4c1a9ac6a9537857098d64d59d3ea24743cc800e50497cbae50dfd1a0a7981ba

Analysis

max time kernel
66s
max time network
151s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
28/09/2026, 12:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mira777.apk
Size 6.6MB
Sample260928-pp6dlavwf1
SHA256 4c1a9ac6a9537857098d64d59d3ea24743cc800e50497cbae50dfd1a0a7981ba
MD5 710ff092ac1d34db19f98e323061e05d
SHA1 c8b84922079e69a61cded2c1efb437e45ce16400
SHA512 f1ee0c5d09dc1441e7216249244705680ca0bb54f59171b5098ebcaaeb2cb9dde562d39eca56f96df2953ab88b0a211b785b4eae30f2ef198beeff8527ca3179
SSDEEP 98304:YyYcKjNAMPhOCjlUcRCY4LpnwFRuv5Q9H6cptDcZu0WkYzfsdvOP9eQyHlO8ftR/:YyYnrMUlnRCY4BaSCx1DB0WkKmvOwxMi
TLSH
T18E660286F768DE2FC8777072496A5231524B4D128A879787694C3F1C78BB6E80F4DBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

collection credential_access defense_evasion discovery execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/xbin/su	com.example.M777
/data/local/xbin/su	com.example.M777
/data/local/bin/su	com.example.M777
/system/sd/xbin/su	com.example.M777
/system/bin/failsafe/su	com.example.M777
/data/local/su	com.example.M777
/sbin/su	com.example.M777
/system/bin/su	com.example.M777

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.example.M777

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.example.M777

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.example.M777

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.example.M777

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.example.M777

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.example.M777

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.example.M777

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.example.M777

com.example.M777
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:5151

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

OneSignal.db

Path /data/data/com.example.M777/databases/OneSignal.db
Size 52KB
SHA256 ab03de5564295f5ec34e2fccba9811cff818911b07798e9e456a58309deeb3a7
MD5 e1941e84ac2269c7b1b8bb7041b14001
SHA1 aed569ddb068a94e893702c297683c233d841f6f
SHA512 99124fc5347f6a7e19e0e30330c4e2f0f2d9074a0fc6a0ab7be25c5bd90d8dfdc66e8abeb1852be871dadb7a5945d7046d2e72ffb4f179c385ed7ffded33c2b7
SSDEEP 24:TLLSRZBUWEaKdStdxyqOkPU/+XiByrBNDd2+32ISpvJqrEqjUix5+xGTrOPjwV+x:TeAcrA0oJxqrKcrObMoOS
TLSH
T11E338BCF4A862191EFC765B3155252E44E3B610E889317A63BF760245E83B16D72387C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.example.M777/databases/OneSignal.db-journal
Size 8KB
SHA256 e28211ca350492b77888e666ecadbd66e1746b95e8f858cddf6ce31011af2cd9
MD5 8df4e8b5c2ca9599625ac5b4c016f65e
SHA1 6b481ce87cc11971b514d25f6c2ab0e2a11dc630
SHA512 92f9ff309b81b9ced9b50e9135cd7cb36cf1c5cde0022d903c44f210f82a19d23b02bfd4d1d668e0bb6ca42a88823955bc0882c40a11dc4d581b2e1457d1d48c
SSDEEP 6:7+/l9e5/gn1WDtng9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKbn:7+tA5/FtnqLiuWdwRmBEyPbEn
TLSH
T1B402228A63C01833DC291AB790E4C3400D04F71981A1CB0719600898BD034DCA4A2D44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.example.M777/databases/OneSignal.db-journal
Size 8KB
SHA256 e82a631b876e2074c537b917727c2a0f76143eb718bc1ae72dca54cc6e47c36a
MD5 aeb37bb7d472987aefb0624192ae0605
SHA1 52518720fd3f345af2e7825257ca90510a83ff9f
SHA512 5cb9e2e5be5903fa94d396d3ffa47975fee73bac29f0991bb4e5ebbcf39f67e2261d2b7d9f91cefef8fc01f2ff3e5403e704809303734dad8ea8830cfb24f17b
SSDEEP 6:7+/l9mOPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK2/On:7+tvqLJdTRmBEyPbBO
TLSH
T1FF02C08963422813E02F27B7B4C883402E10F714C333CB071E60089C3C476CCF890D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OneSignal.db-journal

Path /data/data/com.example.M777/databases/OneSignal.db-journal
Size 512B
SHA256 23ab50c567840c8800d0751119b75767d0a69753266dc0d20af95d9613ba3c7b
MD5 1443c2c338f1b66d60641c1721142654
SHA1 8958d4b74e51c6c744400caf1e3b1e5c74f97f85
SHA512 f6a0b8a550ecc5d6c5125cfc966746bd89c3cf5096d93090950c4c32f8059b42fbc8d4feac828134f9ac97a1706cb9addead8c98dbce34982cbfd57875f25b2f
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events

Path /data/data/com.example.M777/databases/com.google.android.datatransport.events
Size 40KB
SHA256 e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
MD5 15d5b92dcbda7ef7f9ca327a903e46e4
SHA1 ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA512 2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
SSDEEP 48:Tf+3u59MENZBdUdndVd/7T9IvdldHlq8/JqYpqPS:z+3KMEX0xIyNYMa
TLSH
T1E703F05D4A202611C2BE083FD7E257531B3CE35F5B2387612E904CF6DDC68B6B831998
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.M777/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 c57a998eb9879e40e080660e7694fa1ac19da204249fc09c304cc9346b9a71c4
MD5 2c7014f1a2eb67acc84946727e132087
SHA1 5d280848758a73a2c03b2300b17c69cf598a01f1
SHA512 6a9dd9f5f6534c8c28b90d05749d1c02aedabd77f51f1b8156606d4d87024591a3c7e54f1f05a38ce889a37ed79ceedcc95d0f3e0443692a55a39ca87f9154a7
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.M777/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 66a4f856bfff978f1da63f7e6fe2596420edc987993851a06609870d1aeda025
MD5 a2b4abbdcd07ec8b229e0a674c08d560
SHA1 49244d2951eb72e81c0db723530ae4ec26832ab2
SHA512 7ad3efc6dfedb316f3e77fe4ccde805b6a1313736e6d8848c304a0ef223cf26d34d62e711ec5f2de244523af7e0369f5c3283e05ff92934a4a15ea9e6fa9b6b6
SSDEEP 6:7+/l9B4n1lvg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK43:7+tX0qLiuWdwRmBEyPb1
TLSH
T1A402228963800E22CB191AB790D483800F00E719C1B1CB07167008A8BC0B5CDA4A0D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.example.M777/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 b1c469ef7c3d519acb285dfffc3df97c9da73b334ff8a81c1e40d1ea10e52109
MD5 3ac870f2448c70b982a5e64baf078461
SHA1 b362edc81d92313e21d64c60714d6d70eb727986
SHA512 772b584e5c82bd3025cb8a96e9455f48c0b57d66295e615fb3cd1386d6ecdf73fa5b7661e331aa7d9a59981989b83e9f6e76a887133d2c81ff92bc34595d0c1e
SSDEEP 6:7+/l9L/gPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKM9M/B:7+td4qLJdTRmBEyPbFsB
TLSH
T13902228AB3801D13C02917B790C883402E10E7148323CF1716680898BC067CCA9A0D01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation325581244674867627tmp

Path /data/data/com.example.M777/files/PersistedInstallation325581244674867627tmp
Size 570B
SHA256 f5ba91d1a33cb7ef791a30f137587bb72cb87c342dff205f185ad8904e173b49
MD5 8924f9bbd365a8f249efbe960c7b64fb
SHA1 6e9fbe1b7b143768f7aeeb0071e2e11800684dd4
SHA512 dd8e6c07418184e3e0c9d4a2ba8e743d2fa8bdf07e2fa50d85d0ac060942b0bb168d57efd09b121d8f6a58ca0ef51abd3f32560c9311daccc3e4943a0147aa00
TLSH
T180F0410347708A2BC0C8028A34D4ED008D0C52EA330A01C4BDDAC49959F41AFA793580
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation3573574011327155294tmp

Path /data/data/com.example.M777/files/PersistedInstallation3573574011327155294tmp
Size 90B
SHA256 7dbaf8f6dcf7bde2f33f5d610da61f78cb68dc1df23d830fba93d54462ee71a7
MD5 34a0b2a50dac66b8436cc179fb648108
SHA1 c5949f3d31e9412bf3700e3caf84da57efe2bf99
SHA512 301704ab9947b411e693a22f58624a565a2fdb0872e713cd63c7d3010429fa4e92fd977c256bf30476d4a0c64a122677f3abc38019b27c8451ec96c00af97255
TLSH
T169B0124147B2C153C48DE30A2C8CE1002E4454441C4A8B451F0D909040C11D981939D8
MD5 SHA1 SHA512 TLSH

Submit Download

profileInstalled

Path /data/data/com.example.M777/files/profileInstalled
Size 24B
SHA256 0622a5814f9800551467b714d1022b24b27c6bf5ed98a40d243fc31a23ef54b8
MD5 2ff49fb9ba840df274c0b10054c01197
SHA1 bdc796274041f3ece1a8e2234089e8b015b6fc47
SHA512 1b3be0cd3db3de9e58abc6d64fd1e8df829cbd493bb0d6973a7f486e4f78f9c8428652eecda821e1aa715a70f6c93132bb0bd2882c27a11c4538f2afead7a5fb
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.example.M777/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 2814c9f16297746a972a185da3c68a85a897eaa3b759d7ad105ccc5ba4c47f2a
MD5 56970db3db4e89812067b392fd3e2f83
SHA1 6a2862ee2ad0ab6d7896b9a71c7d7fbbc310d70a
SHA512 33fd9ee1eb4aa708142c0e2d0e9ad6a90bea6724d413ebc310d2aaff105bcdd0f5ecce8b0d5a0ab06dfc881efa8ec9f2c94acd6d4014679f976e7b70c24ba39e
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.example.M777/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.example.M777/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 be214dd9404994cbb432f35f4de5f6ce0b000eb774c913fb8460181acadb2b41
MD5 58753e8f02f8bcc4d190385224c2d266
SHA1 55b64b1b1972582e5d4c71e00e5ce7fd178ddeda
SHA512 47430d07697814a047fef3918fc93b2c9a7aabd8c06fdf5e5f74926f3851050ac386312ca08d63da5c9398f0939f499e7bd09e40f764ea33be7c0d39d12e056f
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.example.M777/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.M777/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 e5cca4b6eb5a2a5b9796d8a8d4cf56f1deb2c0da1f742c402188b50a38a8305f
MD5 a09c0adba3187146fc2b1ecfca19f176
SHA1 1e622e3ebc0ae113c612533606c7874a1371698c
SHA512 c0cdadb0a92bf1cdbe091c965835e0754a34edeae7417e7e3b4510dcb96b893dda28f9ec799c1ec07b8dfd963b5b36836500f09c5738525dd8e51b6274c003a2
SSDEEP 6:KQHCrv9FZdrlOERX4PBX4ogLugMBX4suuK+/z7vg+kOw2:KQHCrlzdTRmBEyPbP/gbOw2
TLSH
T1A872C257A3903D72C88A037BC5C9830A1D5AE60F5362C74B9E612435FC413C89A50F88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.M777/no_backup/androidx.work.workdb-wal
Size 112KB
SHA256 d0482ad5be7b43bc75b0d247e15694dd24768b5d1be0eceb95d02f6513b10544
MD5 934d19639afde665db1271d2373e5b2c
SHA1 d7631953b18f5c9de292c3ed9c434c4b7f1a8610
SHA512 b7d2afe2479474191927e6ca2fc4bbfb02a72cea6caacbca82cecf0974285a1b6d48efc1fb67e97165c8bf9ceb89dd1d1a5d5c8bfaf27a3acfaa5f0b981ef2cb
SSDEEP 96:HW53aWYDP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:HW5KtndjnHt9S/f8JzSV+6D86T0ED
TLSH
T1A8B3018E0F693510C8EA64B1D5D00FB2793F812F9793E3E1A9914075EDD2920DD29CFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.example.M777/no_backup/androidx.work.workdb-wal
Size 193KB
SHA256 47f2dbd1b46367474331619ee54ca20c642a985ebcba03aa3a8da3dbeeb0e01f
MD5 990312bb03623cc96fb12459b84e7c8a
SHA1 09a519dc7c7f6aab6ea0476b0dfed0108d72c301
SHA512 0cb6eb85a9588ce75458c01b7a26a05f46ca85122f0253298d7bed2e5683964c71643e5b18bb2fe4c3792e23d42992ca914a7e0d4c56197f055a190302e176fd
SSDEEP 384:81DtY/4oPh1u4H9T1DtYNUN1DtYz1DtYk:KDtYFXDtYWDtYBDtYk
TLSH
T12514CDDB3B2EE132FE8F553FE80205E302BB55EA1B57D510DF6A43F851851088B67259
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.example.M777/primary.prof
Size 3KB
SHA256 1822f555b41a8a96c3b48086af35121a69d50f4c6ea4d0cb88e3b6e05ce6d78d
MD5 6c80e9198af1b9836d1f1f4267f6d6d7
SHA1 f7fdd9d3178d47f98a86fb3697f9b5398a46dc7a
SHA512 2871290b8df9c3dd4b61d1d81285b3eb98ac4a29d46ea440235d911806e990d7bbbdd5f57ea7f2cfdfbf0e5d1b4274ce10effcee268d888fd49e3fb7a18c0e87
TLSH
T1EA515B07566A9296B30028B36358A1AE26FF2E4643E531B1030E3E3A0532A7D15AC569
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.example.M777/primary.prof
Size 12KB
SHA256 837b11eb753f451ee02c16b7957e8f520388dd76a573aa511e325ba292638e30
MD5 18400b1d2b4afc687ba8593cd5b80a36
SHA1 73f76d8f2dc9840d360eb251705610348ead7931
SHA512 5ca9e25e6583b815de7b5f6fb971ddd58a5bb7e470a9242a48f4c3bf988f3518f37bd801bca39b23dc069a6d994ade11a6c044721c6c372dd627a8337f5e8a0f
SSDEEP 384:YhNe9swJrmbF7/Bdqn5lhQ/ip2xWxUHb7eKx:Y/2Jr6balhQ6p2xWxUHP
TLSH
T14D42D1B089C52E1F6654F8AF0FF47E5219929F97EE0519D0732D891A403D407F8DE18A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads