af848999a4b8df0e33f5a05a618c83d1f3052d4026ab77b2acf66def71df754e | Triage™

Resubmissions

13/09/2026, 12:16

260913-pfzjpaywb18

13/09/2026, 12:00

260913-n6lj3swgka8

13/09/2026, 11:50

260913-nzn2mawfnb8

13/09/2026, 11:35

260913-npzelsx1ht8

13/09/2026, 11:04

260913-m591lsfp518

Analysis

max time kernel
149s
max time network
153s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
13/09/2026, 11:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Skygofree_pe.apk
Size 1.6MB
Sample260913-m591lsfp51
SHA256 af848999a4b8df0e33f5a05a618c83d1f3052d4026ab77b2acf66def71df754e
MD5 708445b8d358c254e861effffd4f819b
SHA1 d190b480942ac732f282c61a540e9138a3e764b5
SHA512 bed04b686515dfa745ad093aba185b3d634ec3d59fe1ba0e9798822d10edf4308b583ecdb01c7ac86fae47919bab644ace11b00071a9cb303c21ee72826d95c2
SSDEEP 24576:sMbkXftH3TfUdiug9T0QPaJepbT1+oFctqUJOfgPE2eFm1M8z/8XuB6eOr:t8tfUdiugp0QFpP1MpHeNgUXLeo
TLSH
T1DF75F183F3A9F91AC433C03261956737665ACE198A06F6441849B7ED3DF7CA84F86BC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery evasion stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

pid	Process
5029	core.syncsystem

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

Process Discovery

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	core.syncsystem

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	core.syncsystem

core.syncsystem
1⤵
- Removes its main activity from the application launcher
- Queries information about running processes on the device
- Queries information about active data network
PID:5029

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Suppress Application Icon

Credential Access

Discovery

Process Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement.db

Path /data/data/core.syncsystem/databases/google_app_measurement.db
Size 40KB
SHA256 5a25e56b66b5cbb164ea421197eafb0bf9c18177eae90ecc707c352500f1f14e
MD5 b320408f10590b30afabc56f070b96bf
SHA1 aaba052ef95cf54cfb4140069efcf31c57032873
SHA512 ce2967ca944c101aefaa3bf8e25771244c8e42ccff0fbb7927409f9da1dd10ebfe46982d7c508f9adf7f645f6cd975f594a5c7c97dd61f0a5a8d95ca9acfd197
SSDEEP 24:TLZFIwARK7QLrhtRTV7/VN8me/2Fd6fc2FMZt4bzkQVcIsGSvIee:TvpkUQ/+/iwUiMZ74HS
TLSH
T1EA03ED9E0F107721D8AA1078F5C003E30F3D872D5B6757522AB808B6ACC70217C79CA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement.db-journal

Path /data/data/core.syncsystem/databases/google_app_measurement.db-journal
Size 512B
SHA256 1939a4e7d161cb43e7c28ea1464dff532647821ce5009bf8709da4acc774c6b7
MD5 df6385b8a77d96b8fbe9f11d50701b27
SHA1 8ab4b894aa05c2a01bcca0a995d8dd066b06896a
SHA512 8762d85def14d4cd110a159e2122a9289abd6c5b20f91104b19b85b042b5822de2e1108a078ed2bbd25aa59764451c222feab19ddfc57a95609272f65d4acc6c
MD5 SHA1 SHA512

Submit Download

google_app_measurement.db-journal

Path /data/data/core.syncsystem/databases/google_app_measurement.db-journal
Size 8KB
SHA256 39600e7cbef28e3c7bf733164cc473d2819e039791e675553fccedc2a52588e7
MD5 406ada02a8fc254a2918e1430289038e
SHA1 dd6d62da9d2c3c79a6461148286d5e525159f05f
SHA512 e401bc5faebd9bc698f307094962b60ee4d7c0fb22613680f29d618f31b3fe4ec5ab363c9b11a44e18f9727af3962cc9890c1f137d9d6a87c91d6b6b7a412e2e
SSDEEP 6:7+/l9cn1Tvg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKE:7+tYqLiuWdwRmBEyPb7
TLSH
T1A302228A63811922C91926B794D483440D40F79D81B1CB4736E008983C836CCA4A0DD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement.db-journal

Path /data/data/core.syncsystem/databases/google_app_measurement.db-journal
Size 4KB
SHA256 865e7a60e17068127ab39d49a0bf3064ee6c0ff949ed8803a3302e72283c64c8
MD5 b6723f1b983c7adcb4d369d3b1dc1cf3
SHA1 c097a1a1769964aaa8cd7008b7d7f47867f8af35
SHA512 4f2fc3ed058d8f861cfca3a2df688035a565bf6ec86a8eefa7bfd833ad02bc13287f85435f7d5ea5be7876fad17d03d880fab695a534364f9572430363f44955
SSDEEP 6:7+/l04Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKo:7+t0wqLJdTRmBEyPb/
TLSH
T13F91C08A67410913C23D1BBFB0C483441E10FB14C333CB07156008AC3C436CCEC90D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement.db-journal

Path /data/data/core.syncsystem/databases/google_app_measurement.db-journal
Size 8KB
SHA256 882d2c6db03f9c98692001761f79f5f98a44241ff3369f41f8d013380bfc0355
MD5 c268a72b8e386506d827f0c08e492bf8
SHA1 07f54bbec41224cc857bddc526200813acdc675e
SHA512 1e391b38cda27dd65aaabbbe0fe6a300b5cb02aa8553c3db480ce8887cc36a05a83f446778f36f4ad7af11331f43ddee9c7d82a81bf2dd9e3b10e47d84023168
SSDEEP 6:7+/l9memHPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuK1wM/ea:7+tg5vqLmqCRmBEyPb4Fr
TLSH
T19402128967810D13C92957BB90ED83542E10E7158162CB6B556518E8BC465CCB8D4F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement.db-journal

Path /data/data/core.syncsystem/databases/google_app_measurement.db-journal
Size 8KB
SHA256 cdc479957526f10ade7ac3ad40c20fd6c218aa08cacaccdff01d6588bc8d2396
MD5 3f7f8903ecebdf8f60e378872a094e56
SHA1 873bbbfbfe574b64b9f89c8422e278b7746f6608
SHA512 5e5ff991cf0e150c4cbc0cbd26c69f155de07e06fd192088d8e3547ea819396af750a77c8eb3117c260aad1fc257225eb1b64065e4f44fa3deee27937a166538
SSDEEP 12:7+tB9nqLyKEpkLrMdwFOiMZt4QNEzk1//OVcIHRmBEyPbEA:7+tBBqLy9pkc2FMZt4bzkQVcIsGSf
TLSH
T14B02DC4D8F243212D0AA62BDF4C103972E3C976DA323AB532FD80CA8FC424A2F855DD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement.db-journal

Path /data/data/core.syncsystem/databases/google_app_measurement.db-journal
Size 8KB
SHA256 6e07f5a9a3e246650ee5c6b69ff1618f350c4ddaf73a3be04aa12f8dde9f11a8
MD5 fe146ae1894a1d2ecf8cb865cea3c1a3
SHA1 c851ec8b7eff057bf8212acff6a9c15dfb057055
SHA512 a078e69dd75ff59ee038a88abe56b07f8a54fbe8c65627481b12da7ef81164586fe4acf07a4b24a8b082dabc6eff69f5f4e3a4728476661a8c05935c0b488850
SSDEEP 24:7+tsPqL06xR7QLrhtRTV7/VN8me/2Fd6fc2FMZt4bzkQVcIsGSN+:7M0qFxJQ/+/iwUiMZ74HSs
TLSH
T17C02F38D0F117651D4A7113DF5C107930F3D972D575B6B623DBC08E6DC46421B4399A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download