Analysis
- max time kernel
1s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
14/10/2026, 06:20
Behavioral task
behavioral1
Sample
snapp.apk
Resource
android-x86-arm-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
snapp.apk
Resource
android-x64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
snapp.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target snapp.apk
- Size 7.8MB
- Sample261014-g376cahs8m
- SHA256 6ff673a4c9415b9a2964c1d1cbe7693b220b8aa2663ecd1ebe9a9380b09b3397
- MD5 c5d7a29d058e0ca3fab86e01523c1c9c
- SHA1 629fd93a317784ac770b89e2fd6be741f62c8045
- SHA512 becd4d1689290ae35c1bd8335563a52228aab5c38dc988d2937de8da15e1db043f7d1864fcf15435b472f2089aaee47a518df9c0780caa7b0a52e83486f5e6f3
- SSDEEP 196608:sd9gbOOFfwz1biV2U53NpwvYzLqH6cCTJMx0:c9a4bA2U53DTzLqHaTy0
- TLSH T13D863302FA525DA9C4F6C33144B90F3A653A4D2A8703978B27B4B7B63C7BEDC8706195
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.elgfus.app - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.elgfus.app
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 e79d40b5cef534493bd378e8738786abc4a97d75d57f11327e11fc4fa0b1c983
- MD5 1bdbb481ac5205edeb45afb391f756e9
- SHA1 ec44acf4050279356a2b3c54f66183d9bc5963fd
- SHA512 82e6b719e4c2d468ce453c1c1cb8f09426ee7ac547ae89091e272a1a82bfaec52c6eff64ebeff30d2d1dfa02e1f392a056fb67873dd9516eb2489965f7eec512
- SSDEEP 6:l9bNFl4/Tls1OJEpFyAgLusi2JLnGLNcERX4PBX4ogLugMBX4suuK0DqiOw:TLWBEOWzmzmRmBEyPbBvOw
- TLSH T133727DCDCF106716C1170733B4C5E3901E60911E8377CF0767A40460AE02558A091F58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 65f4bba4641203c787584d4e8bf30befb01482c90842bd05d48de7673e3f7166
- MD5 d2c8298afe5add791c039daae051bb7e
- SHA1 a0bcd56b515cecc59228b833f8f1392e6e3d6140
- SHA512 7e81677933be1a88761b1df1789f699a801801e80107924b42203d521f96ddc385a81c9dbe4138e606ff0691452f00df3f451a8f635363e989efedb3bf3334c5
- SSDEEP 6:7+/lffl7g9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKaI:7+tftqL8EEh9zmzrfRmBEyPbFI
- TLSH T1B1912B8E9F112607C1B74B77B4CF93906D28A21DC377AD572BA90474BD435499051F94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 f82e30dae9307d40079398b2ab4d03b01d9e2d06bce8e72d45016f60dbfc162d
- MD5 3e1b5d20c6e9dda13fa8f93ae833ac90
- SHA1 b21027a5f5f1e0463e2d55c9ac65660910dcfbf8
- SHA512 dce76e529898316ee8d3d843751ba7beeda0f35b634e3d74fb58e8da8f4ae4f863531a170fb118b921111bccd5db43871c20fa5b0b479c1efa44f973b5498c05
- SSDEEP 6:6g9bNFl4/Tls1OJEpFyAgLusi2JLnGLNcERX4PBX4ogLugMBX4suuKK:6qLWBEOWzmzmRmBEyPbV
- TLSH T10C91CD8ECF106656C167467774C653916D24521E8377DE475BA50460AD02558A091F54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 e61da47c2a760d381699b9714eb69cf4cb3632d500e3a2ab2604216f93fe8f4c
- MD5 498b119ff065eb780c309147e1f78b50
- SHA1 7b26cb70de8f45a1febac1a29801b13454bcd314
- SHA512 afc7e5d4d23a76501c3c85863e7c83f350e15575177023d11ce079c77fae614cb0bfd3dc3abc4c8803cef279962ad883c3bb6fe91f14cee9a0ae949a6afaed93
- MD5 SHA1 SHA512
- Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 bc68738fd00b2034f9668cc86a80d91254068222932adb0e5c7989fdb0063f06
- MD5 9148201c468596e3af17b365e9ce7f58
- SHA1 e089cac8244535a396ceb325303c8a74fcbd59a5
- SHA512 2225559c152a892bc3178644caef0c0a8d12ddf638953232916de414927e1dc1770b0cf59c02d589cee396466767590bc63bd50b8c2d1b1a6332fdb6359205e3
- SSDEEP 6:7+/l9Hn1sg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKZn:7+tcqLiuWdwRmBEyPbyn
- TLSH T10702228963802833C81E16B790D583440E00E769C561CB87157008E83C0F4CCECE2F04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 80e893e01cb9384c6c9d3a0b242f0eb9e9d07d09cc1a09a6a0483d76bb33122a
- MD5 e3462fc80bc67337271bbd86b317c0d8
- SHA1 f935b22fa849850ed790c10a0958781f9d13d4ef
- SHA512 881759a5b325d1cfd3ce3826e57b4e45ae78a26ffbd32a9643c7b2a61040436dd0d505cfeb0ec10886f3e5ff073b96a9fc15f4d58e58f959ec87a9b217b3f792
- SSDEEP 6:7+/luFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKl:7+tEqLJdTRmBEyPbG
- TLSH T14A91128967420913D5199AB7A0D583551D50AB159363CB57556409987C47BCCA490E44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.elgfus.app/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 ff93b455bab175d6b8367d88a27b37946856670c5e9c0c2c09d6895e49f37bbe
- MD5 6cc043fb23d5ada4592b38f8fb962351
- SHA1 d4adc90c03bf719cf0f03873cf719e36c512391c
- SHA512 56d9ca772b6725a57761248a0d92c839e7603356e799cc969c5a43ed07a570b9d7d46fa0c38b9e154ecbdc7eecfa1bc3b1565de610b8700090501e078a8ec9a3
- SSDEEP 6:7+/l9oxp/gPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKFM/0T:7+tCp/4qLmqCRmBEyPb4sq
- TLSH T1A102229967800C13D01D17B790C883486E80E3688121CF17196008A83C824CCA8D0D44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.elgfus.app/files/PersistedInstallation4807176348294773855tmp
- Size 90B
- SHA256 f8e2bbc1370b7669fa705840135e40a895f7b52791bd3bf77fd05241903db77c
- MD5 012fba54abcdc362abd3ca66aaa83901
- SHA1 e0d5f944ef21ff233fd95a590023b0fceecfb1d2
- SHA512 e779a7f6f55a9dc62de9fa64a101077d453b6e1d627da0ec1c2b641f1aca42aebd0e5e8e388f672e54f65563edd2ad98af65bc796776741de77f05bb24e1bb61
- TLSH T153B012004F308187899AB3523C4DE2003E4454417649CF150B4C904280821D4C213DD4
- MD5 SHA1 SHA512 TLSH