155c60abca8963de55d1c39d875b0defb331b948bd8c55c1ee2b7b2a65d66643

Analysis

max time kernel
99s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260721-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260721-enlocale:en-usos:android-11-x64system
submitted
19/09/2026, 17:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AK47 1.6 Premium.apk
Size 11.6MB
Sample260919-wdvlaaaa25
SHA256 155c60abca8963de55d1c39d875b0defb331b948bd8c55c1ee2b7b2a65d66643
MD5 a2381de190e9b42375c33793538308e3
SHA1 b6db010e7fc91b8cbc856bbe947aa2d46fdbc281
SHA512 32e0e9e0edbd6b0a517bfe3e27311961616073e0d817201c4d926492ca3fcc992c0b24d07e25520ef82549230efecfe183ebe8db8f35f56bf86a1acffb8cb153
SSDEEP 196608:pOGezKFTSoUbtDUGMsIvEvAeRtKbwGpOS3Yvi38JvGXRqj/u83FCUiFzwQJjj+WN:p7ino+UaKEviHpOS3WiC4Rqj/j3FMlHn
TLSH
T123C612D7F7A9992EC87600F28D5E52B1226B4D159E439B473D08372D38736E82F85BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 9 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/xbin/su	app.aksports.live
/data/local/xbin/su	app.aksports.live
/sbin/su	app.aksports.live
/system/bin/failsafe/su	app.aksports.live
/system/sd/xbin/su	app.aksports.live
/system/app/Superuser.apk	app.aksports.live
/data/local/su	app.aksports.live
/data/local/bin/su	app.aksports.live
/system/bin/su	app.aksports.live

Checks Android system properties for emulator presence. 1 TTPs 6 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.device	getprop
Accessed system property	key: ro.bootmode	getprop
Accessed system property	key: ro.hardware	getprop
Accessed system property	key: ro.bootloader	getprop
Accessed system property	key: ro.product.name	getprop
Accessed system property	key: ro.product.model	getprop

Checks Qemu related system properties. 1 TTPs 5 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.kernel.android.qemud	getprop
Accessed system property	key: init.svc.qemu-props	getprop
Accessed system property	key: ro.kernel.qemu	getprop
Accessed system property	key: ro.kernel.qemu.gles	getprop
Accessed system property	key: ro.kernel.qemu.vsync	getprop

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	app.aksports.live

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	app.aksports.live

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	app.aksports.live

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
defense_evasion

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	app.aksports.live

app.aksports.live
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
PID:4710
- getprop
  2⤵
  - Checks Android system properties for emulator presence.
  - Checks Qemu related system properties.
  PID:4840

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/app.aksports.live/databases/com.google.android.datatransport.events
Size 56KB
SHA256 7afe0f1557e6c9b84f2ecdc241270700ea4f084c1ab3c85f9059955f62770b60
MD5 3dc37ecf34cf80f9087b2e95d65247c1
SHA1 71f7bf13650fabd423e8943098775784a2b20d2f
SHA512 c4e36a3019eed391054c933c873c7b9b60a84583c0873b512a1006ffb6e8c0f43fd49e8814491bb21de66adeb9579ca1dc6b0632367be302b37b9b9bb4208160
SSDEEP 48:TG59MENkMwABdU9dndVd/729IvdldHlq8/Jq4qPSK5LFXfb7tFXfb4:WMEqzAiwIyNjaK5pb7jb4
TLSH
T15043859D4A3C3231C66D683DD7E243A31E7CA3CF972292213DA49DE68CC206578214A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/app.aksports.live/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 a354c2ac0ea8ca7b8cb6de343903d177e1b47740b68371ac56db2a4dcb54bf31
MD5 bcb90530ac7836127c6e439bdd21c431
SHA1 f090330ca505456434404cdddcc3ac37714dc568
SHA512 b1337563ea918e633548bcffc924c3fcc86b32fea3cc6e4cdc8475e602c8a3255c931c4dfeda71b0275040570d0ede29546407ac6ef516c07e50f1d6ff64b8f9
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/app.aksports.live/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 b06d9d30489c1afe51fe4fcd2a2dfabc943d952b58a6570106721c7f295bcc0b
MD5 1c2fc6de41cb9662795a073f49e34812
SHA1 d31fdb45138588a628e2b1e601967cd73259e22c
SHA512 83750ee4cccf3ad5b85d396e3bc0eb9b4c7d671c68225e723e2dfe7c32682ec3252b2e62d55b86a9b2dde8257f0cbfa3cbb6c751757d28450971a6f479a131dd
SSDEEP 6:7+/l9TS8Hn1rj2vg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKv:7+tDdKvqLiuWdYRmBEyPbo
TLSH
T1D102C08D6B810F13C83E1BF791D483400D00E7398171CB1716A00CB43C078CCE8A0D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/app.aksports.live/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 fa58a7d62790b326417b58fa58d88c3ef3bc61d7b107ad83d1bcc0f77e4aa8b9
MD5 554805f612c8010311ba653f6e9909e6
SHA1 2569953929250b3b99a01ce829938a62b88f9118
SHA512 3b3368c7c66a30da4da2e04dc09b73a2ca7ebab5d11901e462b49db01511aaa97bf5dd4530bcd41b703a63b2a838008a56949ec1f3660472b9b0acdd7d5befad
SSDEEP 6:7+/l950FPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKwOl//Z:7+tn0BqLJdeWRmBEyPbaXZ
TLSH
T1EF02C088A3840803C13D177BA0C883411E11A72CE333CB471A9109543C077CCE890D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/app.aksports.live/databases/com.google.android.datatransport.events-journal
Size 24KB
SHA256 65337d23724b91328ec061fdf5b2f0e417ab78563f88c0b0be1bed764b0113fa
MD5 50257c396e693a32396d1b8144175ac4
SHA1 b7e7846fcd95020cd964dd3d6dff541949deef0a
SHA512 e14d7320af0b00c475c49725a6bb68588f67e6a54e14df71ca109b2deefe368503d38b289ba11acac07ad86d1a6fbaef5c30352b3f5d293fb97ff040a1d4185c
SSDEEP 48:7MUu/+qG59MENkMwABdU9dndVd/729IvdldHlq8/Jq4qPSh:72/+9MEqzAiwIyNjah
TLSH
T1C9B2549C693C2211C5BF283ED7E142635D7C53DF572391603EA49CEECDC2469B0259AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/app.aksports.live/databases/com.google.android.datatransport.events-journal
Size 16KB
SHA256 fe5eafb5d6070e8eea3e6e41a763a13fe69de8a8d2ec91cab2b7606d27d7363d
MD5 f0ca19f149d6523e05ff5f45c1f16041
SHA1 dfa1aaddc66600ed311bb71ca370d81efcc15344
SHA512 1a97a69d33228bf015fffe28e52d970c1c9b47a3d77947b6e64db3a74ceca4c9db79a75b279c5eecef1a3ce150dcdd7af21d679c6220496b2063b3d31f6b1f21
SSDEEP 96:7qbjfpL1Q7unXfC3o3snGpktMEqzAiwIyNjaF:7IrGuXfC4cGaX3Q
TLSH
T12C72C68DAD3C1631C2EDA53DD7E112531E3C039F6B23602039E88EAC8EC6468B136567
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/app.aksports.live/databases/com.google.android.datatransport.events-journal
Size 20KB
SHA256 323b04ef6545510742ffd9405ae2444a2448554a8d742026b207ed3c8b42c8a2
MD5 636ff9f6e845c8b890d0d98c50feec48
SHA1 3ded36e5dc9e2b510976d61f905a6a7c05bcbc68
SHA512 aa7fc0cc1a8a93e37b1589a5b53b6fed5628eab613d1369ee3927477c3cf25e31bb8102b66a662072878059894e1ddd652e63db8fdc79baf923cef1081de9cd6
SSDEEP 48:7MjVFXfbZqW59MENkMwABdU9dndVd/729IvdldHlq8/Jq4qPSFVDqTq59MENkMwo:7obZNMEqzAiwIyNjaHdMEqzAiwIyNjaC
TLSH
T11792745D593C2211C6BE283ED3E243A35E3C53DF572391703EA49CEACDC2469B0255A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/app.aksports.live/databases/google_app_measurement_local.db
Size 16KB
SHA256 fecda2e650a2cbb3652d60ee1843b2e8fa9858bab765aee964b59b80a73d5c97
MD5 db36daef009d2615bbd9dfdb4f4d871b
SHA1 48f15ced1db6f00a2e1082ff632fb87d27b4b8df
SHA512 bb61280afeb208d4ef43224b9f871d09eeb24a4660c2b6691f5893f459871eff4ef4a537a3d0df268fa51e74bc55a76ade599d398f6d58fde4975adb8e8b70d6
SSDEEP 6:l9bNFleLIls13FP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0DqiOwa:TLDE17LzmzsRmBEyPbBvOwVQ
TLSH
T1E272D8CD8F10A206C5270337608AD3954F78551E936796472BA408615E52198B051EA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/app.aksports.live/databases/google_app_measurement_local.db
Size 16KB
SHA256 2f2b2fdf621a976e8c830c1dcc0b554561eb4995470ffe03250053f4ce6773fb
MD5 fd06981790815f569c5aa2e52a0cfd7f
SHA1 f25b2a4fae9447abb3b60bf2372c2e9de4362f6e
SHA512 2bb634d490af8ac5358d955be0c53d0e66faadbf1211ac740de7cf0d94a50a6e56826d0d5eb31c4d39dc51e92a0be2a7f3288c48b2128b8b4c28f19f9d779d5e
SSDEEP 12:TL6Ee7LzmzsRmBEyPbP/DvJ+/0Fl6jGXL:TLwHmz3GSP/DvJlF/7
TLSH
T16F722BCDAE10E607E13B073A60CBA3E65E38611E43779A5B3A7509649D532C8B152FD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/app.aksports.live/databases/google_app_measurement_local.db
Size 16KB
SHA256 75e7f407c34853d2be8d71a275d8c428d42905c410b2e52313ede18788311b4e
MD5 5a95343c0d6125113544d1332b47295e
SHA1 3919c095d283c1a4c355e9d3dc443750f729e234
SHA512 50684ba95798363f46d6f0f991100dfcc506a1b3cefef38de4a3e4bf0b2555d06d3dc36e59b09ff5c87625a5cc5fe64cb0f78c1eac8f3cf2683b6080ac55f82f
SSDEEP 12:TL6UEr7LzmzsRmBEyPbP/hd149blqYFl2WcvJ+/0Fl6jGXL:TL6fHmz3GSP/h7499FQ1vJlF/7
TLSH
T177722BC9BE24D657E23B473D20C7E3D2293C311A07779A577A255B2C5D433C8A161F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/app.aksports.live/databases/google_app_measurement_local.db
Size 16KB
SHA256 3e49da179d6203c632633a3bf2af2830ea8f3ef0fa1b878e48470323ce294f08
MD5 952f4b4d5cba215c77025bc63a31357a
SHA1 a1962b58edacc4b833c292b29db9dbb9ddbea387
SHA512 128e261dacf73ae436f14bafc984aeded540620928922d1b9234dd65c1ebe93ac1ef645675f238197b7f28a215db0874e5294b0ce12b87251013e5489a8f568a
SSDEEP 24:TLQHmz3GSP//33KamNZ2G8499FQ1vJlF/7:T0GKSP//3aamNoG15QR1/7
TLSH
T1AE7224CAB968E653F27B4B3C21CBE2D22A3D305B0723D6577A16AB1C1D43394A261F41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/app.aksports.live/databases/google_app_measurement_local.db
Size 16KB
SHA256 99efb1deed23ca2d0a2fc5f80a22c3c8bece6180cb195ecb5d610a1af7a8d713
MD5 09454fcde2f2c0d3350e852b666b4626
SHA1 dbe1a5ca062325f622113197438211509f5a0691
SHA512 0bd1d40eef576a8016e3d2b0bfd53d4d93bfda53e0670385e7d5c6e9f7c00feba58b910a566e3d9e8262fb52db439437b3ec492d79968b6ab64e3e13a13804f8
SSDEEP 24:TL0tHmz3GSP/9f3KamNZ2G8499FQ1vJlF/Z:TkGKSP/9faamNoG15QR1/Z
TLSH
T1907224CAB968E653F27B4B3C6187F2D22A3C30570723D6527A12AB1C1E433D4A261F41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/app.aksports.live/databases/google_app_measurement_local.db
Size 16KB
SHA256 6895254d8790fb8b3fec5967c7729cb05a1d6197226e349011d65aa230921e01
MD5 bfeaaa062b2da9fad45b6cec48434ad5
SHA1 0bf8b1ff32afdf88ee3761f0539478d6c4e181c0
SHA512 90090e806ba0b32c0841cbbffd2a65357c2185e22f6a83c3cc5e5b515aabd1e4e1628bbdbacd75b7c3a011832d5312b7130407c3d947bb8f72266ce7ed0a074d
SSDEEP 6:l9bNFlgls10l/FP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK+/W3:TLuE0l97LzmzsRmBEyPbP/W
TLSH
T17272268D8F10A207C227433674CB53952E28611E4377AA472BA40874AE53198B0A2F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download