Analysis

  • max time kernel
    37s
  • max time network
    603s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    03/10/2026, 23:05

General

  • Target
    Niagara_Launcher_v1.16.4-release-modified-debugSigned.apk
  • Size 14.6MB
  • Sample261003-23bglazzay
  • SHA256 2dfcd7b05eaeffb0508acea398a88053b7a593a0f5ced84795c9d455332ae0cf
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • bitpit.launcher
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Schedules tasks to execute at a specified time
    PID:4743

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        cdb_8111553675629095495.tmp

        • Path /data/data/bitpit.launcher/cache/cdb_8111553675629095495.tmp
        • Size 7.4MB
        • SHA256 e54b4c7d5acc939ca6002f4dfb40d192a28de36ae33fbfc1f059fa43cbbad4b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DataBase

        • Path /data/data/bitpit.launcher/databases/DataBase
        • Size 188KB
        • SHA256 2e435f08410deeb3cd7b95e284d6014a134c9e8973f536182c4796eae5a3979f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DataBase-journal

        • Path /data/data/bitpit.launcher/databases/DataBase-journal
        • Size 512B
        • SHA256 bc942be9945a6a0d125bdcc776a3ecb6e87c8b541e1d7deb201097c41105dc51
        • MD5 SHA1 SHA512

        DataBase-wal

        • Path /data/data/bitpit.launcher/databases/DataBase-wal
        • Size 406KB
        • SHA256 c6a676d9720209b63dba87a28087af2e16bba36cc69394d1ab4e85eae0207fd0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events

        • Path /data/data/bitpit.launcher/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 d911efeb91f8dd4b73f8b32b8028563ef41fb655eaa63677e985a412a79aa512
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/bitpit.launcher/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 ac1b79618f81ff36521ef70a47eefd1f8af19c438c4cbf3daf9e888aeebe73c8
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/bitpit.launcher/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 bdf58c1897829a2eea3cd714c211bdd12cc26e4b41e22a985ae0397fa297979b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/bitpit.launcher/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 ca139d6b85252c0352d83d5564e23bea3c73ea1212b99c97fd44708a5141cb15
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/bitpit.launcher/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 7b9528b0afeea3ab77e1a63767e15bb881f21653aee684569cf8587354aa96ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/bitpit.launcher/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 6349597fa61fcfee7a4df6ece8831238f021441f29c0a363ee093d29a7d33967
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/bitpit.launcher/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 57c7ee7eda68df8aefd1cd0ca51b862a1354f1364be4988ef257a0709db30bc5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db

        • Path /data/data/bitpit.launcher/databases/exoplayer_internal.db
        • Size 32KB
        • SHA256 36ac5c1fe12c8971c8ed555bdd0043b633712774233a56f92200bc7cf8d5e86c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/bitpit.launcher/databases/exoplayer_internal.db-journal
        • Size 512B
        • SHA256 afd28e9617b105ad9636d16da3bea100855393bd51f1463fe2a35c9b278344bc
        • MD5 SHA1 SHA512

        exoplayer_internal.db-journal

        • Path /data/data/bitpit.launcher/databases/exoplayer_internal.db-journal
        • Size 8KB
        • SHA256 5574fcc6f4e7bb9c13c3ff3c6885f17396f4bd79b603a1a5b16e8b9de86caa2b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/bitpit.launcher/databases/exoplayer_internal.db-journal
        • Size 4KB
        • SHA256 61ebe0788bf2f7295adf6435cb87226686c87f700e0b248047c30d6ce12ef96d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/bitpit.launcher/databases/exoplayer_internal.db-journal
        • Size 8KB
        • SHA256 895900cb33627dc22829d6da90606be41b3d24f213111196ab404dfa464ff33e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/bitpit.launcher/databases/exoplayer_internal.db-journal
        • Size 16KB
        • SHA256 8a7b184ef056cb81e4c9e86ef6453dff1e7fd7a58e748562c1d08ead31ab31a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        internal-keys

        • Path /data/data/bitpit.launcher/files/.crashlytics.v3/bitpit.launcher/open-sessions/6AC18A6600EA00011287F700FB0ED54A/internal-keys
        • Size 207B
        • SHA256 b061eb7d84354483bdadb6c66b7d4e400f9bc2f3de6e9ca467e8b64a470294af
        • MD5 SHA1 SHA512 TLSH

        report

        • Path /data/data/bitpit.launcher/files/.crashlytics.v3/bitpit.launcher/open-sessions/6AC18A6600EA00011287F700FB0ED54A/report
        • Size 741B
        • SHA256 62af1794ba639daf8265c73f661696ed690fecb2b494caa827da1bca7400cf78
        • MD5 SHA1 SHA512 TLSH

        userlog

        • Path /data/data/bitpit.launcher/files/.crashlytics.v3/bitpit.launcher/open-sessions/6AC18A6600EA00011287F700FB0ED54A/userlog
        • Size 41B
        • SHA256 e312873f9178efe84473004893622943923aea8a4758daffe6f22ff9e19f5566
        • MD5 SHA1 SHA512

        userlog.tmp

        • Path /data/data/bitpit.launcher/files/.crashlytics.v3/bitpit.launcher/open-sessions/6AC18A6600EA00011287F700FB0ED54A/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/bitpit.launcher/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 8246e272b50e6bde0c7c3440f2d45b536378cd5051dc4786f947c68507ab22f8
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/bitpit.launcher/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/bitpit.launcher/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 0b602583dea0592f8b0827a1b32fa5b05de66b918a51100b46865bd640590549
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/bitpit.launcher/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/bitpit.launcher/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 6c544fe03c8e7458621f637a215b165ecdf669476e976eaf8a29c54906c86da0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/bitpit.launcher/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 b22b44028dd5151c69be9fa9ef6891ead9f9f034a10e143cda6d33bc642b759b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/bitpit.launcher/primary.prof
        • Size 5KB
        • SHA256 0c69f13e47c4901c5e375c8cfac41b401808d0dafe57781729dfb2c01c153b42
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.window.sidecar.jar

        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH