Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    06/10/2026, 02:25

General

  • Target
    K-Win_1.4.83.7_APKPure.apk
  • Size 112.0MB
  • Sample261006-cwm5dayeqa
  • SHA256 184482b808df8973904e57c8bff170173785b946557f28ec3e3d8aa93673e8fb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • co.robin.bcjps
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks memory information
    PID:4101

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        c2336215aff5da8a98919a4208fed658370a7ac32a7a849d57b588653d9ee83e.0.tmp

        • Path /data/data/co.robin.bcjps/cache/image_manager_disk_cache/c2336215aff5da8a98919a4208fed658370a7ac32a7a849d57b588653d9ee83e.0.tmp
        • Size 20KB
        • SHA256 d8b5279a84226f22954b7ecebae482d248d22951d0f59db6141b0f9c51290404
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/data/co.robin.bcjps/cache/image_manager_disk_cache/journal
        • Size 179B
        • SHA256 6a84c0fd89560b383b2afac92b6ba4ce2ca73fe24480a1f49ead0e0a22c3cde2
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/co.robin.bcjps/cache/image_manager_disk_cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events

        • Path /data/data/co.robin.bcjps/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 2ff1cf9df078e0b1c7d67709a049b98c14d6ae95248a5bb4e01efc925232b06d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/co.robin.bcjps/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 acdefde1f5cee6fd3bd9172800c89dca83da1701e67f4ae9e63b069dad174151
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/co.robin.bcjps/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 70396b304f42c59847637104027e68fdf9ca9ac5547396fcbd9cb7bb7fe37e30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/co.robin.bcjps/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 2a05d084211ddd1e28c5741ce3ff53e4d6ba2e9ac1ba4794fcf3ec2569aa4e05
        • MD5 SHA1 SHA512 SSDEEP TLSH

        event_data.db

        • Path /data/data/co.robin.bcjps/databases/event_data.db
        • Size 20KB
        • SHA256 c2f74cc19da4bbcd535d19b617a3abd825b8528f907db60b3d8f20d09ef00109
        • MD5 SHA1 SHA512 SSDEEP TLSH

        event_data.db-journal

        • Path /data/data/co.robin.bcjps/databases/event_data.db-journal
        • Size 512B
        • SHA256 d61db0ef873c51146dcc22beed4a0b5e7fdc7ace90c3f069b69274ccdc0620e8
        • MD5 SHA1 SHA512

        event_data.db-journal

        • Path /data/data/co.robin.bcjps/databases/event_data.db-journal
        • Size 8KB
        • SHA256 9767726e3cbad88cc2c377df9480e9307b37d28ad663cda263708e8a6c5bcd38
        • MD5 SHA1 SHA512 SSDEEP TLSH

        event_data.db-journal

        • Path /data/data/co.robin.bcjps/databases/event_data.db-journal
        • Size 8KB
        • SHA256 faa9336e6a6d0c6985240129f8a05cdf1211cf42cbe8313601c04d8189442718
        • MD5 SHA1 SHA512 SSDEEP TLSH

        event_data.db-journal

        • Path /data/data/co.robin.bcjps/databases/event_data.db-journal
        • Size 12KB
        • SHA256 0eccb8d1d2166866b35259216830bbfef0c56b46c4f4e086a936bdd9f3fc9e7a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        event_data.db-journal

        • Path /data/data/co.robin.bcjps/databases/event_data.db-journal
        • Size 12KB
        • SHA256 72099bb527716e70ff86e91c01d663094ad2e5763c0081ddb8ccfc77b973ba59
        • MD5 SHA1 SHA512 SSDEEP TLSH

        event_data.db-journal

        • Path /data/data/co.robin.bcjps/databases/event_data.db-journal
        • Size 12KB
        • SHA256 7628ea02cef992598de777ee795c9cf97024a116a0fde7e541c945edcc43fa7b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db

        • Path /data/data/co.robin.bcjps/databases/google_analytics_v4.db
        • Size 28KB
        • SHA256 ab357c3a06244d8d9d2ee436a630332e8dd4d920be0672f6e88f75569335fa1e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/data/co.robin.bcjps/databases/google_analytics_v4.db-journal
        • Size 512B
        • SHA256 25db1301b6bae2ca7814042f049a6da9e3b6c097b16db3d0abe5bafaabd6f359
        • MD5 SHA1 SHA512

        google_analytics_v4.db-journal

        • Path /data/data/co.robin.bcjps/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 bb663566d0f95466207e5ca121d344dfb6b58fc667a55a77e26a699ec47aaf37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/data/co.robin.bcjps/databases/google_analytics_v4.db-journal
        • Size 4KB
        • SHA256 b209431cf8a36d2eba0a92d42011904373835724b1678e36dc66db2a86360bf8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/data/co.robin.bcjps/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 7da6acb4d4b0d68b9c5f8c864059560961fae5bc063ecf1501ea306aaab14610
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_analytics_v4.db-journal

        • Path /data/data/co.robin.bcjps/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 3292fb8fd72943ded0c9e327de418ed1df17694de8948fad33beba05265445b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/co.robin.bcjps/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 e790ac05090dc8eb7f2c50c4b070af72b2eb69d867404b4bf79d1a41b4cf220f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/co.robin.bcjps/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5aafe178902740a9ed21320f4610b955bf49773345e6ba1459afe3ef215913c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/co.robin.bcjps/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 fb765c4b2b5950fd54fc66920da1b0d3ed57992ac13327a707642b46780eb2d6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/co.robin.bcjps/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 708484e0e4c105418f0dfb2929faa25eaab2a44f0098eecac1d609a94a869b41
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/co.robin.bcjps/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 fa0147d211cb25ace145f607a80f7f02d738f0ed4e70d18679bec05456e5b2e5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db

        • Path /data/data/co.robin.bcjps/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d5644dda16a8033008950e7409fa95674e474b943f2d0006931fef515a2bd13e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/co.robin.bcjps/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 852ca08928374be8b2175fe481cfa54afe2b8908b35a6af731ae6fb34386e6db
        • MD5 SHA1 SHA512

        google_app_measurement_local.db-journal

        • Path /data/data/co.robin.bcjps/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 9c01ebd2e227e9e1ab56047f2765d35783b30ea30889f8c2d24269de25608651
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/co.robin.bcjps/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 d15bfa25ef113953e91bc10faaff54decfa6642bb5d45d8dab2ee45537c0ac44
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/co.robin.bcjps/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 44dce0dd2ac74cf9721b4f1bf77124b42189f4146acd1b748afc22035a8df11c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/co.robin.bcjps/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 72308a08d08eb5620d27fb37bdce62d9a84c49374967aea3f2b74826a7d2222c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        google_app_measurement_local.db-journal

        • Path /data/data/co.robin.bcjps/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 e69f95d909320483f9ba4a02f6477a83249d33bf58918173fdfe8c085d8ff019
        • MD5 SHA1 SHA512 SSDEEP TLSH

        http_data.db

        • Path /data/data/co.robin.bcjps/databases/http_data.db
        • Size 20KB
        • SHA256 1104133675fe74365cd9361297532b0b5a87ba359f34c257156198d0bfee54cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        http_data.db-journal

        • Path /data/data/co.robin.bcjps/databases/http_data.db-journal
        • Size 512B
        • SHA256 9a228b895d23b80eb8fc35a64e3a2cec5ba506525133ad0fbf28dcd6aee7f6a2
        • MD5 SHA1 SHA512

        http_data.db-journal

        • Path /data/data/co.robin.bcjps/databases/http_data.db-journal
        • Size 8KB
        • SHA256 7cdd1421bed02791d7c56691cd3d86bba3ec7413c30b094f7c39d76684c64d94
        • MD5 SHA1 SHA512 SSDEEP TLSH

        http_data.db-journal

        • Path /data/data/co.robin.bcjps/databases/http_data.db-journal
        • Size 8KB
        • SHA256 7ea6bcf7272585c4d5d50267631328dad5b664f9c6f7fd366ab088d749b0cb56
        • MD5 SHA1 SHA512 SSDEEP TLSH

        http_data.db-journal

        • Path /data/data/co.robin.bcjps/databases/http_data.db-journal
        • Size 12KB
        • SHA256 6d5147a7d0cafc209791a279b9d47671c0d6bbb817bb640a46d15d1375515865
        • MD5 SHA1 SHA512 SSDEEP TLSH

        user_data.db

        • Path /data/data/co.robin.bcjps/databases/user_data.db
        • Size 28KB
        • SHA256 963eb928af57dd1f92edadaf6e82eb8a94939f8b5891a61289b680e8014d7a00
        • MD5 SHA1 SHA512 SSDEEP TLSH

        user_data.db-journal

        • Path /data/data/co.robin.bcjps/databases/user_data.db-journal
        • Size 512B
        • SHA256 798fac9a75509054d7ba33e745266ceb8ed42fc53c0b8d94552ca0d5ec5300cc
        • MD5 SHA1 SHA512

        user_data.db-journal

        • Path /data/data/co.robin.bcjps/databases/user_data.db-journal
        • Size 8KB
        • SHA256 50d0dc59fa456b58f4342ee96a14a23d6a344bf1ec70bbc80f8e91fd11cf98df
        • MD5 SHA1 SHA512 SSDEEP TLSH

        user_data.db-journal

        • Path /data/data/co.robin.bcjps/databases/user_data.db-journal
        • Size 8KB
        • SHA256 5c3ddecdbdef373b25d7e4a9d4f0bfa723b2b693a8997b07622df3098d97597a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        user_data.db-journal

        • Path /data/data/co.robin.bcjps/databases/user_data.db-journal
        • Size 12KB
        • SHA256 8051cacbff8c9e4e13412a1127fc4cdc51278727b2825ed2e0bebccf0f77cdea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        user_data.db-journal

        • Path /data/data/co.robin.bcjps/databases/user_data.db-journal
        • Size 12KB
        • SHA256 b334055236d6856b9a24d9fe821d184fbcaab587b742cc856446f575875f4bb1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        user_data.db-journal

        • Path /data/data/co.robin.bcjps/databases/user_data.db-journal
        • Size 16KB
        • SHA256 398caf5af2ca0a1a00f5b7fcde299e295556a4d2be2cee0570fe9439bc850b30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.crashlytics.settings.json

        • Path /data/data/co.robin.bcjps/files/.com.google.firebase.crashlytics.files.v2:co.robin.bcjps/com.crashlytics.settings.json
        • Size 763B
        • SHA256 b98993f9afff22797fc60fed13e6966f5c47a51f33da7875587e3f5e03b2bc91
        • MD5 SHA1 SHA512 TLSH

        report

        • Path /data/data/co.robin.bcjps/files/.com.google.firebase.crashlytics.files.v2:co.robin.bcjps/open-sessions/6AC45C84024100011005A67F54A3CC72/report
        • Size 746B
        • SHA256 a207a1de926e10a8e3d4ab4f85edc2247a9ee7bf552e19fb51a262e9ad32f590
        • MD5 SHA1 SHA512 TLSH

        userlog

        • Path /data/data/co.robin.bcjps/files/.com.google.firebase.crashlytics.files.v2:co.robin.bcjps/open-sessions/6AC45C84024100011005A67F54A3CC72/userlog
        • Size 472B
        • SHA256 b921498acd2b7755f6c5d4ab4ba2d7937f320249272a9efdbc140ca723d0aa28
        • MD5 SHA1 SHA512 TLSH

        userlog.tmp

        • Path /data/data/co.robin.bcjps/files/.com.google.firebase.crashlytics.files.v2:co.robin.bcjps/open-sessions/6AC45C84024100011005A67F54A3CC72/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512

        PersistedInstallation2674147143488566135tmp

        • Path /data/data/co.robin.bcjps/files/PersistedInstallation2674147143488566135tmp
        • Size 90B
        • SHA256 14ec969413194e64a115de07f70291b7de11c746a4f3eb76d4c79ba7225efd01
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation6789276798813284754tmp

        • Path /data/data/co.robin.bcjps/files/PersistedInstallation6789276798813284754tmp
        • Size 569B
        • SHA256 548c82ac50cd571fb56768edadfd8cfbfbcc509c224e8737066c13f74f2574ca
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb

        • Path /data/data/co.robin.bcjps/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/co.robin.bcjps/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 ccd69822c9edad155b9f1b0b7cd3cba4015d74a5326aca8bf7cea7f14d4f8f2c
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/co.robin.bcjps/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/co.robin.bcjps/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 b479f3733c3018f819e2e9bc57a2726fcd812adb0d417154f8fe2fffc6f6630d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/co.robin.bcjps/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 959ffd4f430c8a793429f09ba7718172cebcde8ba7b33f0709df08f56f63d941
        • MD5 SHA1 SHA512 SSDEEP TLSH