3311efa90473a77cb681cca718f53893a8284eb743fb527674e757389263af0d

Analysis

user interaction
yes
max time kernel
46s
max time network
146s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
02/11/2026, 12:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Hide_My_Android_v1.7.5_(175)_Mod.apk
Size 37.7MB
Sample261102-pdfnssvx9j
SHA256 3311efa90473a77cb681cca718f53893a8284eb743fb527674e757389263af0d
MD5 4001d9083541959749342c976818af77
SHA1 e7cd5bd401ab7c68912536ba750503f450a33c7b
SHA512 3e697f3c8e8a7a4f76599a9d8ddd1f8aa31754fa889494e23306141ff39adf012a487396f0b978dcc97921d1290c7f13569fa1c3175aa05ffe7907508ee3e14b
SSDEEP 393216:K0pWX/QDEjY8yDvMFiXwTvjF71ZQcy2a3n8D4vCqNUI:7x8yqiX6vj96NUI
TLSH
T10887BE82FF9905F6ECB788B4885D4136AA313D148731D6E36E14BA2579733A28F7C784
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.extensions.jar	4129	com.wowsoftware.hidemyandroid
/system_ext/framework/androidx.window.extensions.jar	4129	com.wowsoftware.hidemyandroid
/system_ext/framework/androidx.window.sidecar.jar	4129	com.wowsoftware.hidemyandroid
/system_ext/framework/androidx.window.sidecar.jar	4129	com.wowsoftware.hidemyandroid

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.wowsoftware.hidemyandroid

com.wowsoftware.hidemyandroid
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4129

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.wowsoftware.hidemyandroid/files/profileInstalled
Size 24B
SHA256 e7a8f8ced20718de52c22693f350489efcf445faab171b2260903c042c03e838
MD5 ae379c1528e7797033aa9ec682a3830d
SHA1 23a8a7e11bd53fd4c9a126c3fcec86d490653f1d
SHA512 1241ddada8f74b4b71d9cf6e9ac1c84a0cf88c47efed8ca67feceeab8991c51a203ac9da886044c4bb9c9fd03f4622e2c6cc471132ad6ba797f7de43bfbfc35f
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.wowsoftware.hidemyandroid/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 69f3eb017c937c3e730b46f8d892a0b46fe0f372e455fe5b87b07611b31008de
MD5 13ca979af3843c45cf1592625c10161d
SHA1 e7cfbe088fd0eabcc5cbf1d5e020f8be3d6dfce2
SHA512 a40ddf5f3f386daa6b6c20cfffb6ee97f5c4594e45a07621c2b5f3175bc22f8bf57357cfb463eae878c040910144f47e098b53f6ca15bd943b8cbbc00e4e9031
MD5 SHA1 SHA512

Submit Download

profiles_snapshot.json.tmp

Path /data/data/com.wowsoftware.hidemyandroid/files/profiles_snapshot.json.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.wowsoftware.hidemyandroid/primary.prof
Size 6KB
SHA256 f7dda88333ec964e6dc8373ad3340535aee6959293c151959a31fbafba939108
MD5 cc4963ad15209fb8e67c682cc2e5c8d2
SHA1 f2a3d733135231f7410c6b72f2d07dcea958095f
SHA512 444beb81854f2ec4fda8cb202124ab698efa4fd1d15c20c71faa6d62abfdd5d50663dca59783ce81ad1b0f8659611ebe898fae7f945eb28ecacb7992f490f533
SSDEEP 96:c5b1CMf3LRi1S1Mx9krk0nNAzDvDr3Wg7xKzICtj6pungZJK9DCr2DFXeM91L2:+4MQS1LrkcQr3WCxkIcj6rLSoOC
TLSH
T19ED19DC412FE2586D65E23AC5445E4E3F52390DDC288C89BEBC87723AF038F65C6299C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.wowsoftware.hidemyandroid/primary.prof
Size 9KB
SHA256 4ee58351e85e28a9da6817244824763a9384e7fa181759f1150fe1aabeb14825
MD5 5745f2edc3263ec54e9cb0296b73859f
SHA1 6e00003cebd7e38c9012d93a62c31763df18958a
SHA512 ab6b34c84f698614e8f1c8d935cf2acb725ea2fcde87fef844c334d028ec9ab3eee31b06bc5c8841eccb8f241645fd4bd4be750388ab23f2d0f2e41e0f229dcc
SSDEEP 192:wkhr1rRH7zQRQqkexzE3HBBtGXeNGtJBiigImdKBKnAAtUdHxkpNpHAjD:xfRH7zkkexzE3UXeNGtJEKm0BK94krCD
TLSH
T1B922C0B1107EB279D4B73629C4D10F757631C8DB2CE2B011671B7848ABDB1CDB9A1239
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.window.extensions.jar

Path /system_ext/framework/androidx.window.extensions.jar
Size 123KB
SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
MD5 3056e1bdb7d4e19789d0319eff484bd0
SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
SSDEEP 3072:8Pmsa8v0v8FYNMhpjLXZ/pziNQdysk4p26PQ:Qmsa8vXhRLXXOQGJ
TLSH
T19DC31951FA4159A1DEAE933B959B1301AB30A648AB2383137654D0BCFCD73C39F87AD4
MD5 SHA1 SHA512 SSDEEP TLSH

Download

androidx.window.sidecar.jar

Path /system_ext/framework/androidx.window.sidecar.jar
Size 25KB
SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
MD5 29469324e59dfcc052f24b5af4e7b2c4
SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2
SSDEEP 768:bjydnTmp8WNAupUuvkg5NrtsESOMXIpc3dRwQA0:bjydCpF0uhtsxOQIqdSj0
TLSH
T1A5C2F716E7400C63E9FF9A3B6A5B13009F35E3A4AA43471B640585A4BDC63D3D9EE7C8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads