e01ab4f88019f5bfa3e1458d6ad4cb555d09a9ccec08c81f8e6c345919f26c82 | Triage™

Analysis

user interaction
yes
max time kernel
10s
max time network
153s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
02/11/2026, 23:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Xv1.apk
Size 7.2MB
Sample261102-3ec6ysxway
SHA256 e01ab4f88019f5bfa3e1458d6ad4cb555d09a9ccec08c81f8e6c345919f26c82
MD5 eb5e524718f288aaa08fb7e04437eb88
SHA1 02ec925e0c654a6b98531390a33643dd3f7d8660
SHA512 1b9bd09ea01c1ba92ae8509fad76349ad029bfe78cb67d4a9683f80273050a1d2019ee49a3002f25e03083daf584aaa7cb19b78649262f4c99507c5b1ac86d60
SSDEEP 196608:ezxzFyq/dhq38hQTiCC0IV6DRIzrJ8eVAgD2dVP4hS:Wd/ThQTiCC0RIz1XVbpS
TLSH
T18C7623C9B3D9AC2FCD33C8314BB2876A56464D0686C6E3471620B16C5DBBAC85F95FC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xspy.build

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

System Network Configuration Discovery

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.xspy.build

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Broadcast Receivers

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.xspy.build

com.xspy.build
1⤵
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5044

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.microsoft.appcenter.persistence

Path /data/data/com.xspy.build/databases/com.microsoft.appcenter.persistence
Size 24KB
SHA256 56a0dbecec1a9d8eeb0f943f2cd0f9861e7fa82eda5c22c17e9ea7a05188e6f2
MD5 e1d302ab662858e61dd4faa353a0efb6
SHA1 f40f21d6a124573886376c79885fee84214438ea
SHA512 98eefc8d67696113ecc1083b15b445c86b67ee90a071e3303113aa9dae9244fe663493a79add466a2172f74b25aa13c162ac35420f9d9eff73fc0f2d32747368
SSDEEP 12:TLirrJNDj3OTSFby+wERXqFww9r6CqdMQa5n96sRmBEyPbD3OwEbyra:TLihNDjesw4ayMuLaC3GSzEl
TLSH
T121B2D8DB0B1CA723C104E2B2C9A3E3A151F1160EC67AAFC329E020A07C03A849871E2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.microsoft.appcenter.persistence-journal

Path /data/data/com.xspy.build/databases/com.microsoft.appcenter.persistence-journal
Size 512B
SHA256 02453e9eba2d735b772b52beb21eb7a12ffe098e5a92b8cd97466f1b17b0ec8f
MD5 f49dc13d1f7505085b551a9eb221380b
SHA1 17b0e2538936476a49bca3edfa4a476f0d29fc8d
SHA512 86cebea99746070019cd14a6ae7456e2cb49f5c01ebe5a1d9b37fc525eee9b57bc357368a2195751d3b5b75e5795a21eb24231f646f5edffe94d102642f76c0f
MD5 SHA1 SHA512

Submit Download

com.microsoft.appcenter.persistence-journal

Path /data/data/com.xspy.build/databases/com.microsoft.appcenter.persistence-journal
Size 8KB
SHA256 a9ac383449a3a49be867a3ce35b6a1ff09775221d51c1378630a8d8f2b23389b
MD5 a0d44e63b21c9a53911ac78f143a05bc
SHA1 b7caa1c1f62903d4ab0c689a2e67d78e35f4aab0
SHA512 c0f4f76050d361f3d27fcb347885d7a073a04dcf0ba322459f6ee1db90f95b5cf0b935bdf4ede5c4df0ec737b9bc87952f0747acae26e0d6ae2af440ba9bdcf8
SSDEEP 6:7+/l9Ksn1iBpg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKPn:7+toBpqLiuWdwRmBEyPbM
TLSH
T13502228973800823C81A16B7D0D883400D30E72A8561CB37157018A87E035CCECA0E14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.microsoft.appcenter.persistence-journal

Path /data/data/com.xspy.build/databases/com.microsoft.appcenter.persistence-journal
Size 8KB
SHA256 ba7b599d0dc700b7b8ff2b35fac911f3d5fa5e9763f728aa624989f4c540dc4e
MD5 664528c3b3df515c73b8b14011465085
SHA1 15c9161927e5946414fee4123c6161deea55ffe5
SHA512 9b291a25230bb13daedd9467729c8570c001bc4010ff8700fc98fa067a1d2c873eeadf99edabddcff18d2965596e812277ff5b063a5b0186d7dfe89b1eadf025
SSDEEP 6:7+/l94mHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKlTlC/gV:7+tbqLJdTRmBEyPb8TlSgV
TLSH
T12D0222DAA7400823C01937F7A0C983402E70AB1C8233CB0729B008983C02ACCACA0D10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.microsoft.appcenter.persistence-journal

Path /data/data/com.xspy.build/databases/com.microsoft.appcenter.persistence-journal
Size 16KB
SHA256 98ab0a68a2b6e0c57e3cbfee5346b77faec1c9709b407d273d6e098e23ae4acb
MD5 a57bf0d164e06f5f0a034e6f11d121d3
SHA1 307e58021a94736211a986a6221355245b2e1126
SHA512 a66ee32c26a515bdc04c70a2686edbb287a02ca870433b82f62dc2c3b828e997cb4c5cd36129c17125342ad5c6f8ed10f5dcff629d9835cd771bfcef144354d6
SSDEEP 12:7+t7tYxN2WqL8rJNDj3OTSFby+wERXqFww9r6CqdMQa5n96sRmBEyPbH3:7+tphWqLsNDjesw4ayMuLaC3GSH3
TLSH
T186724CCA0A2C556BC19AF5F5C9A3D67154F1170FC1BA9FC22AF054B07C477849470E6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.microsoft.appcenter.persistence-journal

Path /data/data/com.xspy.build/databases/com.microsoft.appcenter.persistence-journal
Size 16KB
SHA256 1df3e1c536e00563c34791bbafe908a8ee728082b7ef88d698ffc4dc37e994f3
MD5 fb76be0672353eb6b92bdfec97f8b2ae
SHA1 968f65f193782789cc4ef1fe8edb24c7c1914b1b
SHA512 2c74e42cca1168b90aae76ea4f579dc9134c8abb9a8a6f5f5a015cf08c93195c11c71f0b3971f9b8f614e6224e5e82d309386c5ef3db7f257fcb9a4fcc13c34c
SSDEEP 24:7+tITiiL3u04msU/qHJ2AiaknYN1cIWqLKhNDjesw4ayMuLaC3GSV:7Mw3whbDYq+/esw/tkajSV
TLSH
T1EC7223CE8B1C5937C799DAB5886B9B9145F0031BC4BFEA8A2AD45C203C4BA9550B0A38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

com.microsoft.appcenter.persistence-journal

Path /data/data/com.xspy.build/databases/com.microsoft.appcenter.persistence-journal
Size 12KB
SHA256 e721c2f8ece8d2c7714748bbbb1de0b42dc5fb4b55ff4f9b8d9452438b81c3a9
MD5 da287fb9ca062849cddf05bb55429c70
SHA1 028015a973cf7a2b0e3b6d0f7d35d47cd7888959
SHA512 e97ff552fdd682eeecb22b404c58c18de1c550aba8338439b395ab0b9f52ebfa3845c499e124f5629d5954ab26202fbcd4ca36e43aa5afaa6834cb20a5beb975
SSDEEP 24:7+tI6TiiL3u04msU/qHJ2AiaknYN4qL8NDjesw4ayMuLaC3GSzn:7MI63whbDOqqesw/tkajSzn
TLSH
T1594223CA871C8933C79AEAB584AB969141F0031B84BFEE856ED048307C8B59450B0A28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download