4ff26769bbfd8454de373c567dbf0698216a17905254f676727b5dcc0461a791

Analysis

max time kernel
46s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
09/10/2026, 12:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
adriz-2.1.3.apk
Size 14.1MB
Sample261009-pmesvsxt6j
SHA256 4ff26769bbfd8454de373c567dbf0698216a17905254f676727b5dcc0461a791
MD5 3b642a5d565e2d1ee3ec66c4588a5eeb
SHA1 6b82c984abe25c8cad56f543a0df82a60b5fa757
SHA512 abbc9ceb33890c4ba8afbf808a9481d27459fb10c270e7d5d11ea2be8434da2ee98ecaaff0556770b673d530dfd2b4c6da008fe3bb7d554aefa61f9e7e1c2437
SSDEEP 196608:mNpCyc0lTtylOOJ6Ch1UuQez39ip87EUE97jnT0rd3xHaZk7A7tdgGH3AHF/czcd:IB7YpJ6w6ungTkx6K4F40S
TLSH
T180E62385FBA59E2FC87380325D4E923065596D13C702D387E968376D38B3AF80E8A7D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution persistence

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.phoenix.citizen

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.phoenix.citizen

com.phoenix.citizen
1⤵
- Queries information about active data network
- Schedules tasks to execute at a specified time
PID:4727

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

phoenix-citizen.db-journal

Path /data/data/com.phoenix.citizen/databases/phoenix-citizen.db-journal
Size 512B
SHA256 0e0597609266842258368ee5082123b4a32786d8f67132ace5a9fa8cd6b1d295
MD5 5788933bdab2117963c83928725132ab
SHA1 6e0ed0838ab8b8a0da5d8ee8097ec53c6e802ef7
SHA512 9b895fa5d5856ed08017df876d2b79bbe3bee65091e4d61628135985c3564f46a13442dde5842a82973c8b5abeae8686ff240c18e63fc6974f8510fdc3c3c6ca
MD5 SHA1 SHA512

Submit Download

phoenix-citizen.db-wal

Path /data/data/com.phoenix.citizen/databases/phoenix-citizen.db-wal
Size 16KB
SHA256 772f455354e396718700f98042e778634f62f6efabe324a56d1e7dec802f8bca
MD5 ec9dbe3aa7b6c9ec93ac4de1e1e6aef8
SHA1 655fd8ac4d34ec41c6b055cc8b8d3162d8fe9889
SHA512 f6251c929e66fdcf671f3845ddb6da79f11779a5f710913a71b4180861465b2b0941ec645089b0c757cf4acda274b675dbf5e5402dcdf5a2c4f66b04e61345a8
SSDEEP 6:K0H47iLgg0J9FZde/kPlOERX4PBX4ogLugMBX4suuK+/OilZtLNsvQn:KzeLgg0XzdeWRmBEyPbP/nrtaIn
TLSH
T12D722BD6D7880B13CE198B7170DE87D50D11971D7392CFC7196204616C91EC8E6E0F0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

phoenix-citizen.db-wal

Path /data/data/com.phoenix.citizen/databases/phoenix-citizen.db-wal
Size 36KB
SHA256 cdbdc07b55454bf6a3d60cc684a1f63ad6f0a43e292fbdff0d6467979108e145
MD5 494cc5cdde260abc29da3aff64b964ea
SHA1 d279144b19181f3ef017b0d0c002364639ec35c0
SHA512 d28e0e9a437ebf9fde2a27fbf3a11e779992552e09a7dd49ae5e6e56f39e08aee1650c3b64ad5e190e8504fba460f48f485f1087a6c102c0ba8114215f85989d
SSDEEP 48:ez366u/31BEZAGuoyhMnw67apZVSP/BqVH:eO6kkq8PAt
TLSH
T1E0F21FEE8F782343CD92C3B9E8DA06C26D78441C93F257C25A995562BC43780ADA496C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.phoenix.citizen/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 55d809d86dca65217ef88d6c161009857a03aa671724fde6893ac99eb9b03baa
MD5 2566a1688f1e32de1004494c3c8d2329
SHA1 7f6f183e4247ddb0eed2486f1556442f43a9a513
SHA512 b063f86e2ea3c0306ed7c9fadce32f6e802439e6860e52e3af9fcb5ccd3f9266377083e7061ea3c7153fb0a8ac4bc9a407fe9324ac5e73c834877776b0ae6274
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.phoenix.citizen/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
TLSH
T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.phoenix.citizen/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 5127c49844f5d1140cb0a39a46f7cd1d26eec27ea6cd27e0409ebdef2a4dbbb2
MD5 5bc48030f32d54831d0b849870857da8
SHA1 337d228c1be46d44e77d252f723a2bb79a9ee278
SHA512 00adf17fd6bfb02e22d976dc1d80d4ba544a8dd1c7ca13209f1da524dd6f7d8caa2059ff1e8e897b63d1f8d3944e2dae2df3a31b6ffcc19d198e61ab6de91a4e
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.phoenix.citizen/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.phoenix.citizen/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 948351303b671c20e2562a098f6a8574472c0ec2f66a089add057458e6fedfcf
MD5 4b4da7a12692162231bced504e270c1f
SHA1 c6d7500a2b10d784ea0fd9760657b47d5bff3998
SHA512 dbf6163a6564959d13dd9961b0c7f857727ab48dcd9013d12c975deea40f7c27453dea99b6051a0fcb65458b94a1d37266d150e9802532dac4b9c7cf28b7b66d
SSDEEP 6:KgfRiwe9FZde/kPlOERX4PBX4ogLugMBX4suuK+/w+U2moR2ENsvQn:KgfHYzdeWRmBEyPbP/wr2mTEWIn
TLSH
T1CF722B7263880552C29D03F69CC993D50E51E75FE7E2CB076E5305706C437D8A86ED09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.phoenix.citizen/no_backup/androidx.work.workdb-wal
Size 116KB
SHA256 36938e052f1440e82d321f8aba6c7b0ab389263946beaeebd73dbfadf61a12cd
MD5 d8ad4ecbc10afab221cb97d4114bce9f
SHA1 aae5efa9a2fecbd5baba2307d34e088c60ef1be2
SHA512 022c2bb71c2c149e390541e3672d99b9a286e366112048d9795f1e87b506613480840d9a72830353acdbef22399172210bfd8315e0378b44f29666e503c250ff
SSDEEP 96:peqPKzcFVWvheP3ofITOl8lGMh76Z56+etidjnZRWzzb8/KeKcK+zSUddKz+ZD8L:CB8tidjnfWzzb83zSUde+ZD86u0ED
TLSH
T13DC3DDAE0F1D2600C5D954F0A9900BE17D3E912FD7D7E3D2699200B5A9D3921992ECFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.phoenix.citizen/no_backup/androidx.work.workdb-wal
Size 205KB
SHA256 3f32e81eb3d18020fd7d0fe1c2f5881c05f1a645e3a67fe7fac3af02cf55b513
MD5 c5c1a4b6051bf4748f20e253858d086e
SHA1 03e1bec36f2bf2f9c3eeb95a7a4603219283914b
SHA512 1aa3b1dfb88f3ef20311553554ea251a5a321d2bce2d9c0bec1e294f1ce54277b471b4daf4484d7f4e063f0f873cc3258380bf2ccaaca046412e293e9815d4b3
SSDEEP 96:4181DtYFVldz7l3il89+TR1DtY0RfNZLw1DtY4j1DtYmAMy1DtYv:F1DtYgsG1DtYIVpw1DtY41DtYN1DtYv
TLSH
T17B24FEF49E094200EB4C527DA8D903F98F45EC7274DA4EA2051F3232E7FB1078EAE640
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.phoenix.citizen/primary.prof
Size 9KB
SHA256 6e215907a46487fae36c11355427ccbe32597114ea1719568cb7331f39251883
MD5 8d854a8009b25301842ec61363ca6e99
SHA1 5f5d9ec8e5e9efafab6e7af1b549873819428ccc
SHA512 328d26d04e014d95fef58c2ede557b4345b2b062f4e3e1a9581ff4b96c2784af5aefaf1ca615fb564e04bbdde12b00df3dc5458c2194a31897b70ee5ebb1dd6b
SSDEEP 192:gnR+h1DhADKVA5Q3OwLRP7QaxepbXyU+T6VWFFa1u4cGMuA5s9f3WjhVK4IH:KRkDGD15Q3Owh7Ne7xVWFFl4cGMuArtE
TLSH
T1DC227D102BCD699BBCF471E4610472F50520B3C5FEACA4096ADE95CB626CBBB4AD0727
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.phoenix.citizen/primary.prof
Size 19KB
SHA256 40d40aa639aa1747255db87f61643ab0d9ac5d5dd68fc40e4bce8deb20968d58
MD5 5686a4c570d78006585eab58cb4266ac
SHA1 e738f873fb511d0fbc5bb654685b79234d29ca43
SHA512 fdf39221b4d19264ea7e79a761cc2ed734c39ba7d35d632bb18f91f110bc13a269bf9ee1c94399c68019a328535a2d99a553ed1977bcd0061d207ec4615890b6
SSDEEP 384:9DAI0J3pitNw/1anspcg0M56Y+ecOfMu/WeRJa2Lo5ZWX3fUBRmpxb:9DAX5ig97cfgLcOfWeRg2LoTC3Igb
TLSH
T10392D07E29FCA54BD16C00754FBBA6B8DCC6A12207AB245BDD77C4A85734078F451A0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads