Analysis

  • max time kernel
    126s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    02/11/2026, 12:15

General

  • Target
    FocusMate.apk
  • Size 11.1MB
  • Sample261102-pfb4dsvy8p
  • SHA256 2bbb3b4bde601e9734221e174601077430511dad79eda41c454920291f768aab
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • com.example.notificationaggregator
    1⤵
    • Schedules tasks to execute at a specified time
    PID:4968

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        notifications.db

        • Path /data/data/com.example.notificationaggregator/databases/notifications.db
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH

        notifications.db-journal

        • Path /data/data/com.example.notificationaggregator/databases/notifications.db-journal
        • Size 512B
        • SHA256 a33e84dc863a7aca12c1644471da8b885e51b149b2e4956cb8364d8430b5d38d
        • MD5 SHA1 SHA512

        notifications.db-shm

        • Path /data/data/com.example.notificationaggregator/databases/notifications.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        notifications.db-wal

        • Path /data/data/com.example.notificationaggregator/databases/notifications.db-wal
        • Size 68KB
        • SHA256 d79bd0b625381ccfe03ca6a240cae09dd785ca77a876b59b68399b36152b288f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.example.notificationaggregator/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 d794f663ecb3d7c4ff5253dd86a6867c41e70eababfcec48beb954212b79dda6
        • MD5 SHA1 SHA512

        androidx.work.workdb-journal

        • Path /data/data/com.example.notificationaggregator/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 d5d51589d7d4298697f8860ec3784564cc7165b32323168c3997050d18b9b830
        • MD5 SHA1 SHA512

        androidx.work.workdb-wal

        • Path /data/data/com.example.notificationaggregator/no_backup/androidx.work.workdb-wal
        • Size 229KB
        • SHA256 139da56e52e0acc7d6f7b3f88d88617a2e946f5691bffef5baa8db9d11807294
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.example.notificationaggregator/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 82b0b0b7f1955073d37f0c96325873f0103fb4568c3542e4f1c20786fbf86de7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.example.notificationaggregator/primary.prof
        • Size 7KB
        • SHA256 1e87c9f1633b98cd9cf7c4dfbb41e0c6560368e2b3da74b69feebbb0f67241ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/com.example.notificationaggregator/primary.prof
        • Size 18KB
        • SHA256 6d002901a593311bb9fc3a98f59c0287ebcefe7a8eafa155af631cef95dd3376
        • MD5 SHA1 SHA512 SSDEEP TLSH