Analysis
- max time kernel
46s - max time network
151s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
04/10/2026, 06:23
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
gurujiclubs.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
gurujiclubs.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
gurujiclubs.apk
Resource
android-x64-arm64-20260325-en
6 signatures
150 seconds
General
- Target gurujiclubs.apk
- Size 12.6MB
- Sample261004-g5lecsxtcw
- SHA256 03e084cbbf1841589aecdb48909d53d4e68f2887c2efc928b71aaf3d4c92e9ce
- MD5 b08e3f4f0905b5fc55b9de022aaca4ba
- SHA1 2bee3241df976c332e44ce34cfd877dc35fa6598
- SHA512 56cb83777b15f93323fb5197c3ee60d0ac3e20c4ae15d623efc73ccc543c1fcdaf15200c075baebf8f6520d148bb6c5c8e704dcbb9f2fce1a0b87485470c4390
- SSDEEP 196608:83hJ5dcbPBhOuB+P8ARhWFfMEvKb1WQWV8fYtA4J6A4Je1g/1Ar2YKaU2nRs:8RJ5CPGAC8/fk1X9dgDoYGws
- TLSH T1C6D6124AF749E95AD4F7A33649752A22521B4C368793D7C31B09723C28F76E00F4ABD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.gurujiclubs - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.gurujiclubs - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.gurujiclubs - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.gurujiclubs - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.gurujiclubs - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.gurujiclubs
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.gurujiclubs/files/PersistedInstallation1161660590587032104tmp
- Size 567B
- SHA256 26ab9babf6819a85163acdc80fdff8d87931441786962d106fa5a18b6d29ce1e
- MD5 6445e5b6233819747296789527e89fc5
- SHA1 cfc43ca60048067eace49c6a374f831e0b12bae4
- SHA512 941fd178e052eb4b846427a51a41558e92f37b3c7cee6d8d9b653484b0be9c01d134b529e16ed6c486119266ca04234595d6fd2aa4d4996b52e986b601fdfe14
- TLSH T155F026665171CF0EE5D89465215C7A2A4D338D363C0F0E531EE50420C1DD77B5307CC0
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.gurujiclubs/files/PersistedInstallation6059262816257966528tmp
- Size 90B
- SHA256 d07219275a48ad31fceabb8f27f82cbe0cc572775f7a8c8c556b76ffa45f00bf
- MD5 bd9d7dd3d33d96a40a1454ef46170f99
- SHA1 fb0c013276fbd1d63715379e4134717b55962487
- SHA512 035b2ab7fa801a6100cee02b8dc5662437787047b7b1f5f7d438caba688162220d6615e3e279dd9df589b30d2bb08394b2b3efb8e7f200ad76d6134949ae7207
- TLSH T16FB012014B3193468ACDE2171ECDE1005E4328411C0D8E040A4A904040966D082079F4
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.gurujiclubs/files/profileInstalled
- Size 24B
- SHA256 da1381c8c2f9081232ff249bdfa870bb92ce26dd9ed45dd3d8a316e02d5d9751
- MD5 351e9adf41ef1647bcf1742f6d580e20
- SHA1 277fab44b4e3c0a29fbd11e14eebccfd5c93f6ca
- SHA512 513e7f7afd333033f7d479222b5b1e9559ba35b9e08d2d06e3b1bf30adcfe8664f34ac03616cd138f2691765b928daa323c4ac71fd6463a9633fece88da9ba2d
- MD5 SHA1 SHA512