Analysis
- max time kernel
149s - max time network
152s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
- submitted
30/10/2026, 00:56
General
- Target كيبورد مايكروسوفت+ سكريبت.apk
- Size 42.6MB
- Sample261030-basmasch84
- SHA256 548f295dc03d4b48a06e0f6700009d1cebde9f671a1283057544bab0c40873c4
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 2 IoCs
- Checks Android system properties for emulator presence. 1 TTPs 6 IoCs
- Checks Qemu related system properties. 1 TTPs 12 IoCs
Checks for Android system properties related to Qemu for Emulator detection.
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
- Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
- Queries information about active data network 1 TTPs 1 IoCs
- Queries the mobile country code (MCC) 1 TTPs 1 IoCs
- Reads information about phone network operator. 1 TTPs
- Checks the presence of a debugger
- Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
- Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
- Checks CPU information 2 TTPs 1 IoCs
Processes
-
com.touchtype.swiftkey1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Queries the mobile country code (MCC)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
adalks
en_US_458
.config
charactermap.json
emoji_bg_c.lm2
emoji_coefficients.zlib
emoji_intercept.bin
.config
en_US_emoji_search.lm
en_US_emoji_search_flags.lm
en_US.lm
en_US_bus_c.lm1
extra.dat
ime.json
punctuation.json
swiftkey.lm3
242e8d45e7b6736a9113786183ce2e66.0.tmp
242e8d45e7b6736a9113786183ce2e66.1.tmp
254daa21552c7d75aab2d16351f8e018.0.tmp
254daa21552c7d75aab2d16351f8e018.1.tmp
a7557c060a1392a6cd6f9fe8656fee85.0.tmp
a7557c060a1392a6cd6f9fe8656fee85.1.tmp
journal
journal.tmp
ts_configuration.tmp
com.google.android.datatransport.events
com.google.android.datatransport.events-journal
com.google.android.datatransport.events-journal
com.google.android.datatransport.events-journal
com.google.android.datatransport.events-journal
com.google.android.datatransport.events-journal
com.google.android.datatransport.events-journal
com.crashlytics.settings.json
event0000000000
event0000000001
internal-keys
report
AdjustAttribution
AdjustIoActivityState
AdjustIoActivityState
AdjustIoActivityState
AdjustIoActivityState
AdjustIoActivityState
AdjustIoActivityState
AdjustIoPackageQueue
AdjustIoPackageQueue
PersistedInstallation1661928362213862366tmp
PersistedInstallation4223810610756665917tmp
firebase_session_Y29tLnRvdWNodHlwZS5zd2lmdGtleQ==_data.preferences_pb.tmp
firebase_session_Y29tLnRvdWNodHlwZS5zd2lmdGtleQ==_settings.preferences_pb.tmp
firebase_session_Y29tLnRvdWNodHlwZS5zd2lmdGtleQ==_settings.preferences_pb.tmp
firebase_session_Y29tLnRvdWNodHlwZS5zd2lmdGtleQ==_settings.preferences_pb.tmp
firebase_session_Y29tLnRvdWNodHlwZS5zd2lmdGtleQ==_settings.preferences_pb.tmp
firebase_session_Y29tLnRvdWNodHlwZS5zd2lmdGtleQ==_settings.preferences_pb.tmp
downloadedLanguagePacks.json
downloadedLanguagePacks.json
languagePacks.json
msal_browser_config.json
out-174829489300
out-175811869249
bbabc7a995e1baeb_0
bbabc7a995e1baeb_1
bbabc7a995e1baeb_10
bbabc7a995e1baeb_100
bbabc7a995e1baeb_101
bbabc7a995e1baeb_102
bbabc7a995e1baeb_103
bbabc7a995e1baeb_104
bbabc7a995e1baeb_11
bbabc7a995e1baeb_12
bbabc7a995e1baeb_13
bbabc7a995e1baeb_14
bbabc7a995e1baeb_15
bbabc7a995e1baeb_16
bbabc7a995e1baeb_17
bbabc7a995e1baeb_18
bbabc7a995e1baeb_19
bbabc7a995e1baeb_2
bbabc7a995e1baeb_20
bbabc7a995e1baeb_21
bbabc7a995e1baeb_22
bbabc7a995e1baeb_23
bbabc7a995e1baeb_24
bbabc7a995e1baeb_25
bbabc7a995e1baeb_26
bbabc7a995e1baeb_27
bbabc7a995e1baeb_28
bbabc7a995e1baeb_29
bbabc7a995e1baeb_3
bbabc7a995e1baeb_30
bbabc7a995e1baeb_31
bbabc7a995e1baeb_32
bbabc7a995e1baeb_33
bbabc7a995e1baeb_34
bbabc7a995e1baeb_35
bbabc7a995e1baeb_36
bbabc7a995e1baeb_37
bbabc7a995e1baeb_38
bbabc7a995e1baeb_39
bbabc7a995e1baeb_4
bbabc7a995e1baeb_40
bbabc7a995e1baeb_41
bbabc7a995e1baeb_42
bbabc7a995e1baeb_43
bbabc7a995e1baeb_44
bbabc7a995e1baeb_45
bbabc7a995e1baeb_46
bbabc7a995e1baeb_47
bbabc7a995e1baeb_48
bbabc7a995e1baeb_49
bbabc7a995e1baeb_5
bbabc7a995e1baeb_50
bbabc7a995e1baeb_51
bbabc7a995e1baeb_52
bbabc7a995e1baeb_53
bbabc7a995e1baeb_54
bbabc7a995e1baeb_55
bbabc7a995e1baeb_56
bbabc7a995e1baeb_57
bbabc7a995e1baeb_58
bbabc7a995e1baeb_59
bbabc7a995e1baeb_6
bbabc7a995e1baeb_60
bbabc7a995e1baeb_61
bbabc7a995e1baeb_62
bbabc7a995e1baeb_63
bbabc7a995e1baeb_64
bbabc7a995e1baeb_65
bbabc7a995e1baeb_66
bbabc7a995e1baeb_67
bbabc7a995e1baeb_68
bbabc7a995e1baeb_69
bbabc7a995e1baeb_7
bbabc7a995e1baeb_70
bbabc7a995e1baeb_71
bbabc7a995e1baeb_72
bbabc7a995e1baeb_73
bbabc7a995e1baeb_74
bbabc7a995e1baeb_75
bbabc7a995e1baeb_76
bbabc7a995e1baeb_77
bbabc7a995e1baeb_78
bbabc7a995e1baeb_79
bbabc7a995e1baeb_8
bbabc7a995e1baeb_80
bbabc7a995e1baeb_81
bbabc7a995e1baeb_82
bbabc7a995e1baeb_83
bbabc7a995e1baeb_84
bbabc7a995e1baeb_85
bbabc7a995e1baeb_86
bbabc7a995e1baeb_87
bbabc7a995e1baeb_88
bbabc7a995e1baeb_89
bbabc7a995e1baeb_9
bbabc7a995e1baeb_90
bbabc7a995e1baeb_91
bbabc7a995e1baeb_92
bbabc7a995e1baeb_93
bbabc7a995e1baeb_94
bbabc7a995e1baeb_95
bbabc7a995e1baeb_96
bbabc7a995e1baeb_97
bbabc7a995e1baeb_98
bbabc7a995e1baeb_99
profileinstaller_profileWrittenFor_lastUpdateTime.dat
.etag
config.yaml
.etag
config.yaml
.etag
config.yaml
825ea840a3e755afab27b35a08531487a59c10f544bfe6f96d642f04fd228694.json
etag.dat
primary.prof
androidx.window.sidecar.jar