0fd5cc97088cb88a2227e399f37ed2bf8b0b6b94f668470611768856a98bc64c | Triage™

Analysis

max time kernel
12s
max time network
153s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
02/11/2026, 07:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fdm_armv8.apk
Size 57.7MB
Sample261102-jn6ebaf151
SHA256 0fd5cc97088cb88a2227e399f37ed2bf8b0b6b94f668470611768856a98bc64c
MD5 3cb9ee202de02bce66a99c9994a567ea
SHA1 d5e29a26a605551cbd27a21ad4474f6e439cbe72
SHA512 2b9c711287881612dc29b61b357e640b197d68f29c1e3c684314cf4d6b5005d172c9cafc903d24a65bb652e7d221cef877553c498da84fb978ceabced0a0e43d
SSDEEP 1572864:pVv1X3zu3umvkpp4qLKjN0lLQkRGNhd6XZNv2hsSm3oGq:pH3zEuSkwHjNYLQkRGNhwXLehsH4Gq
TLSH
T173D72303F725FD32D65E437919FF53203B3436A6AB4383575400A6BCBCE22D28AA96D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

Transmitted Data Manipulation

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	org.freedownloadmanager.fdm

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.freedownloadmanager.fdm:service

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

defense_evasion persistence

Foreground Persistence

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	org.freedownloadmanager.fdm:service

Checks the presence of a debugger
defense_evasion

org.freedownloadmanager.fdm
1⤵
- Obtains sensitive information copied to the device clipboard
PID:4160

org.freedownloadmanager.fdm:service
1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
PID:4223

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Foreground Persistence

Privilege Escalation

Defense Evasion

Foreground Persistence

Credential Access

Clipboard Data

Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db

Path /data/data/org.freedownloadmanager.fdm/databases/google_app_measurement_local.db
Size 16KB
SHA256 745f0a765be427ff8f27d878df1738f373fb1dbac6b1b8f02ad037db3668714d
MD5 892e98a5051bdc2fc9827187ff679b99
SHA1 8dac5df5b04545f43bd00dedea6c8a7c4f41d011
SHA512 f7d212e8583b5687d3fc2e05bbd8a7d26ed7acebc002373b999ff0fb822af7e1e13e61814c4712a229e4c70b71417db417b0c888fc648be7ebfa00a641863b24
SSDEEP 6:l9bNFlsls1XhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6OG:TLiEx9zmzrfRmBEyPbP/P+/0Fl6l7
TLSH
T1EA72D8CDBB105703D1B74777B0CB93E15C34B3194727DA177B550564AD431895152F54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/org.freedownloadmanager.fdm/databases/google_app_measurement_local.db
Size 16KB
SHA256 057d63a92212d60ba70a0e73b59493e1f22bb88ec3231a19b73e4c198b165f78
MD5 57438412d582ed3caff0db093cba2daf
SHA1 eb125fee7b190c07e4770808a0f1f6ba7adc74e4
SHA512 fecef1629edb3872014e9cd46a81e13d5ccac521f1dc1c98794ee827aaadc0afbe7646601928c9ebdcdb987d6834f00654f60b1352693bafd3585543af5c5da9
SSDEEP 12:TL1Es9zmzrfRmBEyPbP/hr/gW49blqYFlfH+/0Fl6l7:TLvpmzr0GSP/h1499F1lF8
TLSH
T18172E29ABA24D703E2774B36B1CBE3D16C3872665B23D6177A161A2C6D833C95062F05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/org.freedownloadmanager.fdm/databases/google_app_measurement_local.db
Size 16KB
SHA256 2dc642150a1cca7684e0ba75e03cbb1233a69a800a4710a076850a92d87a7b6c
MD5 fdbbea66874aff0778246864c286ebd7
SHA1 db4496472052bd2cc978cc3eef257cabb127188d
SHA512 bc23564c4501d47c73e7a6e88a2eb549905dd7c00e4e51845406182fe817ab194690cb579e816e6496ee41281f6a86c3c4aa1c4cb0fffba66a82788e8bf1f789
SSDEEP 12:TLIEsE9zmzrfRmBEyPbP/BOiOLaWe/eAUblQUyWldBd49blqYFlfH+/0Fl6l7:TL/pmzr0GSP/RKam/HX499F1lF8
TLSH
T126722699B668DB03F2774B3951CBE7D1293832A60723D6137D165B1C2D833858571F41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/org.freedownloadmanager.fdm/databases/google_app_measurement_local.db
Size 16KB
SHA256 2d2e7b7025a7a20ede8bba40babfeb85264e8166846ef3a297d52242830fb332
MD5 6d15c1e1e5c302559d226cd13ce173ec
SHA1 bc2550adb584035fe8a0a3fe882f0ae889fced42
SHA512 20c9c183d313738810ec273557a692776154df286de7fafb9f871c270268225388f2e1a092606dc7ee1d1c2b991ad207a0edd9e032601a3142247ba22d19c467
SSDEEP 12:TL6uEO9zmzrfRmBEyPbP/sOiOLaWe/eAUblQUyWldBd49blqYFlfH+/0Fl6lv:TL6kpmzr0GSP/yKam/HX499F1lFk
TLSH
T1B47226D9BA68DB03F2734B39A1CBE7C1293932A60723D61B79165F1C2D433858471F41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/org.freedownloadmanager.fdm/databases/google_app_measurement_local.db
Size 16KB
SHA256 6ad65e61a6530098cde17600a697cf9185c160e10805b618d1752e79805a8a91
MD5 d0a7b23d30ccad355da0c4c1e21d6544
SHA1 1b4abfa5313362736f85ff391e82b0fa98432ec7
SHA512 d79c4409f1add0bf257b204502b2f8ea15f0d5b9b9198fcdcbe90cef5ef21a2dd5b85e17a707066c4462358b12e1de861ccd099a3608c29cad82f612b96e1792
SSDEEP 6:l9bNFlgls1gElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/W:TLuEgE9zmzrfRmBEyPbP/W
TLSH
T1FC722B8E9F102A0BC67347B3F4CD93655E54625D8337DE4B6B980870AD835499051F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db

Path /data/data/org.freedownloadmanager.fdm/databases/google_app_measurement_local.db
Size 16KB
SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
MD5 62ad4a05cbdca7f47b3206b7dbda487f
SHA1 4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3
SHA512 0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6
SSDEEP 6:l9bNFl4/Sls1BElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEBE9zmzrfRmBEyPbBvOwk3
TLSH
T15972C2CEDF102606C6764737F8CAE3A05DA4A22D833BDA476B950460AE42559A8A1F98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.freedownloadmanager.fdm/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 1967ae4ae1c1045c7fe80a365d1457f506acccbdaa00412745cb54b657280346
MD5 9e9d6377afbe5bfb8f1bd9156047e78f
SHA1 45e0063a68b036737b5bfc83d3150105a4a8dddf
SHA512 2bcfb6d5aae17e7033e75b7b2f1f5fe00a0eb40ac92e29986b8bd824b80b6604aee8a91cd06a7d66da71afa8c81dc16c6017103756673845aa130681ce2484dc
SSDEEP 6:7+/l9WplciXvg9bNFluls1OElO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKX:7+tQp7qL8En9zmzrfRmBEyPbA
TLSH
T1FB02728C9F002223C12B8733B8EB83401E286228837BDE032B960424AD03449A051FA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.freedownloadmanager.fdm/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 b722332a77c58d25c05b795c3add3c7f10d76606e9fe244f82b6ea75cc2cd227
MD5 e04f1eea46f7bb016f9dc6a5a2cbdf24
SHA1 401f36ae03df4d8a18c3951e252a17d9b66affbd
SHA512 35cbd29ecab8510c593ac991207218577e617887aaf07c0fde0d8073f6ac387ebd2b95513bd223c80b5d380a0cfbe8bbd8273c213fc6212797f63bab3b277473
SSDEEP 12:7+tAsOiOLaWe/eAUblQUyWldBd49blqYFlfH+/0Fl6l8qL6uEO9zmzrfRmBEyPbo:7+tZKam/HX499F1lF5qL6kpmzr0GSsJ
TLSH
T172029799BA24DB03F2734B7991CBD7C12D3832560317C61779061F1C2C433854071F41
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.freedownloadmanager.fdm/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 5a6dd55b14e3ef6f2d5769191b0c90a04a499c0f2efbb97ea3e8430c8cffff8e
MD5 9f470e9c61e557cde10503bf44fd2e91
SHA1 43392df4e833dfbeed6e588cc8537b896bb9fefc
SHA512 f2e88bbe6d6eaa30b825b90b4d9d5f3817d905762d2a4ed7309befa88962ae855098e1d655ae5f239ae41541dfb6b51a85bc195740a82b0d98336e6e70567fd2
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.freedownloadmanager.fdm/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 521e03e0ab63072ff18b11e15d044b93a28c4ab5c25f7015bde6784e75de8539
MD5 5c69ef17bd23b234f462b98699b14477
SHA1 2aedd0d873af3c818728c5322e9958fe1a019343
SHA512 3bcf90d63607c63cc6d025dab4898ab61400e76250106f01326d3efb266e253932d49a95e63df36fc90182eff4e5cfb6dbfd24c299b16b9678a35ecc51954f93
SSDEEP 6:7+/l954n1Nvg9bNFlEuWdOAlOERX4PBX4ogLugMBX4suuKy:7+tgvqLiuWd7RmBEyPb1
TLSH
T10E02229863860913CE195B7BD0E483500D00A71A92A3CB078AA00C942C034CCE4A0D48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.freedownloadmanager.fdm/databases/google_app_measurement_local.db-journal
Size 4KB
SHA256 4792e1661c60948eabbafd4297f2bed794c488bf76e3618b812cfd943eba2ed5
MD5 458109e4f40595683db55e5b1be315cf
SHA1 48654febac637bb08ab877d12d8ab25b6bf6d300
SHA512 7dcd67d57ae49a6d964cf872f80999212530a6ae7eb67bd7932bd48b2184d0f639f197c6d4188a3d5a2b768d4380b52a4ec026d10b87349ce10a4ee1cb279a73
SSDEEP 6:7+/liPg9bNFlLdKEAlOERX4PBX4ogLugMBX4suuKoXt4n:7+t2qLJdKBRmBEyPbkn
TLSH
T1B891809DA7410D13C6195B77D0D983545E106719C773CB57555008A47D476CCF490D44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

google_app_measurement_local.db-journal

Path /data/data/org.freedownloadmanager.fdm/databases/google_app_measurement_local.db-journal
Size 8KB
SHA256 59dc78d7d3267588efdfb282064959dbf406c6c417de760d7d2f84116d7f9df6
MD5 e314299e2f79f0974866e9ba4ac01ed1
SHA1 7d4af74350d02e8f71467d2e872e17b40adbca05
SHA512 2fb42fe5f472a9fe684383c69a9887400a3162f0ed1a24c89c5395ff75228854e75950b9abbcda2b34c1439624a272a45ffd9e78a02f7fae0f444ad449a91622
SSDEEP 6:7+/l9JdFPg9bNFlqhO1oAlOERX4PBX4ogLugMBX4suuKcsvkt/0f:7+tDqLmq9RmBEyPbTmk1m
TLSH
T1DC0222E867C00D03C51E967790D8C3600E00A31482E2CB67996008743D024CCA8D2DA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PersistedInstallation2126780009080702771tmp

Path /data/data/org.freedownloadmanager.fdm/files/PersistedInstallation2126780009080702771tmp
Size 568B
SHA256 d33b528d191436bbdf414380618e33bbe63a31211b3ae10e88f3e7a3f801dd64
MD5 9e9f52510d7daf5ec85521f97a1bbf86
SHA1 cc0aa09dca20a6e2a002b6255ea93526d6ae8ffb
SHA512 bcc64126e110feda28f772cde68fbe48a4bff39a19c9a341bee809f2493eb7bb1260fac84686be2208561a5a70f746d7614a7d473da9f8c63aba82ed82cd3612
TLSH
T12BF0E156BB664E89C5C51A0339CCBC042C29ACF1191B01616FEF68D1B1E4B6781076D4
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation6581426508712261399tmp

Path /data/data/org.freedownloadmanager.fdm/files/PersistedInstallation6581426508712261399tmp
Size 90B
SHA256 1bb38d47d4200232880318445ac30544b04fb4b09d7f797de08740ab4375b291
MD5 f9dab94c87a829897888fcc18944dea4
SHA1 ca058e707d8c861958e65f28024b96f3f144259f
SHA512 9aff5f1f970ebda8ece63793803a846f26ce88a5a709c4c04de3202a07dec694fc839b0d22f58ca4cf092d42cd074127be76af8fba5dc4344599eec7723b7378
TLSH
T15FB01201DE7161C1C4C5F2023C8CB2017D701481484D8A450E0EB080C1823D0D213E94
MD5 SHA1 SHA512 TLSH

Submit Download

style.json

Path /data/data/org.freedownloadmanager.fdm/qt-reserved-files/android-style/320/style.json
Size 180KB
SHA256 78677afb0afc0706d28086a104baaf37b96d2e25411e2f5261666dc52cc64224
MD5 e26697c499d086f62885626115a9e1af
SHA1 0cd8f5c7a8ab77621882ed5dc1a3792bab2df2da
SHA512 77cdb0774621c904ef56a0e1f47e198aa13d33a1b81af6604249b75059640bbb063ddc8937ea45d997a82f87b08ce55585fc8a00dbea95b738a338c5a7b978eb
SSDEEP 1536:oHcrHyr0E8akA5KvCTMBwd9SXgXg5O5YkA9rFba5bvCTMBwd9SXgXg5OCmIv6NAF:m/
TLSH
T1F804E410AB1477ECA2EF941DF0B2DB8623F6B553179E27B194D608CCD095BA14B2F0B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

org.freedownloadmanager.fdm.settings.default.xml

Path /data/data/org.freedownloadmanager.fdm/shared_prefs/org.freedownloadmanager.fdm.settings.default.xml
Size 123B
SHA256 93a11f8e90ab146ceb533f0a4b753ba7cdb0316bef2319c2402ebb41d346b670
MD5 a27a753554366a2bb107735eeff8a54f
SHA1 9b78121d70337c34b7a215de0121b18c5acc9e3f
SHA512 2c5e0be080f2622b67fda6f2bab366cb66a92ae7ab60172b429b2360038a2a2d2c20999ec7b8319b6fb90535f450a3f714cef33db996e8b9640286a4c657b5b7
TLSH
T1FBB09291E1F9ACA3698149265824951A1A79BED3486420EE2D26A97E0E6C29101541A3
MD5 SHA1 SHA512 TLSH

Submit Download