Overview

overview

8

Static

static

3

Burgle Bud...2).apk

android-9-x86

8

Burgle Bud...2).apk

android-10-x64

8

Burgle Bud...2).apk

android-11-x64

8

Analysis

  • max time kernel
    5s
  • max time network
    37s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    30/10/2026, 21:47

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Burgle Buddies_0.2.8.4 (2).apk
  • Size 78.9MB
  • Sample261030-1np6rsssaw
  • SHA256 0f2eb81ca61595d1956d8f19735785c904b0f14eea3dafd58f30296e041da7dd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscovery

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • se.leveleight.robberybob3
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Checks memory information
    PID:4940

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/user/0/se.leveleight.robberybob3/databases/com.google.android.datatransport.events
        • Size 40KB
        • SHA256 100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/se.leveleight.robberybob3/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 808fa867878c8d08b9fa46eac1a436dc5ed31fc6222363b73a96321dd078a41e
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/se.leveleight.robberybob3/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 c287e0429c77ef38170922b0c35c0e46de28bb303e7ec0efc367b41a1509a3f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/se.leveleight.robberybob3/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 8eb902bd27d0107a91977bb57513060a9697b7437b2867f572b79432b6ffb696
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/se.leveleight.robberybob3/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/se.leveleight.robberybob3/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 8491e2e16e0ed09ccb7a5f5f711739e200882edf1f6a568add087fbf7c222aca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/se.leveleight.robberybob3/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 06aa79f199934ce84e3b923d47e84caac1393b282285b2801892a4fbdf4203c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/se.leveleight.robberybob3/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 316193dfb928d4979c155cd30419b64cd17eb428c0399f3ba7d646a27e9e0223
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/se.leveleight.robberybob3/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 96467431c1efb2dcc6f2c6fcb694fb6325ad91c91a8fa566d8f47734abe3bda3
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/se.leveleight.robberybob3/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 76c296de4cc72d3beb4ef6e46c981aeccb27323d5c079593b0e5668e9e753b91
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/se.leveleight.robberybob3/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 ec129943379814753a28878a99c844c6bc08472420c87705d251f710685ff65b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/se.leveleight.robberybob3/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 476af55b02a6e565b7e7736afcf823e98584c2fba74bf4636413f7746ce5cf90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/se.leveleight.robberybob3/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 3d7dacce8db15bba538fbc265c58bcfc87ce07b2d9fe1e9e5aac5247a6fec999
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/se.leveleight.robberybob3/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 0df3a7c2f9048133cb86c4d194214688c25af35518620dd356a410186f4217f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        6AE510A60219-0001-134C-67EEFC0A121EBeginSession.cls_temp
        • Path /data/user/0/se.leveleight.robberybob3/files/.com.google.firebase.crashlytics/6AE510A60219-0001-134C-67EEFC0A121EBeginSession.cls_temp
        • Size 75B
        • SHA256 5bd9894656f467ca1f971fdbe6294da22ab997261435f5fae870e33eb8ffd89f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        6AE510A60219-0001-134C-67EEFC0A121ESessionApp.cls_temp
        • Path /data/user/0/se.leveleight.robberybob3/files/.com.google.firebase.crashlytics/6AE510A60219-0001-134C-67EEFC0A121ESessionApp.cls_temp
        • Size 98B
        • SHA256 731870fa071473698020a0ad1245dd61c32ff95a41984a89e03db08284afd420
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        6AE510A60219-0001-134C-67EEFC0A121ESessionCrash.cls_temp
        • Path /data/user/0/se.leveleight.robberybob3/files/.com.google.firebase.crashlytics/6AE510A60219-0001-134C-67EEFC0A121ESessionCrash.cls_temp
        • Size 33KB
        • SHA256 3ccbdd10009fea0cb205d2f79a1f98608b479010e9577bb7f1b4660df4f1338d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        6AE510A60219-0001-134C-67EEFC0A121ESessionDevice.cls_temp
        • Path /data/user/0/se.leveleight.robberybob3/files/.com.google.firebase.crashlytics/6AE510A60219-0001-134C-67EEFC0A121ESessionDevice.cls_temp
        • Size 49B
        • SHA256 ec664092a3596d487e39269cc43b1c24502473f0c666e4f91b808394a974a60f
        • MD5 SHA1 SHA512
        Submit Download

        6AE510A60219-0001-134C-67EEFC0A121ESessionOS.cls_temp
        • Path /data/user/0/se.leveleight.robberybob3/files/.com.google.firebase.crashlytics/6AE510A60219-0001-134C-67EEFC0A121ESessionOS.cls_temp
        • Size 15B
        • SHA256 94db7df32f7024d43abbedd5433d0a39a8dfe652621d40e7647af527fb5a2150
        • MD5 SHA1 SHA512
        Submit Download

        6AE510A60219-0001-134C-67EEFC0A121ESessionUser.cls_temp
        • Path /data/user/0/se.leveleight.robberybob3/files/.com.google.firebase.crashlytics/6AE510A60219-0001-134C-67EEFC0A121ESessionUser.cls_temp
        • Size 4B
        • SHA256 dd385bd6d860af19cb2c132d628e3d6872d7b89b3bd2d50f56253bfcb84c78ae
        • MD5 SHA1 SHA512
        Submit Download

        6AE510A70165-0002-134C-67EEFC0A121EBeginSession.cls_temp
        • Path /data/user/0/se.leveleight.robberybob3/files/.com.google.firebase.crashlytics/6AE510A70165-0002-134C-67EEFC0A121EBeginSession.cls_temp
        • Size 75B
        • SHA256 81839898ec0046aa8cb2c05945782e86fe7ac8829136a5b0735b31306e618839
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        6AE510A60219-0001-134C-67EEFC0A121E.cls_temp
        • Path /data/user/0/se.leveleight.robberybob3/files/.com.google.firebase.crashlytics/fatal-sessions/6AE510A60219-0001-134C-67EEFC0A121E.cls_temp
        • Size 34KB
        • SHA256 df717cc0b7df1fe7a5d03c88553654cc4e3dbb5b0b95a6a732a7ce9af0faec51
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        6AE510A602190001134C67EEFC0A121E
        • Path /data/user/0/se.leveleight.robberybob3/files/.com.google.firebase.crashlytics/report-persistence/priority-reports/6AE510A602190001134C67EEFC0A121E
        • Size 60KB
        • SHA256 2e994fb058b982cf96fcf3a216e628ba7218d87a6350ad9efc09237877ed4893
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        event0000000000_
        • Path /data/user/0/se.leveleight.robberybob3/files/.com.google.firebase.crashlytics/report-persistence/sessions/6AE510A602190001134C67EEFC0A121E/event0000000000_
        • Size 59KB
        • SHA256 6a57336827b39469a392b31cb9dbf67387aef6722da347a09fb15234d33c24df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        report
        • Path /data/user/0/se.leveleight.robberybob3/files/.com.google.firebase.crashlytics/report-persistence/sessions/6AE510A602190001134C67EEFC0A121E/report
        • Size 757B
        • SHA256 a2d92d220cb678f7ea4e226fe14e74bf279c8e3e8c1b111bb1d8095dfe5763ee
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/user/0/se.leveleight.robberybob3/files/.com.google.firebase.crashlytics/report-persistence/sessions/6AE510A701650002134C67EEFC0A121E/report
        • Size 757B
        • SHA256 360ce4f759d58c4c27cbd50b045270fba2522466b7680bf7ea0b8f8f9993c628
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation4366719253647812275tmp
        • Path /data/user/0/se.leveleight.robberybob3/files/PersistedInstallation4366719253647812275tmp
        • Size 90B
        • SHA256 bd3985a4369a63d37f4ab4d4c1a53b57aa154ffb14dc2a4b6e2c821fed2d437a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation4947686902908640555tmp
        • Path /data/user/0/se.leveleight.robberybob3/files/PersistedInstallation4947686902908640555tmp
        • Size 569B
        • SHA256 1951779ab0f07740c09eeabb77939c012f6ccc2346bb65a13da27a6707b85e05
        • MD5 SHA1 SHA512 TLSH
        Submit Download