Analysis
- user interaction
yes - max time kernel
292s - max time network
302s - platform
android-14_x64 - resource
android-34-x64-arm64-20260325.1-en - resource tags
arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system - submitted
13/10/2026, 16:34
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Straznik.apk
Resource
android-34-x64-arm64-20260325.1-en
7 signatures
300 seconds
General
- Target Straznik.apk
- Size 16.5MB
- Sample261013-t25eaaf191
- SHA256 2b7756214596f24b23b3e30e62210315192b24204e511d04081d72f5286c0325
- MD5 04711a2d485567c1a2ab7f91509cf778
- SHA1 a850c024466d7500108112d557fb800c1a358e9a
- SHA512 a0a63da1df786967bf2e5ddfa753b44e14720ba03cd53d2d1d2faaacc982ec592f06a9dec729a46021da9287a17dc65f8906a2659c8e792b51745117829c6422
- SSDEEP 393216:qUj9qMnz5nWQEokc+nNRl4cOjGKJhr+ynk3Z1hPUjtZP95nZWx:1j9qEEokhacsWSk3Cjtz5nAx
- TLSH T1B8072352FBE85D1FCC3B94390BC60232D6526E268242EB4B756C3BAD6B736C84E547D0
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
description ioc Process Accessed system property key: ro.product.model pl.straznik.app - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener pl.straznik.app - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock pl.straznik.app - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo pl.straznik.app - Checks the presence of a debugger
- Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo pl.straznik.app - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo pl.straznik.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/pl.straznik.app/cache/oat_primary/x86_64/base.4540.tmp
- Size 332KB
- SHA256 0f3ed279a3e48948a85d72cc46ad38ca54f4bba65c260a7ebc5f871646c99781
- MD5 aa29fd5ae6bf101e4edd6b109ad4bd72
- SHA1 f8a1bf429a20fa36a0fc41e23be0a26ad44ffc36
- SHA512 2df3bdbe759b20ac69380fc95cb301b83153c126f9e62539d64bae5a54a11fd9e718367de9dfac0334a05a03f81d8f25ed59a1f84c089ccdd6038a4b40270b96
- SSDEEP 6144:uCul0q7ZSD3/GhpEjx719BuU2LW0NRInr7rE6VDPg:voyW8X2LW4er7F
- TLSH T14F746C9FFA129061C59F7EFA4E8A05F0EE29C45421472D24A4F6633EA433F24DB61BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/pl.straznik.app/files/PersistedInstallation751385811256494703tmp
- Size 569B
- SHA256 901eef5717c61b10b494f1c35b22189eb308b8b438b0ab6bd8e3ee795e9efe7e
- MD5 ce2ea368751dda2b3b1d932cae2dee12
- SHA1 381d8fab774dceece87c1c4ab31efce5067da1eb
- SHA512 272f8f1a68118b440900b156726c61db3c1adb09b127e8d976059368aac3e28186512e9b5f43f64496d91974e00ce1e9cc05928f21c1c1b5d2446a39d6d731b2
- TLSH T136F0E184EE50826ED898734A365C3D162E298DB25B6658A9FE8DC410A2A4DD49717808
- MD5 SHA1 SHA512 TLSH
- Path /data/data/pl.straznik.app/files/PersistedInstallation8219757172211826004tmp
- Size 90B
- SHA256 6d2d933854b75c3454beedc29e4414f510e86455d7e601fe86c609c7dbaa296a
- MD5 65ac32f0bb6a04f4cb0638a8a2914113
- SHA1 f1bbc7a1068691b0b9b184168f4b52632d677ea7
- SHA512 9778de1ccbe0024c4f3ee3c73aa78ea4084c587f52bf3cc8fa64af42a522a4ce0f42c44e8ccb3780ba16aa26358baa4bc4bed85704f0b4b9914647e217cc7e83
- TLSH T1C8B01244CF3041E384D9B20A7C8C91002E445D8646099F5D8F0CD04181921F08103DA8
- MD5 SHA1 SHA512 TLSH
- Path /data/data/pl.straznik.app/files/profileInstalled
- Size 24B
- SHA256 4aa7194238c43c568da077198816152d12a04238cfb161e99ed5d39661d42f82
- MD5 b972ccfb7bb988ae0cc207dc5fceb1b3
- SHA1 f10ed0577e79e6ca9eac4ea28b79ecef43f6ea68
- SHA512 9f5fee9c3886d8cba010df7d24bcee1926f37f8ce0a895829aba85ce8e5d0031cc334d3797b31586a139ad447127b62714b15739a19d8c0befdb2a0eac2cc050
- MD5 SHA1 SHA512
- Path /data/data/pl.straznik.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 7e0b65e184babb96a5759f7c836fa2b6cebe58b1ffbcfab96e0bf4f6940e0c2c
- MD5 b21513f0d2c8518925beab9dc8c4ce4c
- SHA1 b6598fa63fb48a71aa43840f1dcc41cae4818733
- SHA512 2aa330c1e2f8d6b9d7c4a926c964db2725411f71e6eb25fc29bea1a29ad012e4ff2a0cb5312d769502c58bddc4d87002617bce5091235c5f211dd612d8884316
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/pl.straznik.app/primary.prof
- Size 2KB
- SHA256 63c4f2bf7b06830ff58415fbc068c2994c70dd805d73730972595735f31baec5
- MD5 9c31063285799c440a44d65cbe47379f
- SHA1 b69af92600fd5ae2aa08d4f667f67bc949b26759
- SHA512 83b4a724c1eb67ddb42ffb9c4cc95137c47db77bc76409d8db84bf4694cb7aec09c185b75aa00fc9816a218d23555dddc925e6f0e7551eef6541c4d85062091b
- TLSH T141515A4A12F99250E6C0A4305832A9CFF50E721E38EF773798BBAB9144A6CB68364240
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/pl.straznik.app/primary.prof.bBc2ag.tmp
- Size 7KB
- SHA256 3cb75262aba142f258f880830c7bd018be895252b55e7ab26d0f9f29a09ef3bc
- MD5 357034092a9fdef54c590d715b9724d7
- SHA1 06b50d830703dbd47462235153129c1e3abc6b39
- SHA512 f3f1727233e9170a3f21a0789e3b5ca9d186149f65cce3d4ecc5fd2f828c466ffd8f5b1d00cf6fe61656e3b26e3d65eaaa2cb538414a1cb2e1ba3d683952d189
- SSDEEP 192:QNI9J6aOqc6LGUxd6Vs+JXA9MhCMiYlVh:QNIGaOqLiUxdus++9crZz
- TLSH T190E19EDDD858B8A7C490483AFFA8374837CCC9117A88CA70FE4B64159987D34A168B92
- MD5 SHA1 SHA512 SSDEEP TLSH