95e9fdca34836435e9e38f5b2920c41e343ade1c72fbe6c3b823511944ffc24f

Analysis

max time kernel
46s
max time network
153s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
02/11/2026, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app.apk
Size 14.5MB
Sample261102-ped7csvy5j
SHA256 95e9fdca34836435e9e38f5b2920c41e343ade1c72fbe6c3b823511944ffc24f
MD5 1cd95b55be908f0738c3d2ba01069a13
SHA1 0ca6f99c61b43e03125faf251f3bb4d360e43a91
SHA512 085852b0c904024aebb5875a05e164c9e694bda0aafc2e219cd681e69213f1a5b240cc49c15f9b061c1e318600e45e5cf918a329e5d688bdd8df2a6715d4f23b
SSDEEP 196608:uQU1xYgNQKd5U1p0BxBtJajmqyciQhvUY7lQvL65O6JiVcMn/KNHZ51rMH1YJL:uQUXYyQKQiHBOqfQhcS2v/cMyN54HO
TLSH
T1A1E62286FB28D92FD87734B20C6A5631165B4D168B83A78768483F5C38776E80F5DBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery impact persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.kingtelecom.phone.cover

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.kingtelecom.phone.cover

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.kingtelecom.phone.cover

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.kingtelecom.phone.cover

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.kingtelecom.phone.cover

com.kingtelecom.phone.cover
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4298

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

google_app_measurement_local.db-journal

Path /data/data/com.kingtelecom.phone.cover/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 da69dbe3fdc85c7dd7eb05c4e03da9f9b06f76e46cfda4291fb2bea87bb5d7e5
MD5 f4075269487d1f1c7b8d9655afd37d4c
SHA1 e38d39165c91f9f9848cb8107f08316ead268137
SHA512 9901eb9bd9df38db27664b1a657d5316f21388e577cf194d88aed0d3d57e5805b8b103886679f58c16b60800e6701613f1f2b8d04df7a59d5c73d35ae65d4f25
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-wal

Path /data/data/com.kingtelecom.phone.cover/databases/google_app_measurement_local.db-wal
Size 36KB
SHA256 df8f3129b440297b472857af9eaf9c8faed873ac53c35b652f4358c39881335e
MD5 7f4ffbfbc107572243b08f73be1ff84b
SHA1 101396fb152c364ccdbef4d179e67dd14f930df3
SHA512 019748732552a5017911d2993e6d4c384402080922fffe40d27c29414292b919e8c393cc53b7d54824e5f0fd5397503f2151268bdf57ac3f0634db637e074def
SSDEEP 24:KY6xzyGSP/1E+MKzDGSP/cqpmzr0GSP/SqPL:izNSP/O0z6SP/cqArSP/Sq
TLSH
T13BF26FA7BB409D83C1150372B0C6D3479DD0E2299353C70F26590A646C476ACA0B0E6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profileInstalled

Path /data/data/com.kingtelecom.phone.cover/files/profileInstalled
Size 24B
SHA256 d0b8d2b4814028fe8518bcd537a22cc8fe81e3c5341d459d8b47ebe859ee29bf
MD5 ecb63243ac95d182c0dcf02374ba28f6
SHA1 fdf8bab5e4e2afb6f4324f72c733e5608b9af62f
SHA512 215e5422f595007a0915d939b37d374e460b8da23dcfa2051673cea85454e3e19666e98f500a837fb9c873a04d432f5b3b6fc270c60205d0e43e31d79b1bfa47
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.kingtelecom.phone.cover/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 789cec4e5abbd7625c80097bd73e76ff4b545333785f73776ebf7a4779f2ce05
MD5 48510009fe7995a7d915a55fba6357eb
SHA1 3f285d44ee0111067627279ed53e9e4d10d82803
SHA512 166f582c4453d8b50a4b5def8f1073733ddc7732fa93ae1578a7a13c89c715ba51d78e5351dde6324065fd0365b567343a755dc800838c53cd4ac0d276086410
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb

Path /data/data/com.kingtelecom.phone.cover/no_backup/androidx.work.workdb
Size 4KB
SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
MD5 f2b4b0190b9f384ca885f0c8c9b14700
SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
TLSH
T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/data/com.kingtelecom.phone.cover/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 6d2324158503b3a7a845d2545ba84cee2e796269d85e840b8fb4f01d2717758e
MD5 813fc40ad39270e38f996da15175fa11
SHA1 4e2a979e729623172a7378f62b1ac706d151917a
SHA512 ca3a3f476b3541865ead71860c7ea95bf828663c3b13cc73445a770fe8565ded9f3e2fcefcc8889b6edf505d7a947c947fc7e75389f5c661d3c521891ead4bbf
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/data/com.kingtelecom.phone.cover/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/data/com.kingtelecom.phone.cover/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 a199c4e2209d7cbd2955f9c0c0d1335432aeb26b86508d65032a7c4cc17c91dd
MD5 e091431550ba75ca8c4dcd51fc8aec59
SHA1 96006babdbbca30e162794782d4b235eeb45c602
SHA512 bf4d968917cba34931feaaccdfa5ddc4e7bc9483704752c7a2a7f0aac06de1884d98a07d4c5f5d70b1b45a14b6c1665b7acdfb871784e427cb80ed84224210cf
SSDEEP 12:KcyMilMAXzdTRmBEyPbP/lMKSlvUeoOw2:KPM0MuzyGSP/lMKWUeS2
TLSH
T16B72C269D3845563C93C1B7688E4E3018EE6522E861BCB47199144987E03798E360D48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.kingtelecom.phone.cover/no_backup/androidx.work.workdb-wal
Size 116KB
SHA256 6a37d77e2deb3cf15a407d3706e880159142a4a617d3ef587c4548d59c2258d0
MD5 fa8148ab54430084195b074a6344f188
SHA1 a391d2ea9b19fbc0ce98de1d83b810ec2389262c
SHA512 d1f55e25bab1941f5ea91f2875fdc7dc2fa1dcfa8ea246a486ab5a8c436d127dcd08d485f12a4e589297e7dcb9537c772d1d92348e839638bf2376f383b19818
SSDEEP 96:mzU6+etidjnZRWzzb8/KeKcK+zSZddKz+ZD86u0ExV:kFtidjnfWzzb83zSZde+ZD86u0ED
TLSH
T1C6C3428D0F192610C4BD68B0D9E00FE1BD7E412E979BE3D169A14075ADD3921DF29CFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/data/com.kingtelecom.phone.cover/no_backup/androidx.work.workdb-wal
Size 124KB
SHA256 03609d61e08eef1cf96e0c3c1503df152f1bc28d8b5d1d7dd2fa6aa18a3683cd
MD5 b51dc9558f1fa389d34c633ac4dc81c8
SHA1 0413feb707eeaa8a14a950071ecb08a4da313478
SHA512 d8ea9311cf6ae161283a57ab6511e5967b341be5ab8809e00fa3806fb3499bedbfa6df4a4782b40a51658148089ae735b99fe3fb820dd6e25b941f912dec38bc
SSDEEP 3:xOPKMfIUywzXtRKVjWTlK6bTh0XllgoqKXtRKVjWn:IyMfIUF72VeK6bF0p2Vq
TLSH
T107C392F32B260623C03A1B7CE82FAAC4964BCE8888CE7C72591A49A22C017D84274440
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.kingtelecom.phone.cover/primary.prof
Size 4KB
SHA256 b12f9370139aa1ee102802b9eb9e3964778e5287d119ce9cc2382e9d8559eb0d
MD5 1ee877d05cfe5ef36803ac3b96304f47
SHA1 a12d27d466d7b0a95089fc9b1ccc0a821ebcf6ce
SHA512 4952e778376e917aca47a5cf10c6440462ccf7eefec2aff36ff65d224c4953c17b773975ffbcda9ce1083f20032b0e92217e69130f644f28af017ee4f9d26af6
SSDEEP 96:hO7D1iP6oQgr5znkC6nirPKF4g2s+v+qn65Qgne21TU:I7Dc5r5rCT4BvRJgXhU
TLSH
T172914B17BE755A008F48E757A30888C6F099E73561C5861F83F0CA50FA9F60BFB6912C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.kingtelecom.phone.cover/primary.prof
Size 16KB
SHA256 feb3f147ad17fb1c1b73448d2fdf475df5c5411b059959ab9ecbc4eebbed6a7e
MD5 5ef3f7e2b1ba7e3a82a79dcfbd8d801b
SHA1 86a8817a2bc583cceff9a97d62561c8463a7f2ae
SHA512 dff9a0b1898553a2ff3a5b40f27384029c5c5ca5a912759a65471e9c061616bc81d3ab9992335ec10cd37a54315fbfe5e8b5ae624f97400483cec1f1a3a0e8e5
SSDEEP 384:32+tUWkF87yXkUgVlS81+xzv1uJqcTFS+TdhejM+RcGRNgccf3RQxEdC7:32+Fv7yUUgXV1itHcJS8d6M+SGRbcf3O
TLSH
T15372D0CBC847D96F83B63619315459EA30F13A81EFB44A9D032292495C1EF982BF3D49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads