a2a9ae2e96e2fad0313187a9e7376fb833ce3c787518259cfe19de9a6ce17482

Analysis

max time kernel
4s
max time network
156s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
08/10/2026, 22:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
com.studio.newhybrid.apk
Size 22.8MB
Sample261008-2wva5aey5n
SHA256 a2a9ae2e96e2fad0313187a9e7376fb833ce3c787518259cfe19de9a6ce17482
MD5 1259c9712e772bc920405b31a63ae35d
SHA1 8bdcda38f230579cf84cb5665199a24c51fc8d76
SHA512 ad9e4f1b27822441929d8b76433d18758ba17ec0155de87dd4291d9a76bffb3d42f4c12235a273bb5d7c421e51a7e26d8eaff441853e08b32bc9f71560896b1f
SSDEEP 393216:vWAwxtiX8FzS4VVXj6vLZyIiAIbPuuaGqw74A:vRwxtiX+dF6vLZyIiAIbPugZ
TLSH
T187379C02AB527D3AC0AD43349BB253407B326E40B75793AF1041F1B97D7A3C1AEA57AD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.studio.newhybrid
/system/xbin/su	com.studio.newhybrid

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.studio.newhybrid

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.studio.newhybrid

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
defense_evasion

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.studio.newhybrid

com.studio.newhybrid
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about active data network
- Schedules tasks to execute at a specified time
PID:4746

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.studio.newhybrid/databases/com.google.android.datatransport.events
Size 104KB
SHA256 42daca1784a3b9050f2e038eed16e6ac599e81f0b8f4b6fe11afa8f5a7e0d33f
MD5 291b9467d76365cd96fb2f578b1b73dc
SHA1 b8f47e54ede58bc1a4df35670215fb9759488514
SHA512 975ba1a2f8f9d44d62507cefbd548d345af5d2e833684a269f36d1be7f7750fde88a0fabb200587f76fd1f9736148d86980b8d3263459407c35a6c2b0cdb32fc
SSDEEP 768:NbfqXc2bTiJhXTIfcRPlQRgKXs32PlRRgmc0w:gXc2l2PlQRBXs32PlRR2
TLSH
T157A3DF0E4F3438AFE26CDCBF61AB05B78AF2090B5D4E9A85E548D31D1B6DC8122D765C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.studio.newhybrid/databases/com.google.android.datatransport.events-journal
Size 28KB
SHA256 ffb5ab28e6c58fcde3cf6aff950743d1593316db07116716a40c6fedbe876c9e
MD5 b28e032c4a5dcada534d96f6d2ae0208
SHA1 e6bd58afeb77c36f93cd5c395dad8ea616238548
SHA512 6e2e158c5e77f77a65cb37aedff3f2a0cba15e2f0a811ad5b790c5bd0d1d266d88b4cc6731d113d6fe963a5cbad85b5dbd40b6208b2a828a044feb5f985bde23
SSDEEP 48:7MzCqG59MENkMwABdU9dndVd/729IvdldHlq8/Jq4qPSe:7OC9MEqzAiwIyNjae
TLSH
T136D2645C5A3C2211C57E683EDBE143535B3C93EF5723A3613D948CEACDC246A70254BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.studio.newhybrid/databases/com.google.android.datatransport.events-journal
Size 68KB
SHA256 b34689c7865f2ea6293e83281dd4958d5ae8dadf265345ca4fe70730c89a5d0a
MD5 730e5830628f315d66f08a901fa9fbef
SHA1 71506ce0a9a0bfd0e93b24fc9bb93e4bf2ae0ada
SHA512 771a63b75b9f4a440ae5ad90d8cd800a610a540e827f1a195e9551d5dab9af325adf69c7ed8df2d64ce7832d611cc113d84e4f38ebbc86ebe0ab494c61a9ae44
SSDEEP 768:Ktx0HfGXS2WTiJhXyIfnRPlaRgAXs32PlgRgmc0b:uXS2JRPlaRPXs32PlgRZ
TLSH
T17D63E00E4F3438AFE26CDCBF61AB05B78AF6050B5D4E9A85E548D31D1B6DC8022DB65C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.studio.newhybrid/databases/com.google.android.datatransport.events-journal
Size 20KB
SHA256 f4219123f1b263429354ffb5c85af187ee3cd52cb092e12cc74d3d54f9220989
MD5 7b6547718931a03ebf6a081734224188
SHA1 96728a610297507379d6d42da03bf9c6bb8335e9
SHA512 7e03818c5f18ed644008c691e73ede2df00d6025b206b92995c0f46ae9b4fefdfd6c8083612ffc0d73334a3fdbc05f017fe21f32968a23d780c6a392d6d1f822
SSDEEP 48:7Mufm7qW59MENkMwABdU9dndVd/729IvdldHlq8/Jq4qPSFVgqTq59MENkMwABdh:7oNMEqzAiwIyNjacdMEqzAiwIyNjae
TLSH
T11B92749D593C2311C6BE283ED3E243A35E3C53DF972391603EA48DFACDC2469B0255A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.studio.newhybrid/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 d90500cad35231727cd525936fa3ccb81306b408bade43b24be4cc07f18c97aa
MD5 2511de6d3e0dc14450f21b39d17f48fb
SHA1 7a2ef2a1cea8c7ae7030171a6c2032ea08dcb6de
SHA512 145a2012aea5e2aa91e2297ed2bbe38961d842deddf3fa32b2c27788c0760589fd0fc2307e1d1f3d34c63b9e9f835915df2075312494f29f32546980b7abc2b5
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.studio.newhybrid/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 f734ec51bca40fedd0036e4a715fc63c52295db9c0a2644dcf392715dfd8cd78
MD5 c1d8cab154a99bf5040f72998c1bbcb9
SHA1 9ac5ad90ca0a5821de1c4e4927d46cc6e4a6430c
SHA512 2698bce921a376429cf5459f7e773107666daa57f55a5e95d56ae18c2e474a838bbc2f153dcf287b34ebb9396d77bca7e0ac1b696e427477f1c8b000cd0f13b5
SSDEEP 6:7+/l9FFn10fg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKB:7+tvAqLiuWdYRmBEyPbO
TLSH
T13302C08C6B800813D93F1777BCD883400D00E7298975CB6716A008943F476CCECA0D14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.studio.newhybrid/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 956505a70a6eef6eee5cce34ae7541f5151124e9e1d5757fa7c361edefd28ec4
MD5 8806e5311bbee338898aca55d219b170
SHA1 d6111a3694fde587131910e1f9899b6eb5a6ccce
SHA512 2698a326bc7a1f25d5a134f03aaf66ddcbab422c50edd287182d892c162cd8dee4e9eecbef274ff051f6fba043772668c28b40a61942d30529e9d15185c4ca62
SSDEEP 6:7+/l9yd0FPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK9l8t/qVn:7+t0d6qLJdeWRmBEyPbG81k
TLSH
T1D702229A63421803C82D2777A0E9C3812F69AB289323CB4B26910D582C0B6CCA890E40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.studio.newhybrid/databases/google_app_measurement_local.db
Size 16KB
SHA256 fecda2e650a2cbb3652d60ee1843b2e8fa9858bab765aee964b59b80a73d5c97
MD5 db36daef009d2615bbd9dfdb4f4d871b
SHA1 48f15ced1db6f00a2e1082ff632fb87d27b4b8df
SHA512 bb61280afeb208d4ef43224b9f871d09eeb24a4660c2b6691f5893f459871eff4ef4a537a3d0df268fa51e74bc55a76ade599d398f6d58fde4975adb8e8b70d6
SSDEEP 6:l9bNFleLIls13FP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK0DqiOwa:TLDE17LzmzsRmBEyPbBvOwVQ
TLSH
T1E272D8CD8F10A206C5270337608AD3954F78551E936796472BA408615E52198B051EA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.studio.newhybrid/databases/google_app_measurement_local.db
Size 16KB
SHA256 807ec11bc5028661bcbd5c8b8cd3d52f0c62971e5b347bc5002efd69823def84
MD5 9a507352b75288c72a5bfa41c729db8f
SHA1 c309e44b3a192516942b01da89403d23476016e2
SHA512 63e587daed2bd0c2d729eee4b454bc4609e608ea4ba89a3966ade9ab9f02408611b7f48f3a63941144b73f863671b60ee83d695adb993cfe95facfeb9ead2c2e
SSDEEP 6:l9bNFlkls1IFP0QHzyAgLusi2JLnGLNyL1ERX4PBX4ogLugMBX4suuK+/L/vJ+/g:TL6Ee7LzmzsRmBEyPbP/DvJ+/0Fl663L
TLSH
T1907222CCAE10E703E12B073A60CB93E75E3C611E4367AA5B3A6509699E532C8B152FD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.studio.newhybrid/databases/google_app_measurement_local.db
Size 16KB
SHA256 499f85681e048f9b1403d6dd2ad91a703bd484f225f74b68a9d77dcffb5e3e6f
MD5 aea9b12058ee3933e0819e1afdf69dd4
SHA1 baad383a04ea385b9ddb8122af4164451c0825b2
SHA512 ebcb25e38ee352afeaf757bd4bb73d5d97ca3f2c7869fd43a6d714a81c13bac23b78da85415ca52a0daea4ecb23f8fbee4be83b6270469805d64f4001feff6d6
SSDEEP 12:TL6UEr7LzmzsRmBEyPbP/h1V49blqYFlqJ9vJ+/0Fl663L:TL6fHmz3GSP/h1V499FQvJlFv
TLSH
T18E7284C9BA24E703E23B0B3D20CBE7C3293C302B0727D6063A160A2C5D433C8A462F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/com.studio.newhybrid/databases/google_app_measurement_local.db
Size 16KB
SHA256 730bbd41a122164c274738b8f5518c8e936efb23677a996cb03567c208f9a896
MD5 9ea608678b5140944e7f4f6e7525c427
SHA1 4f9f11380db2e33b3a457a4a2ebd98a95d4501f7
SHA512 26963e6560a9b609924dc8ac94b249306e26e1bc0daa04141d937c9f40d6002f9f754d591b7f7653c581d224478317ac3917632e91f5c26cfd89f59970b2f861
SSDEEP 12:TLUEs7LzmzsRmBEyPbP/Dd36iXLax1Hb7tMV4aK2k49blqYFlqJ9vJ+/0Fl663L:TLQHmz3GSP/DtXuxPMVfKF499FQvJlFv
TLSH
T1F1724C89BEA8D613E17B0B3D21CBDBC7693C31570313D7063A551B2C5D93384A966F40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download