Overview

overview

8

Static

static

6

e802fc6d-a...3a.apk

android-10-x64

8

e802fc6d-a...3a.apk

android-11-x64

8

e802fc6d-a...3a.apk

android-13-x64

8

e802fc6d-a...3a.apk

android-14-x64

8

e802fc6d-a...3a.apk

android-15-x64

8

e802fc6d-a...3a.apk

android-9-x86

8

Analysis

  • max time kernel
    898s
  • max time network
    898s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    20/10/2026, 15:16

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    e802fc6d-a94b-4ce7-8dac-cc3c689e7e3a.apk
  • Size 28.3MB
  • Sample261020-snretsbt4x
  • SHA256 82bf3b9ce7dcc73e74ce638240a42a2f1a395570161194340bd86cc79179cdab
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
collectioncredential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 9 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Acquires the wake lock 1 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
    impact
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.hunter.net
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4075
  • com.hunter.net:Metrica
    1⤵
    • Loads dropped Dex/Jar
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4190

Network

        MITRE ATT&CK Enterprise v16

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/com.hunter.net/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 05e87ceff25be0ba7c429ae76df59112c77fe16618bfe62f6ce9900a95998ce2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.hunter.net/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 168ca3dde27276b67012f5568f667cb586cdd07cff38348790d340a032de5d47
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.hunter.net/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 78cbb618ecd3c753c54aeeca6d15cf84c3ea81f8f8acd8fdd74bcc29a7246962
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.hunter.net/databases/com.google.android.datatransport.events-journal
        • Size 12KB
        • SHA256 53a92f99b7aa19d35f02f21fde8356f93c298012c6b651f6b0fa875abae46870
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation1273125685615976855tmp
        • Path /data/data/com.hunter.net/files/PersistedInstallation1273125685615976855tmp
        • Size 90B
        • SHA256 af7d65472692ed50a6cf5aa585a832834228e067624674e609105c8f26fcf7d5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation3784333292874196051tmp
        • Path /data/data/com.hunter.net/files/PersistedInstallation3784333292874196051tmp
        • Size 569B
        • SHA256 2d7d9910111f9fa5e753d1999935b953d9b50ff0c7977580ed8f4abe0de77662
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.hunter.net/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 d9f29505a01a84819592191be26b0af5bdb0c098bc0949e1adf6654318571335
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.hunter.net/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 175e7597aeb45476f0a0dba5196e61696edec55b2430e9743f75723b48718481
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.hunter.net/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 26ded07e6ea606f07196f8a62519c8415c4004ed81c44b8e6f783a2799fa8fff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.hunter.net/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 84c8bc6b9f006f198e3cceef8d25031880adb1df0aef50f4fada2c45e2ad5918
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.hunter.net/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 86055965dbac594404568aaaba319dc982b8dfe61e03cc81c3b6b7cd2998d4f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appmetrica_vital.dat
        • Path /data/data/com.hunter.net/no_backup/appmetrica_vital.dat
        • Size 20KB
        • SHA256 d362b99a97db1962dfe7763a05465687a7cf3c918b84c6324f8d40b026cfa98b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat
        • Path /data/data/com.hunter.net/no_backup/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat
        • Size 71B
        • SHA256 b880b3735f98c3912746b94e8a66757a97357e393cfac8ce0f4a6efea28ef431
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat
        • Path /data/data/com.hunter.net/no_backup/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat
        • Size 12KB
        • SHA256 27acce6943f0b2b6f840ff17ea3b6a2d3ffa878d02ac0427258ba753df9ea60a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat
        • Path /data/data/com.hunter.net/no_backup/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat
        • Size 20KB
        • SHA256 aed5d5b9468fa365ba6bba250a556a4df5375514b57c48a20a074fd0e504de05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat
        • Path /data/data/com.hunter.net/no_backup/appmetrica_vital_20799a27-fa80-4b36-b2db-0f8141f24180.dat
        • Size 58KB
        • SHA256 545acaf68ad76c0700dda03c1ce33390e01a0e17e5f8258adf4154e3b8852ce2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat
        • Path /data/data/com.hunter.net/no_backup/appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat
        • Size 194B
        • SHA256 55ad396d1ce1636f662815b290992a42bf9f4e373fe318fffefe1ec0da20e123
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat
        • Path /data/data/com.hunter.net/no_backup/appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat
        • Size 203B
        • SHA256 52d77a0fa907b1d325ac2b8870f5be53661631d3044993558ff451cac2850de8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat
        • Path /data/data/com.hunter.net/no_backup/appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat
        • Size 203B
        • SHA256 16cb02abfa14d6df8ed308c257f917dd78da492cf750b85f472bb7421f6a15df
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat
        • Path /data/data/com.hunter.net/no_backup/appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat
        • Size 249B
        • SHA256 97b75e4af55c7ffb5255fc06b88c0d0c253926a6e4e2b97a83a64401757e9799
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        db_metrica_com.hunter.net_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/data/com.hunter.net/no_backup/db_metrica_com.hunter.net_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 8KB
        • SHA256 e5f70fb7838cf42a038df8326b6a88173df1c08373ca6f14190262d83bcc11e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        db_metrica_com.hunter.net_478cb909-6ad1-4e12-84cc-b3629a789f93
        • Path /data/data/com.hunter.net/no_backup/db_metrica_com.hunter.net_478cb909-6ad1-4e12-84cc-b3629a789f93
        • Size 36KB
        • SHA256 0719cf8ca584b12664ff734d28577a8c58d4a28cf794e400f239e3efd8715f0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        db_metrica_com.hunter.net_478cb909-6ad1-4e12-84cc-b3629a789f93-journal
        • Path /data/data/com.hunter.net/no_backup/db_metrica_com.hunter.net_478cb909-6ad1-4e12-84cc-b3629a789f93-journal
        • Size 512B
        • SHA256 f64e08577bbd8110dbb13bbd91736551f6e2826979f826580a4869e22aff85f5
        • MD5 SHA1 SHA512
        Submit Download

        db_metrica_com.hunter.net_478cb909-6ad1-4e12-84cc-b3629a789f93-journal
        • Path /data/data/com.hunter.net/no_backup/db_metrica_com.hunter.net_478cb909-6ad1-4e12-84cc-b3629a789f93-journal
        • Size 8KB
        • SHA256 a12c088fdd57c5cf6b998626f15594466039c5c062ff611193f37f05b9d098a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        db_metrica_com.hunter.net_478cb909-6ad1-4e12-84cc-b3629a789f93-journal
        • Path /data/data/com.hunter.net/no_backup/db_metrica_com.hunter.net_478cb909-6ad1-4e12-84cc-b3629a789f93-journal
        • Size 8KB
        • SHA256 4e03397c6d47fc8dcb5a104949e3bf9a9497d81163c58009addec9f74f3f5555
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        db_metrica_com.hunter.net_478cb909-6ad1-4e12-84cc-b3629a789f93-journal
        • Path /data/data/com.hunter.net/no_backup/db_metrica_com.hunter.net_478cb909-6ad1-4e12-84cc-b3629a789f93-journal
        • Size 12KB
        • SHA256 b02df67b5f481b030f3aa78c49d05981d67dd90bfb0fcca2173eeda4715df5d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        db_metrica_com.hunter.net_478cb909-6ad1-4e12-84cc-b3629a789f93-journal
        • Path /data/data/com.hunter.net/no_backup/db_metrica_com.hunter.net_478cb909-6ad1-4e12-84cc-b3629a789f93-journal
        • Size 12KB
        • SHA256 3e8febc4bcb021bdd52d613392ba85ad6cf178d359b11114da0e6d2e1f788924
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        db_metrica_com.hunter.net_478cb909-6ad1-4e12-84cc-b3629a789f93-journal
        • Path /data/data/com.hunter.net/no_backup/db_metrica_com.hunter.net_478cb909-6ad1-4e12-84cc-b3629a789f93-journal
        • Size 12KB
        • SHA256 987014b89b4c97caeba6fb9127cb662c4c1a2ba02e91595800cd47591b2f29c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_client_data.db
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 ee94ebe683a4c8424382d507ff2a2544b80becd40e9ffcfda3219e66ad37c1ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_client_data.db
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 33e17b8c9540b89d803215ef563cfdb1aff7feba2f16524c073711cd77234e21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_client_data.db
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 f2648a565969f01ab9a392c7953ccb8bb9d7cea95a303e217da3f2f2a1242186
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_client_data.db-journal
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db-journal
        • Size 20KB
        • SHA256 1544f83c6bb7de696d8932d4e68d8cdf3412a9da81114b73bf5f1b9ebf0e9d6c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_client_data.db-journal
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 f5ae5a29ae242126f08357db36cd4e030702cd564fd34a28e3ce8b9950b9ee5d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_client_data.db-journal
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db-journal
        • Size 36KB
        • SHA256 850a64a55cdb54b477fa0c387809f6de4d47b86ddf50bb596503715486843bb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_client_data.db-journal
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 075466b0a7970e5acfbc3660e6ac610c026b5e1020eb6d07be964e87eec57565
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_client_data.db-journal
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 c7ce269eca393932c6223ebfae71fe265009eec9a5a28e488ac2a2d493a19e8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_data.db
        • Path /data/data/com.hunter.net/no_backup/metrica_data.db
        • Size 44KB
        • SHA256 a8eeb0cf9da4fd0bbf0394715986550f97cc2572aafc84c35a2a3966d06ec88b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_data.db-journal
        • Path /data/data/com.hunter.net/no_backup/metrica_data.db-journal
        • Size 12KB
        • SHA256 0b2b7863abc227f5f469b4155991adb831127b6e0209021120b81ecb74bd9afe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_data.db-journal
        • Path /data/data/com.hunter.net/no_backup/metrica_data.db-journal
        • Size 8KB
        • SHA256 e4e945fee0a95068bd84af486e052701585a52d310b0d549d5447add25324c3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        uuid.dat
        • Path /data/data/com.hunter.net/no_backup/uuid.dat
        • Size 192B
        • SHA256 0db88089e3f969a41eb656ff377055f7807019ccd9904a974915a36fdf437d1b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.hunter.net/oat/x86_64/[email protected]
        • Size 59KB
        • SHA256 e158336671a4fe0b94cb84fb2944a2a27c8c5e042d969af0698f1e99113e3fe4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        [email protected]
        • Path /data/user/0/com.hunter.net/[email protected]
        • Size 3.2MB
        • SHA256 7aae06433cff5967ac254484d784c2c348380891d0914c56de64e7e006668cd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        androidx.window.extensions.jar
        • Path /system_ext/framework/androidx.window.extensions.jar
        • Size 123KB
        • SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 25KB
        • SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download