95e9fdca34836435e9e38f5b2920c41e343ade1c72fbe6c3b823511944ffc24f

Analysis

max time kernel
46s
max time network
153s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
02/11/2026, 12:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app.apk
Size 14.5MB
Sample261102-pdzfxavy2r
SHA256 95e9fdca34836435e9e38f5b2920c41e343ade1c72fbe6c3b823511944ffc24f
MD5 1cd95b55be908f0738c3d2ba01069a13
SHA1 0ca6f99c61b43e03125faf251f3bb4d360e43a91
SHA512 085852b0c904024aebb5875a05e164c9e694bda0aafc2e219cd681e69213f1a5b240cc49c15f9b061c1e318600e45e5cf918a329e5d688bdd8df2a6715d4f23b
SSDEEP 196608:uQU1xYgNQKd5U1p0BxBtJajmqyciQhvUY7lQvL65O6JiVcMn/KNHZ51rMH1YJL:uQUXYyQKQiHBOqfQhcS2v/cMyN54HO
TLSH
T1A1E62286FB28D92FD87734B20C6A5631165B4D168B83A78768483F5C38776E80F5DBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery impact persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.kingtelecom.phone.cover

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.kingtelecom.phone.cover

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.kingtelecom.phone.cover

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.kingtelecom.phone.cover

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.kingtelecom.phone.cover

com.kingtelecom.phone.cover
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4272

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db-journal

Path /data/data/com.kingtelecom.phone.cover/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 4b754a3edf878de883d5f8e098fc53ffa5478873a0c6f9b2d6e3e3ac2b40a33e
MD5 3621d6791651f165c40ae4a02541e9fd
SHA1 4b1b6a03d469fe7fd31c5339b4c1cc41bdc5139b
SHA512 e02e605bb6a673dec906579087479a58cae1c09098b2ca9213f9cc2b90b62088e264a6775014b07b48dd7e9aaed1b7e79b8839141a48c68705da9eed0f5158a9
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-wal

Path /data/data/com.kingtelecom.phone.cover/databases/google_app_measurement_local.db-wal
Size 36KB
SHA256 5dfddf4fc2252202042e62905676fdfb1b17043323b5f28922a23f9ee2e330fd
MD5 03cb4571663d16b336488f8ba13104e5
SHA1 aa95ca80bc5602d9e43ec0796796b3d2ea7b06f2
SHA512 62e2a9d4813cf06c57272358fb64c24ed81d8819f5a5fc9b722ebd531a5f8c6d346b6c0da904746538a3d34f3f04882847f5d1a9d4a4a990cd75883792c7e891
SSDEEP 24:K7/pzyGSP/hxs23sIcEaizDGSP/U08qpmzr0GSP/h75:i/pzNSP/hxnjV9z6SP/U08qArSP/h75
TLSH
T1E9F261EDB7403A53C91D0373E4CAD7479D64A72D836BDB5B66570864BD427CCA090E48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profileInstalled

Path /data/data/com.kingtelecom.phone.cover/files/profileInstalled
Size 24B
SHA256 5fde708d87cd613e0ec82d056d38a17e09d22b3b49b215737c1c34ef5db8b860
MD5 5d5e5059939e8ad36dda87da5931135f
SHA1 6678e5a9b30f9f075acadf932aa649f3c638ef71
SHA512 31107525124b969240867ba5ab2468f636fd33618ed9305f68f4eda310fcb4ed28520d3d356e276d511469ecdfd26bb495951df8198231788e1ef93d32a97c32
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.kingtelecom.phone.cover/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 45e968342f94d09c11dd8dc2ffc45237c7fd130c6ed1f1c80a23d29b659a1bc6
MD5 f09508cd4436fee875e24cc0d00e83ba
SHA1 a776783386e931b0e12e7d57e35753d8e8e11fb7
SHA512 6afde412eb7dfbefbbc050bfae84d2c30f09a1e9693b35d8bebd6da6d50f0adcafd16d5a9e1f41e1ebdd73a1029489efe6dcd4c9e6d586ef14648700cb7f2f83
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.kingtelecom.phone.cover/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.kingtelecom.phone.cover/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 2457b9a17a6650c7ade2abb4503a8aafce6fd528a3fbef4c38bd2e0a16d0759e
MD5 0e70d20dd2f17ae9527f7b57b6c17ce8
SHA1 d21200035d8a52f3016f2fa6782a19cc3a8391db
SHA512 c8a8cec9420a45f133a54d2c19216aed364d2f7111a79b173a9767a8b4801927b3e7bd8113a6800a94314e423f257bf9169118d697f08d87e7857bf99a019af2
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.kingtelecom.phone.cover/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.kingtelecom.phone.cover/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 d51a6ff4b20ad41badd9ad43c6b2e3a27bad03f36081c850d3963f72a162be4a
MD5 4c9d967b55592626cc81b185a9697229
SHA1 1eb2f295d75d0e40a9877c90af53b8a630fb82d3
SHA512 1c67f14b3e73e08fcbbc8b7c3abdbccb90ba23fb682ad47f7a4bd26f0ca068248072b022472268327bf836bc103bf52bc27006008b98fda7cd0c3e9a4d0bfb83
SSDEEP 6:KQ5Tsl0pl9FZdrlOERX4PBX4ogLugMBX4suuK+/v6sRihpsRQMoKEiOw2:KsQlYTzdTRmBEyPbP/CJzFJiOw2
TLSH
T1E3722B945BC84F93ED554377A0E4C36A2D50B70D47D7C74B561144B0AC827C8A4A0E0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.kingtelecom.phone.cover/no_backup/androidx.work.workdb-wal
Size 116KB
SHA256 ff003aff1ccca9add78fbb3d7187a13c93e22f867fa88c6234075b9912281a8a
MD5 9501532d218d0b44d6499acc987bb9a5
SHA1 0e3272765c33407662272af1137228ed9111db7b
SHA512 9188539f1821214b0e3bfcffbc43b50a8cb780441fa22a66123a93d865083058fc0761be53430e0840033cb075b6247fb9384175e3af01fdb4d6ffa0ed3dda84
SSDEEP 96:6TgiuwZ6+etidjnZRWzzb8/KeKcK+zSNddKz+ZD86u0ExV:+DjatidjnfWzzb83zSNde+ZD86u0ED
TLSH
T10AC3438E0F9D2700C8A954B2E9E00FB17D3E512E9BD3E3D1259140B5ADD2962DD29CFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.kingtelecom.phone.cover/no_backup/androidx.work.workdb-wal
Size 124KB
SHA256 5e583e4a95c23dff259fa51ab7064b05bc0a1dab0b81674115704b2127307a31
MD5 caeb5aacbcda7651591fbec089763f3a
SHA1 b43816bc6d9869e18c3514491e928c4cfb65695e
SHA512 5d98aa2fea6edb96cf08529aa43f1eebdf9b60a32c00535b2beb845662f77aca1dc0180bc1dc3f4437a6a7c2a4278393a7037422a2e9202ebd5f9624e02ed701
SSDEEP 3:x1reFCLVcl2wzXtRKVjWED49qQ9ts191v//0XllgoqKXtRKVjWn:+FCiH72VbD49qCtq1f0p2Vq
TLSH
T13BC392E31EA98622C81007BBE83BEBDC020BF90444CABEB1965B4A602C103C9862004C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.kingtelecom.phone.cover/primary.prof
Size 4KB
SHA256 b12f9370139aa1ee102802b9eb9e3964778e5287d119ce9cc2382e9d8559eb0d
MD5 1ee877d05cfe5ef36803ac3b96304f47
SHA1 a12d27d466d7b0a95089fc9b1ccc0a821ebcf6ce
SHA512 4952e778376e917aca47a5cf10c6440462ccf7eefec2aff36ff65d224c4953c17b773975ffbcda9ce1083f20032b0e92217e69130f644f28af017ee4f9d26af6
SSDEEP 96:hO7D1iP6oQgr5znkC6nirPKF4g2s+v+qn65Qgne21TU:I7Dc5r5rCT4BvRJgXhU
TLSH
T172914B17BE755A008F48E757A30888C6F099E73561C5861F83F0CA50FA9F60BFB6912C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.kingtelecom.phone.cover/primary.prof
Size 16KB
SHA256 f0df2e3de5745440d0320b52cd6c9f39ea2653d7589037269b3df0394f40d861
MD5 d96884e9541f81d3796c9bcd3ab6a4e5
SHA1 6654f6a736604e472f35d6d5dc60574a29afece4
SHA512 03a06b986ab84bf6bdcd1afac198fbae72b3ad7ed1e52b648cf4298489e0266759b08e4a02fac89a1ee160c0142a00873a03da6f889ba83d8adab22bccdf033d
SSDEEP 384:8mIPdjLlxyZJHvv8ET81jmDdQpzOBn6Q34Iz4JI3FW5pcwXMXn:8TlxynHvvbo1KyEnN3aYW0
TLSH
T13172E1F450A75FE813A1430397BA24E553E178A78CE2CC9D52845DCCBAE3B27A1A170F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads