Analysis

  • max time kernel
    31s
  • max time network
    152s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    14/10/2026, 06:22

General

  • Target
    download.apk
  • Size 18.3MB
  • Sample261014-g4vxeaxt8p
  • SHA256 a4fefc6faa1b974a3acbebfe542b5dc9c8357099423da31d10f38d386c6b44b1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.vesperchip.sensi
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4796

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        OneSignal.db

        • Path /data/data/com.vesperchip.sensi/databases/OneSignal.db
        • Size 52KB
        • SHA256 c776d1acf90c60f95a89ee4db8222acedc8e0b097d5606297aa641a3403821ee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OneSignal.db-journal

        • Path /data/data/com.vesperchip.sensi/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 c62a7430af75a42603ad8bec643c9ff1ec1a3dd6cb76f86a74189ed76d144409
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OneSignal.db-journal

        • Path /data/data/com.vesperchip.sensi/databases/OneSignal.db-journal
        • Size 512B
        • SHA256 6b9d9b88fc3f3e1258485693f17b78a6d282a84e0fafed93617eb6dc7bb3b4af
        • MD5 SHA1 SHA512

        OneSignal.db-journal

        • Path /data/data/com.vesperchip.sensi/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 4e9154e6ce3ee13208ec764aef894991213d3fc99514417baeb57c80fdfc2268
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events

        • Path /data/data/com.vesperchip.sensi/databases/com.google.android.datatransport.events
        • Size 40KB
        • SHA256 100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.vesperchip.sensi/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 cdfc53fee61ffd9c1f4104bfbcc273355cd3745b9050db216377129942a50d20
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.vesperchip.sensi/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 11654fd55a87f515a3ef35b6e1a9be2d8b742de8919ac982de5c29bfe1263a87
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.vesperchip.sensi/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 fc469a7cc734fdddd019c685a8fd760ffcb1bd901f18823534adacda8c4810b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        supersonic_sdk.db

        • Path /data/data/com.vesperchip.sensi/databases/supersonic_sdk.db
        • Size 16KB
        • SHA256 a96f26506e5623d8e9f9fad08008efa3c223e5e7c07216900f8d71101ba41ee2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        supersonic_sdk.db

        • Path /data/data/com.vesperchip.sensi/databases/supersonic_sdk.db
        • Size 16KB
        • SHA256 8d3186988b5c1cce776a3015d9621bb9bde80dcf72dfc4c730bfecde1b29dbc4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        supersonic_sdk.db

        • Path /data/data/com.vesperchip.sensi/databases/supersonic_sdk.db
        • Size 16KB
        • SHA256 b19189ca21f289783f32b98727ab075086d4648b10aface0770c6f438cd09896
        • MD5 SHA1 SHA512 SSDEEP TLSH

        supersonic_sdk.db-journal

        • Path /data/data/com.vesperchip.sensi/databases/supersonic_sdk.db-journal
        • Size 512B
        • SHA256 c6ee6a3967e64e3874f5fd5ec8e4b85250979cf0e42b8f8dafe643d1506219c4
        • MD5 SHA1 SHA512

        supersonic_sdk.db-journal

        • Path /data/data/com.vesperchip.sensi/databases/supersonic_sdk.db-journal
        • Size 8KB
        • SHA256 a1b9794e4df06d71602990cacde2be4d32aaa3f79eb0da57b6708cc8e76e0593
        • MD5 SHA1 SHA512 SSDEEP TLSH

        supersonic_sdk.db-journal

        • Path /data/data/com.vesperchip.sensi/databases/supersonic_sdk.db-journal
        • Size 8KB
        • SHA256 2f81f736299f6920c2bf52094aed90564618c4639108f1a86611976b0f3ba1a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        supersonic_sdk.db-journal

        • Path /data/data/com.vesperchip.sensi/databases/supersonic_sdk.db-journal
        • Size 8KB
        • SHA256 c08b05d74e91bd69af513bd5f667122d7507a758afadb968420ca1064baf42ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        supersonic_sdk.db-journal

        • Path /data/data/com.vesperchip.sensi/databases/supersonic_sdk.db-journal
        • Size 8KB
        • SHA256 33a825b117fc9db5a5680ccb96ed2339fe987deae41e0ebcaafc06cf8400feef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        supersonic_sdk.db-journal

        • Path /data/data/com.vesperchip.sensi/databases/supersonic_sdk.db-journal
        • Size 8KB
        • SHA256 eabaa568af9de5c9a7143f6c0ee176a85775786f1f7e6ec8d26c058a0a3263cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation4910513309159457539tmp

        • Path /data/data/com.vesperchip.sensi/files/PersistedInstallation4910513309159457539tmp
        • Size 90B
        • SHA256 e37567f7efb3470dca8c22bb6e0aad49c28b5dba3ed6106888e8807dda6f237f
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation6682627203656808334tmp

        • Path /data/data/com.vesperchip.sensi/files/PersistedInstallation6682627203656808334tmp
        • Size 567B
        • SHA256 3a404aa08122c9a905f195cb604efad45721c29430995e2a23a8e3e780b0867c
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb

        • Path /data/data/com.vesperchip.sensi/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.vesperchip.sensi/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 0990fbf6dfca2806becd6a8762d4db1b1254444c904f417535d946910ad67701
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.vesperchip.sensi/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.vesperchip.sensi/no_backup/androidx.work.workdb-wal
        • Size 189KB
        • SHA256 9f9fbe65a2141866a8011a4638a199deaec10b62424f132f5c52b349e6fc51da
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.vesperchip.sensi/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 4eb5f4c39c53e922d25be3db0068f7bb1deb26303ecce48124a81dad47889aa9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.vesperchip.sensi/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 a2ead430f3f749a8386434a4af66d195322efddfa47bf5a0497fccc287d05ccb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/data/com.vesperchip.sensi/oat/x86_64/[email protected]
        • Size 637B
        • SHA256 66f2ef9709a764a3c2bb025a6376c278e5b3e2d8ce7864456cf956d04b1dc217
        • MD5 SHA1 SHA512 TLSH
        • Path /data/user/0/com.vesperchip.sensi/[email protected]
        • Size 3.2MB
        • SHA256 7aae06433cff5967ac254484d784c2c348380891d0914c56de64e7e006668cd4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tmp_.nomedia (deleted)

        • Path /storage/emulated/0/Android/data/com.vesperchip.sensi/cache/supersonicads/temp/tmp_.nomedia (deleted)
        • Size 1B
        • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
        • MD5 SHA1 SHA512

        tmp_dapi.js (deleted)

        • Path /storage/emulated/0/Android/data/com.vesperchip.sensi/cache/supersonicads/temp/tmp_dapi.js (deleted)
        • Size 7KB
        • SHA256 318f780d7a414e99e5276c994f897432aa9fa50e6adeca956f796136e8f2d6b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tmp_index.css (deleted)

        • Path /storage/emulated/0/Android/data/com.vesperchip.sensi/cache/supersonicads/temp/tmp_index.css (deleted)
        • Size 21KB
        • SHA256 5130473fc31015463f725f361cfcfef859bdfc4117a313919f2e716a94a1ac38
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tmp_index.html (deleted)

        • Path /storage/emulated/0/Android/data/com.vesperchip.sensi/cache/supersonicads/temp/tmp_index.html (deleted)
        • Size 599B
        • SHA256 e513631c4c38eb9b41dc775b773954f1a0bc2524b4609bc1f5b29a3b3c1583de
        • MD5 SHA1 SHA512 TLSH

        tmp_index.js (deleted)

        • Path /storage/emulated/0/Android/data/com.vesperchip.sensi/cache/supersonicads/temp/tmp_index.js (deleted)
        • Size 795KB
        • SHA256 0cc51859f0b71baf189ac20ecc7dc01480a21d5e5ca0f818c217052c7b21b499
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tmp_jquery-1.9.1.min.js (deleted)

        • Path /storage/emulated/0/Android/data/com.vesperchip.sensi/cache/supersonicads/temp/tmp_jquery-1.9.1.min.js (deleted)
        • Size 90KB
        • SHA256 c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tmp_mobileController.html (deleted)

        • Path /storage/emulated/0/Android/data/com.vesperchip.sensi/cache/supersonicads/temp/tmp_mobileController.html (deleted)
        • Size 36KB
        • SHA256 54ba0c641cbdb7f049dc72a26d8d90faac3d40e3179fba5fc1941368445fc829
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tmp_mobileController.min.css (deleted)

        • Path /storage/emulated/0/Android/data/com.vesperchip.sensi/cache/supersonicads/temp/tmp_mobileController.min.css (deleted)
        • Size 7KB
        • SHA256 900c64fe65c24f082c1f0c31f76cd456a83a92b7ffccd07e0597278dcc864ac3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tmp_mraid.js (deleted)

        • Path /storage/emulated/0/Android/data/com.vesperchip.sensi/cache/supersonicads/temp/tmp_mraid.js (deleted)
        • Size 10KB
        • SHA256 e6e0be1b23874780605494f2e77c07db6b27f87ba138a6c721f3644d9a3bf290
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tmp_sdk_controller.min.gz.js (deleted)

        • Path /storage/emulated/0/Android/data/com.vesperchip.sensi/cache/supersonicads/temp/tmp_sdk_controller.min.gz.js (deleted)
        • Size 553KB
        • SHA256 d04353130366447a9cda1ccda48ef2a76423fbd1652ddc1f0c2fc7be306fc540
        • MD5 SHA1 SHA512 SSDEEP TLSH