Overview

overview

8

Static

static

6

grandways-release.apk

android-9-x86

6

grandways-release.apk

android-10-x64

8

grandways-release.apk

android-11-x64

8

Analysis

  • max time kernel
    133s
  • max time network
    149s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    02/10/2026, 12:16

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    grandways-release.apk
  • Size 8.0MB
  • Sample261002-pffftavygs
  • SHA256 043ebed69763576c9e01c71afe80e1d60184ccd1c92e33d30da5e067f22d2bee
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
collectioncredential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • app.grandwayscreditunion.com
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:5088

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1700159444520.jar
        • Path /data/data/app.grandwayscreditunion.com/cache/1700159444520.jar
        • Size 10KB
        • SHA256 e1661b37aba29d5a8c159f7d5006f10023e6bfc9bbade99b09408360ba2185ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        1700159444520.jar.cur.prof
        • Path /data/data/app.grandwayscreditunion.com/cache/oat/1700159444520.jar.cur.prof
        • Size 154B
        • SHA256 2e40cde1260fa6a30216776268eedc84257ec620f4b6ae5c08c210f06cbd389d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneSignal.db
        • Path /data/data/app.grandwayscreditunion.com/databases/OneSignal.db
        • Size 52KB
        • SHA256 f8ebc23104952761ccaf8dcf7ea9e5341bb0f3da744550a518f8dbc8b3404904
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneSignal.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/OneSignal.db-journal
        • Size 512B
        • SHA256 d5c1034fcfbb4a9363f57273cacb071efb358206030f901bd8c908a8c3a14b53
        • MD5 SHA1 SHA512
        Submit Download

        OneSignal.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 26dc21b1e99168ed56323baace533b6e01add10b2a0c1cd8aa611f5b5fb5fc48
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneSignal.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 c0dfe7df440e29268122bb25c7a7e5f5ab794c1653558c204ef981344fe4e0de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/app.grandwayscreditunion.com/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 681452de8c9d368c9bf73c0fa26682bf1b9ef5e3caac6b8882d08073f2f9166e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 30257d5d2698bf3d48017184fed11384b61ffefdd5a915ff7555aa9ec9408156
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 e88b520ba39538c3730743d4141b42c313b981b3fd390098731153ce14f098c3
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 cd256c78aa5b4306d22ebe6beff82cd5f3ea343e0ade94198ff21b9d59c5e6e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9ac2e744d46c95d89f4180fabcfc5e1bc3c18bc6f9b79b108d80e9bac5b9c7bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ab69c924565cf872df82b5c586bc98bf4523a4593b936d4899036a289de971dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c1192e47dd72904599b55730091ec7d91affeb1db24398f43b6810f7a105c5d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 ec9139f73046ed85f3de53fc7c35a8245ea868d5c504ed2a0c7b1088e7982f59
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 458aa953a9e0adbf5b8765ebcf6b51bc5b5a48b7664e85d25c7a8ce9781a2d5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 35151b59cef5afd8efdbe8778bf0c502e542e56f5929d7a2a5adcf0d1b1a807a
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 bbbdcddc6c5e172c8f50fb54684d5d2e504d99d5536e807bd5fb6ade062244a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 dc9497440ec2e1fae91ff9bb7b4217c97b905ecde2a5a9909c0477b8a2575a15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 8a1fcaa9c84823c1d7325f7c9fe89a0169e977268b7cb7b0499f38b88c5e7c1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 fb7f99a6fae3b9d93b31dd4ad915eea651e1fa9c109ae21f0faa32789d8ac46b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 439954e8ab73c0f31556ce1bfb82fb0263a4a702e8d0b80cb75e2d6101a4311c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation389107124817564295tmp
        • Path /data/data/app.grandwayscreditunion.com/files/PersistedInstallation389107124817564295tmp
        • Size 90B
        • SHA256 a5dbd4a76c3b73274f5f83e226f9e71a68ee9733f2136e636fe6c5b1fe588d81
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation910377674008475998tmp
        • Path /data/data/app.grandwayscreditunion.com/files/PersistedInstallation910377674008475998tmp
        • Size 572B
        • SHA256 549a6fcef530cfc14c6d299f538706f3caa389a4d7158b850d0abd4ea132a642
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/app.grandwayscreditunion.com/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/app.grandwayscreditunion.com/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 ef45fd25f92e14dbdc2849e3aa0dbfce56bbcb9aeb4a295fa29a368fbee9afc2
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/app.grandwayscreditunion.com/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/app.grandwayscreditunion.com/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 caf5b94dadcd4f82a7e799118bab57d476e2cf29100f5a2e833011eea6f70332
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/app.grandwayscreditunion.com/no_backup/androidx.work.workdb-wal
        • Size 185KB
        • SHA256 82a6b6897152e92680cd4223b53b5c04c463e6d8f877f134e248290bab749473
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/app.grandwayscreditunion.com/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 d0a1eb40bb78cf8dd47e07640bd9ba51da246ee7f44c18bfdd10e7a4459fc0dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        1700159444520.jar
        • Path /data/user/0/app.grandwayscreditunion.com/cache/1700159444520.jar
        • Size 22KB
        • SHA256 315434fcb5fe9d6954e22c7245feaa40b6c28564b4afcbc42141fa73368e6447
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download