Analysis

  • user interaction
    yes
  • max time kernel
    9s
  • max time network
    22s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    30/09/2026, 00:10

General

  • Target
    tivimate-hardcode.apk
  • Size 8.8MB
  • Sample260930-agetcaab47
  • SHA256 19c9ce7c25120c30b1b1dfd9248fd25a6f1dac3c31ef2ea1bf9b7e2b27ca21d7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Queries information about active data network 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • ar.tvplayer.tv
    1⤵
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    PID:3342

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        applicationId

        • Path /data/user/0/ar.tvplayer.tv/cache/com.parse/applicationId
        • Size 3B
        • SHA256 cd2eb0837c9b4c962c22d2ff8b5441b7b45805887f051d39bf133b583baf6860
        • MD5 SHA1 SHA512

        base.3342.tmp

        • Path /data/user/0/ar.tvplayer.tv/cache/oat_primary/x86_64/base.3342.tmp
        • Size 541KB
        • SHA256 bf79537d9f3af0f2d62d37c55ac22e8986f0f0656a59b85a659ff2a7d3ed687b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb

        • Path /data/user/0/ar.tvplayer.tv/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/user/0/ar.tvplayer.tv/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 adf4957d5c263c3ea6f40b1d19623e70f6097038a6711ac3ad177f8258c8be15
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/user/0/ar.tvplayer.tv/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/user/0/ar.tvplayer.tv/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 f3c2b4de25a9ce47903f8af57681b0300a4dc579e04a662601811773ad7e4e10
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/user/0/ar.tvplayer.tv/no_backup/androidx.work.workdb-wal
        • Size 277KB
        • SHA256 3e6c99b55ec741387611a5e19f03d8d78337ae2f0c5888ff55203433d1632085
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/user/0/ar.tvplayer.tv/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 ec89f75bd3f2a5baf971e1d5208ffc4b7f21d6666c3670dbd825238393ba1b95
        • MD5 SHA1 SHA512 SSDEEP TLSH