a2a9ae2e96e2fad0313187a9e7376fb833ce3c787518259cfe19de9a6ce17482

Analysis

max time kernel
4s
max time network
160s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
08/10/2026, 22:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
com.studio.newhybrid.apk
Size 22.8MB
Sample261008-2wva5aey5n
SHA256 a2a9ae2e96e2fad0313187a9e7376fb833ce3c787518259cfe19de9a6ce17482
MD5 1259c9712e772bc920405b31a63ae35d
SHA1 8bdcda38f230579cf84cb5665199a24c51fc8d76
SHA512 ad9e4f1b27822441929d8b76433d18758ba17ec0155de87dd4291d9a76bffb3d42f4c12235a273bb5d7c421e51a7e26d8eaff441853e08b32bc9f71560896b1f
SSDEEP 393216:vWAwxtiX8FzS4VVXj6vLZyIiAIbPuuaGqw74A:vRwxtiX+dF6vLZyIiAIbPugZ
TLSH
T187379C02AB527D3AC0AD43349BB253407B326E40B75793AF1041F1B97D7A3C1AEA57AD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.studio.newhybrid
/system/xbin/su	com.studio.newhybrid

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.studio.newhybrid

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.studio.newhybrid

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
defense_evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.studio.newhybrid

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.studio.newhybrid

com.studio.newhybrid
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
PID:5065

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.studio.newhybrid/databases/com.google.android.datatransport.events
Size 104KB
SHA256 5530f2f3f27632a7c4049fe20e78a291f40a5e3864b17dc12eb79ab49b639af7
MD5 29c58f147589261f76ed87affe66dd91
SHA1 3e546e39385ddb9d884a8379c965b36edf9bb424
SHA512 3b41952fc565537787252fe0795fa581ca0353b0e0eab1ffe51e193296e6988c8dc6c4e17058ab7f3057205b2db44994445e3481c1680957e500c5c3cf8c1753
SSDEEP 384:M2jcfruMEykEKV3dVxvhW9oKiC5vkRg2hXvtE5v/Rg2NcdQ:Lcfrkbvi+fC5vkRNhXvtE5v/RNNcdQ
TLSH
T1D5A3D00F8F3438ABE26CDCBF61AB05B78AF609075D4A9B84E548D31D1B6DC8022D765D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.studio.newhybrid/databases/com.google.android.datatransport.events-journal
Size 28KB
SHA256 c3eeecd3cba5d9a39f48179df3149efc8837d704486c34bc2502d5a328b901bf
MD5 1c1e23da4d765b62dba5ef4b42bb68c6
SHA1 cef144a9e019e4c638f0f8f97b00e10658cf05a6
SHA512 44ab4a7a2792edcda65dba98dfd439279b6ee3fca22e516363bf73582e75dacf12fed12c2af18f340b53360aab290b8f479f9ecc019c99a41123c5238ea97402
SSDEEP 48:7M1mj6Mqu59MENkMwABdU9dndVd/729IvdldHlq8/Jq4qPSmNwL8:7Emj6MVMEqzAiwIyNjaKwL8
TLSH
T14AD2755C1A3C2221C9BE283ED7E143535F3C93DF6723A2613DA48CEA8DC3465B0354A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.studio.newhybrid/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 669d0ee6916b66d6a97411f3f3277800de6f9bf8c7d7d347bee79031dda2790e
MD5 35d77afc0ca19b69a2ea64255fde3609
SHA1 e38b041eeb692b0bcd347b544d6fe0004784f93f
SHA512 1d0ad896cb07366cd250caed8f43c58a025d2bac0c04b917cdb29713a24d43b685556ca4a833d422904cd8a9c341869f4de8aa648e427fb46ddbc9f086d008b2
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.studio.newhybrid/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 35be7672d8807f17a600ea0ba253225489f16f4f6bcbcb1be2c5d6bd12df5a00
MD5 6311c00da5b6d2cb8effe489b4d17a2e
SHA1 df0d54696465e06f57f7ec140dbc43455e281f1f
SHA512 b30b65d9dfd8cd37c6eb446c772a4f051aa34038cf954ac8520209cfe7f490e9c43ace2dad8315602a31ce9351f208a27bc285f3c8f744b66ec913825b1906fa
SSDEEP 6:7+/l9LDn1zwg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKl:7+tleqLiuWdwRmBEyPbK
TLSH
T1E002228963801832EC1D26B790D483880D04E76981A1CB17356008D83C034CCA4A0D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.studio.newhybrid/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 70f889f1c6e1fae9c80e7f8b9d81e67c2ff0b0d5baca6c7f3d9b51b0e5e015b6
MD5 a361a4fb99851f52aaa95ffced1968a2
SHA1 aa55965fd51bfaee6239e12c1908d9825b9bd274
SHA512 d54736a0da36f9c2cbdc781d120843c2c9147fcd5f69dae18dcdf5ef1b1e6b61e5c519ea687fa9e6bdb242fd033ab6a9ec9bfd538344a19ef3de9ed673f5c788
SSDEEP 6:7+/l9BtOPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKOa/T:7+t8qLJdTRmBEyPbwT
TLSH
T1D8022289A7400813C21A27BB90C88B602E50B724C323CB2725600A9C7C036CCE890D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.studio.newhybrid/databases/google_app_measurement_local.db
Size 16KB
SHA256 60c0ccd987453f89ea3bc04d13e34c99f1fc4bcc4aee97c34e524d22f319b182
MD5 d5d65a0b4c6e6db83f30d16e24a0d306
SHA1 a768e9b3d93efae0ef42a9bdb203be9f2ee824d4
SHA512 b94841e2c87dfc2383e0adfe8bac6a5813a9faad61edbe953f4e953828cdeeba631ed0dc45e698dd680ccefc3fa6930f53483dcbc26149a3a6f26f9badcd1ef5
SSDEEP 6:l9bNFleLIls19P0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0DqiOwVQ:TLDE97LzmzsRmBEyPbBvOwVQ
TLSH
T1BC72D8CD8F10A716C5170337608AD3955F78951E83679647266408646E52198B051E98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.studio.newhybrid/databases/google_app_measurement_local.db
Size 16KB
SHA256 4afda202b2d75fb900d05a65cbfa0d3a30480127f3210124e9f5cb576b50e64a
MD5 72689e97e936577bfffb9fb61cb290f7
SHA1 a1865d81753b5ce62eb23c4e939e801bbcecc48a
SHA512 1cac6ab18f7e14e80e297f117b314e4274ef016fe5262a568677ee05b6001323648e8bec3f17b562108ae9ca0317148dc1775a919d064a411957de5a7985ff77
SSDEEP 12:TL6EQ97LzmzsRmBEyPbP/DvJ+/0Fl6xFL:TLOxHmz3GSP/DvJlFO
TLSH
T16C72ABCC5E10E303E12B033A20CBD3D31E38610E4333961B3A2008689E532C8B052F94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.studio.newhybrid/databases/google_app_measurement_local.db
Size 16KB
SHA256 7ef388ce00418f40d8519634cf8536fc881e21076a14316ca064a855c14cc29e
MD5 243dc88b2d604032202c8666bf80e80e
SHA1 8b80ca2c02a90df00e09df5e4f9db7321d4e4f3a
SHA512 feda185d8116aed873cbef1c59a5a3f1d8666bac28f01c979de1cc9a102cd678416210bfca85e7fd18641bca6962990f50018392e63398a0589275bca5aa3c2c
SSDEEP 12:TL6UET7LzmzsRmBEyPbP/h1V49blqYFlqeLvJ+/0Fl6xFL:TL63Hmz3GSP/h1V499FRvJlFO
TLSH
T1587284C9BE24E313E22B0B3D20CBEBC32938301B0723D61739260A2C6D433C8A462F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.studio.newhybrid/databases/google_app_measurement_local.db
Size 16KB
SHA256 5a43174779a3818d00ee8c85d885c720b38375f55e2889f63b0a20b7f05d0798
MD5 890b4ebb0dcdc3465a4f2b2452fc79f6
SHA1 99a29456e63d9b1f8399216b06282a4f72d399f4
SHA512 659449f02a978a7600199360476c4325f58669332262087337089935c8ee011ff3d22a29f380cac95954bc7f27062afbaae51f38821eef3ab3ef8d3e31c9b52b
SSDEEP 12:TLUEe97LzmzsRmBEyPbP/Dd36iXLax1Hb7tMraK2349blqYFlqeLvJ+/0Fl6xFL:TLYHmz3GSP/DtXuxPMOKa499FRvJlFO
TLSH
T1A6724C89BEA8E613E17B0B3D21CBDBC76938711B0313D7063A151B2C6D53384A962F40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download