Analysis

  • user interaction
    yes
  • max time kernel
    83s
  • max time network
    104s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    20/10/2026, 15:03

General

  • Target
    AuroraStore-4.8.4.apk
  • Size 8.9MB
  • Sample261020-se3rhae15k
  • SHA256 8a1ed9aa09631290da91cb793e0517b0f20dc70239ac94ae6682cd94f91a4bad
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 6 IoCs

    Runs executable file dropped to the device during analysis.

  • Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

    Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

  • Requests allowing to install additional applications from unknown sources. 1 TTPs 1 IoCs

Processes

  • com.aurora.store
    1⤵
    • Loads dropped Dex/Jar
    • Checks the application is allowed to request package installs through the package installer
    • Requests allowing to install additional applications from unknown sources.
    PID:4836
  • com.aurora.store:phoenix
    1⤵
    • Loads dropped Dex/Jar
    PID:5068

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        core-oj.jar

        • Path /apex/com.android.art/javalib/core-oj.jar
        • Size 4.7MB
        • SHA256 4df590b764f65c16b51176ff394458d0b3a866ca75a4f912d6f76b7793043c1c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aurora_database-journal

        • Path /data/data/com.aurora.store/databases/aurora_database-journal
        • Size 512B
        • SHA256 5c23e7b76a9c6722af1ad63e80e50b88ee1849106df5ccdaf1d11293c5d0e937
        • MD5 SHA1 SHA512

        aurora_database-wal

        • Path /data/data/com.aurora.store/databases/aurora_database-wal
        • Size 92KB
        • SHA256 49e6f888700567d6b798b304e05df6680e9bf373c58ed703878a50eaf3336189
        • MD5 SHA1 SHA512 SSDEEP TLSH

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.aurora.store/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 f27cf112ee3254a3ff636e6d621bc436c2d5e8fbfd2149284d3811e7086de632
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/com.aurora.store/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.aurora.store/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 9b963ed7257c560c57361f1417029b6c49295653edd5405e8f864e3b8bab7d5c
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.aurora.store/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.aurora.store/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 958f77f9bed93a69ff95bcc566ecc44c669f6501f76260eaba419266d437829d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.aurora.store/primary.prof
        • Size 18KB
        • SHA256 3d5c8af0bc46931032164a7f8d975ab341cd2eaa86b16afc9a355cc79fbbd7a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.aurora.store/primary.prof
        • Size 23KB
        • SHA256 7d0f5a3f0448652b1c367e3f9aa1592b0ea5b9a5c08657a0a137869ecdbb73f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.window.sidecar.jar

        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH