • SHA256 a0085fd5749ad44308e811287d6fbb12f0c51d508a2d38c7d1bbb1abdd68ea21
        • MD5 SHA1 SHA512 TLSH

        session_analytics.tap

        • Path /data/user/0/com.piabet/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 2KB
        • SHA256 0ccc0f0965253e34b098b9371edffb9683d853cb26681e1ae3628faf85cc3546
        • MD5 SHA1 SHA512 TLSH

        session_analytics.tap.tmp

        • Path /data/user/0/com.piabet/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        sa_6dd90dba-dfee-41f6-b1ba-a2290ae0368c_1789259082554.tap

        • Path /data/user/0/com.piabet/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_6dd90dba-dfee-41f6-b1ba-a2290ae0368c_1789259082554.tap
        • Size 344B
        • SHA256 ad85dfa5151b1f5d6219718da897ea207542cebdb2f66b8f6f658ce26a398e3b
        • MD5 SHA1 SHA512 TLSH

        .YFlurrySenderIndex.info.AnalyticsData_Z547SPJCM92CBNB8HPG8_313

        • Path /data/user/0/com.piabet/files/.YFlurrySenderIndex.info.AnalyticsData_Z547SPJCM92CBNB8HPG8_313
        • Size 88B
        • SHA256 45ba5fba267b43aff0830cc7ad2a193d05a7374b851488c899ba51011d04070e
        • MD5 SHA1 SHA512 TLSH

        .YFlurrySenderIndex.info.StreamingMain

        • Path /data/user/0/com.piabet/files/.YFlurrySenderIndex.info.StreamingMain
        • Size 79B
        • SHA256 97e7821433bcbe3a9ea8518ebab975e46de8359b21fa37e6de5a197211fb8dfe
        • MD5 SHA1 SHA512 TLSH

        currentFile

        • Path /data/user/0/com.piabet/files/.fstreaming/fInProgress/currentFile
        • Size 3KB
        • SHA256 0d78aad21fbac0f2efa7ef632c0ed324c91ea0a85275fd216294959bc9345011
        • MD5 SHA1 SHA512 TLSH

        currentFile

        • Path /data/user/0/com.piabet/files/.fstreaming/fInProgress/currentFile
        • Size 2KB
        • SHA256 c1c19fde0ad0b2e249b80eae64ae54d0436af46e1919cd31484c538601b090fd
        • MD5 SHA1 SHA512 TLSH

        .yflurrydatasenderblock.9b2e68cd-95f3-4fe8-b750-55ee8203fb67

        • Path /data/user/0/com.piabet/files/.yflurrydatasenderblock.9b2e68cd-95f3-4fe8-b750-55ee8203fb67
        • Size 1KB
        • SHA256 0a3c7e67515f37ccc41a6a0a91692bb805a9663253b6594ab28b98cd714682e7
        • MD5 SHA1 SHA512 TLSH

        isECommerceActiveKey.pt

        • Path /data/user/0/com.piabet/files/eCommerceBook/isECommerceActiveKey.pt
        • Size 2B
        • SHA256 2921a11f25dadaa24aa79a548e4e81508c2e5e56af2d833d65e2bcce448ce2f5
        • MD5 SHA1 SHA512

        MainModel.pt

        • Path /data/user/0/com.piabet/files/screens/MainModel.pt
        • Size 1KB
        • SHA256 2ade55907597e4459da0c828b9205346debbf4c380ff6e5d4c7324872c6f737a
        • MD5 SHA1 SHA512 TLSH

        NavigationModel.pt

        • Path /data/user/0/com.piabet/files/screens/NavigationModel.pt
        • Size 2KB
        • SHA256 ce2e00aa2ae8e87e0b4b1cdbec45ccaa180ce3135873ae04b1e49e0e3ee93558
        • MD5 SHA1 SHA512 TLSH

        installationNum

        • Path /data/user/0/com.piabet/no_backup/.flurryNoBackup/installationNum
        • Size 99B
        • SHA256 f2bfd3d88274715e0a495d87f705262eb8ebd95e840616add32c792f64890d32
        • MD5 SHA1 SHA512 TLSH

        com.google.InstanceId.properties

        • Path /data/user/0/com.piabet/no_backup/com.google.InstanceId.properties
        • Size 2KB
        • SHA256 0a5648db31a595a1229b1fd24c5fa02e133dbea7d4302d586d015cc4938acaad
        • MD5 SHA1 SHA512 TLSH