Overview

overview

8

Static

static

6

grandways-release.apk

android-9-x86

6

grandways-release.apk

android-10-x64

8

grandways-release.apk

android-11-x64

8

Analysis

  • max time kernel
    37s
  • max time network
    152s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    02/10/2026, 12:16

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    grandways-release.apk
  • Size 8.0MB
  • Sample261002-pffftavygs
  • SHA256 043ebed69763576c9e01c71afe80e1d60184ccd1c92e33d30da5e067f22d2bee
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoveryexecutionimpactpersistence

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • app.grandwayscreditunion.com
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4266

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1700159444520.jar
        • Path /data/data/app.grandwayscreditunion.com/cache/1700159444520.jar
        • Size 10KB
        • SHA256 e1661b37aba29d5a8c159f7d5006f10023e6bfc9bbade99b09408360ba2185ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneSignal.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/OneSignal.db-journal
        • Size 512B
        • SHA256 1d3bc44fbcdcedbb5d1ce168f985da4200bf63ab8cf6bf572348a374efc13d74
        • MD5 SHA1 SHA512
        Submit Download

        OneSignal.db-wal
        • Path /data/data/app.grandwayscreditunion.com/databases/OneSignal.db-wal
        • Size 64KB
        • SHA256 b08bf171c1952422a3600ece72a52496b46d6f33bfd6f33544ebbf52871ed25a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/app.grandwayscreditunion.com/databases/com.google.android.datatransport.events
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 47b1e4f9e575e0f8abf09f155591eb41462879fc1c4c8a245b3d64afde7139ee
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-shm
        • Path /data/data/app.grandwayscreditunion.com/databases/com.google.android.datatransport.events-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-wal
        • Path /data/data/app.grandwayscreditunion.com/databases/com.google.android.datatransport.events-wal
        • Size 68KB
        • SHA256 8783064308bc134e3f16b41077211a55b62f7d03766014b69ca10f7f2e6b6c3a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 4ce3824c8999f0a5c71984ce6ee758c8743afae0dd28db57fbe1fd7398447865
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 50b5fa7dddb1fb4844b7c9a89e55f7ffbf004fe26662e80d88f4f26016236fa0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 476c903c657c506df5a0cb8dd95fbe3c59443c5fc66ec1604c4cdfc99fd113d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 eec0436d3411217ed064e86f81b07108bc46099d049f11271ff3920d88e79d94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 8fe0ac9db76d4a2dcd3b3d54c0efedcd223e25aabf716506493d50e243a7a2d4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 ad4b650416beaca1d53fb35080c902c929e2762c5df37f2c33e134a5fe917095
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-wal
        • Size 36KB
        • SHA256 6150310fdf2c58b1b5ba1d6b218cdcf9f6b56b9f701b545eebd0f4757073a2a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 e5f0b984ee389f748df9737334bc55ae513b5f3551ffc7b93d51f4763b6aa1cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 62129821f9b0e73566704386d26641081f4b2686083ff0a0fa794a680c4aa9c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 0eeeb147703e915d1ab0f47a1f5944ab9ed5ba38d77e128316609e9ae1f571f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 3332b72b5b4d3f178eac3bf40c3329cfe7050d5a58153c84d7e897f2f092a961
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 75fdfea9b2fb115e91893fa0fbedc7670ed9c368774b78ebd3dbefbd2c00dc74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation1499682025076049479tmp
        • Path /data/data/app.grandwayscreditunion.com/files/PersistedInstallation1499682025076049479tmp
        • Size 90B
        • SHA256 3e52046fcca6c417b1e8c1b0f5897e5798c36e97979e2bce8e238dcac1c764a3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation2977366882049875390tmp
        • Path /data/data/app.grandwayscreditunion.com/files/PersistedInstallation2977366882049875390tmp
        • Size 573B
        • SHA256 5f4105795dc656122f7d7b09a95ea6d85489d114f14811de05d54773bc9a471b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/app.grandwayscreditunion.com/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 f5df9ad0ad1d0e1c8dd0276f4f6e3dbc222e04f2b1bd169202129fd2723b6e77
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/app.grandwayscreditunion.com/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 92affb2425f5b0713fc4aa051322eedbdc5256c9a2717dcefe9b1fef0f91e768
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/app.grandwayscreditunion.com/no_backup/androidx.work.workdb-wal
        • Size 185KB
        • SHA256 30d1ee68b64a58c6ef5b0f3ec9990434d71786cea43f5165391c939e9677b896
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/app.grandwayscreditunion.com/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 84e7ca34f9a8bfbca064218eb4cd2d6611044b608d169aa051d0bd6269dcdbc4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download