Resubmissions
29/10/2026, 18:24
261029-w2dmnssv9l729/10/2026, 18:20
261029-wy5a8ast7l629/10/2026, 18:18
261029-wxlgqaca346Analysis
- user interaction
yes - max time kernel
5s - max time network
151s - platform
android-15_x64 - resource
android-35-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system - submitted
29/10/2026, 18:20
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
CantHide.apk
Resource
android-35-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target CantHide.apk
- Size 25.0MB
- Sample261029-wy5a8ast7l
- SHA256 d5e87190d888bc8373a846462a6f5b660340159b217a89e0dd7610affeb86611
- MD5 551c32e40c021a34a67cd134ee919fda
- SHA1 07539266f376b07a0a342effeace657c6c420fc0
- SHA512 e52e0e8637887ba41deb3d195e6d9f69ec5dd67ed5d15dbfec78a23e00967585fd64d4519e693cad0ca298a0920634a93847559ca9d21391ecbec00807629e3b
- SSDEEP 786432:ci4oFAEWRyuyanWpg9GYeJM3NGr8stazJuY5j:caF1XaWpZF+ItGJF
- TLSH T11E473346F37DED4ED873D0728C5A56325106DE13CB43E387E969279928AF9E40E807E8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.spoilreina.canthide - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.spoilreina.canthide
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.spoilreina.canthide/databases/cant-hide-default-rtdb.firebaseio.com_default
- Size 36KB
- SHA256 ebdf5574be2bab9775c62827caaae26ee2ac074b50abb305eddabc6830f7abd3
- MD5 00a9f3f5e9ab58e3bd7e0754061f59b5
- SHA1 5afb8db19d07692d9f810b9397d25f8a952e419c
- SHA512 82b4c92c2aae0bf7be8aba5a7a92d10f9128a4e36262160e9db6ad9b926152f45f42bcf394f984ab32f0ac516dbb868ab445ca6ebfb06ee793aa0ddce3cf20b5
- SSDEEP 12:TLrygEI/SaXGXxUE9VyUURKuOm01FsFVzMHeiHOVavL9w2eeRmBEyPb8FOwIeQ:TLmfluUIvOrSFV6eLDfGSgIeQ
- TLSH T19FF26F834B542227C62402727C91C3714F7CDBAF456B5B9BBF9420255D85D0CD839DBC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.spoilreina.canthide/databases/cant-hide-default-rtdb.firebaseio.com_default-journal
- Size 512B
- SHA256 6f2f15c911944f4c46e53ef710d662400868aa16c1d76666f8261057ebc89fea
- MD5 376123e7d12c57df1d099588a82f1516
- SHA1 17b1eb2affe7da1076fae1f1e965296a0a57be44
- SHA512 9c14ae351bef7402431c6985ce9a22ad03b12ee7012646a7a4d87fcf6f5a08539577fc042412cd34b993dba013b9cbf5fb793b81c144e132a745cd8c80d329db
- MD5 SHA1 SHA512
- Path /data/data/com.spoilreina.canthide/databases/cant-hide-default-rtdb.firebaseio.com_default-journal
- Size 8KB
- SHA256 570008b87a6ddb597b6327f245af2bcfa441a1a04dcfca603e18aee830c6f1ef
- MD5 9f09bc8bafc1b0a83af484b6efdbf69a
- SHA1 0b92cb9d6f972e5025a2f9f61e580e7b443d759f
- SHA512 83c23c9af2f7240d80dbece16f5dde72cfb0f68031893ce632b810b18ae8c362534af30c9cd0cfb3a2432fd25928c11da360ab088f164e138f354cbd148c8ff1
- SSDEEP 6:7+/l9CuHn1PWg9bNFlEuWdkG4lWlOERX4PBX4ogLugMBX4suuKMs:7+tlWqLiuWdQoRmBEyPbvs
- TLSH T14C02228877802812C82D667790E483590D10A71A9661CBAF055008943C074CCA8A0E88
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.spoilreina.canthide/databases/cant-hide-default-rtdb.firebaseio.com_default-journal
- Size 8KB
- SHA256 74e3f6b3820eff14f71088c1f52a8591b46d405fa302d30cdcd5a9377b920117
- MD5 52730b4ba71b845ca302275a4bfa24f5
- SHA1 aaa9df16da9d6fe1b7a88ef30c6a814dc1115f67
- SHA512 b2e848b5ed44fab91f75654a508c0122abafdb56cb1827d47f457024194cfff494c981d3f9145593b6772cb9afce5020879e728a13f2a96a5a6cfcf830bf5ce2
- SSDEEP 6:7+/l9zFPg9bNFlLdvlWlOERX4PBX4ogLugMBX4suuKkTt/6:7+trqLJdvloRmBEyPbn16
- TLSH T13302C08867810903C01E37F7D0C8835A1E10EB2AC333CB0709600854BC03BCCFC90D18
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.spoilreina.canthide/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 e3dd87a66fcf95660b05403dc0ec0a73236cea67703cf91ddd0e7167fc410699
- MD5 6a6534d4c35652b20e087e47fc8871c3
- SHA1 172a4cb1caef0ae03ac436f348fe0d7d340e76cf
- SHA512 25f30513911b7e12a46a3836764feb87d7174d69d1b8f5509f267cda2f37496c2b499da734abcfb45f38fd8163f4d73bf16adec073cf6fbb415f2cacfb6c7e1c
- SSDEEP 12:TLWuEU9n9zmzrfRmBEyPbBvOwhk/0RT/VM/QC0:TLHppmzr0GSNh/RT/am
- TLSH T1357255CDFF20E307E1674736E8CAE3D23D74316A0323D60779801B5C5D8224558A1F54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.spoilreina.canthide/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 538c65d44f94ca56d617920cf8e788bea946f0fb9c7bb0a3b47bb729c553a3ad
- MD5 79ed74fc6409f610d70197f0b79d0aec
- SHA1 8ca9598cc17d9037fa645a120796d39aa175905e
- SHA512 df6d573b696049b437d23f75d8048bba0a58a6e3b47f89573a3ddac1dae8506a614da61fcd42b915214fbc598bedc9694d04ceca5a37e3c8acd065b24ec01950
- SSDEEP 12:TLiEB9n9zmzrfRmBEyPbP/3p/0RT/VM/QC0:TLXppmzr0GSP/3SRT/am
- TLSH T1297255CDBE20A703E267473AA4CAD3D23C20316A0323D9473E501A2C5E8264590A1F84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.spoilreina.canthide/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 3159320115da74fe743e7e71882842f0c5594d7d6b3da91a4cfc1ba9d04ce17e
- MD5 7fefa8119273772051108f2363ed231d
- SHA1 b7098741f1d23e73aff1cfca34837e40c8d0673e
- SHA512 9df64e125a406bd2299fbeef02fa5b16fb779a361865d0d18a3762c2c1f4c8ebed363896c1d5cd9af711d9564cc6752dcf722885941551b985cf2fe640e1b2dd
- SSDEEP 12:TL1EuX9n9zmzrfRmBEyPbP/hZt1kn+/0Fl6E034p/0RT/VM/QC0:TL3Xppmzr0GSP/hZtunlFD0ISRT/am
- TLSH T1CC7259CDBA21E707E177473664CBD7E32C3431694723D6677E401B1C6D826815552F44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.spoilreina.canthide/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 1b8268d998f8c14f66e94466233e48c0e426de43d46ee356e4c0121fe37553e9
- MD5 4d1905d58e44ddddb807bb22535ee9ab
- SHA1 20f3c87d137da9fa279212d4eeec8ab8d04c41af
- SHA512 d9183117f79c05065901f3cea8b82b44bd3922daa175d236e00a1657bee46e86ed7e1ca5872dd9f6b84ebd3d34ad2cc650d2994c0f96fd746046d1ae49a6b8cd
- SSDEEP 12:TLIET9n9zmzrfRmBEyPbP/QH49blqYFlVKn+/0Fl6E034p/0RT/VM/QC0:TL3ppmzr0GSP/s499FWnlFD0ISRT/am
- TLSH T1FD7226C9BA31EB07E23B473550C7E7D23C3431A60723D6567A011B1C5D823428661B41
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.spoilreina.canthide/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 7e11c6d673d67b1ac0f9b1e6328a5b0b79fa520e71b2784b985fa01b28adbe22
- MD5 197cc973a589a9b73da7ebab3073195f
- SHA1 7d054ba1720e6f9d3fe52a14448bb683d0044042
- SHA512 ebbc8a7a198405ab0775b4a755f2148c1f1280dbfd267a922d02b10c53cd4020a8355f2d32969bcd9741baf1068e31cf16fc8b6a6d371ee41fc853c4bac03022
- SSDEEP 24:TL6+/ppmzr0GSP/ogKabCCb2ioX499FWnlFD0ISRT/am:T2upArSP/oFabCCb0I5WnDViT
- TLSH T18B7226C9B679DB03F2774B3951C7EBD23D3431AA0713E6577D021B1C6D823818961B42
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.spoilreina.canthide/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 c37ae2aa93a9bbc920b508a4865f7e1d803e036174b7275fdef850e70d2d6a2d
- MD5 7d073877f206fd774622dfd3e1554a72
- SHA1 4c5f98e8893ac706cc1a4cc66444a0d080eb5306
- SHA512 0d434b426e8eed94727eb90435dbe2b8264db49d279c38cc32791663796d0127989bfb29c6043da9a97951bd10348d3f1d3f675a0ba01f7d7236b3168b2f607b
- MD5 SHA1 SHA512
- Path /data/data/com.spoilreina.canthide/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 8986233eab3cc30d07f7630ff25a9853fdb2976207702ed120348d62bf5e7be5
- MD5 d75e32592e674435f7e97067490279a5
- SHA1 411a816da4f0fccf7b82b3e1f7fcddf6e1655481
- SHA512 7ef45a2d38bda1e8f69d1250b56acfe6fdf254cc426628384ab4469eb752208cf57eb89f2b9f009de1ad5af21c8fc5949381183121f99d2fb04581bc7adc26c9
- SSDEEP 6:7+/l9nn1Ufg9bNFlEuWdkG4lWlOERX4PBX4ogLugMBX4suuKx:7+tQqLiuWdQoRmBEyPbe
- TLSH T191022288B7801C12C81A277790D483580D10A7288262CB070A500895AC074CCACE0D0C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.spoilreina.canthide/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 20cfe49ae420230b8a835ba60020031e7927a16f9bf99ff68eab7f50db0259a5
- MD5 9494b7d5c3545aa1078946316d4f70cf
- SHA1 0ed381a12c656c598ac5919d0493cca33ead5ed2
- SHA512 17ddb05bd258df383616b9e81793c4cb0c4e8bde160b704cf4b2d9dbb1437bb8a52f5be031f98e79a51f68f6662687ecdc357f6973453168a492d281fd02b72c
- SSDEEP 6:7+/lp4HPg9bNFlLdvlWlOERX4PBX4ogLugMBX4suuKwY:7+tp4vqLJdvloRmBEyPbe
- TLSH T1C491C0C9A7410803C41A1B77D0C4C3A81D20771C8333CB4B1D9008D43C03ACCEC90D04
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.spoilreina.canthide/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 70f85b9c00de3264505e45140632452b5b4457db1b2ffd5741df886079c7a19b
- MD5 132d3216dac5e078677d250d207914b9
- SHA1 ce34c6b1fc7f6e4fd9e0b06666e20006b1eb50a0
- SHA512 a4192bde0539e62a030baa2a3749627977aeb8f7c0c04168835ae63da04cc018f4672219c80cf45c4ebc2679bf66d3f3cf5076054d679dc7d5e43f40187f3854
- SSDEEP 6:7+/l9mPg9bNFlqhO1SllWlOERX4PBX4ogLugMBX4suuKr/H:7+t0qLmqioRmBEyPboH
- TLSH T164021289AFC51D13C91D667FA0DD83691E20B7598161CB571D6108A87C4A9CCEC91D94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.spoilreina.canthide/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 0eba3010a41785928f146df9106970cf8ca5c4e4fc0d7dfd9be79677ae425e0d
- MD5 d3b24c6605f2d214cda12d96dacd6287
- SHA1 03e0cbffe1349a17dc2cfb36391d956df404399b
- SHA512 f6e74f3620e00a492686bc3c59837e660475b565a1cbaa28084bc93401596c97dfb41ed737b191634afc0fa37683f6588a5e93a84b7bf52eceef3a945fe9c2f2
- SSDEEP 6:7+/l9+g9bNFluls1Oo9nlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKbu:7+tAqL8Ef9n9zmzrfRmBEyPbOu
- TLSH T1AC02728DCF002603C12B1733B4CB93943C68A21C83779D233A980424AD030889051F98
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.spoilreina.canthide/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 4800ad45bf823f89aa8d914351272a38981ff3cb751e26e99697aca97545ffb9
- MD5 dbe71d0a5db6f1e718729b3e8d87396a
- SHA1 0528309d1f6df8f9ddc66225bef7333cd2184b4e
- SHA512 a7237f99cb565b0e6a3d73cf786a045fc081e69a60bcdafc56a252e305997e2d9d3cab2c035cb45c3c4a61007d547650dc1f6e604af8673c664cec032d01afa5
- SSDEEP 24:7+tT499FWnlFD0ISRT/ajqL3ppmzr0GSM:7M05WnDViwqbpArSM
- TLSH T1DF0276C9BA32EB0BF23B473990C7E7D23C3431A60363D5667E411B1C6C863828A62F51
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.spoilreina.canthide/files/PersistedInstallation1242900692329453641tmp
- Size 569B
- SHA256 5ed2a6068a14fc302e4be0e1c4e5074916cf860a12fe443ba1c438128254562f
- MD5 16c58197c2505d56fa8680bdb582653e
- SHA1 65d21152765cc9adb12b6cb9322a83889441959e
- SHA512 db46e1a310a1b187abe767ed02c2a8b46d0765566c8cde55c2faca2c24c35535bbfc812f8bd9cb8414832cd778046d5d362cc22dc3bfd3aabcc68c8d11f00f48
- TLSH T1BEF04B5708A1CE81EEAAA329144C7C638E0D21A12615206CDEFADCE8D0C0808E30290C
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.spoilreina.canthide/files/PersistedInstallation634760107305796704tmp
- Size 90B
- SHA256 c209dc95c143da7616d24a921d5f83081cd4e7655a781bc026b664ded95d46a3
- MD5 2f8f11bf3e78191872a98e7d89942b75
- SHA1 3cef4b56aef9ff4460b420c55d61003f046f5bd7
- SHA512 aa8705ff9d3b61b05e8388900f7cea5bf8c8a55ccc9945a316219631a378ef656eae09a4b9c7e043fd8eef1dcf86dedcf200c98de78d3540f829774acd5aa38c
- TLSH T108B012044B30824289CBB30B2D4CA1001EC02440140FAA0C8B08E4C011821D4C203BB8
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.spoilreina.canthide/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
- MD5 f92de9b7aca81136a5f2712adbd9ae8d
- SHA1 8612ffa8ecae146263660d878c1e74d3da282d00
- SHA512 9c2b923253b6871e68b7c513a1cbd80d39e270749933dc8e08d5add372f5f432c183768854e699cbd68c105b4e81a5500caa1d3fb2b194743c2b76b6095a526e
- TLSH T195810440574000F1D05407F354D1171D0F17D1DCD5410F0315010041CC455440C70FCD
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.spoilreina.canthide/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 0034c2c500b2c21195947ea9fe934bb80503676f8bdb0114f5844042a7a13a28
- MD5 f29f96f64d2a585c89d04ab23cbeb950
- SHA1 6596a402c45e40140627956251c0d70bb24e3e88
- SHA512 8179307424dbbf86826c96e57ddf036f75c6f513af58ffc39a7c877ed5c2e5a9892e345576dafe6d53ede005d9fa889f0f2ec1a99da4da83e01528d148dcc172
- MD5 SHA1 SHA512
- Path /data/data/com.spoilreina.canthide/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.spoilreina.canthide/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 eb9ecf2a461f650bd5451df654486c9490fb2d0a781c691f8fd6fe5298cf877f
- MD5 73e7b728eb3e2d9019860ac76b8f8c46
- SHA1 e3e21328188953e8496a59f3b95277bb1255981e
- SHA512 3785ad01b8b0d04b672f89c50573677bd4bc20e2fc4381673a06ecfe93c49492548a2c2540ce9892313679ccb62f5d2c2f39290f0893342c2d4f99ef7dc07e13
- SSDEEP 96:pyMU/s36+etidjnZRWzzb8/KeKcK+zSb9Kz+eD86u0ExV:PUkMtidjnfWzzb83zSi+eD86u0ED
- TLSH T188C342CD0F582A00C0AA64F0D6A00FA1797E513E9393E7D1659940B6BDD2D21DE29CFA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.spoilreina.canthide/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 97da86f89c8a8c10ed164966176400741cf8e917e01c27fdebe5a39f86bc98bb
- MD5 27d0ef34cea4faef0f1b264e8513ab4e
- SHA1 87ed53a8b57f8586bfdecaaa8334e9691a264ff4
- SHA512 c2e25e5e602b3f476093d05d1e4bdc0649b6681436815332575049c04e30f47e09800f380d1c52106b5019cfd0207d65850321d570aa41a3bcaf007f0bb32a36
- SSDEEP 6:KS+cKoU459FZdvlWlOERX4PBX4ogLugMBX4suuK+/MK4rw9WOw2:K5cKp4HzdvloRmBEyPbP/KrzOw2
- TLSH T155722B9093400D03E1073332C1E8C3E52EE4B63E5752CF0B954C58963C01FDCD860D18
- MD5 SHA1 SHA512 SSDEEP TLSH