Overview

overview

8

Static

static

6

pocket_opt...se.apk

android-9-x86

8

pocket_opt...se.apk

android-10-x64

8

pocket_opt...se.apk

android-11-x64

8

Analysis

  • max time kernel
    138s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    02/10/2026, 12:26

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    pocket_option-release.apk
  • Size 5.7MB
  • Sample261002-pmfedswves
  • SHA256 e6d57d4e79182dc9ea9dca4ad2d33bf2c4bb2155c5bf866658271155d60c9123
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
collectiondefense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 6 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries account information for other applications stored on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect account information stored on the device.

    collection
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    defense_evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.pocketoption.broker.apk
    1⤵
    • Checks if the Android device is rooted.
    • Checks Android system properties for emulator presence.
    • Loads dropped Dex/Jar
    • Queries account information for other applications stored on the device
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:4760

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/com.pocketoption.broker.apk/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 4c7a8a964da6631912bf59727b15b980e7b87a9bf4fc1aad7f2601cfdaa4bf37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 e5b8c844f0d4d7fa3649cc32e6ea74ac43d44f7f71aaf0c855e938e6ee0f7dcf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 8b92e845eaf71d41f9be01fc4a7e881a6a23985150bc2e4ce371011ce7af0127
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 039e729780e3dae7d1d2045619a529582ffc4cb30c61b3ba07967e31461a2f7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 96b46b2b21b11257b151db121ebb2ed65fc11f62d61e2e7381484ac1b91863fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 af4b6157cf8c657c7048ce1c476a9d6cf3567e466a568416216e17c3d9c7f0f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 767a567d5a0773c05171a30ba850a842f632c6b388ce07fd00f296e17adaa117
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 06b107cba7a954d6046855eeb9d91d5dd2e11e413f98af5ac8d860eb452db15d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 00d0dded7fd97adb9fe3ea14acf82309462d964f853a705d8ccc32f80e55ab76
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 3d42db436c4fdb55978f96d514c5df827b7cac2d75ff362edc27583ce7cd1c26
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 947f4af6fb75f8318e3d5f7926e438e6882a90757dd62f29dde12b45e978e4aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 310e3401fd6bbe238a26d9b88b0896fab1d428b8f9c824e3a8dbc5f4a642d127
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 638739a9933a3b3ab93adeb9b275fb29dc15a6d36914a7877f364eafef673f1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 0975e81510971cd51f41471d6effb59dd21dd7ab394bb163aa3d21c4674d0e39
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 b58a2e97f53a2aa8028c06a5c288f7267064195e01040b79a31b313c55008bfa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 ebf31b35712bd21a09c015ddbb1f18775638ab9af2d004401b670d5def55e990
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 e621045f6823c28e8672156572f4917494244d657917238a99ff854d9eee6c5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 9d4e3030f949653c73aadecd5bf58d5515b6a4c97eb6683773f7d91921a72978
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 9198a20c96071c896fe2d7b8436ea9ac8164219f4ba1cfa591a15f16bbb04cd0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        main_database
        • Path /data/data/com.pocketoption.broker.apk/databases/main_database
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        main_database-journal
        • Path /data/data/com.pocketoption.broker.apk/databases/main_database-journal
        • Size 512B
        • SHA256 0253f0422f6175d4d0e904be69ecc2e7eb1d648f65b034e33e98941dbe684653
        • MD5 SHA1 SHA512
        Submit Download

        main_database-shm
        • Path /data/data/com.pocketoption.broker.apk/databases/main_database-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        main_database-wal
        • Path /data/data/com.pocketoption.broker.apk/databases/main_database-wal
        • Size 52KB
        • SHA256 507cf1eba876cf8c48f2809fca33ab569b2308347976e124c2e74d7c7e2c7144
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.pocketoption.broker.apk/files/.crashlytics.v3/com.pocketoption.broker.apk/com.crashlytics.settings.json
        • Size 776B
        • SHA256 87b2c69d9f3d6df77b017e6dff5d1fa0116583cd6e353f405c86cadf8e76ade3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        internal-keys
        • Path /data/data/com.pocketoption.broker.apk/files/.crashlytics.v3/com.pocketoption.broker.apk/open-sessions/6ABFA30001040001129864545601AEBF/internal-keys
        • Size 207B
        • SHA256 97f602ab97aba4c82d85d51e4944c0daccc269a6d971e2a8144f34b00917d988
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/com.pocketoption.broker.apk/files/.crashlytics.v3/com.pocketoption.broker.apk/open-sessions/6ABFA30001040001129864545601AEBF/report
        • Size 805B
        • SHA256 b55cb0e3fabdaf01865d514acbd0330101300d3b03e9dba8947aa0b88f3be1a0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/com.pocketoption.broker.apk/files/.crashlytics.v3/com.pocketoption.broker.apk/open-sessions/6ABFA30001040001129864545601AEBF/userlog
        • Size 536B
        • SHA256 4c22e186b0cec185f70c25f0697a3fe457a921fdef150a12b1edf0b2b522af3a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/com.pocketoption.broker.apk/files/.crashlytics.v3/com.pocketoption.broker.apk/open-sessions/6ABFA30001040001129864545601AEBF/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        1790944002521
        • Path /data/data/com.pocketoption.broker.apk/files/AFRequestCache/ConversionsCache/1790944002521
        • Size 3KB
        • SHA256 ddfe8ba44ce34bcefe792870784692bbc1679d0226edd37db99e6926c4ac5c74
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        1790944003248
        • Path /data/data/com.pocketoption.broker.apk/files/AFRequestCache/ConversionsCache/1790944003248
        • Size 4KB
        • SHA256 03e7c19d04d80fb61478c23404bb8f1c80923b721a4fcf25316bdfe28f768157
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation1290509804018094046tmp
        • Path /data/data/com.pocketoption.broker.apk/files/PersistedInstallation1290509804018094046tmp
        • Size 90B
        • SHA256 35925d7333ed30a73e65fe65bb42058b18a6cbace02157ca9bf74384be9c0715
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation9117009323312354549tmp
        • Path /data/data/com.pocketoption.broker.apk/files/PersistedInstallation9117009323312354549tmp
        • Size 568B
        • SHA256 ccdf0b53f82a8dcabbc35271a675e2e9917dd1142dc05c8e6fcbb2821ca8bb43
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_data.preferences_pb.tmp
        • Path /data/data/com.pocketoption.broker.apk/files/datastore/firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_data.preferences_pb.tmp
        • Size 50B
        • SHA256 f95eec58a5488f753d284e16b76ee3ae779b14424ff4350f171736b29be639c6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Path /data/data/com.pocketoption.broker.apk/files/datastore/firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Size 33B
        • SHA256 a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6
        • MD5 SHA1 SHA512
        Submit Download

        firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Path /data/data/com.pocketoption.broker.apk/files/datastore/firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Size 75B
        • SHA256 1e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Path /data/data/com.pocketoption.broker.apk/files/datastore/firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Size 121B
        • SHA256 232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Path /data/data/com.pocketoption.broker.apk/files/datastore/firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Size 163B
        • SHA256 7495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Path /data/data/com.pocketoption.broker.apk/files/datastore/firebase_session_Y29tLnBvY2tldG9wdGlvbi5icm9rZXIuYXBr_settings.preferences_pb.tmp
        • Size 212B
        • SHA256 58845defd0c99ad3ee5ec38326cbbf2f909db9a14a7d8efdad988346906b4e11
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:602028090392:android:3304c63431e14113e94f6d_firebase_defaults.json
        • Path /data/data/com.pocketoption.broker.apk/files/frc_1:602028090392:android:3304c63431e14113e94f6d_firebase_defaults.json
        • Size 282B
        • SHA256 66cb3ab46e2090bf35611fcb72fef9692e20c6aa807e7e52ca1aeade03016599
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:602028090392:android:3304c63431e14113e94f6d_firebase_fetch.json
        • Path /data/data/com.pocketoption.broker.apk/files/frc_1:602028090392:android:3304c63431e14113e94f6d_firebase_fetch.json
        • Size 1KB
        • SHA256 ff8401cf32cab2145ace02b5eef8672e7e54283f594a0bc914e27002093e65c8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        frc_1:602028090392:android:3304c63431e14113e94f6d_firebase_fetch.json
        • Path /data/data/com.pocketoption.broker.apk/files/frc_1:602028090392:android:3304c63431e14113e94f6d_firebase_fetch.json
        • Size 1KB
        • SHA256 5e0d37b41d28814ca1b73e23c4c2cbdca26f7cdcf56b4afbb65d599288f52784
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.pocketoption.broker.apk/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 224996b2d52b3524fd04bd25397603c86e65572885644680cd98fd02c7b379aa
        • MD5 SHA1 SHA512
        Submit Download

        [email protected]
        • Path /data/data/com.pocketoption.broker.apk/oat/x86_64/[email protected]
        • Size 418B
        • SHA256 3a2516ef84a7e3004f648ef8e5e0a81efd2fb3cef0b872cb64c5489f37245097
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.pocketoption.broker.apk/oat/x86_64/[email protected]
        • Size 418B
        • SHA256 fbf94d9474f1ef521cc35b7aa8d082246c6dcb7ead2c984fc73b19720251e7f9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.pocketoption.broker.apk/oat/x86_64/[email protected]
        • Size 418B
        • SHA256 9280aafdd353eec9e8a6601e3e1e9a84bc403239981091d97a2dc63c3e3e770e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.pocketoption.broker.apk/oat/x86_64/[email protected]
        • Size 418B
        • SHA256 d8ca2f7e3ffa2775aec3d068f22e13ebd352a0c43129306496ebde8eccf2fedc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.pocketoption.broker.apk/primary.prof
        • Size 1KB
        • SHA256 12d435a8aea92f3c3af236230f406106982f0359b706cd64139e3ef1641d5598
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/user/0/com.pocketoption.broker.apk/[email protected]
        • Size 6KB
        • SHA256 128ae273789c347315287574984789ac83ad1cad2b608fd6f30a7138afaa2ce2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.pocketoption.broker.apk/[email protected]
        • Size 11KB
        • SHA256 54a36c5f0ac19949fbaeb8120225513bfcbd9a582c890e8a99edcda04f211e4b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.pocketoption.broker.apk/[email protected]
        • Size 24KB
        • SHA256 e5b155a5419e3cf360503d39382f63cf9a7a831771a27bbcb99c6e88e209ba7f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.pocketoption.broker.apk/[email protected]
        • Size 10KB
        • SHA256 1aadf1e6499eaf2796232068e52c0b3c849b9d43b95a5446df247863c5950c37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download