6f4b408f698bc936b2ba268c703fe3ccc0fc83efc887e1c5be2e58fc6ac9d1b1

Analysis

user interaction
yes
max time kernel
149s
max time network
153s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
30/09/2026, 12:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
apkcombo-installer.apk
Size 3.1MB
Sample260930-pxaa5av17j
SHA256 6f4b408f698bc936b2ba268c703fe3ccc0fc83efc887e1c5be2e58fc6ac9d1b1
MD5 4bc6879b43c5e7ede19e8e6a1c0cd5ee
SHA1 0e54dd8ed605f022c2b48fca325bf208c86434a0
SHA512 02a7099e305f1008fb3dec5c0da344e3eed4aa364a1317d473c8deb3735fd3e37eeccd2204fa5953736e4d0acd6cb764d97d35dd43ac58961e8004737949ba43
SSDEEP 98304:burvffHkMngBvZ5osMqGEWwAJVo5336/Hg:ir3fkMumsRnWpbg
TLSH
T1F4E501DBF729843FC9FB06734DAA923227664D0544926B072A88772C6D736880F5DFC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

banker defense_evasion discovery execution persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 9 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.apkcombo.app
/data/local/xbin/su	com.apkcombo.app
/system/sd/xbin/su	com.apkcombo.app
/system/bin/failsafe/su	com.apkcombo.app
/data/local/su	com.apkcombo.app
/sbin/su	com.apkcombo.app
/data/local/bin/su	com.apkcombo.app
/system/app/Superuser.apk	com.apkcombo.app
/system/xbin/su	com.apkcombo.app

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.apkcombo.app

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	com.apkcombo.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.apkcombo.app

Checks the presence of a debugger
defense_evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.apkcombo.app

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.apkcombo.app

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.apkcombo.app

com.apkcombo.app
1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Checks the application is allowed to request package installs through the package installer
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks memory information
PID:5027

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.apkcombo.app/databases/com.google.android.datatransport.events
Size 40KB
SHA256 e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
MD5 15d5b92dcbda7ef7f9ca327a903e46e4
SHA1 ca153b66028a58d90346ff8abadbdf01b95c37b1
SHA512 2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
SSDEEP 48:Tf+3u59MENZBdUdndVd/7T9IvdldHlq8/JqYpqPS:z+3KMEX0xIyNYMa
TLSH
T1E703F05D4A202611C2BE083FD7E257531B3CE35F5B2387612E904CF6DDC68B6B831998
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.apkcombo.app/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 3a8bc62a2ba006ea574c2b98a1d20999bb17e6779d9c4ae8e48d248219287fa9
MD5 6d607c767cd02d22e990447e5f737cf6
SHA1 5aa7ce4d958b438d8cea89bdd7aa26783c796fa9
SHA512 507a8065b89955363ba13689fc4c5327d5e6b728a896c9e8faf08c711f180d217d2d3b2c5a311c8d67051bce6c14bbedbbde67bf38b92b1c6b61b8aa87f4f351
SSDEEP 6:7+/l9IPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKq/U/V:7+t6qLJdTRmBEyPbp/0V
TLSH
T18602228963400A13C03D57BF90E883412E10A7188223CF27156008D83C436CCA890D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.apkcombo.app/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 9c015056ff7a3d8b5af788175475b683be14f89a3dbae57e6ebd209199562a69
MD5 bb8c3fab962c0794ce9760c2be320b2f
SHA1 b779660ff8e7b1c2e679a92a624f9754c387ac87
SHA512 d20db8a0a8c56964a88e98d2f3722da6af969b110ba97579acd817e2af0ca4018e75b1a4954dc78f3010d851ee8acb18f6a466cbb38c2bfe08b8a5a2d587643e
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.apkcombo.app/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 8ddf1bbdaeaab8499a78ce03eeee71757042cb136b861468279d00b3ced02def
MD5 cd25574a42bd96db2623f21fd91dd7a6
SHA1 ca0b0c903e80b4543d38d2d84099f6f9bc27aa1b
SHA512 ba009e824e1a3ff7d3815794db7f71ef3ec0f1b56165341b4328045e41a2e0c25915bc0c3bb4556b59bfe90be8234ff058e6e98ed0dfb290270444b6cd5df5fc
SSDEEP 6:7+/l9jOn1tg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKyHn:7+tUqLiuWdwRmBEyPbdH
TLSH
T1FA022289A3809823CC1AA6BB90D483400E80EB1A8161CB0F256008983D035CEE8B0D88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.apkcombo.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
TLSH
T11F727DCEDF002202C1360733F4C9D3901D60921D8336DA0767940460AD02108A451F58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.apkcombo.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 1992c18306b1c53bae19e4b8fe2d61a0d71909fa30b4d4e3e0c3ed0f6c0fbde4
MD5 8c5be0492385db1a885de87c0c128ae5
SHA1 2d98cb8249533b87c8aa16f681a2b30b6036e55a
SHA512 9f6b14d6f0750d8aafc2e0eb877a93420a4c28f32b354ae1e2fa1cc95e1ea4cb31503e0648741dc288d9d6ac296abaab91aef3090bd299b35ff4ae5025a8316b
SSDEEP 6:l9bNFlsls1ylO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6MeU:TLiEy9zmzrfRmBEyPbP/P+/0Fl6p3Ip7
TLSH
T1D17268CD7A106707D173477A70CB93E11C30A2188337DA077B540468AC43184A242F40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.apkcombo.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 f1daba2900d5d1d8d611d5bf0f8d543814a1d2acbce1a72c8cd532375a15ab9f
MD5 a314d5644dee7452aedbfd7d89843595
SHA1 ae20568c6a80d87dcce2aad58fc3b28bbf6de8a5
SHA512 0bf62f54ca0316b7b2d46c666ff4b98a576df893fb7d23c3d0106ef537897d33266bcb93daf375ecc389d11d213bba1a1b703c4e023a7c2a61c3a1df70faa25c
SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hr/gW49blqYFlFg/+/0Fl6p3Ip7:TLQpmzr0GSP/h1499FElFlp
TLSH
T1CB72598D7A20AB0BE2330B3960CBD3D12C34B2258763D50779121A6C6D433859212F01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.apkcombo.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 55dfb2f1aef572eb532306f2dca9a2e29c08ddacd56e1f6d7865c44a4e1c1b85
MD5 d0bb70445e8d2f1a66e883aa6cf9141a
SHA1 f1a4824cb8e5ca7e03ce13c6124e79ea1ad02e79
SHA512 6d12012f6687bc931a4267ec80f1e7951dc9d5c3b5ba356e2d0ee8135a0a4dd755c85a254cf82dc7d745300df4a8babcafb6b35461710b61df8632ad13950482
SSDEEP 12:TLIEQv9zmzrfRmBEyPbP/otg/0Z/mvRbTw6W49blqYFlFg/+/0Fl6p3Ip7:TLEvpmzr0GSP/ot7Z/sXo499FElFlp
TLSH
T132722B8976B4EA0BF1274B3960EBE7D12C3472955367C61F79251B2C2C523865215B01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.apkcombo.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 fd46831016758cf79fb29b94a7a98c302ea60fccc90600e0973d6d0c6ac8bbff
MD5 da45e20da814e930620c97b9878f07cc
SHA1 67fe4b1da62ed4c7e408696bcb2e78676ede6d6f
SHA512 2d20684afd2398a7497af4414778cf01f24213d853dffd7beb9c7381857ea6de3e5eed48f050db6adf9c11d678a0c0851fdede6be8f09feeedfa3c16b8fed5b1
SSDEEP 24:TL6Xpmzr0GSP/oK6s/7Z/sXo499FElFlp:T2XArSP/oHs/1/O5A7
TLSH
T11C72228876F5EB0AF2234B3860FBE3D12C3472965727CA1F7A615B1C2C423C65255B01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.apkcombo.app/databases/google_app_measurement_local.db
Size 16KB
SHA256 7c92e4c0efc384e197a8eefcb39ebf6e54abe77cfb2e137ad2b5b00c71565981
MD5 9c9cb2ae8c8aed0b716adeaa4ee76e53
SHA1 44e8367974e953fcd1295cbcb9687fa22677ab22
SHA512 0494a88fc337a3935349476e8b834b6c6a776a44566e3e4d2e2829c0d503e961f787be2612282d4e70f352484829733759acfacd5c60a850b808ddf768d31bd2
SSDEEP 6:l9bNFlO/Sls1QmvlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WDHePl:TLAWE/9zmzrfRmBEyPbP/WDHePl
TLSH
T11972CDCD9F106A02C172077274C953535D54921DC337995727950474AD425499351FD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download