Analysis
- max time kernel
6s - max time network
152s - platform
android-13_x64 - resource
android-33-x64-arm64-20260708-en - resource tags
arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system - submitted
30/10/2026, 10:50
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
TrueNasMobile-1.2.0-x86_64.apk
Resource
android-33-x64-arm64-20260708-en
2 signatures
150 seconds
General
- Target TrueNasMobile-1.2.0-x86_64.apk
- Size 11.6MB
- Sample261030-mxrt3acy5m
- SHA256 7059b36646c6991da86583d34afe7eabc8fa996387e65474d502260e66bef0ae
- MD5 981ec556352c49729235080d57007584
- SHA1 651cfd8303e35bc6f66cf573059403603f8bfd56
- SHA512 bbed0b11d59fa2416bb424290dfd56a62bbda4f5a8ab0c2a4c21c7660eb1e050a6b9b160c060499cd07ac20e072317b8e66b7ddc4722660a31c3fc9754f29d73
- SSDEEP 98304:fOBi3ZUBLS0ykmwOWaSVPu7ceCce2/gBeHuarPMitk36+BbI8j+tIfKZmoK3ZWXY:fyiJQWHkm5qPyCI/z9tbC
- TLSH T1E3C69D5AEB964E39E07E623088B653996322DD54BE834B0B00457AFC3F771D02B957CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.extensions.jar 4184 com.gegaremant.truenasmobile /system_ext/framework/androidx.window.extensions.jar 4184 com.gegaremant.truenasmobile /system_ext/framework/androidx.window.sidecar.jar 4184 com.gegaremant.truenasmobile /system_ext/framework/androidx.window.sidecar.jar 4184 com.gegaremant.truenasmobile - Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.gegaremant.truenasmobile
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.gegaremant.truenasmobile/files/profileInstalled
- Size 24B
- SHA256 9307827b62e15d3546dfd126ed83fcd978a778d2727eca185c30a2496614bd11
- MD5 266affa2bba4c19a955bf1d39bc6bf04
- SHA1 847e55bb70a31df613aac0a92e0b8c518548458a
- SHA512 88f36606af607c82604d3a81008507eafeb572c0f60c9f32614a17d6ae4f28e79a78f46709f1f16abbfb71e9bf88c4f2d53afff3393ae16ed230833d097dfb21
- MD5 SHA1 SHA512
- Path /data/data/com.gegaremant.truenasmobile/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 ec93a57a5fac4b949d251d9f54b3d8af6d173e7369f342d17e6f0f386542836a
- MD5 b76eb16d4cdacc2a9b40c3403d2446aa
- SHA1 319fdba402953ddc1460883ad08022eaad89e1b3
- SHA512 04af3c6ad53d3be9161ab22486863503ca974680def9db03c8e22a0e24c971859976a4267d03b2cdb94d8ad0c7e6a3b01e1d4966db77d6014aeeb880ba9e9e09
- MD5 SHA1 SHA512
- Path /data/data/com.gegaremant.truenasmobile/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
- MD5 0eb157e1a86d4d00aa601dd2f6ff3ee3
- SHA1 fee434f784e73cc7916322e949f727caf8363102
- SHA512 b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8
- TLSH T183810250534000E1D05446B354E113080F06D19496428B03550100428C415440C60E88
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.gegaremant.truenasmobile/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 64a98a0d2e22c9857ad130ae0f653f58601cac16df5222689eeaa5d7ef8f423e
- MD5 35bcb446ed30737a6d7cf2c04d4f408a
- SHA1 e494fb68fe7ba4f044b037a077dbba1c00af25c2
- SHA512 de67e155b4d09a08765710440c5acc9d431b218465ccd12b77772f97cc0a6381704b3d25ec6b82ba32fea6612831c946dd08a7cf8beb8c9e4f4e9701786a1256
- MD5 SHA1 SHA512
- Path /data/data/com.gegaremant.truenasmobile/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.gegaremant.truenasmobile/no_backup/androidx.work.workdb-wal
- Size 205KB
- SHA256 6726f71e66f37c0b454604ade702a685666df942559cb8e9eccf0d9d36cc9f21
- MD5 3927f626b96b6c4c997c584994827681
- SHA1 df54695e2ecfddd76c42146496aec854740d6863
- SHA512 d361b161c0f8310592ba7b70df99553c462d7d2230f05019fcff13bd76dd81f384a14462a26b47dff9fb58334f7f87b3673f83a8aa11300cc906972ab88a2317
- SSDEEP 384:8O0tidjnfWzzb83zSz4XD86u0Ei1VsQ1l1Z1S1L:8SfWz03zSz4XD86ycjnLML
- TLSH T15C24848E1F581B94C05530B1EADC4BF12D3E583ECB5697DB20B214A5AEE351AD933CE8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/com.gegaremant.truenasmobile/primary.prof
- Size 13KB
- SHA256 815fd6de83a3969d85d393c6c716ab0b9711f022ed1b35d81b283bb5a9675295
- MD5 b6b35a22faa3c9ce6a85ce6254e514a7
- SHA1 be7c84f676cf8bffc2c6bd59e9c1a802098eb977
- SHA512 a16f085542d0a063ba3fb257b78680fa7e97322ff17e808e46deedb411dbd0a371b4178ba6ef0be6edd4fd93a8dba29a4476baef5f502a27e6bb9afd2e83b3df
- SSDEEP 384:vjlND6E85odj5ur9qClbsuu7e9yN6RIp9KQurNXFnp:blNvw9plbduqy1kQuTnp
- TLSH T15152D1BCBB680100D56DE7177464B1AA31ACD2A94A70ED0D4B323578F00EA9F3551E97
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.extensions.jar
- Size 123KB
- SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
- MD5 3056e1bdb7d4e19789d0319eff484bd0
- SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
- SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
- SSDEEP 3072:8Pmsa8v0v8FYNMhpjLXZ/pziNQdysk4p26PQ:Qmsa8vXhRLXXOQGJ
- TLSH T19DC31951FA4159A1DEAE933B959B1301AB30A648AB2383137654D0BCFCD73C39F87AD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 25KB
- SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
- MD5 29469324e59dfcc052f24b5af4e7b2c4
- SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
- SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2
- SSDEEP 768:bjydnTmp8WNAupUuvkg5NrtsESOMXIpc3dRwQA0:bjydCpF0uhtsxOQIqdSj0
- TLSH T1A5C2F716E7400C63E9FF9A3B6A5B13009F35E3A4AA43471B640585A4BDC63D3D9EE7C8
- MD5 SHA1 SHA512 SSDEEP TLSH