Resubmissions
30/09/2026, 16:49
260930-vbvmtsysgs1026/09/2026, 10:12
260926-l8tbla1dja1025/09/2026, 15:17
260925-sn27bs1w6m10Analysis
- max time kernel
13s - max time network
18s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
- submitted
30/09/2026, 16:49
General
- Target 294b1766a376ffffd00666f1d539a70fdedf4fa256a01c3bd1b9cd795bd05f0e.apk
- Size 2.4MB
- Sample260930-vbvmtsysgs
- SHA256 294b1766a376ffffd00666f1d539a70fdedf4fa256a01c3bd1b9cd795bd05f0e
Score
8/10
Malware Config
Signatures
- Removes its main activity from the application launcher 1 TTPs 1 IoCs
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries the phone number (MSISDN for GSM devices) 1 TTPs
- Reads the contacts stored on the device. 1 TTPs 1 IoCs
- Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
- Reads the content of the call log. 1 TTPs 1 IoCs
- Acquires the wake lock 1 IoCs
- Queries information about active data network 1 TTPs 1 IoCs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
com.gbooking.googleupdater1⤵
- Removes its main activity from the application launcher
- Reads the contacts stored on the device.
- Reads the content of photos stored on the user's device.
- Reads the content of the call log.
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
chatssdb.db
chatssdb.db-journal
chatssdb.db-wal
google_app_measurement_local.db
google_app_measurement_local.db
google_app_measurement_local.db-journal
google_app_measurement_local.db-shm
google_app_measurement_local.db-wal
google_app_measurement_local.db-wal
sppp-journal
sppp-wal