64a8c2f46ed420fb2e64d9f05c3116f9f1c111845612959bbca9c6abd0a26ed6

Analysis

max time kernel
135s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
12/10/2026, 04:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jaffacakes118_not-a-virus.HEUR.RiskTool.AndroidOS.Skymobi.b.apk
Size 4.3MB
Sample261012-eq8v1ae161
SHA256 64a8c2f46ed420fb2e64d9f05c3116f9f1c111845612959bbca9c6abd0a26ed6
MD5 66fc2bb67d51acb11bae098e9ac5163b
SHA1 34777ddeba9ce5f65cfaec9af7bfb3491348dd05
SHA512 2d97971f1a612111a2767bf0b8c2dd555e0a82a109172824ddb694d89c6b6b4982ef8dc6d48a96019819b3c60ed0ced2d894c04aea20b901066f029248c7e43d
SSDEEP 98304:SminKy05Wcg8+FRrsiKdQxSCawE3SKWoUNoUka+Yf4s1J25m4Nux+5P:Ty05Wcg8+XrDKGgCawE3SgUNjka+Yf9Q
TLSH
T1F3261292E30DFC2BC1B3E03B86695556B4144E81C740EA272A56F56C5FFFF84428CE9A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.poxiao.niuniu.net

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.poxiao.niuniu.net

com.poxiao.niuniu.net
1⤵
- Queries information about active data network
- Checks memory information
PID:4811

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

doudizhu.db

Path /data/user/0/com.poxiao.niuniu.net/databases/doudizhu.db
Size 28KB
SHA256 022e9141a9a03e3e23958acb5c6ceb958406cb05cd7487600d90dea911c88a33
MD5 394a2e1fa3115b9bc37841f0bbb812c9
SHA1 4728369f34c6735d3c730d41464aa5cabd44ec9a
SHA512 7962b415b37fbd5bcf6cda4f771c1e0225fbd0fe267153ca9886e659f09aaf3c23750f3799c5e706bf48e36c0cae3835f776a7591022b26880d5a1e1c6db15cf
SSDEEP 12:TLMTrN4psECl9bwadTagFrNTSFbyuKiTFel9afV4v9J6PGPJuRmBEyPbGtOwGQ:TLABbnzdjBAKiaaVyHPJVGSiGQ
TLSH
T1E2D289C39A541912C4580433FCA2576258F8866ECDE763822FA021218C83E88F8ADDFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

doudizhu.db-journal

Path /data/user/0/com.poxiao.niuniu.net/databases/doudizhu.db-journal
Size 512B
SHA256 d0c4ce6b07e925241adcfe25a3514fb69f00fedf0ded2e4b996855d00c1bc4fa
MD5 ffbdf5c961b16a834b97b2e68caaa5ad
SHA1 731814f81ad68ad6b326c5933a5a431c606aefd0
SHA512 d8713b83a8f852c3a601cd3789795f2289e9ec9763e170e659ade5968beb4bcb450767a0604718ae73122a2f4faaf0e428a1559f412d45ed01a1b440a390cbc0
MD5 SHA1 SHA512

Submit Download

doudizhu.db-journal

Path /data/user/0/com.poxiao.niuniu.net/databases/doudizhu.db-journal
Size 8KB
SHA256 e19ad752b13ceb765f7deb837235b636f4c7f3259099ad976bba0e20485fe380
MD5 7780c12a053d14ada25f55c38f1851c7
SHA1 75a021793388567c7b5d1cbccda290ea2f0aac98
SHA512 dcf9d4e97045e9f3ae1c523cb21788ab6b784887d1c259ee3ca798b7e50e650aecb07de6623b4cb4493953d81c493cbe416cad3fe17f069186ecbc4045672504
SSDEEP 6:7+/l9r/gn1Jlng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKc3:7+tlCpqLiuWdYRmBEyPbf
TLSH
T17D02228C6B810923C82A16B7D0D583600E14AB289161CBA716A00C983C476CCE8A0D48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

doudizhu.db-journal

Path /data/user/0/com.poxiao.niuniu.net/databases/doudizhu.db-journal
Size 8KB
SHA256 96d2f53b1be614b55ef1f5f8f51c1d6268cf3076af187c3a92df569052f61ecf
MD5 51785ee38aa576fc103c9019bd26761f
SHA1 86dac2855005ca89e8299f1df389b4b8c009c2d1
SHA512 423a2df1e09e7ea2f7258345cf0f557d0bb6f39f3af967c8728ff7fd19af88f43345807848561d3b10aeb202e2999c96036fd5059b65af7e9dc76b6046a5a7f9
SSDEEP 6:7+/l9MPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKmM/x:7+t2qLJdeWRmBEyPbex
TLSH
T16902129A67420D13C6295B77A0D983641F14AB299363CB571E910CA46D466CCA891D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.skymobi.pay.iplugin_V4001.apk

Path /data/user/0/com.poxiao.niuniu.net/files/com.skymobi.pay.iplugin_V4001.apk
Size 174KB
SHA256 f1db14538db7117004120a1ddef2c71b87efe09abe25e5dcf85c8a949b267176
MD5 e6a7a4dd80f25a47c9caa4db4f7f672d
SHA1 13f850a039edc2855e03354fe666d45a5157af5e
SHA512 15163bd8bcf707725bf9ca7792b69924d3405710198eff946c6aefc66cd0c57ae25320a83d0e061655dc4272dfc1a9e8e2c4843b715639a239443ae15ec7d542
SSDEEP 3072:BNcH3p1FEphs+BLMtvrQ+Kf9eu0VQUuyE7cidRnwZRzSoE4gnhmqquhQxzI+2:TcHZ1F0RBA2Rf9oVC7czG8LqThQxz92
TLSH
T1020412D651254494DA3CA074074E7B71C8C90E16D3FDEF6F70F68986AAB890CDCC2B92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads