82bf3b9ce7dcc73e74ce638240a42a2f1a395570161194340bd86cc79179cdab

Analysis

max time kernel
3s
max time network
898s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
20/10/2026, 15:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e802fc6d-a94b-4ce7-8dac-cc3c689e7e3a.apk
Size 28.3MB
Sample261020-snretsbt4x
SHA256 82bf3b9ce7dcc73e74ce638240a42a2f1a395570161194340bd86cc79179cdab
MD5 b8078650b7870d035e85109d70cc5afc
SHA1 2ee25a6c2ebe0651849ea2acb0e6bae4a6e557e2
SHA512 63e5055652b90bef7c6f4a2f277b8fa6a13c33decccf03deb4dfb2a91fcd44a11659ed12e03d7b9708e7ae2e872a34956042f2199d93e294ba6df18548561b25
SSDEEP 786432:EPSvhHQ4gZttU6ESjaykB8S+4OMzmMv2eK6mGazqhhKxEyU:EPS4tu6ES+yO8S+fMzmMvHkqhp
TLSH
T13A5723A7F36DA91FC8739032CA6A2273949D4F118A42E7572504B35D68F3AD08F69FC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 9 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.hunter.net
/sbin/su	com.hunter.net
/data/local/xbin/su	com.hunter.net
/system/bin/failsafe/su	com.hunter.net
/system/bin/su	com.hunter.net
/system/xbin/su	com.hunter.net
/data/local/bin/su	com.hunter.net
/system/sd/xbin/su	com.hunter.net
/data/local/su	com.hunter.net

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.hunter.net

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.hunter.net

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.hunter.net

com.hunter.net
1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5052

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.hunter.net/databases/com.google.android.datatransport.events
Size 12KB
SHA256 885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
MD5 ea628e04765adaf4238a5dcdff4bbd51
SHA1 a801947619ea8c368efe9c006a324dc6339ac60b
SHA512 c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe
SSDEEP 6:l9bNFlLdrlOERX4PBX4ogLugMBX4suuKTqiOw2:TLJdTRmBEyPbsOw2
TLSH
T1B74280D5E3401503C515577790C5C3951DA0A72D8733C74B656008547C437CCF890D48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.hunter.net/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 353e742aa41aeeb23bf498b7894c8f51ca14570bec9dfe8bd5189f5e85c826c5
MD5 a1302a054e8aa91bbd7927a658838b2e
SHA1 7f0acf89b3de0fca3cc9fd384e2496befcc07d05
SHA512 e85de36ef6983df395677c4012184444711467577e414825fa385e98cda7fb32f04ced5e3f1af8be3192c2d8971df63a76bf10ccafd525251b285f3f0c7bc925
SSDEEP 6:7+/l9aHn1AWg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKY:7+tVWqLiuWdwRmBEyPbz
TLSH
T11002C08DE3800827C81D16F798D5834D0D00E73AC371CB4725600CD87C038CCE4B0EA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.hunter.net/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 b9317e2bfce36d5a46c4b01bde9c4d9e66c02b349db262f147ff0d2a1edaa43f
MD5 5ffbb5bc50c9a2dc2697a7a3a619ee77
SHA1 0cdf745c21984d5bbd9f564c3c1aa7264fe69c0c
SHA512 63630825f3aa1ab04f5292721c8b67fa80e18eb769cd9e0c4dcd060f16835e77a9d306b8028b6eb3270d093a24244a799a2db5e49e078e80ebd20361e2d552c2
SSDEEP 6:IHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKUg//z:IvqLJdTRmBEyPb3gXz
TLSH
T10502128963400913D519A77F50C983553D71A715C223C75B5A6009A47D06ACCF890D44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.hunter.net/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 8acb690e8533e259a2891fe790c97aac90f44116e31481373effd72b1baf360f
MD5 64ebd41a9b0ca84e79deb7731168615c
SHA1 a1b777501537111431eab820cfa93d313a7a9047
SHA512 9252877436f03987ac02524f7ff48953e5b84ac0a909a8e6b8e21e9366f2a6eecb4d30b8fa4df1645ab60e303c64183abb307ce7a3b1d4f81dfc0f2e1e05fa01
MD5 SHA1 SHA512

Submit Download

PersistedInstallation6952712996735323907tmp

Path /data/data/com.hunter.net/files/PersistedInstallation6952712996735323907tmp
Size 90B
SHA256 d840b333616b56cb947e3c2e1a0ee8d7418286bd823e8d6b847b80bc68f8eb1a
MD5 31a8a9f7ba5726527d119a5e44e95ae2
SHA1 9bea625656390e3e1a030ba7d1e1f633e99a4de1
SHA512 021d06f91ba4722c696bb4b83ba9e1582756106543c581ca6cd70e6a89d7e761b1c1946f0b72c929798f5914030dc3c472bfa5dcab9f9cfbd5ee644822f8a7ed
TLSH
T19DB012C6DE718B5185C6B30B1C4CE1102E512581580A9B050A08906480811E48103AA4
MD5 SHA1 SHA512 TLSH

Submit Download

audience_network.dex

Path /data/data/com.hunter.net/files/audience_network.dex
Size 526KB
SHA256 c469f2b81e73ac69d15c9981dfca2f4747dfb92db48e32dd83fc5e65a0744d27
MD5 3ac12ac7261bdcc2f871d241c65bfd16
SHA1 0d9c78a43f239fda615b9d7091e6f9f52056cd69
SHA512 1ef595d889dfb04e0957aed0ca3a096bd755a55a4b1e0baf0ead8fee4e3014ffc618144bf2233671e4cd0c57ec07233666400f59f145c014ffaa4add9c590317
SSDEEP 6144:2Xn1vwEyZbErzOt4Xz9izOeNZGyg5YYcZ0HOkjPSJnVTZ0FhlthMdBRRBbfyJ1pw:2314EmbErzCCRiDQyagTVEAc/nY
TLSH
T16FB4B4BDBD869B7AC44D89FE0DB78076A776509BFE424812322D6360BD6327017CB25C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb

Path /data/data/com.hunter.net/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.hunter.net/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 a99686a9b034c6ae1ab1f1be0fe430672b4c7e3bf39c9764b787861f72289e67
MD5 cf038fbb96a042dbffb6aee761c0dc57
SHA1 d6b6ddfd9270b1bee7fadd57538e5674a92eaea4
SHA512 2810294fdb7efc919395196a60c06b32d388366d51ce25ee61d4229875d139fe03daa29643c605417cc206c24dc3246183589ca4ac1250f53523c61cbdd3ec0a
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.hunter.net/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.hunter.net/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 c6f954153362856071c0534dfe3e700e633ebbb332d871ed2719bccab59f06a2
MD5 a36fe6b07caa792e745f1997692504a6
SHA1 b45c3a3fa1b18acc9db1d6719ef6d0a0a8bf94d7
SHA512 f909077a7ae51482cdf67fd15dbf0dcbc3159779125bd9af2b38d7c3d18a5636bffdb5e49a468d7f0819764b89c4df53667958f3f2fbbce29403f71d2a65ac6f
SSDEEP 6:K88A89TpMRg9FZdrlOERX4PBX4ogLugMBX4suuK+/xRZmX1maqWqiOw2:K89kTi8zdTRmBEyPbP//ZuEgOw2
TLSH
T15B72C259938879EEE51D5B76408CA3410F60BB3A4F72CB0B216009262C01BE8A052D29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metrica_client_data.db

Path /data/data/com.hunter.net/no_backup/metrica_client_data.db
Size 20KB
SHA256 a4312211d7ae32a60e8e64c7563cd73d2797349bd76e866a5353039f8870feee
MD5 0dbd3d8385b2a0e2bf56fbc6e9ce1156
SHA1 bfc6de06d72041ecbbbe0ac5608a694d9a147e62
SHA512 359ad39101267d2ca54ebbdd5e912938409496c9c75e3ba220c3f9b3867d22590cc02934fd4293311c6c44a9b6ad1b362e0f4d8b5694ffc9c610bdb5e82cf092
SSDEEP 6:l9bNFlq4yN0wCACScuGsGFLuuQ7GjBU38wsGTV+GNERX4PBX4ogLugMBX4suuKfR:TLvwfcGtSBw8w2RmBEyPbAVOw
TLSH
T1439268E2DB010651C32862B1ACC683595CE2573F42F8C34345D0042C2D42FD4AC62DA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metrica_client_data.db-journal

Path /data/data/com.hunter.net/no_backup/metrica_client_data.db-journal
Size 8KB
SHA256 59ff5bd0d57e0e549950ece98f5f29938d6985798805519e19fdaeee5a8c8820
MD5 0d9c1e758a8608c3b12343baf5f875ef
SHA1 24e469055eb1c29c1ffff651d9390d29fdc11c00
SHA512 4f491791c512be0043f591df53b15aa2e60d4d19e54fa775ccb38e1ce261d6261292c94809642c93467d613aa24b8b3cd60a67859ec0c56e074b117f8807cfe3
SSDEEP 6:7+/l9vQqFn14g9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK0w:7+tNQJqLiuWdwRmBEyPbi
TLSH
T19002C08D63C00823C81D17F798D483840D01E719C171CB1F26A00CD83C034CCF4B0D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metrica_client_data.db-journal

Path /data/data/com.hunter.net/no_backup/metrica_client_data.db-journal
Size 8KB
SHA256 aa86080e5ff8dda58ee8e51fafcd4b934e21539866360ce64ae5f6f5479665c5
MD5 d660cc52cc7e879b9236c34aaa4cf344
SHA1 4aff5b225292ee30906b3499b218f7712d532e79
SHA512 12dfb7f81ca5eb2a4b8a36af59295d98b43b8a493798591c10f7d7da2014eed62de229e368c9ec3dadc1a91f38958d2b8aa8266fd07e8c49ce4bd330d84b2253
SSDEEP 6:7+/l9wgPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK+c/M/Y:7+tlqLJdTRmBEyPb9BY
TLSH
T1DD02128977420913C5295FBB90EA83563E70AB258273CB5716A008987C466CCA8A4D68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metrica_client_data.db-journal

Path /data/data/com.hunter.net/no_backup/metrica_client_data.db-journal
Size 512B
SHA256 0fce6d1e470d89e0f0636f6932dcf2dec4e3a8ee38896951a0e68cb107d0deeb
MD5 c929b6752b52303bc29ac0e2cb05aa97
SHA1 26a7b4deedca0ff59b22feb309a833c306b2b0d2
SHA512 3b51941740d86e9d3943db81628c5b1fb41d301b3d0b507217ed067e770b0cc4c0094c6767408ee985ef4edf4d2ce4258ae6fbb160c26939845fa91c48790a08
MD5 SHA1 SHA512

Submit Download

uuid.dat

Path /data/data/com.hunter.net/no_backup/uuid.dat
Size 32B
SHA256 2125e561b3bf535830e4b32d2da0d6db290513b9a5bf3d1493d424c323319ed8
MD5 ef8e66b28413ace74045d8f51d7c875b
SHA1 f8e26b051a4dafcafe44c0198b1bbcb9b66a3a43
SHA512 688b9047ff1210f0533ecfa07fd61b42f199dcb361c22837937efbff780473395c34de119e764a9fbf7ca4ae5ab58e7af5eacb93545344cd71cb9c27514d620e
MD5 SHA1 SHA512

Submit Download

RevHunterLogError.txt

Path /storage/emulated/0/Android/data/com.hunter.net/files/erros/RevHunterLogError.txt
Size 1KB
SHA256 863c4e660f5eddf29a9666b2e3edefbf1bbf0f87c8297b024092eb4b342c0dd6
MD5 68d9582ecd0639bc2467534473ad7bd1
SHA1 020a03e4679ffa82e30415bcc24d73f8e0208009
SHA512 2d55be258a32347aac9bb70fc15ca20cea979e1295ceeba4f84352771f7f74b1abaf4a89450483f605484206ee4cd8006e4f05fb5eb912f3caaaa9aca48dd860
TLSH
T1A92168063D1D2956026FD66B329D9122CBD781D7123800F0BF0887D76E6B60C109DBDE
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads