Overview

overview

8

Static

static

6

com_v2_86_Apkmody.apk

android-10-x64

com_v2_86_Apkmody.apk

android-11-x64

8

com_v2_86_Apkmody.apk

android-13-x64

8

com_v2_86_Apkmody.apk

android-9-x86

8

Analysis

  • user interaction
    yes
  • max time kernel
    12s
  • max time network
    154s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    27/10/2026, 08:23

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    com_v2_86_Apkmody.apk
  • Size 24.6MB
  • Sample261027-kalcnabw21
  • SHA256 eeaf4abf30b409d74bc2d071788903a42479eea3ce83d3ec84974fc6250c4c20
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasionexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 8 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 15 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.mst.foqmyv.dpkzfma.cxh
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Checks memory information
    PID:4778

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        cxh.act.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.act.jar
        • Size 12KB
        • SHA256 8fabed870f6ab6f13f642536d8dd5d5948e148aa16d4e5eaaa0816bd29344b7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.apl.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.apl.jar
        • Size 1.2MB
        • SHA256 0980935fe69447a9bcda848c1de0e14c97144435a70c117145674a8864b74b2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.dat.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.dat.jar
        • Size 3KB
        • SHA256 a53eff4a5643c463bb759e9935e1024b4d9602c8c02a2c16b94b4c6e9b0fca58
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        cxh.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.db
        • Size 4.3MB
        • SHA256 826838163b8369550fceab966c309d438e094ee790d907b6ec2962ec8e967b2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.ext.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.ext.jar
        • Size 1.6MB
        • SHA256 27e25e2f18a900b8f089782ecc7c7e069877adc6cf287fb236b59d1c7337767d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.irs.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.irs.jar
        • Size 894KB
        • SHA256 8e77315ef6f633e82f78c5ff0f4791e77f0cce3ea4aab661922ad43c836916b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.stp.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.stp.jar
        • Size 384KB
        • SHA256 e4019e80e428beed46a654a19c2fffc99f060e2f1f7e4a0d4ccc226635eb6fec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.uni.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.uni.jar
        • Size 173KB
        • SHA256 c3463e604d6eabb7cd906dbe2304d3a0d723e14b537f267e781c9c05bca4fa06
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 45f2c29d323029b1d6674b6498aab5d13f21ee70f5954f181112537b77817212
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 57322e9f27bad3ac7a113fa5d1fa8e44d8e81a4243177ef31a1f7e0acf94f507
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 baa1e96c0dd9826736e011e78f82c5808ae532d752794bbaa1352111db7ec4b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 61173f15b5e5450611e2fdc3d5ec599a6c414d4fb0acf2aec6905745413442d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 74a34edb9b02ef4644afd87cac736e2ed5a9e990f9a63f0338708cc82e4e6f64
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 16ac46cff06854a54d8fb3b80227fceb37db98ddee416bf345dc00180a75924c
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 6facc44de9877602e1a8b7662e3050f8ddee0e1f29db301c44c5f53072544fc7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 5613da61eba1d1fdeed2e7349d5337a569fb135d8c4c2154ce71dbca230f35db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 4f177ff184d08e21c9531de32c81131d97f800d8d2a7eb010c5d731177042505
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 f060683e0a99e7c21f95e5d8d70b05d226e8bdbcbeea14a49fc4500fd2cdf82e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 62678e3e02cf246725b37c9075366bb4513c3a299b5d591000e84e2c86bfd9be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.InstanceId.properties
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/no_backup/com.google.InstanceId.properties
        • Size 2KB
        • SHA256 4707ec37de5dc10b70893fc3ec3839094f1083749c95d763eb1be5b5ffb41011
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/oat/x86_64/[email protected]
        • Size 7KB
        • SHA256 a133429b2b8978430ea8b05c89efc57a46a0f9048da62d1417f5b848ea671295
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/oat/x86_64/[email protected]
        • Size 705B
        • SHA256 8a395ed7932ae376d8b4b98769ffbfe81e06b00561a6dcc14da9130f4837114a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/oat/x86_64/[email protected]
        • Size 634B
        • SHA256 0e3aa5a4871015ce8f6c60ff1e1716f3de858860a3566e80a45b9baf4720f423
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/oat/x86_64/[email protected]
        • Size 1KB
        • SHA256 7d6dbd572eb8286e04c2ba392b52a64beea54a86cad7269034ca73d97c441871
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/oat/x86_64/[email protected]
        • Size 2KB
        • SHA256 26a85b928676a9b2d4e95e5652960a42c2187099d6df7afa57863ad4acbfd732
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/oat/x86_64/[email protected]
        • Size 2KB
        • SHA256 3b3bb6f039e96cbd389648f101700f2e2705e969c6e5effd9fc177f875d5b8ae
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/oat/x86_64/[email protected]
        • Size 1KB
        • SHA256 80ef1e4684b552969e9c5c3999083ced02bfc4ed322d5050ca8ed80e57334585
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/oat/x86_64/[email protected]
        • Size 536B
        • SHA256 68b9189657acdc94380793e3955afd053bdcfbe19db09267a840aa238e89fad1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/user/0/com.mst.foqmyv.dpkzfma.cxh/[email protected]
        • Size 3.5MB
        • SHA256 d52c8e2b441d1dd7238167c2bcf488d6e1676eb62d1ca035d81f69648dcde685
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.mst.foqmyv.dpkzfma.cxh/[email protected]
        • Size 24KB
        • SHA256 30f2772bfe8fd015030df29c14cf3d7559f17a15d78574ae90d09226ceb09e99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.mst.foqmyv.dpkzfma.cxh/[email protected]
        • Size 8KB
        • SHA256 d4d409839b501fc4edf462549afee261df103f7b04446024ffca2281d51dc8b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.mst.foqmyv.dpkzfma.cxh/[email protected]
        • Size 431KB
        • SHA256 e4f39d66f221b8278d1e9d7e7f4e243e0094431ffe436212c1a1a6fca1815dfb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.mst.foqmyv.dpkzfma.cxh/[email protected]
        • Size 2.6MB
        • SHA256 0cdcf7af9d94ac98c6ec9fff7d0cba057791a4ee01d19fa11e4ed7a2f5c42a77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.mst.foqmyv.dpkzfma.cxh/[email protected]
        • Size 915KB
        • SHA256 c39507f7737a38176409175efacc5c98bd9f099572c781ccc39c0577c53405f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.mst.foqmyv.dpkzfma.cxh/[email protected]
        • Size 2.6MB
        • SHA256 74e5a7db19505ef000f962db4b0fac99192e5736a4b11da014104cd3be7d8622
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.mst.foqmyv.dpkzfma.cxh/[email protected]
        • Size 7KB
        • SHA256 9234a236de7d4264cce3210d1f586a7e5e43c1b6cc5c5f21800366e1e570bd5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        timerslack_ns
        • Path /proc/4885/timerslack_ns
        • Size 8B
        • SHA256 2ddb67b8a8c259ffaff61a5abdd38f5b5d6f1c6e2af4344c85b17b77af2451cc
        • MD5 SHA1 SHA512
        Submit Download