Overview

overview

8

Static

static

6

e802fc6d-a...3a.apk

android-10-x64

8

e802fc6d-a...3a.apk

android-11-x64

8

e802fc6d-a...3a.apk

android-13-x64

8

e802fc6d-a...3a.apk

android-14-x64

8

e802fc6d-a...3a.apk

android-15-x64

8

e802fc6d-a...3a.apk

android-9-x86

8

Analysis

  • max time kernel
    899s
  • max time network
    831s
  • platform
    android-14_x64
  • resource
    android-34-x64-arm64-20260325.1-en
  • resource tags

    arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
  • submitted
    20/10/2026, 15:16

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    e802fc6d-a94b-4ce7-8dac-cc3c689e7e3a.apk
  • Size 28.3MB
  • Sample261020-snretsbt4x
  • SHA256 82bf3b9ce7dcc73e74ce638240a42a2f1a395570161194340bd86cc79179cdab
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
collectioncredential_accessdefense_evasiondiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
    defense_evasion
  • Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Acquires the wake lock 1 IoCs
  • Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs
    impact
  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.hunter.net
    1⤵
    • Checks if the Android device is rooted.
    • Checks Android system properties for emulator presence.
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4416
  • com.hunter.net:Metrica
    1⤵
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4574

Network

        MITRE ATT&CK Enterprise v16

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        base.4416.tmp
        • Path /data/data/com.hunter.net/cache/oat_primary/x86_64/base.4416.tmp
        • Size 880KB
        • SHA256 25cadbb2e1a852fa6656d936c52a31edfc03fe125c28e076050bb51bb5b64f69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.hunter.net/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 c66c821a8e4842e89698a312afbf921c71338c0daefe6cde511bc6e399794cfc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.hunter.net/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 dc52fd08bb820498eeb95714e68a10c8c47b27f7b8158b9c50fa480b673955dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.hunter.net/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 b245252900c0f595bc0b109e7bbaed828fdc60c5b9c3d8731f32695789307b7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.hunter.net/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 d6a33514b4dfab2266075ad2ab33fcae244ed3d7c782929d64708469b136cd4f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.hunter.net/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 0546d60dbf29052cf692b1357e3c7299de687a2cac7ae7fd473a30d516e24dfa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.hunter.net/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 885cb9784fa393e974ba3c198f99180fb15d59878a106e0b2c486df828700c58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.hunter.net/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 c94f3c2f80b868c8a96a082d576fcc7bd4f80f0d98343abee5f07448a641e0d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.hunter.net/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 79ecb4b354fe9ebccee351c68f7be781e31984b2a264cf971c940c2daf78bdd7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.hunter.net/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 a08d474f1b6bbd761f29bf418bc57e242473b314effa63ffd45071df0369d9ac
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.hunter.net/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 56787e7f5dedbf44bc669fdf76bf95ab2abd0d96dcfbfa176c1a9a01380a5e99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.hunter.net/databases/google_app_measurement_local.db-journal
        • Size 312KB
        • SHA256 d267da457f700d3a2fec7fe68859390c304b922116bfe353a0adcabc873e5986
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.hunter.net/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 cdb3eec31424278828973b38ddd22917b468a03d93ae7a22fc68a69096ed3291
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.hunter.net/databases/google_app_measurement_local.db-journal
        • Size 36KB
        • SHA256 cc09c83e69330419a7edbe40c139385b4e383a3cec3299081cd05e58458b0ec1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.hunter.net/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 1eb4024bf3784fdb5308d03e8adf99387696df198dc5ad16b40851be90c451ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation62081337580350858tmp
        • Path /data/data/com.hunter.net/files/PersistedInstallation62081337580350858tmp
        • Size 12KB
        • SHA256 b1937d484df535b185f8552f1cd798c5290e90f67eaef90e4976b4d2e93eaf6c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PersistedInstallation7938450240139992189tmp
        • Path /data/data/com.hunter.net/files/PersistedInstallation7938450240139992189tmp
        • Size 12KB
        • SHA256 d5ab5befa45bdc28b4dac71e929892dc50b66d8d67952d7dba41289ab388886e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.hunter.net/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 d9f29505a01a84819592191be26b0af5bdb0c098bc0949e1adf6654318571335
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.hunter.net/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 175e7597aeb45476f0a0dba5196e61696edec55b2430e9743f75723b48718481
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.hunter.net/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c088831bab461bce85faad7479cc6b906b5bd786f11c9f89a9a5c3bebcd040fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.hunter.net/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 2a2490255952f619a1ddf4d077d5966faab2fb5f8367412f4d7f2dd90d36879e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.hunter.net/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 6cc0ac367ed836e05f9fc2d12edde62579dc9f5dbba7b58e47bec1cb3dd096ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat
        • Path /data/data/com.hunter.net/no_backup/appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat
        • Size 20KB
        • SHA256 9e62a5cc0c112dd1dc6fd3226b69d360cb7317d7a32d14b1496604b5409eea3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat
        • Path /data/data/com.hunter.net/no_backup/appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat
        • Size 58KB
        • SHA256 e860577b3c531d114d370a224df4f9763eaac550ea9ea6576b1e2470a16ef022
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat
        • Path /data/data/com.hunter.net/no_backup/appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat
        • Size 16KB
        • SHA256 7d91a3290b06ffd41e9626cad1f81b3c1f266cc7f9116d7d93b7d00d9236d0cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat
        • Path /data/data/com.hunter.net/no_backup/appmetrica_vital_478cb909-6ad1-4e12-84cc-b3629a789f93.dat
        • Size 16KB
        • SHA256 7d191f59f97696613cacceae13e09f4ce208f2e61001e69fa1ec01bd3a5c3707
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        db_metrica_com.hunter.net_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/data/com.hunter.net/no_backup/db_metrica_com.hunter.net_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 512B
        • SHA256 69e20aea2a58be39c8aa2171267b787e248a79c290ca22de863aadf216fa966b
        • MD5 SHA1 SHA512
        Submit Download

        db_metrica_com.hunter.net_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Path /data/data/com.hunter.net/no_backup/db_metrica_com.hunter.net_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 dddd019318342fdf7582a3c02b60809fa0838b646b9d175347f0b21f9b9b5c2f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        db_metrica_com.hunter.net_478cb909-6ad1-4e12-84cc-b3629a789f93-journal
        • Path /data/data/com.hunter.net/no_backup/db_metrica_com.hunter.net_478cb909-6ad1-4e12-84cc-b3629a789f93-journal
        • Size 20KB
        • SHA256 5903477f5ce903c54a1ba0eebba90a897c6cfcad887cac7c92b066df718e032f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_client_data.db
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 757d9d646ab7307b0ffdd3b7f96f4b601c44a39972a1755c8d7853ab71ceb445
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_client_data.db
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 cd819ee562bbb2fcf513a46dea10ff991e99883ec3adf55c9597c5e0a17750cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_client_data.db
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 38967eda2e984e7e6ae0b1d8d10837f261dfefc59c30fc2c631380336c13daf8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_client_data.db
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 24cad684d7f8bae4da32b8b488ee0ae43e26874e01af97195360d081f9069282
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_client_data.db-journal
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db-journal
        • Size 512B
        • SHA256 27b9919c99ff39c12bb9dd1657bf253eabb99b15dc47ef81b175863b132c719c
        • MD5 SHA1 SHA512
        Submit Download

        metrica_client_data.db-journal
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 50c7a17321a45f70ae2236a1e0777a372042d84338122a9f5257c5fd72b94ec0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_client_data.db-journal
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db-journal
        • Size 36KB
        • SHA256 d6f31c6acae4885b10af4133a4889014575cc6a110613497dfeb4915bf5cb8fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_client_data.db-journal
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 451fb046def624b82272989d0fdb0671fb3b546d7dfd50f791d216bf446983b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_client_data.db-journal
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 5ee1b2ead274d8c59f139815376b2d233c2dde9046feca3c4edeed8e81137a2c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_client_data.db-journal
        • Path /data/data/com.hunter.net/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 9617e7c762cfefda8703ad1368c4b16604b403f4148fb3c2c87ccdd866d20b53
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_data.db
        • Path /data/data/com.hunter.net/no_backup/metrica_data.db
        • Size 44KB
        • SHA256 75a1b1bdc9cd7276cf3a3aa347a259e943f99fc57387caab93486f1f8987f308
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        metrica_data.db-journal
        • Path /data/data/com.hunter.net/no_backup/metrica_data.db-journal
        • Size 12KB
        • SHA256 e51c823bc95593420b0b7510f731b19eaa9e569885eaefb1b1fcce1166e4871e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        uuid.dat
        • Path /data/data/com.hunter.net/no_backup/uuid.dat
        • Size 8KB
        • SHA256 99ce075e572bc99d8301a2f2980511cb4ab6587f3b858562bc300b64228c794b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.hunter.net/oat/x86_64/[email protected]
        • Size 59KB
        • SHA256 3a9c2eb574f00aae2b2399cb5387041c719c5e6b14d8525efbd27451b28a0984
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        [email protected]
        • Path /data/user/0/com.hunter.net/[email protected]
        • Size 3.2MB
        • SHA256 7aae06433cff5967ac254484d784c2c348380891d0914c56de64e7e006668cd4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download