Analysis
- max time kernel
46s - max time network
152s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
08/10/2026, 18:33
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
BubbleBoost-1.1-release.apk
Resource
android-x64-arm64-20260325-en
1 signatures
150 seconds
General
- Target BubbleBoost-1.1-release.apk
- Size 7.6MB
- Sample261008-w67fjsct2y
- SHA256 8659027faff9ce5dd1db50c162dc510630484deeeb9c67cfa4dac7f8de0f2c90
- MD5 f9079326a8a0848f93f47277ff716ce8
- SHA1 7e62d9ce75e7352397ade657f13e6e18f410cc52
- SHA512 5910ed9f09fe812d44fb97af9c5ea9029d1fce2b46887bca2bdd63f7315d47ffda82718adc52894130feb30244269ff10fcdd7afbea436c5c5618002cd96cf06
- SSDEEP 196608:h6/rrQ+3Hdv8FMkmqGE3ymkSxdM/gIcmcLXziX0LpxezzT:h6Xb39vWMkQEima+mCDzLpxgzT
- TLSH T11F862346BFA4AF8EC837D0764D0A6635154AD93BCB07C387D8381758644FAF84F912EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4820 com.bubbleboost.vpn /system_ext/framework/androidx.window.sidecar.jar 4820 com.bubbleboost.vpn
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.bubbleboost.vpn/files/logs/client.log
- Size 63B
- SHA256 e25fd76dbf1bae1f86f12b8ab79829ac48b683bcd23558b815bc5851866a01a8
- MD5 69f4f5d16c54426c81d323e87a021557
- SHA1 dd736a221ad0e6af5942e7874d914394d1f56e83
- SHA512 0f23fd59261ccefba9cc4dbd286dc973c3a097263f542f4ec81605aab72b5135c92b1a6641067ecd81d6d41dabd413cd00798c08771a9fd951c4c51e48c17a15
- TLSH T19FA022803B08CCC228CAC000803A822A88C8C2A0223E8C20020A0CC2BE8A8300B8CAA0
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.bubbleboost.vpn/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 a70052992c6d3960ae5d91526ce0e0d9da67bd9700072133bcc68f9372a9f4ff
- MD5 5960ffd1c4811298fe10fc006cb75384
- SHA1 d36d1b0fbfdb502429f8e58b750ea637d9badaab
- SHA512 da0582c40dd2cd380f3041b0bc434fea57aa89bcba57af1fba23be491689a160c9bd8cf7c6c6b72fdc424b2c01e1ac99088d981ec5474996e4d97db063bdecb1
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.bubbleboost.vpn/primary.prof
- Size 10KB
- SHA256 2d212488ec2958dcc3ef3b66964af706c0aec0a7f58489ea525738a3b85167c7
- MD5 d56a647429067c0026b51c421dde4c44
- SHA1 b0e892eab23a67b3c5fd5f5134427e9c635c9a76
- SHA512 28ccc06be625079f6381f96d76dc87789617dedf3f09546e17b6a067c32237cd62fc31ae68da344c356a34101fe1674196dfbbdfb3b02dd63f29d90e1b73bf7f
- SSDEEP 192:Rn70rlIuZrpFh/U1np646hgXxhHOaUkrP3UWI+DCrXfhBaOTSsDbRVGeraTJL:N6P/U1tBAaTPL5o5cSbZVGKsL
- TLSH T1C622AEDB89A4334BFBE4DD145F6539158297FEAB21B6244EEF3EB144D054321BE44182
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.bubbleboost.vpn/primary.prof
- Size 16KB
- SHA256 b7c99b5e737c9c39569f3a50fcf2f9841bae3852db51b199f4be86cd86315fd6
- MD5 5e79fd8d32b2aebb11ba14ec7094cb6d
- SHA1 40cc977c012520639e47490eca0eb52b70810b4e
- SHA512 0ef4765902770c11517a8cee0963b8d9b6b235da99d7a815b96ed344eb127b1e35ae2afaec94294c6b60bdf4e147b6785be89aa59cae2a960feb6f0100e63e09
- SSDEEP 384:ZEpciR7FlFMklDU9PQq+T2GdWTBJ3huFxuhwqOBBHwvB4I4:Zkukm93GdyT3hdDOg4I4
- TLSH T1E172D0459C35823F42D780040B808F4EBF26DAD76AEB8B50C1D12DC6F5B2BA2B56E6D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 12KB
- SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
- MD5 bdf3529e80318eb14e53a5bf3720c10d
- SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
- SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
- SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
- TLSH T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
- MD5 SHA1 SHA512 SSDEEP TLSH