Overview

overview

8

Static

static

6

com_v2_86_Apkmody.apk

android-10-x64

com_v2_86_Apkmody.apk

android-11-x64

8

com_v2_86_Apkmody.apk

android-13-x64

8

com_v2_86_Apkmody.apk

android-9-x86

8

Analysis

  • user interaction
    yes
  • max time kernel
    137s
  • max time network
    154s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    27/10/2026, 08:23

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    com_v2_86_Apkmody.apk
  • Size 24.6MB
  • Sample261027-kalcnabw21
  • SHA256 eeaf4abf30b409d74bc2d071788903a42479eea3ce83d3ec84974fc6250c4c20
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasionexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 8 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 15 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.mst.foqmyv.dpkzfma.cxh
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Checks memory information
    PID:4066

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        cxh.act.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.act.jar
        • Size 12KB
        • SHA256 8fabed870f6ab6f13f642536d8dd5d5948e148aa16d4e5eaaa0816bd29344b7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.apl.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.apl.jar
        • Size 1.2MB
        • SHA256 0980935fe69447a9bcda848c1de0e14c97144435a70c117145674a8864b74b2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.dat.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.dat.jar
        • Size 3KB
        • SHA256 a53eff4a5643c463bb759e9935e1024b4d9602c8c02a2c16b94b4c6e9b0fca58
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        cxh.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.db
        • Size 4.3MB
        • SHA256 826838163b8369550fceab966c309d438e094ee790d907b6ec2962ec8e967b2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.ext.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.ext.jar
        • Size 1.6MB
        • SHA256 27e25e2f18a900b8f089782ecc7c7e069877adc6cf287fb236b59d1c7337767d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.irs.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.irs.jar
        • Size 894KB
        • SHA256 8e77315ef6f633e82f78c5ff0f4791e77f0cce3ea4aab661922ad43c836916b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.stp.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.stp.jar
        • Size 384KB
        • SHA256 e4019e80e428beed46a654a19c2fffc99f060e2f1f7e4a0d4ccc226635eb6fec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.uni.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.uni.jar
        • Size 173KB
        • SHA256 c3463e604d6eabb7cd906dbe2304d3a0d723e14b537f267e781c9c05bca4fa06
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 040cbb24c1e4250214484dfbf5a76857dd6249c6f5e22539a8e716b6cd073099
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 31f048f4c22076e09ac419278f8b57912a157ff7dd4140e610e8dc93dd1e2a61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 eb3d00df43ec517a678b3369f7530787c78934afe201ede9bb7f89c91d62a473
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 342cb38e0e2ec030805c38f53c1a1deaae9ead9c2f8c31802ed90e3fb9b3e9c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1dc339f08d8c6022d42bfb345051137248fb1a3efb7c25f7b8ee29bf452a7ec8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 a82e252a304ed8c1ac69cf962f86c8c8dcc7fb4cc98b9c7fdb2b1f6c82e4cbf0
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 2ee9c2620cc61045acf79e3e25002ae40751fabb703a82a889cecf8f106118db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 99780b06afc0271b655dbd47392713e54d1e71217d8cc34cbf0d6025979a5951
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 19a2744120b580336cb4c00d7f09a3e63248bdc6b14f505670da844ee6409a27
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 f259119bdeaca2706c14c1727538f7ee14c4f88499a70f35ddc5858755688c1d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 b0960e3d6e6819243111d23a7736cfc47648051f8a1653487b8a2b568afc16f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.InstanceId.properties
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/no_backup/com.google.InstanceId.properties
        • Size 2KB
        • SHA256 e2b6806fd35f9bb221a5ce2cb99ff427fedbacadb5fbe14feb5a44bb982947ba
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/oat/x86_64/[email protected]
        • Size 48KB
        • SHA256 61ebc3adf6856247bfe96b433436f1c1bcb3523c8ed1e78f3cbc53071158c379
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/oat/x86_64/[email protected]
        • Size 92B
        • SHA256 1572fe6727ae0be4f329b68a4be70d91564a9a1a2b87799b7146fcb3ed79050c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/oat/x86_64/[email protected]
        • Size 264B
        • SHA256 46f796d72e33ce4b3125d5a0d734477f0528a364ecd08592e1ce077d64dbca55
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/oat/x86_64/[email protected]
        • Size 10KB
        • SHA256 596b6a11fe542e51821a88a1aa4e4f67b025356724db322393a6ffbb613ab004
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/oat/x86_64/[email protected]
        • Size 26KB
        • SHA256 ead7853911a66cfb7092f98fa337eb904547eb47c56a44368585e25e4a6e120d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/oat/x86_64/[email protected]
        • Size 20KB
        • SHA256 14c67646b51ac57709056cff8264bed5f3e87e0401f0c2dcedcd907ed40ec0c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/oat/x86_64/[email protected]
        • Size 53KB
        • SHA256 a5dc3ae863a0070a0ef9431987e7130c3f4b4c8229bc000831f5f804a3b7db1c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        [email protected]
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/oat/x86_64/[email protected]
        • Size 132B
        • SHA256 62f654a1334cc75d040d8019558f71cf26c9c25587cfdf8004edf0ebf076fa6c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        [email protected]
        • Path /data/user/0/com.mst.foqmyv.dpkzfma.cxh/[email protected]
        • Size 3.5MB
        • SHA256 d52c8e2b441d1dd7238167c2bcf488d6e1676eb62d1ca035d81f69648dcde685
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.mst.foqmyv.dpkzfma.cxh/[email protected]
        • Size 24KB
        • SHA256 30f2772bfe8fd015030df29c14cf3d7559f17a15d78574ae90d09226ceb09e99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.mst.foqmyv.dpkzfma.cxh/[email protected]
        • Size 8KB
        • SHA256 d4d409839b501fc4edf462549afee261df103f7b04446024ffca2281d51dc8b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.mst.foqmyv.dpkzfma.cxh/[email protected]
        • Size 431KB
        • SHA256 e4f39d66f221b8278d1e9d7e7f4e243e0094431ffe436212c1a1a6fca1815dfb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.mst.foqmyv.dpkzfma.cxh/[email protected]
        • Size 2.6MB
        • SHA256 0cdcf7af9d94ac98c6ec9fff7d0cba057791a4ee01d19fa11e4ed7a2f5c42a77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.mst.foqmyv.dpkzfma.cxh/[email protected]
        • Size 915KB
        • SHA256 c39507f7737a38176409175efacc5c98bd9f099572c781ccc39c0577c53405f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.mst.foqmyv.dpkzfma.cxh/[email protected]
        • Size 2.6MB
        • SHA256 74e5a7db19505ef000f962db4b0fac99192e5736a4b11da014104cd3be7d8622
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        [email protected]
        • Path /data/user/0/com.mst.foqmyv.dpkzfma.cxh/[email protected]
        • Size 7KB
        • SHA256 9234a236de7d4264cce3210d1f586a7e5e43c1b6cc5c5f21800366e1e570bd5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        anon_inode:[eventfd]
        • Path anon_inode:[eventfd]
        • Size 8B
        • SHA256 7c9fa136d4413fa6173637e883b6998d32e1d675f88cddff9dcbcf331820f4b8
        • MD5 SHA1 SHA512
        Submit Download