Analysis
- max time kernel
6s - max time network
150s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
28/09/2026, 04:35
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Moon Reader Pro-v10.7_build_1007000-Mod.apk
Resource
android-x64-arm64-20260325-en
1 signatures
150 seconds
General
- Target Moon Reader Pro-v10.7_build_1007000-Mod.apk
- Size 55.0MB
- Sample260928-e7t36svdlb
- SHA256 d676b16ff18c2496ab35d1306fd195e7fba491bc8260cfd368ab973c7bc09d08
- MD5 ea282cb45f2ef0b3f3c71a3dfa37972f
- SHA1 1f2ab48afe7a012f2fac62d0d00ab1dd104d8cf0
- SHA512 a3db393e819c69414f291310d1d4b7573f6f1820a4dceb85beadb86f30a98e1144f4bfb1e6f4b232f55f796c4d36fd8fe62d68141ac7ed650aa11a9ee0ed2cac
- SSDEEP 786432:wg5detkomuVgL9ShUSaqsVMkmSPiOgNuRNtClQHtc2exEl141A:weymuVgL9SJaVVxmVNdXzQT
- TLSH T13BC7E046F645986AC4E6A538951F8232E7307C488362D5D7AA48FAF47F337E06B393D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4778 com.flyersoft.moonreaderp /system_ext/framework/androidx.window.sidecar.jar 4778 com.flyersoft.moonreaderp
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.flyersoft.moonreaderp/databases/mrbooks.db
- Size 36KB
- SHA256 f9c7b2fed1b272c6d9650f81fb922f816f7a6ea6e7a39cb146bb5bd06bacdf4b
- MD5 9153c9c468297ca087613b05fc56c438
- SHA1 7087567c27159e2472bb4f42a3c7a60221f52a65
- SHA512 8d5b94833122804abbe548e3661711076fc82860756c14aa96eeafa4240d56ef7692b8189530b4ca36216779bb84eb8b48d41e6e873ff322b661c9be149ca922
- SSDEEP 24:TLaxX+J6HPHjVGA9sPqfSi2esyGHjVgZcXCYaJHnWJTqorHjVGA9sPqTGSgGQQQQ:T25thNvSd7phgyXkEqWhN6S
- TLSH T1BCF28E4F9F0F7B12C24C61B1792485A5CD7C930E9699CE9364FC4C41ADC19EA71EAE09
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.flyersoft.moonreaderp/databases/mrbooks.db-journal
- Size 512B
- SHA256 3e0ca7ff4ce40eedd674013efd85fbc20637f4e570a1e5a0d1ec87149131f409
- MD5 78819624c7774d5860c5215628dd6e27
- SHA1 8807401838982eef418089dd8235b72e722397a1
- SHA512 b240f6090eeb79bb0f778b61cd40edb9c28c8068df4f94505494ae9221a2bd17729c55dff902b468aff969a1cbb1ae65719e53e056db53ec20ebdaaca42844f6
- MD5 SHA1 SHA512
- Path /data/data/com.flyersoft.moonreaderp/databases/mrbooks.db-journal
- Size 8KB
- SHA256 0331fbaa8c1c61bfcb98ac41db1db16bef6ec695afa44aad66b7ad0cf41490ef
- MD5 6030143b399949181808794c4c55eb7b
- SHA1 9e0db0f501a239cccf6a8a4b4e4945c9830b5cae
- SHA512 0db73a7a0636523da5df042f244a4a3acf6d4b44947fcbd18c4aeb88a7cd619574a7127290d073c729d397ea04bad4b41c1e8e489ee2fed8d524fa67993b8d4b
- SSDEEP 6:7+/l9Xz4n1o8vg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKU:7+t1Z8vqLiuWdYRmBEyPbv
- TLSH T16B02C09EE3800813CD2D1777E0DA83400D40E7288971CB1BD6D00C94BC074CCE4E1D44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.flyersoft.moonreaderp/databases/mrbooks.db-journal
- Size 8KB
- SHA256 76f92aa966d39cc17ca1a0bf2abcbd4ff4ca2ea53e827820b536ef87994b79ce
- MD5 6bf80d15cc8b10df6f2d4af00c7afad1
- SHA1 bdca31821178ea5645b554844f39c5e97802baf0
- SHA512 72130ea31c0061cb611cf8ef392e6afce02876c03b9393a27cedc585e57d8e1a36039324872e5f0b8eea1889580ca16ac9f4652c0e03becae557cbf0ae21b332
- SSDEEP 6:7+/l9dyPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK8S//p:7+t+qLJdeWRmBEyPbbSXp
- TLSH T1050222896B900803C0291777A0CC83601E28A728B263CB9B1A9108543C0A7CCAC90D00
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.flyersoft.moonreaderp/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 e39deecd858b9b923d2f0cc80e0a73e20192249a8026b99ee17c297f890e0512
- MD5 62e41e9a874c1dee759379c79fac2204
- SHA1 4247d784fbf1c693be217ad8d865de4abab21446
- SHA512 090f5b7c609281f981c392865ece891b981b2ac9d70a80157053b5ea477d9110dc00bfda7f7ea8c0310a7b3aabf31ee2528cb72dfc183234196b801412df692a
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.flyersoft.moonreaderp/primary.prof
- Size 3KB
- SHA256 cfcf6b5a7df2abd12955efd15377c36767dec830b025ee26a4bbce81eed70033
- MD5 756f9cc0dcd4512c55e9607fafe824f4
- SHA1 d139cc1c799ea12bc0e2a2843a5351130198ae76
- SHA512 a6296c49e050686c2c96e43d3aaf0bbd9c4d5123b91f197acabfacd7177bc85d00bc7657568634e5151fa0d479e2c6faac67cdfcb41e7245ffa3a4cd59f436c1
- TLSH T19A7129938CA10985A7068A13F316E4D3B8C1DB3F55D463EF87E6A176EF0610192AFD01
- MD5 SHA1 SHA512 TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 12KB
- SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
- MD5 bdf3529e80318eb14e53a5bf3720c10d
- SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
- SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
- SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
- TLSH T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
- MD5 SHA1 SHA512 SSDEEP TLSH