Analysis
- user interaction
yes - max time kernel
83s - max time network
104s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
20/10/2026, 15:03
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
AuroraStore-4.8.4.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target AuroraStore-4.8.4.apk
- Size 8.9MB
- Sample261020-se3rhae15k
- SHA256 8a1ed9aa09631290da91cb793e0517b0f20dc70239ac94ae6682cd94f91a4bad
- MD5 946eb2df2080451035cb7270f400ba88
- SHA1 5fb2aad876b6f029a8ced243d821e9001212a6c2
- SHA512 63d8e880617dc65543d450677190b5c914ad6036bd8aa932165e486826f061426085cf447c7ccee53a347b965fd9e36a26c5e113b51005dc951e378ce66f7433
- SSDEEP 196608:FRr2wwhJ4TuZT0VAn2Uorizk4PawqdH66kxRbExZCE2/kCnZ:FRr2wwhmyGVa2WPvwOxRQd2Z
- TLSH T1BC96D0CAB3D8DA2AC43210F6CD5A42F5229A4C259E43CF4378583B1D24FB5E45F5A7E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 6 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4836 com.aurora.store /system_ext/framework/androidx.window.sidecar.jar 4836 com.aurora.store /apex/com.android.art/javalib/core-oj.jar 4836 com.aurora.store /system_ext/framework/androidx.window.sidecar.jar 5068 com.aurora.store:phoenix /system_ext/framework/androidx.window.sidecar.jar 5068 com.aurora.store:phoenix /apex/com.android.art/javalib/core-oj.jar 5068 com.aurora.store:phoenix - Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
description ioc Process Framework service call android.content.pm.IPackageManager.canRequestPackageInstalls com.aurora.store - Requests allowing to install additional applications from unknown sources. 1 TTPs 1 IoCs
description ioc Process Intent action android.settings.MANAGE_UNKNOWN_APP_SOURCES com.aurora.store
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /apex/com.android.art/javalib/core-oj.jar
- Size 4.7MB
- SHA256 4df590b764f65c16b51176ff394458d0b3a866ca75a4f912d6f76b7793043c1c
- MD5 17bf082d9e9a6eb8b5d62d82f4af5476
- SHA1 a401c7fbd8feea319dbcece5b4b3f6a254e71fb3
- SHA512 f1a2673bf5c478176de0fceec8419434ab0606a14343c3b7fe1e2b181b0a2ff8f00c888ea1dcb8e711c4eb14aa1294919440adc63ce7735a67e93da21a0f7ae7
- SSDEEP 49152:rCaT/d/A6u6uT79YDz6beFEFNg40GwckDgO/Zzz2+gCq6gVpNkypHde:eay6279o4eFrGwLetPe
- TLSH T1FB369E02DD978E77D0BC833BC8F70B65ABB2D59877030753000AA7746E87BD6AE92165
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.aurora.store/databases/aurora_database-journal
- Size 512B
- SHA256 5c23e7b76a9c6722af1ad63e80e50b88ee1849106df5ccdaf1d11293c5d0e937
- MD5 6527a81b3ebe41aea83b97d2d3dce84a
- SHA1 33b8448d70b808c83ed58da05a53574c8289de10
- SHA512 3944502cb301166b6141d7e8fa0bd3f8f43c6875d96024fe55db0eccd52b4259f1062ecab45012bbcc2ed1bc56ffa3a6353b866c72db3a4f7891a8e84a2e8b37
- MD5 SHA1 SHA512
- Path /data/data/com.aurora.store/databases/aurora_database-wal
- Size 92KB
- SHA256 49e6f888700567d6b798b304e05df6680e9bf373c58ed703878a50eaf3336189
- MD5 0ba1ed1e8aacdcedc9443bfe33e15891
- SHA1 35c8f2fe0b47899be67953d4dc6af2f00fdfd5d3
- SHA512 451fe306f3fa3c5b4819d8b90745e890827828050a4b72f4e2a89d2c579e53ba532c251e69dfd1777ed2b2395cce4664b2a13269e0155c88221ff4d3666addda
- SSDEEP 96:h8PnR16qHEf3Vz2ISiDqLuyyYkopT59hICNtK0BAq0UPWGM:anRj8JMFjpT59hPzK0BAq0QWd
- TLSH T1E393988E1F21B353CCFA4A75E4C90BC22D2D593E57A367D66EE280F2F8431B1A424858
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.aurora.store/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 f27cf112ee3254a3ff636e6d621bc436c2d5e8fbfd2149284d3811e7086de632
- MD5 86337f1e231775151cccd034aed0901b
- SHA1 7a913d3d4e4caceb36edb8a1d68ab716d84ab15b
- SHA512 5169c8b4e343a94d88972cfb49120a795902aa2f97d9b2aec0d602630fa8801cb5ada6c9da8c29a97ab73f3f80f5ba2975886f8970b18cd10387d79017c751fb
- MD5 SHA1 SHA512
- Path /data/data/com.aurora.store/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
- MD5 7e858c4054eb00fcddc653a04e5cd1c6
- SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
- SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
- TLSH T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.aurora.store/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 9b963ed7257c560c57361f1417029b6c49295653edd5405e8f864e3b8bab7d5c
- MD5 fac66e3a1d6a9abdfab24d624575e173
- SHA1 af9a47a1d4ff0108f4361f44d3bc601765f1db04
- SHA512 f0f69c862d44d452377aa5ba480a45f23abe3be7728b0106a32aa7f4f38692d1eacfa70d1e2180de3c8e2c04b7b36ceef53c4b5ef3abb0a71a0ed6c9d2ebefe9
- MD5 SHA1 SHA512
- Path /data/data/com.aurora.store/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.aurora.store/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 958f77f9bed93a69ff95bcc566ecc44c669f6501f76260eaba419266d437829d
- MD5 b6d5c01157cc0c36f9c0a7c3d8c574d8
- SHA1 26194a93f0417650ad0ef042afe71c4b280d9545
- SHA512 670c610cc8cd7b305fd0189edf520dd8198f3b01339449a219367d87c415c84586bd6bff026f6088a175443846b80e7ffc1e820d6f92e5b0a9fe01f746ecfa69
- SSDEEP 96:X8PAhhC6+OtidjnZRWzzb8/KeKcK+zSjKz+XD86u0ExV:IAhh3tidjnfWzzb83zSA+XD86u0ED
- TLSH T1FEC3E08E0F5D3604C4BD54B1D5D00BA17A3E422E9B93D39279D100B6ADD2A61EE2DCFA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.aurora.store/primary.prof
- Size 18KB
- SHA256 3d5c8af0bc46931032164a7f8d975ab341cd2eaa86b16afc9a355cc79fbbd7a8
- MD5 63d32e03bf4377b10564a522d555ab5e
- SHA1 48613cb5464b96d313ce8f8c6ee92b266c7ac6fb
- SHA512 6a915f58b23c067a45298f448c36f0accb17f8a4dd0cc475e39cd60e78c44c8463ebc888b5cc6ffafd712ceb15e61e233318c4ff1faf79a2fbf31a15f80d0415
- SSDEEP 384:vxGDzygt2yYj02OtgVTqWuyUbyudqW1OrL+Bs62QtXb6BX1Y:vxwn2yK5OKVT0yUe0zwr3bEgY
- TLSH T18D82C0604264CCAA416D6A0697C0360561FDA4F11E142B45276A51BCFF9E288AFC4FEF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.aurora.store/primary.prof
- Size 23KB
- SHA256 7d0f5a3f0448652b1c367e3f9aa1592b0ea5b9a5c08657a0a137869ecdbb73f5
- MD5 d41d61fda4a302c812aa86b4c27d0151
- SHA1 bdf4ddb1e7df28f040abb9d14bbc95eeec84d7e5
- SHA512 c58105c0b397d4f7323be6b61bf0c64c62f09cf6a19e385a8f079c9ddbb4768d27c1f664ab6c79ac2eb7d6f8d2f3b4a2438424b7c5363670dacedde8a99cb36b
- SSDEEP 384:2c2XxTQRgmvIDLEAbhqQB73z+xlC8pTEykR4xJIk1hIztGur03TqCra:2jQ28IDnn8C85ERcGk1Szjr03OSa
- TLSH T1F4B2F11DD1CDE8FCA1C607C806D19F843C2625AC878D9BBD3551582341B7A8AE7CED9B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 12KB
- SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
- MD5 bdf3529e80318eb14e53a5bf3720c10d
- SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
- SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
- SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
- TLSH T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
- MD5 SHA1 SHA512 SSDEEP TLSH