Overview

overview

8

Static

static

6

CM_Reborn_...gn.apk

android-14-x64

8

Resubmissions

27/10/2026, 12:39

261027-pvlalstyay8

27/10/2026, 12:36

261027-ps1mhstyas8

Analysis

  • user interaction
    yes
  • max time kernel
    2s
  • max time network
    46s
  • platform
    android-14_x64
  • resource
    android-34-x64-arm64-20260325.1-en
  • resource tags

    arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
  • submitted
    27/10/2026, 12:36

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    CM_Reborn_1.2.0_sign.apk
  • Size 749.7MB
  • Sample261027-ps1mhstyas
  • SHA256 439d0da04a01ef8342b2e0da9e9dad622877bc42f8ea29d97031daac4589356e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscovery

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 9 IoCs
    defense_evasion
  • Checks known Qemu pipes. 1 TTPs 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

    defense_evasion
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    defense_evasion
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • com.sheibi.clashmini
    1⤵
    • Checks if the Android device is rooted.
    • Checks known Qemu pipes.
    • Queries information about active data network
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Checks CPU information
    PID:4680

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        09f50f57-dd95-466b-9ce7-d7888417cdc5.envelope
        • Path /data/data/com.sheibi.clashmini/cache/sentry/e43579ebc71a73d6cc7465b460dbf7dbd7931e11/09f50f57-dd95-466b-9ce7-d7888417cdc5.envelope
        • Size 603B
        • SHA256 80af201ae084413dedd6d88c56c9852159be20f81dfbc7e1864d51c50ba33ace
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        session.json
        • Path /data/data/com.sheibi.clashmini/cache/sentry/e43579ebc71a73d6cc7465b460dbf7dbd7931e11/session.json
        • Size 281B
        • SHA256 13fccaeb91a8165816f5e00528189c845fa40bc4c4231f29f3b77c942a47a44d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.sheibi.clashmini/databases/com.google.android.datatransport.events
        • Size 40KB
        • SHA256 89ce50778eb64e9bd28313b113fcca086ed3f52ec80c57afc05d7378c0708d3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.sheibi.clashmini/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 e18fad04f68b59c5abfaf8e5205e42790e20ed6c4296def7b1a0b726d95b1956
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.sheibi.clashmini/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 2f713ca6abb123b762efd40d1926671930e4183f0e6d5c3c92e3babfb16d9b0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.sheibi.clashmini/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 f482107a4b43b5a62c45e91e249c97fda8fe9afcb3c861b5c114602d508d0b38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        INSTALLATION
        • Path /data/data/com.sheibi.clashmini/files/INSTALLATION
        • Size 36B
        • SHA256 9feddc8c8f68338df04cd673bcb16d0291477a0aec6073ab0793c0ad58c6d48b
        • MD5 SHA1 SHA512
        Submit Download