450ae9eea4cf5db95423da19996e07c28fcbdeff3b8ba19016ae9b0b23845285

Analysis

user interaction
yes
max time kernel
324s
max time network
822s
platform
android-11_x64
resource
android-x64-arm64-20260721-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260721-enlocale:en-usos:android-11-x64system
submitted
05/10/2026, 23:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
idlix-0.1.35.apk
Size 5.9MB
Sample261005-3fxa8awdkh
SHA256 450ae9eea4cf5db95423da19996e07c28fcbdeff3b8ba19016ae9b0b23845285
MD5 3a2d59a3309f52cda2ba4eefaed11039
SHA1 5c1e20c936945cccd014d5f154e725e2082eb775
SHA512 697df408b4c7f90e129ebc8dca04e3aa1b7150ec48102ad481f4921831fec233b87b424752d6f87e2b0a08243f25769e5817df6a13edfd01e1ff08eea4b35204
SSDEEP 98304:umwcuhWaoKQsj+ehXT6Fieqj1s4Dh8ehOOQKSvA/mdSNW3OU7BBwYS1yA5CB:ycuhW4HXGieqBpDKehUKSvsmd49U7BB/
TLSH
T1205623D7FB68142FC9B6497349AB81317A3A8D144643A70B29887B3C2D733D94F867C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery evasion execution persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4755	com.idlixku.app
/system_ext/framework/androidx.window.sidecar.jar	4755	com.idlixku.app

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	com.idlixku.app

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.idlixku.app

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.idlixku.app

com.idlixku.app
1⤵
- Loads dropped Dex/Jar
- Checks the application is allowed to request package installs through the package installer
- Queries information about active data network
- Schedules tasks to execute at a specified time
PID:4755

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

exoplayer_internal.db

Path /data/data/com.idlixku.app/databases/exoplayer_internal.db
Size 40KB
SHA256 324b39d612651d7230a044f0057960cc8a3a4e6edd5c4019158d15b6f73f391b
MD5 704227b9d979ed882ac7cd72d66a40f1
SHA1 708845f0d7f99887078b15c2352e86900218d7cc
SHA512 8277374d3f466e9ec5ebf550d436412f6e4b5e4427f001642a68e436e1c82b4e219144fbb36c2deb5329954bd0f2490d6f47c4ac1c783e8259161e9d7d436e94
SSDEEP 24:TLVw8Flw8FOw8FFFe0noEvw8FJw8F2NoYyE8tNEIslsm4sG9Oy9vGoGIVyteGSV6:TRVePvnoEv5mDHiEI414FooGEwS97j
TLSH
T1F903374F0F283331D4F642B6B4C207762BAC86AD4B9243427C61E8FB9CC746D695A4E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

exoplayer_internal.db-journal

Path /data/data/com.idlixku.app/databases/exoplayer_internal.db-journal
Size 4KB
SHA256 eaade74803f82a7549bc44885b1c78fbc84048da69f2b0579c55247afe6c7765
MD5 a42328a43c678f0101d238d1fa362a92
SHA1 45d74c9104899964de35b69984c89dc3d4bee5ef
SHA512 9286f0a63dd29f6c8aca91fd9b4924c48b670e0921b7ffb14220fb6450361314d3e78e4be57d196a9661422d7b083568aae6d2de3fe891d18d8f2bbe0734465f
SSDEEP 6:7+/lXlGPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK6C:7+tgqLJdeWRmBEyPbLC
TLSH
T1FC91C08873400803C0295B77A0C483440D14AB2CD333CB17169108743C0B6CCF8A0D14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

exoplayer_internal.db-journal

Path /data/data/com.idlixku.app/databases/exoplayer_internal.db-journal
Size 8KB
SHA256 f5fde82273573230c4ed5bb8b4e3eabfa07fa7a6a0c6369c121adfadbdb77ec7
MD5 527f0d1de8fca19f7d3b73392a53694d
SHA1 7507fd7cfb2bbbb28ab50d34d11aa4345f7fd629
SHA512 627dd3329f24ad3615a24c9416b69319294c435272a055866d6a691fed7c01c24cc39bb625ac36757387204fa294feb4afd99e62980f79797019260cd0a92ef9
SSDEEP 6:7+/l9uPg9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKT///:7+tgqLmqKRmBEyPbcX/
TLSH
T14702C089B3C01C03C02E177BA0E883400F04F7248331CB071AA10868BC0B6CCF8F0D80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

exoplayer_internal.db-journal

Path /data/data/com.idlixku.app/databases/exoplayer_internal.db-journal
Size 16KB
SHA256 e53128fa231aa2b6910a4a489cb15ba36f1419f9322529db2ced666c03442bc8
MD5 6aa6db37e41e0b4149e21cf71ae504d8
SHA1 5429f51659a06e0771e72faa31177f4873cc4c47
SHA512 94939e21c509d3fd9890e4ed6e33cb7d23317b0e170b0fdcaebbfa680dd0b8e67bae5dab8c87405a7ec14b4b5237b3213d0c06e0adaab515dabbc9d0d539b77f
SSDEEP 12:7+t79HxIHQqLsQEsHFsHGFWsHOmwf9AvDyAonAyGzBmGmrRM0yA2AKRmBEyPbo0:7+tBqwqL0slsm4sG9Oy9vGoGIVyteGSx
TLSH
T1B172454F0F3C2331D06652FB70C383796FEC87A9572387927892F4A75D870AC5459861
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

exoplayer_internal.db-journal

Path /data/data/com.idlixku.app/databases/exoplayer_internal.db-journal
Size 16KB
SHA256 1427fb3b89a4594428f742d4ca8f4b523625d176312c7e24173d62562ee4a30e
MD5 956b5ad2f366948355eccd4c7afc3308
SHA1 0045210f922e9b29b4438379e4a9e398690a4b34
SHA512 7c0da3a8ae2f4b9740244d02b1cf94ca2624fd18f894fbb75faf61b56562f901061ea722f8102969c6eaa303f3098b5400a0278f9623e35ad5c7a46f4d9f5593
SSDEEP 24:7+ttyUOBWqLXZtANoYyE8tNEIslsm4sG9Oy9vGoGIVyteGSW:7MnOWqDTADHiEI414FooGEwSW
TLSH
T1C972374F0F287321D4F642B3B0C606763FEC966D47224242BC60E0FBDD8707C691A9A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

exoplayer_internal.db-journal

Path /data/data/com.idlixku.app/databases/exoplayer_internal.db-journal
Size 512B
SHA256 9be6da6763a2039c06822c9271f50a242368d0dc3220fbd6522c5c03db4cd7eb
MD5 63cd9e2914aea02f3740aeab8f7ae9ee
SHA1 7d1883aa5351901550348da68591a1b1995e7475
SHA512 d551f293c116392f01b6c7e65ac02acfbe16e49dffc15da4d9f287a43c6e1e424fb49ee2b677538887dd42c6bd289299756fd7ca3df872f57c78eca70761a6b3
MD5 SHA1 SHA512

Submit Download

exoplayer_internal.db-journal

Path /data/data/com.idlixku.app/databases/exoplayer_internal.db-journal
Size 8KB
SHA256 0f7c3ee7f9f5f5b87145bcb139c5e2198359fdd611d0a300a193c4628ae6456f
MD5 d710d1519a3dd3166c42a87050db287e
SHA1 c909c77876624f49060894226de734e663ed9559
SHA512 dd845ff7eb80585b9ec0eee47747a2d39b9b88d030b8cd1bbe36ce1f0045cf5c91d51beb2cf784248e28c7c0b3b50d29504bab919c0ef1407fc18e1c6b74dd15
SSDEEP 6:7+/l9egn1m/ng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK/:7+tcfqLiuWdYRmBEyPbg
TLSH
T12502C08D67800823CD2D267B94D7C3800D20FF28A971CB171B980C943C074CCECA0D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.idlixku.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 4d969664616d84d0d2dd943b8fc34f3e654d46032d850f5e1b645ea1c0cb03d9
MD5 d59c96f3bacd708d11077b9b0f0c93ea
SHA1 f9b19b32d8b88b22d81e3a9e206fa99b60ffb927
SHA512 b01d2c10ff49ffcb5e8dcd627f5cfec4df88d803d9e7d90954377f919b33c38eb03c676fbc29a070a3b54e6bf79c17cc2b28aedd7e6418c155c72ce57db0f848
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.idlixku.app/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
TLSH
T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.idlixku.app/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 1c04dab8dcfa0d16b36a0eeb23d836e7fcf8064b70cda8a242979debd78b7c2d
MD5 1650dcd3d63d0a2adc44f3d416ba7eaa
SHA1 84770bf9ea32e227d51bf5c6422602ecd725849a
SHA512 75e22d3116dfad4a3b60a9b5e7281e68f06579bf4ced34536378ad2c48659acc9eddda2e0e72e544c620ea0af0c89d885f08122838ee08e401841f9a606bf7e4
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.idlixku.app/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.idlixku.app/no_backup/androidx.work.workdb-wal
Size 181KB
SHA256 c8c95b19fcc1529230c431e546de811c853c468da073a146d44b7805781fcc83
MD5 deeebd7f1916f9c76bbd11f9a25514e9
SHA1 1cfbc2843cd6aa5b2610982b048814c268bf6357
SHA512 84d4e0cacd0ef407f835f637f4e59dd917f7b1e78ca8f97a71811465491ddfb5275d37ed08110e3786dafca04877c40fd9e65bd1b7cc26c6c7356ecd3c051dac
SSDEEP 384:bMtidjnfWzzb83zSiXD86u0E5v1sZZkv1Wi:b9fWz03zSiXD86y3skWi
TLSH
T1B90442CF0F1A1304C5B854B0EC900BE12A6D857FD392E7A76CD55876ADF28109B5ACE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.idlixku.app/primary.prof
Size 17KB
SHA256 6e8504ab545755b6b694a1edea1317fa90801a7d1c1acae9f22f7b99204e83d4
MD5 ed5f884decf9f0695ae03acc4b5439f5
SHA1 f318476d1c7e55d44cce433ad5cbc1bea972870d
SHA512 d26f8f5734c5b743fca1d79a7b1798b92d2603cac3d2885a055e85ade16383628f00a65457f193af06b87d3517198b3d5c88ba61a1bc0470bc18923c901184d6
SSDEEP 384:a1WkU8twQvSi6xKBWnCjyVJOVaKKyhyzRqkt7BK:a1WkU0wQvSi6KGOVaKKy4z4ktE
TLSH
T19C82D0482C4ED74C74836C3CBEE25780F50C98B7D1E7292E6B9E144B27602E497984AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.idlixku.app/primary.prof
Size 19KB
SHA256 b38da3865bc75fac2cccac5eb1ad23097b34aa557f34fe1f7f1ab2252c773834
MD5 16baf4a91ff05d687a3da70f601bd7c8
SHA1 9024a9780ee677e93d889e3c1f9b4afd0fc39292
SHA512 7c6eae6749a01613377638a098230f0e63b04d8f6c143b93b3589d9a47e9abfb10d476c3dfc2ef2f90d34efd0ee7eea1998f2c834c9ad389ab90e5544c53ef80
SSDEEP 384:ESpT6jv9zx3qgiGBZLQjRKgfv4sCd463mvOb+3w:ES16jX6giGBFQVl34sAOmUw
TLSH
T1F292D18390EB055186DBAE04483DB103689BDF6F10BA63A025D48B53B636D2A4457F7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.window.sidecar.jar

Path /system_ext/framework/androidx.window.sidecar.jar
Size 12KB
SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
MD5 bdf3529e80318eb14e53a5bf3720c10d
SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
TLSH
T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads