Overview

overview

8

Static

static

6

grandways-release.apk

android-9-x86

6

grandways-release.apk

android-10-x64

8

grandways-release.apk

android-11-x64

8

Analysis

  • max time kernel
    131s
  • max time network
    150s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    02/10/2026, 12:16

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    grandways-release.apk
  • Size 8.0MB
  • Sample261002-pffftavygs
  • SHA256 043ebed69763576c9e01c71afe80e1d60184ccd1c92e33d30da5e067f22d2bee
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
collectioncredential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • app.grandwayscreditunion.com
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4767

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        1700159444520.jar
        • Path /data/data/app.grandwayscreditunion.com/cache/1700159444520.jar
        • Size 10KB
        • SHA256 e1661b37aba29d5a8c159f7d5006f10023e6bfc9bbade99b09408360ba2185ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        1700159444520.jar.cur.prof
        • Path /data/data/app.grandwayscreditunion.com/cache/oat/1700159444520.jar.cur.prof
        • Size 157B
        • SHA256 e2359a7293f4fbbc8dfe3610a27864ddb41f0113b7550992ebe62ac5b4af29f1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OneSignal.db
        • Path /data/data/app.grandwayscreditunion.com/databases/OneSignal.db
        • Size 52KB
        • SHA256 c776d1acf90c60f95a89ee4db8222acedc8e0b097d5606297aa641a3403821ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneSignal.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/OneSignal.db-journal
        • Size 512B
        • SHA256 0170c919c4aca10539f38b86a1150187498b54abd2abbe7d77560eb6dabc534a
        • MD5 SHA1 SHA512
        Submit Download

        OneSignal.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 50a91c2f08893dbddfa65d892a52d3c2218acf91586f7724cb33d748666600b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        OneSignal.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 7e8a4d5e9da5459e2aae8928d4e7d101006d9e47b8e8935eb1d1baab247cbd18
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/app.grandwayscreditunion.com/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 29df511c7a05f112a2b0210b27772aaaae598307e373132c063e8818147f711d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 d0659ab97d57e5a19c0918a460a06114ba829a28aa1e16796bdea4cfd1580a87
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 62da7953d616ac4ce6bd2a4defacdfc0fcc6c4a19f7fc72b427a5cddbcbf094c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 dc28079d50531910dd825175736466483f3f5e8600c5d98d3d7e7047314961bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 052a767329d5ddae7e61c72c66022073eaa870ca397dab4bf041efaafaa29079
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 3a1dd573c6b97270fff6e207e80276b7fa16a8f45b0bf8094d6949a7de2cecb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 bf1d6ae81fa377700ee670e1f0f10b58a3084161f6bd3399ff789ff02a63e0c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1665c05f9f267124e59e57b385eabf9e62feed9c811f47c0633e9bea5865d127
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b4765a86f69c122307448d0c6e81cebd52ffbc59b0d19da42971e2857f773e6d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 d377cab55a40127527c5d10ebb9e62ad520677bbd2c29ba2d9189d10f02545af
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 70fd09e8b60953da0ba008311907f2e51ed40fc49ae1d51deabbd2ca2ed19d14
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 d771f069624378dfbd9fedd0fe2c0ea8267d6b0a788bcdd624c1d465951c49d6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 a3da4cc21969fbf44f6ba31bea9453a0287f256bf62dc2a4c6e690cf71fc274d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 c77977729de4767c1eb31872ff953ada7cab70393350ef16c7503ee5d7864c13
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/app.grandwayscreditunion.com/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 d6dea24ee0435fa372ff0b2fd494e7eae8e0920c0cd0218e818b6579cc3d90f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation141234530645795393tmp
        • Path /data/data/app.grandwayscreditunion.com/files/PersistedInstallation141234530645795393tmp
        • Size 90B
        • SHA256 c73c699f096b12e3bf02a1c93a3a26c4094cba485adc0180bae46e3bfa8ac017
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation8873088922276652383tmp
        • Path /data/data/app.grandwayscreditunion.com/files/PersistedInstallation8873088922276652383tmp
        • Size 571B
        • SHA256 e70851eac20432839a61a71d69c35346701f1605024891644cf2ab63f04bd24b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/app.grandwayscreditunion.com/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/app.grandwayscreditunion.com/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 ef4b17e026f932bdbedbc7ef0ab5c4781718fdc0799d30c24a2b43abd3bc3976
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/app.grandwayscreditunion.com/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/app.grandwayscreditunion.com/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 2c150eb2ae42d42f56bfc133423076e4380862d3771894316388f0250deb7976
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/app.grandwayscreditunion.com/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 a52f032839d3ceaa44ef50183d491610a0c83b9f38bd625db6d43367fc1d43d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/app.grandwayscreditunion.com/no_backup/androidx.work.workdb-wal
        • Size 185KB
        • SHA256 ce224fe084c6f4258d7109f1af927cb5584fda7841534335d57e790b0e536864
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        1700159444520.jar
        • Path /data/user/0/app.grandwayscreditunion.com/cache/1700159444520.jar
        • Size 22KB
        • SHA256 315434fcb5fe9d6954e22c7245feaa40b6c28564b4afcbc42141fa73368e6447
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download