Overview

overview

8

Static

static

6

ArtWorkout.apk

android-10-x64

8

ArtWorkout.apk

android-11-x64

8

ArtWorkout.apk

android-13-x64

ArtWorkout.apk

android-14-x64

ArtWorkout.apk

android-15-x64

ArtWorkout.apk

android-9-x86

8

Analysis

  • max time kernel
    119s
  • max time network
    130s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260721-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260721-enlocale:en-usos:android-9-x86system
  • submitted
    24/09/2026, 12:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ArtWorkout.apk
  • Size 109.9MB
  • Sample260924-pvsppa115m
  • SHA256 58d092f7395a5ecf2603c40f2a238de27efb07b3db8e8b4af5e7aa810102fcb7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • app.artworkout.learn.how.to.draw
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4341

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        prod.shB2jvJzud-0.tmp
        • Path /data/data/app.artworkout.learn.how.to.draw/app_segment-disk-queue/prod.shB2jvJzud-0.tmp
        • Size 1KB
        • SHA256 3ee212f07c3176a47059873a6128554c0a8f2a7f7dd02e10018c76a17533ff9c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        prod.shB2jvJzud-1.tmp
        • Path /data/data/app.artworkout.learn.how.to.draw/app_segment-disk-queue/prod.shB2jvJzud-1.tmp
        • Size 995B
        • SHA256 18d16ecb7e040043dacfdf4d2ee8c1b5743fd923062e91e0458649b4ca2c7051
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/app.artworkout.learn.how.to.draw/databases/com.google.android.datatransport.events
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/app.artworkout.learn.how.to.draw/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 330ffda7e4f78c39b43ae6cb2c36f24a4ec7bb5daea32fa7e4da272aacc0d91b
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-shm
        • Path /data/data/app.artworkout.learn.how.to.draw/databases/com.google.android.datatransport.events-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-wal
        • Path /data/data/app.artworkout.learn.how.to.draw/databases/com.google.android.datatransport.events-wal
        • Size 120KB
        • SHA256 3ded8bd5b8aa73c4191a706c543c4275b6617b7fb3b10c6699abd10445f7b37e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/app.artworkout.learn.how.to.draw/files/.crashlytics.v3/app.artworkout.learn.how.to.draw/com.crashlytics.settings.json
        • Size 781B
        • SHA256 5de51c2f8cc8a465c8a47f6cbdf9bf004d2d6e52a43672439d6a485e71606aeb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        internal-keys
        • Path /data/data/app.artworkout.learn.how.to.draw/files/.crashlytics.v3/app.artworkout.learn.how.to.draw/open-sessions/6AB5501802D0000110F579933B998A7B/internal-keys
        • Size 207B
        • SHA256 9da152d2f046081c6fd42fadb8b389b9db266198c0a5cefb0db38ff3e881ee56
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/app.artworkout.learn.how.to.draw/files/.crashlytics.v3/app.artworkout.learn.how.to.draw/open-sessions/6AB5501802D0000110F579933B998A7B/report
        • Size 810B
        • SHA256 aa1dfd8f4b55b4499c8fe1343a738c16b1dd39282d9a4bd6a5db0532aa551308
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/app.artworkout.learn.how.to.draw/files/.crashlytics.v3/app.artworkout.learn.how.to.draw/open-sessions/6AB5501802D0000110F579933B998A7B/userlog
        • Size 97B
        • SHA256 b2823a008831ddc411e29c5105e0fe1728d8a4b1a57b9e2f20c3b354bb14ede5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/app.artworkout.learn.how.to.draw/files/.crashlytics.v3/app.artworkout.learn.how.to.draw/open-sessions/6AB5501802D0000110F579933B998A7B/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        FeatureCache.txt
        • Path /data/data/app.artworkout.learn.how.to.draw/files/GrowthBook-KMM/FeatureCache.txt
        • Size 66KB
        • SHA256 97727e7b7742d83b88373a69a44d610a9e0649a05fd96b2dd93b7cac3eb00ae8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation1064625134568316211tmp
        • Path /data/data/app.artworkout.learn.how.to.draw/files/PersistedInstallation1064625134568316211tmp
        • Size 572B
        • SHA256 59c32835d30ce05dc862c0a72d00a66c10bf4403eb42553a381cd0909843070f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation5177446554488780714tmp
        • Path /data/data/app.artworkout.learn.how.to.draw/files/PersistedInstallation5177446554488780714tmp
        • Size 90B
        • SHA256 b93978825098cf73627c4bb3702b45fe274c1e3397c8c8ed7b480b7cdd3c86fa
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        audience_network.dex
        • Path /data/data/app.artworkout.learn.how.to.draw/files/audience_network.dex
        • Size 3.6MB
        • SHA256 581ea975c0ab7a38f4d0f7fea8573ac3bbb795201b9e81a36b24ec299a82aa0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        firebase_session_YXBwLmFydHdvcmtvdXQubGVhcm4uaG93LnRvLmRyYXc=_data.preferences_pb.tmp
        • Path /data/data/app.artworkout.learn.how.to.draw/files/datastore/firebase_session_YXBwLmFydHdvcmtvdXQubGVhcm4uaG93LnRvLmRyYXc=_data.preferences_pb.tmp
        • Size 50B
        • SHA256 81dd92631d76794403d289db5ea8eab6850ce2a92bdaee7628add5bf70947588
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_YXBwLmFydHdvcmtvdXQubGVhcm4uaG93LnRvLmRyYXc=_settings.preferences_pb.tmp
        • Path /data/data/app.artworkout.learn.how.to.draw/files/datastore/firebase_session_YXBwLmFydHdvcmtvdXQubGVhcm4uaG93LnRvLmRyYXc=_settings.preferences_pb.tmp
        • Size 33B
        • SHA256 a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6
        • MD5 SHA1 SHA512
        Submit Download

        firebase_session_YXBwLmFydHdvcmtvdXQubGVhcm4uaG93LnRvLmRyYXc=_settings.preferences_pb.tmp
        • Path /data/data/app.artworkout.learn.how.to.draw/files/datastore/firebase_session_YXBwLmFydHdvcmtvdXQubGVhcm4uaG93LnRvLmRyYXc=_settings.preferences_pb.tmp
        • Size 75B
        • SHA256 1e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_YXBwLmFydHdvcmtvdXQubGVhcm4uaG93LnRvLmRyYXc=_settings.preferences_pb.tmp
        • Path /data/data/app.artworkout.learn.how.to.draw/files/datastore/firebase_session_YXBwLmFydHdvcmtvdXQubGVhcm4uaG93LnRvLmRyYXc=_settings.preferences_pb.tmp
        • Size 121B
        • SHA256 232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_YXBwLmFydHdvcmtvdXQubGVhcm4uaG93LnRvLmRyYXc=_settings.preferences_pb.tmp
        • Path /data/data/app.artworkout.learn.how.to.draw/files/datastore/firebase_session_YXBwLmFydHdvcmtvdXQubGVhcm4uaG93LnRvLmRyYXc=_settings.preferences_pb.tmp
        • Size 163B
        • SHA256 7495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_YXBwLmFydHdvcmtvdXQubGVhcm4uaG93LnRvLmRyYXc=_settings.preferences_pb.tmp
        • Path /data/data/app.artworkout.learn.how.to.draw/files/datastore/firebase_session_YXBwLmFydHdvcmtvdXQubGVhcm4uaG93LnRvLmRyYXc=_settings.preferences_pb.tmp
        • Size 212B
        • SHA256 f15f11f788e15548fdebe691831d203bb2190348a19c9a278640721df81a2427
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileInstalled
        • Path /data/data/app.artworkout.learn.how.to.draw/files/profileInstalled
        • Size 24B
        • SHA256 3766bad5b6f975f6615e73c1cd53997fe060feaf59a774e69d533419d2239738
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/app.artworkout.learn.how.to.draw/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 4bbb0c6611ef1ed8f8b122adf4ed5329563fd63eef8305096c91f512779db186
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/app.artworkout.learn.how.to.draw/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 5b55605cdf883f7a96570b64694804e2340cf3ccfb3ba9f5b14ebb28c20ee882
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/app.artworkout.learn.how.to.draw/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 a83bc45ac82948c375702c036ffe7e4f63257a16b444acbac2dcb2e50638726c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/app.artworkout.learn.how.to.draw/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 3bc1b423d674a719e572a1eee655b6fcf0ae9be6770dd0544934437365d676a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/app.artworkout.learn.how.to.draw/primary.prof
        • Size 13KB
        • SHA256 e31be1a4d0583105e6e276694d68025be8c0b5d9479712ab9d00c99d0a09f89f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/app.artworkout.learn.how.to.draw/primary.prof
        • Size 40KB
        • SHA256 310dd30e8a76d582bc761e472100f7e47e23fb48250fb623446bb1e67c8e026f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download