Analysis

  • max time kernel
    6s
  • max time network
    152s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    30/10/2026, 10:50

General

  • Target
    TrueNasMobile-1.2.0-x86_64.apk
  • Size 11.6MB
  • Sample261030-mxrt3acy5m
  • SHA256 7059b36646c6991da86583d34afe7eabc8fa996387e65474d502260e66bef0ae
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • com.gegaremant.truenasmobile
    1⤵
    • Loads dropped Dex/Jar
    • Schedules tasks to execute at a specified time
    PID:4184

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        profileInstalled

        • Path /data/data/com.gegaremant.truenasmobile/files/profileInstalled
        • Size 24B
        • SHA256 9307827b62e15d3546dfd126ed83fcd978a778d2727eca185c30a2496614bd11
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.gegaremant.truenasmobile/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 ec93a57a5fac4b949d251d9f54b3d8af6d173e7369f342d17e6f0f386542836a
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/com.gegaremant.truenasmobile/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.gegaremant.truenasmobile/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 64a98a0d2e22c9857ad130ae0f653f58601cac16df5222689eeaa5d7ef8f423e
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.gegaremant.truenasmobile/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.gegaremant.truenasmobile/no_backup/androidx.work.workdb-wal
        • Size 205KB
        • SHA256 6726f71e66f37c0b454604ade702a685666df942559cb8e9eccf0d9d36cc9f21
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.gegaremant.truenasmobile/primary.prof
        • Size 13KB
        • SHA256 815fd6de83a3969d85d393c6c716ab0b9711f022ed1b35d81b283bb5a9675295
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.window.extensions.jar

        • Path /system_ext/framework/androidx.window.extensions.jar
        • Size 123KB
        • SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.window.sidecar.jar

        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 25KB
        • SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
        • MD5 SHA1 SHA512 SSDEEP TLSH