Analysis
- max time kernel
33s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
20/10/2026, 13:26
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
iBlack - Icon Pack v6.5 (Patched).apk
Resource
android-x86-arm-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
iBlack - Icon Pack v6.5 (Patched).apk
Resource
android-x64-20260325-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
iBlack - Icon Pack v6.5 (Patched).apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target iBlack - Icon Pack v6.5 (Patched).apk
- Size 56.7MB
- Sample261020-qpgwnset8m
- SHA256 41edc3943222f6b5499cf27197bb26c343bdde99b01744e4a82871e0e9a74eed
- MD5 4bc02c65d776f3e14b18b4862ad4563f
- SHA1 91e216302e323b64cf40dc69abffaeb99f4b15ef
- SHA512 981783b328ff019806efa77eac3203e83036f58a5c4be8692141097ccf21bad11d73e81d2fb7ceac2742078bd9cc2d67259f49c2e1171715dcc18c3b2f814930
- SSDEEP 1572864:Jnn7uZs7pFRykJHMLjGPCyDUe4nXzQZJ5:hKyLRyTECmh4nDQj5
- TLSH T155D7BF1BCBECBD5BD472E5302339528231940F581185DB65828BF98DEDF2D92A910EBF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 15 raw.githubusercontent.com 16 raw.githubusercontent.com 17 raw.githubusercontent.com - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.italiano.iblack - Reads information about phone network operator. 1 TTPs
- Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.italiano.iblack
Processes
Network
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.italiano.iblack/databases/candybar_database
- Size 48KB
- SHA256 48433ee5c20b949ca9745d95850a10edfe3a54b123fdf626aad0d6aec8a10ea2
- MD5 988178efcb7ac2362d88fb8e9a648fce
- SHA1 a3446eae918b03fa678ad5e7d4a1727a747729f9
- SHA512 882e5ad9b0458873c9a99197a1a7367a5acad0418d13e6358f5b4409b42871aec11c7fbf2c47f3d9cfab17792332814a53e545eb82a20b084f3dd9bae9f35c7b
- SSDEEP 48:T30Y0YIUY8oiFY8YIovc4ez0t5MOtmAVEcoQ5S:AY0YIUY0Y8Ye65HEv
- TLSH T1E123FE8FAB143614C9E40131CCE117B35DB8B75E2B100BE25AB030E9FDD5496C97582A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.italiano.iblack/databases/candybar_database-journal
- Size 512B
- SHA256 2b7f86703bfc0a0e08edfc1499b7075dc0b2131006b88c3e9816e53d09a6b8ac
- MD5 ba9ed1939d9416f4833b9dcf17e790cc
- SHA1 ad988ded5e36bff511d7c65e14d692b2486ea1ca
- SHA512 16a9b33532be5d04debbab04360e2a96aa6fccb46b12afdf875fdc6a3ff4f16da0dbc7d7324d6b0c65a6c3746a7e6aa481491b60d8b5f6e0d0981a3dab1fdfbd
- MD5 SHA1 SHA512
- Path /data/data/com.italiano.iblack/databases/candybar_database-journal
- Size 8KB
- SHA256 dc006ae48975440372b2486e4b50b88cf04b35d80e02c852a39862411e28aea4
- MD5 835d6b90ed70eb8e82282f18a5f755b5
- SHA1 ef661519b79cc32fc41d226343d35fbb98463a1f
- SHA512 0e622f7454cd01d9e8e57b822393fcf935e3c95bbdc9e2db56c97479d4ff4e494b8514c3c7fba5bc7118a696bebb378e23c2d7fbbb8d08ef6c85946534551881
- SSDEEP 6:7+/l9BelFn1SWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKW:7+tiLqLiuWdwRmBEyPb5
- TLSH T1C402228963C01822C81FDAB7D0D4C3800D00EF1A8162CB0755A1089D7C079CCE4A0D48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.italiano.iblack/databases/candybar_database-journal
- Size 8KB
- SHA256 ab298963e92d960e672e277801693c66befcacd081726dfab69b06da694ea6ac
- MD5 10f26ec4d1f7fb286202def38387ed0b
- SHA1 d70582f38c154ed30abcb3f8418dc5ca8fc1c4d9
- SHA512 9f825c8fffde1ec2e6b03702407501b2a45341b8fa1f6184428831a79982f4147d123acd6084da8cbf135f72ee10f11647e4ca858c30da2ecf8b932be271776c
- SSDEEP 6:7+/l9aplPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKkM/qe:7+tQphqLJdTRmBEyPbal
- TLSH T13802228A6F800813C41A1BBBA0C983403E50A718C223CB0B157008983CCB6CCE894D10
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.italiano.iblack/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 e2fceb0fb71ce74b8f4791ae114c235d945d490f984899ba0df31c4c38b2c806
- MD5 0c70275e54ae7759285bec81a97ac4bb
- SHA1 bf236cce711ee933fc7b47797ee32c68bf14aa86
- SHA512 277ed46f5613bc2ee22dddabfb1ee921cc3219627f9ba0fa2d001823df3bd7d3aff0592b88a3a93c1e86c83db26364298deb2514c1f1b9dd85fffcde5b785b6a
- SSDEEP 48:T2cg59MENZBdUdndVd/729IvdldHlq8/Jq4qPS+FH4F7:ihMEX0wIyNja1
- TLSH T106432F9D1A3C2220C56E243ED3E343A35A7C9FDF3726936339D48CE98DC24697825959
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.italiano.iblack/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 1776cbf2d964a5fbfe586e6fe3d7e1c51e7e556994850b5d515251e339f84415
- MD5 4c84cd51a8f02a3513b5cfca2d31e1c6
- SHA1 fca449064c65a511cd6921758e9fa86ef6f053e0
- SHA512 748b40735d39647ea82e1472b8cefa10fa3e9018feb4e1d5581933a7a5b6d62cfe68f4e0b5250621b2af944b932d3e0bb794fa45a9fca8ea0cf2de753c71eb57
- MD5 SHA1 SHA512
- Path /data/data/com.italiano.iblack/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 e16ff2aeca8f7b4fd60c08ef626e9a9103ae341f70cacaa877a1b68a8fe3ca53
- MD5 c56679884dbf75826e89f035eccad43c
- SHA1 cf79a77b07bdaabfb506574595efd1832e2141b7
- SHA512 f0890c675146e9307e7f3fcc8a2301a7ec8e7bb5015db543cc1177efdafd67cadb4970cc4bfd0d400d18ba60e6d1dc80914bd7a3f1162578ab6d52b362850492
- SSDEEP 6:7+/l9YRHn1gWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKq/:7+todqLiuWdwRmBEyPbb/
- TLSH T1DD02C0ADA3801923C91D26B7E0D4C3400D01F729C171CF57596008DC3C034CCE4E2D04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.italiano.iblack/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 bbb8b7fa3d89ef9f4148bd5178c4065512b52b1ec86d61effc01031bedb94a3d
- MD5 9c457cdd60b798e59a71331cd29abef8
- SHA1 417754fe50a859d3fab9bfecc60b02737f68943b
- SHA512 390c9be68dcc7eaf7de9494097ffcce19b60e76b5a38f6487c19545be9a8fe4668021a2902ea9cdf61b65a1d738bedccaea2f2cd2e9bcd606b464be8cb3cc3f8
- SSDEEP 6:7+/l9dKl/gPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKAats//w:7+tG/4qLJdTRmBEyPbnesw
- TLSH T17002129D67410913C52957B790DBC3552EA0A71592A3CB6755E008A97C467CCA890D54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.italiano.iblack/databases/com.google.android.datatransport.events-journal
- Size 24KB
- SHA256 f61fc6f33debf1c159c18ee4368bae3e6bba1053a142ff8d84dc9bc124b7d03d
- MD5 9e42af2f48cecdc39ffb868d842e88ad
- SHA1 1fa1f2bcc8e509305a76e34ccd824c44587001fc
- SHA512 a2609e1bd8749f7628120c7ecbba0778f6c47d802423063d80167e00307bfb9bad5085ab9e365e34081ff197163b1a6eb49faeacfeafc23aa4d02d83a40df18b
- SSDEEP 48:7MmrZq3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSn:7pZlMEX0wIyNjan
- TLSH T10FB2305D1D2C2721C6BE3C3ED7E10253593C53DF572391B43AA48CEA8DC2469B039AA9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.italiano.iblack/databases/com.google.android.datatransport.events-journal
- Size 16KB
- SHA256 94d2a328d97851ebe2b1ba04a44828a3b51bff1a42554b6675ea820b7ce36bfe
- MD5 90e3f52fcae3cbd312e9662f87cd712a
- SHA1 ca5c8b9dc333d840bda7d741de376493e0e5f22c
- SHA512 7c933598353f288488be4b314d5bf46cecb317b29778d0203f71f8257acbb11f834199f4be0808608edbcabd581159da5c9d66a10ff4a0eb4c708b355e8e1d1e
- SSDEEP 48:7MdaiAPYpZjw6vFAWWnqA2g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSr:7MaicYjnr2BLMEX0wIyNjar
- TLSH T1A872855E6C3C2211C57E683ED7D243935E3C53DF5723A1742AD44CF98DC64A9B0364A6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.italiano.iblack/databases/com.google.android.datatransport.events-journal
- Size 20KB
- SHA256 516d4834bc511eb2adde01f068746df6ccab8a1303945df91c53b2d16e55148c
- MD5 a1d86dddb0fed94c423f8fcd0f63651a
- SHA1 31059ee5a2399202d62efb8074bb62fce4088283
- SHA512 2e423900a6e38112e2ecd6f59f0fd35a25e02ed6b2f8d82d925623146fb55c671546b6ae009d4a454aa8c5239c95a49f577315d1ca698d4a2be4693c2ea227ed
- SSDEEP 48:7MehxFtRqHg59MENZBdUdndVd/729IvdldHlq8/Jq4qPSTVXq3g59MENZBdUdnds:7zzR1MEX0wIyNja9lMEX0wIyNjae
- TLSH T17792429D193C2711C6BE287ED3E243A35E7C53DF572391703EA48CEE8DC246AB0255A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.italiano.iblack/files/profileInstalled
- Size 24B
- SHA256 b6effc79060f8db2a7104c1b26bd1e5a58ba680be23369920d9e0784c0b19293
- MD5 06ebcb04a156bd06e480f9b1e31ad34a
- SHA1 76199fc2697de1261627b03f97691fdd9facf2d4
- SHA512 847f8b411fd4d8269c5196af5f142977380819576a57d5d2da3feb3fcaea737835b6b61db04ed96653d2218d93097dfb972c7214f1dd9da60f7773a01b733b5f
- MD5 SHA1 SHA512
- Path /data/data/com.italiano.iblack/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 a5846df29d4d49d778612cb9e1adf0a85a5efd64c7f23a176f55c7e00a18dc17
- MD5 7e6a616bcdec9efbac749f5293740463
- SHA1 8843900e3b66616bc37205b2700fb744b5e4d82c
- SHA512 04aa5022a679e5905d4eeaa4ce43e9154e9e8dc5306bf3895c0672d19463dfa4d289df8d55a97ee0820efdc10d0a22697289d1f1045ae73919b7c2804f4bc17a
- MD5 SHA1 SHA512
- Path /data/data/com.italiano.iblack/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- TLSH T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.italiano.iblack/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 b7e926df3ca074265914e485efd2123f2270730a862201b7c13f8ccad3531af2
- MD5 d6356018eb5c4daa98c1dfcb78bb6c38
- SHA1 432c271ec30e5c9eab924a00d9450a98112ae79c
- SHA512 fbf0ed547a78c92b0983c0fb29c2ea5e9376d65eb9e24d54696f220ac532c56033d8117d080041877e9107b026aeed07decae35e292d0a0dbff5046b0ac682c4
- MD5 SHA1 SHA512
- Path /data/data/com.italiano.iblack/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.italiano.iblack/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 4ab23307c5b3f88e59b54ff524ed09cc29c7f9304db90348a08ae3633e899aeb
- MD5 76232a6cb6d88e608b9a84fdc79f4a48
- SHA1 1a74ca6a7f2595629590d5a73f34bf3797549526
- SHA512 56f1d67d93ecfd96bd66fcae417f136e5fa6a88f005d019f65fc34f0edae1b211e29cbf6cf35a21770a229cb05de2a452680c4ed99a90369882801f93419f87b
- SSDEEP 96:SySUg8Z6+etidjnZRWzzb8/KeKcK+zSstKz+eD86u0ExV:SXjtidjnfWzzb83zS1+eD86u0ED
- TLSH T134C3528E0FD92600C0A958B1E5D40FA1793E452F93D3E3D225A201B5EDD28A1DE29CFE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.italiano.iblack/no_backup/androidx.work.workdb-wal
- Size 124KB
- SHA256 0d56223b43667a393e0e32665ca00fa2e9cb1346269ab4247f7538d32e1317b4
- MD5 35ca63450de04282aa8cb5ab1ea75d33
- SHA1 fcbd9a67f55af3cc419d04dcac378e2280a5472b
- SHA512 715459d713bd2dd6ee9ea4b731b0a80cdfc795b416c858e33975e59e1baff05956157f323f836afb60b8c39668d0c387246eee0cff651c4e0caa2c83045e6db6
- SSDEEP 3:xLYhDTxFCiWHwzXtRKVjWXx/olDTUhTnvQqlh0XllgoqKXtRKVjWn:ihrPWQ72VdDYhTIqlh0p2Vq
- TLSH T15EC392FB36D40812D4551BBEEA1F5AA5A402CE8641DAADB6991E0AB0AD103C80220008
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.italiano.iblack/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 e980bafdcca8d4fc5c3af7d06f79d991964e64d82d2d762a906484e88dcc2409
- MD5 d240ead00f649de58945dcf854cd0f85
- SHA1 4360e102e0729bafd2f58ae2ecc0736274381988
- SHA512 d05c7e749b224cb1ecb56c77310b8e74db30ace8793c26551753ac6a9671d2bd827af38305b101ef59644055adae412c1b59fe1adfbaae5103a615c37e6cf869
- SSDEEP 6:KmhR5RqYh8s9FZdrlOERX4PBX4ogLugMBX4suuK+/khCnvuQfDWsloViOw2:Kmv7JBzdTRmBEyPbP/kxClVOw2
- TLSH T1C872C26DA3C00D63E518167354CCC3512DA09AAB83DBC74B122626783D127C8BC70D4C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.italiano.iblack/primary.prof
- Size 4KB
- SHA256 f6dbcf87e1317af03bc70655554c32be470a5d7c8eec7858168c8e049df423a2
- MD5 7f4f9c6eab9d0b7164e1a262af4bbdb9
- SHA1 fa1fc53e790ca1661d851ba463066897085dc395
- SHA512 b06016d1fd85db21c4f6e875a0d6f55f1542627a27b923c8a253e93b446c6e7e422dc3ddbfd4df4acca968067618cb87214bc0f1882350028fd82c8fbe44762e
- SSDEEP 96:r7Mzj8HhjFFzKCRzsRfCyNcoRXJ+t0shTIGVzPkhmZK9nDezl+qU4:Uzj8Hhjb2usRKGcoVJ+G6RMna5ZD
- TLSH T1DE816D99CD701DA883B8A6730BB0C55D4D31A6E02AD1FADD69CE90FA0EF225925C0459
- MD5 SHA1 SHA512 SSDEEP TLSH