Overview

overview

8

Static

static

6

pocket_opt...se.apk

android-9-x86

8

pocket_opt...se.apk

android-10-x64

8

pocket_opt...se.apk

android-11-x64

8

Analysis

  • max time kernel
    40s
  • max time network
    151s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    02/10/2026, 12:26

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    pocket_option-release.apk
  • Size 5.7MB
  • Sample261002-pmfedswves
  • SHA256 e6d57d4e79182dc9ea9dca4ad2d33bf2c4bb2155c5bf866658271155d60c9123
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
collectiondefense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries account information for other applications stored on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect account information stored on the device.

    collection
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    defense_evasion
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.pocketoption.broker.apk
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries account information for other applications stored on the device
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:5105

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        .     
        • Path /data/data/com.pocketoption.broker.apk/code_cache/.     
        • Size 3KB
        • SHA256 3beecd283b4b2b5b96a465d28374be73ebb081080646a10fdaa2fc224b32b031
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        .      
        • Path /data/data/com.pocketoption.broker.apk/code_cache/.      
        • Size 7KB
        • SHA256 f5dc22f4723dac8dd8e9cf794575b8a4a0ebb9a84381ddf7a483e038b895250d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        . ​   
        • Path /data/data/com.pocketoption.broker.apk/code_cache/. ​   
        • Size 13KB
        • SHA256 56f3376f2c0174b754e106ffcb1363e93cdad67e9b04bccb4f5cb08ebe7713fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        .      
        • Path /data/data/com.pocketoption.broker.apk/code_cache/.      
        • Size 6KB
        • SHA256 96d32fc299dd5fd57546cb6a42f089c51e44080f68dc28c11de94edb945a17c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.pocketoption.broker.apk/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 46092222bef967117887828b18ee78296cb4d4e88a0170c0cc54505d3adea8c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 541a99f425175cc0a4c0150a18210aa08b96e1aa78b69f35c35d3b5f8f58dff8
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 06550974582c35ae779151b9e83462f650c2892e3d58a924297e07d6bfe066e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 f59f21e7eda41bba1f935b4757773a5a2c634f2a7c86b2b25c31f8a7f020969d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 6616fca8a2313a134c87b4883ccf6d40efdc4a6d931951037ca92349b487043e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 905487102f2f9cb5ec99d84d627c43863e3211e856d957ba7b68479d9a38bf23
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 c291d437e9ba6dd46937bab52df1ef0d28c2b5ebb5db3860c6bc93ecb2fb30b6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 81c911b58372f9c14c03ca8e197b31ac0999a19da69e600b42553581ff1b6202
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 f99f00332e5d4c754d7dfb9aca4a272d347f696359b82452463649668c492d1e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d5a37214cdac8fd2e66993f60a1bda5a5019cedd3c2cc7aa970b85098996aa57
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 6146244e841c38a39b38260724cd3d5d8f61500202f9a8f49df2cd7663103351
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d6797ca28edb19477d490155eaab87251a899a7636cd38ef2c2154714fa93f86
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 79b27190ee45c6a492f72a0b57572495719db4d30c1dc335a6466ab1c5c2c146
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 4d0428ff16803b6768f063058a7710eaf6f53ccd1a07c5c815c1a5c8d727580d
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 271d0146d24f4aecbd2e2eab245dc4f49bac3005b3c7274b090bf2abb6a1e602
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 f0d267ee21cdd775e6b6a24d7bcadd4da4e3dd64f006106c23490280d335796e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 075f215ffde49ab189d3bdd00490401697c2d111121589a939b386d2271ea343
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 3aec710e5a938005419fcec9b5124b820584bd77bc555a73c5f37dd26b7d6d0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 122a9e928b64b03140d2e9ebc8878dfffe0fb4437a96c10b223d63658fefb214
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        main_database
        • Path /data/data/com.pocketoption.broker.apk/databases/main_database
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        main_database-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/main_database-journal
        • Size 512B
        • SHA256 89fa83271111450355758e1d23d5c6395316273450ebd9b4b3400db7cdadca83
        • MD5 SHA1 SHA512
        Submit Download

        main_database-shm
        • Path /data/data/com.pocketoption.broker.apk/databases/main_database-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        main_database-wal
        • Path /data/data/com.pocketoption.broker.apk/databases/main_database-wal
        • Size 52KB
        • SHA256 d5e9490875d3e1891eb3d8a85df6dcb2e5362d3d9538428d5b307123590f1dfe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.pocketoption.broker.apk/files/.crashlytics.v3/com.pocketoption.broker.apk/com.crashlytics.settings.json
        • Size 776B
        • SHA256 882a15f0c72aaafa3c515743b693bc05aa33251dc6af44cfecaea4e28746dc0e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        internal-keys
        • Path /data/data/com.pocketoption.broker.apk/files/.crashlytics.v3/com.pocketoption.broker.apk/open-sessions/6ABFA2FF018B000113F1FD879C677F00/internal-keys
        • Size 207B
        • SHA256 97f602ab97aba4c82d85d51e4944c0daccc269a6d971e2a8144f34b00917d988
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/com.pocketoption.broker.apk/files/.crashlytics.v3/com.pocketoption.broker.apk/open-sessions/6ABFA2FF018B000113F1FD879C677F00/report
        • Size 805B
        • SHA256 2f767ff78b0ec7371bf57475590456ba03e4b8b56f4bedcdd5487d3a140d3af2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/com.pocketoption.broker.apk/files/.crashlytics.v3/com.pocketoption.broker.apk/open-sessions/6ABFA2FF018B000113F1FD879C677F00/userlog
        • Size 536B
        • SHA256 7717e80a74060d263d5893b0b0eb6cd815b8100fc2a751723e9d83eb59e80e52
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/com.pocketoption.broker.apk/files/.crashlytics.v3/com.pocketoption.broker.apk/open-sessions/6ABFA2FF018B000113F1FD879C677F00/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        1790944001902
        • Path /data/data/com.pocketoption.broker.apk/files/AFRequestCache/ConversionsCache/1790944001902
        • Size 3KB
        • SHA256 aadbc7aedc469ad0acf401bc1aa870fba279f5e5997119313a242f81c93663bf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        1790944002744
        • Path /data/data/com.pocketoption.broker.apk/files/AFRequestCache/ConversionsCache/1790944002744
        • Size 4KB
        • SHA256 fb9851a92980ba099fe12a741a3b2216f3962decbce28aab854aac646d7b12eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation3633307571978827134tmp
        • Path /data/data/com.pocketoption.broker.apk/files/PersistedInstallation3633307571978827134tmp
        • Size 570B
        • SHA256 d96be81fbc9bc0d0ee4ac782e38c423acd57f6f585bfa9fb212ea9fb2bce3868
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation3978252633981688272tmp
        • Path /data/data/com.pocketoption.broker.apk/files/PersistedInstallation3978252633981688272tmp
        • Size 90B
        • SHA256 23e5a740be00718ad73d9f246632522e475811f4cdc57622431b3209897129a6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_data.preferences_pb.tmp
        • Path /data/data/com.pocketoption.broker.apk/files/datastore/firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_data.preferences_pb.tmp
        • Size 50B
        • SHA256 3a81586dd61ba46360226fb3d01a6b35d74d3b109450f39958371828ea66b1d9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Path /data/data/com.pocketoption.broker.apk/files/datastore/firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Size 33B
        • SHA256 a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6
        • MD5 SHA1 SHA512
        Submit Download

        firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Path /data/data/com.pocketoption.broker.apk/files/datastore/firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Size 75B
        • SHA256 1e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Path /data/data/com.pocketoption.broker.apk/files/datastore/firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Size 121B
        • SHA256 232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Path /data/data/com.pocketoption.broker.apk/files/datastore/firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Size 163B
        • SHA256 7495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Path /data/data/com.pocketoption.broker.apk/files/datastore/firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Size 212B
        • SHA256 b655a48b3662d19caf9fc1fc5f7b7ecb7cbc6289a27355711fd96bb77765727c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:602028090392:android:3304c63431e14113e94f6d_firebase_defaults.json
        • Path /data/data/com.pocketoption.broker.apk/files/frc_1:602028090392:android:3304c63431e14113e94f6d_firebase_defaults.json
        • Size 282B
        • SHA256 66cb3ab46e2090bf35611fcb72fef9692e20c6aa807e7e52ca1aeade03016599
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:602028090392:android:3304c63431e14113e94f6d_firebase_fetch.json
        • Path /data/data/com.pocketoption.broker.apk/files/frc_1:602028090392:android:3304c63431e14113e94f6d_firebase_fetch.json
        • Size 1KB
        • SHA256 f53d073e6ea5aa032985c1fbb85b481a87d07950233b323b7e5d3f13f48e02a4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:602028090392:android:3304c63431e14113e94f6d_firebase_fetch.json
        • Path /data/data/com.pocketoption.broker.apk/files/frc_1:602028090392:android:3304c63431e14113e94f6d_firebase_fetch.json
        • Size 1KB
        • SHA256 1306ae78e7a439910a796b30bd4976ac9959986d95fa0bc2d0248cfc582f30fd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileInstalled
        • Path /data/data/com.pocketoption.broker.apk/files/profileInstalled
        • Size 24B
        • SHA256 d538ed6310b3d9bc9aaeba11a4715739e65aca17cec485ca2454c3abccbea9f8
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.pocketoption.broker.apk/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 56b58b4509315023fe274f2d74dd502dbdb085a6586326d3d7ca94352419e775
        • MD5 SHA1 SHA512
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.pocketoption.broker.apk/primary.prof
        • Size 1KB
        • SHA256 12d435a8aea92f3c3af236230f406106982f0359b706cd64139e3ef1641d5598
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        .     
        • Path /data/user/0/com.pocketoption.broker.apk/code_cache/.     
        • Size 6KB
        • SHA256 128ae273789c347315287574984789ac83ad1cad2b608fd6f30a7138afaa2ce2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        .      
        • Path /data/user/0/com.pocketoption.broker.apk/code_cache/.      
        • Size 11KB
        • SHA256 54a36c5f0ac19949fbaeb8120225513bfcbd9a582c890e8a99edcda04f211e4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        . ​   
        • Path /data/user/0/com.pocketoption.broker.apk/code_cache/. ​   
        • Size 24KB
        • SHA256 e5b155a5419e3cf360503d39382f63cf9a7a831771a27bbcb99c6e88e209ba7f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        .      
        • Path /data/user/0/com.pocketoption.broker.apk/code_cache/.      
        • Size 10KB
        • SHA256 1aadf1e6499eaf2796232068e52c0b3c849b9d43b95a5446df247863c5950c37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download