Overview

overview

8

Static

static

6

com_v2_86_Apkmody.apk

android-10-x64

com_v2_86_Apkmody.apk

android-11-x64

8

com_v2_86_Apkmody.apk

android-13-x64

8

com_v2_86_Apkmody.apk

android-9-x86

8

Analysis

  • user interaction
    yes
  • max time kernel
    145s
  • max time network
    154s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    27/10/2026, 08:23

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    com_v2_86_Apkmody.apk
  • Size 24.6MB
  • Sample261027-kalcnabw21
  • SHA256 eeaf4abf30b409d74bc2d071788903a42479eea3ce83d3ec84974fc6250c4c20
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasionexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 8 IoCs
    defense_evasion
  • Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 15 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.mst.foqmyv.dpkzfma.cxh
    1⤵
    • Checks if the Android device is rooted.
    • Checks Android system properties for emulator presence.
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Checks memory information
    PID:4240

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        cxh.act.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.act.jar
        • Size 12KB
        • SHA256 8fabed870f6ab6f13f642536d8dd5d5948e148aa16d4e5eaaa0816bd29344b7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.apl.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.apl.jar
        • Size 1.2MB
        • SHA256 0980935fe69447a9bcda848c1de0e14c97144435a70c117145674a8864b74b2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.dat.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.dat.jar
        • Size 3KB
        • SHA256 a53eff4a5643c463bb759e9935e1024b4d9602c8c02a2c16b94b4c6e9b0fca58
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        cxh.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.db
        • Size 4.3MB
        • SHA256 826838163b8369550fceab966c309d438e094ee790d907b6ec2962ec8e967b2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.ext.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.ext.jar
        • Size 1.6MB
        • SHA256 27e25e2f18a900b8f089782ecc7c7e069877adc6cf287fb236b59d1c7337767d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.irs.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.irs.jar
        • Size 894KB
        • SHA256 8e77315ef6f633e82f78c5ff0f4791e77f0cce3ea4aab661922ad43c836916b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.stp.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.stp.jar
        • Size 384KB
        • SHA256 e4019e80e428beed46a654a19c2fffc99f060e2f1f7e4a0d4ccc226635eb6fec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cxh.uni.jar
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/cxh.uni.jar
        • Size 173KB
        • SHA256 c3463e604d6eabb7cd906dbe2304d3a0d723e14b537f267e781c9c05bca4fa06
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 7fad51dfb5b2e5ceb5ba3d13ee7440584048448bcce3418fec66afbeaaa2f1a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1534a42fb7fdcbd6950c6432d97735763bab21090d340c46a690f97bd9ad2bac
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5faa530ebe1a74aa48d626519ad1eba7ff04002fc06c62c2847d99b54ad6472b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 10a5df20bd2829ea0f2e954a5798265006df9b30955b3140ba7a5af3ac6c9144
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 8d043047591d320ebd9d453a1587e406f661d82813274e9594876b2ed89a2741
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 4f6df000a6c0a850839eb9855fa335a112542d47b28bfb626224efcb7f8475c4
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-shm
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-wal
        • Size 36KB
        • SHA256 66630124daeffbad62f720b2a1a8dfea2ad63b339eb98a4b9d5f2bc6af65407a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 2f6cfaa23f2da7e9f7e9fb4738aab13f80fd642b0b1303df43db58239dc70e3f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 5bfb4516b93823813d07d14be98d03a22af9d94dc9e2caed0715b540c52cc4bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 4b847b2595f0fd9a286e11a2c5df954c4a34a7712af47442069484ef2569d9f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 b8988abfdf3f31ea0f671988b483ee25e2b5e7d4fd6a149cd5997a647b3d0875
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 c9de2986f0dbb49de8d24056220e07a24e6c6de2884e7d184cd6bb3b844d6acf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.InstanceId.properties
        • Path /data/data/com.mst.foqmyv.dpkzfma.cxh/no_backup/com.google.InstanceId.properties
        • Size 2KB
        • SHA256 0cb8ca884c4b19f88a0b03d468712e742680332fe69cbdac51f1f161922bfa46
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Anonymous-DexFile@0xc245d000-0xc27002b0
        • Path Anonymous-DexFile@0xc245d000-0xc27002b0
        • Size 2.6MB
        • SHA256 0cdcf7af9d94ac98c6ec9fff7d0cba057791a4ee01d19fa11e4ed7a2f5c42a77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        Anonymous-DexFile@0xc2695000-0xc2700df4
        • Path Anonymous-DexFile@0xc2695000-0xc2700df4
        • Size 431KB
        • SHA256 e4f39d66f221b8278d1e9d7e7f4e243e0094431ffe436212c1a1a6fca1815dfb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        Anonymous-DexFile@0xc2a7f000-0xc2dfc068
        • Path Anonymous-DexFile@0xc2a7f000-0xc2dfc068
        • Size 3.5MB
        • SHA256 d52c8e2b441d1dd7238167c2bcf488d6e1676eb62d1ca035d81f69648dcde685
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        Anonymous-DexFile@0xc2af8000-0xc2d914a8
        • Path Anonymous-DexFile@0xc2af8000-0xc2d914a8
        • Size 2.6MB
        • SHA256 74e5a7db19505ef000f962db4b0fac99192e5736a4b11da014104cd3be7d8622
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        Anonymous-DexFile@0xc3470000-0xc3554d64
        • Path Anonymous-DexFile@0xc3470000-0xc3554d64
        • Size 915KB
        • SHA256 c39507f7737a38176409175efacc5c98bd9f099572c781ccc39c0577c53405f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        Anonymous-DexFile@0xe203e000-0xe20441e0
        • Path Anonymous-DexFile@0xe203e000-0xe20441e0
        • Size 24KB
        • SHA256 30f2772bfe8fd015030df29c14cf3d7559f17a15d78574ae90d09226ceb09e99
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        Anonymous-DexFile@0xe570c000-0xe570dce0
        • Path Anonymous-DexFile@0xe570c000-0xe570dce0
        • Size 7KB
        • SHA256 9234a236de7d4264cce3210d1f586a7e5e43c1b6cc5c5f21800366e1e570bd5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        Anonymous-DexFile@0xe60f7000-0xe60f9018
        • Path Anonymous-DexFile@0xe60f7000-0xe60f9018
        • Size 8KB
        • SHA256 d4d409839b501fc4edf462549afee261df103f7b04446024ffca2281d51dc8b3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download