Analysis

  • max time kernel
    126s
  • max time network
    150s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    02/11/2026, 16:49

General

  • Target
    NovaTune-1.2.8-foss-debug.apk
  • Size 21.8MB
  • Sample261102-vb5sssff69
  • SHA256 2c7bd3a146ea040e5307fdea212c0d96ee36bbf7dd570ef07363178311d9efc4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs

Processes

  • com.agastyatomar.aaditune.debug
    1⤵
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    PID:4686

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        11232e7ca4c7744b5d272bf7e7d4e1db8195ca9390cadb223b1071a974b384c7.0.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/11232e7ca4c7744b5d272bf7e7d4e1db8195ca9390cadb223b1071a974b384c7.0.tmp
        • Size 555B
        • SHA256 82a4422ecbd4ebe4a1d9bec0a467c276aed2c7cd89f1ecf8866ce38147aeced1
        • MD5 SHA1 SHA512 TLSH

        11232e7ca4c7744b5d272bf7e7d4e1db8195ca9390cadb223b1071a974b384c7.1.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/11232e7ca4c7744b5d272bf7e7d4e1db8195ca9390cadb223b1071a974b384c7.1.tmp
        • Size 65KB
        • SHA256 3cbe44353de3c2c38972119ad5c4f873f97d74c7e75a3f2fa1790fab3d03da58
        • MD5 SHA1 SHA512 SSDEEP TLSH

        4a802f2dc13e955a9c46764c216fb3087c5e0c0facd70635a243609eb246fde4.0.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/4a802f2dc13e955a9c46764c216fb3087c5e0c0facd70635a243609eb246fde4.0.tmp
        • Size 556B
        • SHA256 42f90b43336db8cd322de4f11acfa2cfae177b3a5062b89e9153fcd458106653
        • MD5 SHA1 SHA512 TLSH

        4a802f2dc13e955a9c46764c216fb3087c5e0c0facd70635a243609eb246fde4.1.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/4a802f2dc13e955a9c46764c216fb3087c5e0c0facd70635a243609eb246fde4.1.tmp
        • Size 88KB
        • SHA256 2db8b6197f0404282fdcb1c8a61b0051a748f8db14da26ad0e05ed13d6ab3da7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        7149caf188546a131ef9e2bd2eb8d7c2d66021e43716f14f19d3bbc075e5dd7d.0.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/7149caf188546a131ef9e2bd2eb8d7c2d66021e43716f14f19d3bbc075e5dd7d.0.tmp
        • Size 555B
        • SHA256 0ed7df7ce6b679cfb352bc417ac2fb0272809241d6fde2253c8fa9dc9b7452ec
        • MD5 SHA1 SHA512 TLSH

        7149caf188546a131ef9e2bd2eb8d7c2d66021e43716f14f19d3bbc075e5dd7d.1.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/7149caf188546a131ef9e2bd2eb8d7c2d66021e43716f14f19d3bbc075e5dd7d.1.tmp
        • Size 76KB
        • SHA256 1ef22d834b26a1ef8dd46d2a0c4c1988324b94c54ebc4645bcc7dea81b66b3d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        b3f7d928fd651eaac87361eb7971179fa24f2dc574ddeee37af4e8367bb431b9.0.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/b3f7d928fd651eaac87361eb7971179fa24f2dc574ddeee37af4e8367bb431b9.0.tmp
        • Size 555B
        • SHA256 04554024f716f29697ffaca662132e707526132258e6dc2eb94576fb6587a63e
        • MD5 SHA1 SHA512 TLSH

        b3f7d928fd651eaac87361eb7971179fa24f2dc574ddeee37af4e8367bb431b9.1.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/b3f7d928fd651eaac87361eb7971179fa24f2dc574ddeee37af4e8367bb431b9.1.tmp
        • Size 92KB
        • SHA256 65494219f2c99e34e9955263dab2feac2eb04816fabbc2998a949c8a98b3572d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        c417423f9d54909c7c5c680a2947f9fd4754949d6f7c1e19faa0e3440acc0dfc.0.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/c417423f9d54909c7c5c680a2947f9fd4754949d6f7c1e19faa0e3440acc0dfc.0.tmp
        • Size 555B
        • SHA256 2d869c2f599b18a9c8702a506365b61c4a3ec64a89c2673e17ec51008af9f7d7
        • MD5 SHA1 SHA512 TLSH

        c417423f9d54909c7c5c680a2947f9fd4754949d6f7c1e19faa0e3440acc0dfc.1.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/c417423f9d54909c7c5c680a2947f9fd4754949d6f7c1e19faa0e3440acc0dfc.1.tmp
        • Size 68KB
        • SHA256 cc8f173ee28f99dc65da9a35a43a47c366962f23de2147373e01a9481af98fbc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cdd7ea40ce14a9a9dd07ecf670ad3dcb9536b31040faadbc87ed76aacacc1eb7.0.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/cdd7ea40ce14a9a9dd07ecf670ad3dcb9536b31040faadbc87ed76aacacc1eb7.0.tmp
        • Size 557B
        • SHA256 42f46899e9ff81189b46a52651968cfa36fa635462db32dc7c0d60c59dd92a41
        • MD5 SHA1 SHA512 TLSH

        cdd7ea40ce14a9a9dd07ecf670ad3dcb9536b31040faadbc87ed76aacacc1eb7.1.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/cdd7ea40ce14a9a9dd07ecf670ad3dcb9536b31040faadbc87ed76aacacc1eb7.1.tmp
        • Size 101KB
        • SHA256 2622ca878d61b6036a34d13035d3e8111a989957ef4350679f52a7012aa3a9a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/journal
        • Size 1KB
        • SHA256 941ac47d3fc1ece25c91107487787415f364f348e5cdbafad60e085c1f521d13
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/journal.tmp
        • Size 31B
        • SHA256 8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a
        • MD5 SHA1 SHA512

        exoplayer_internal.db

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/exoplayer_internal.db
        • Size 52KB
        • SHA256 d1dc5cfa2e8ef1a6cf0090ad8354eacf5945657e849eb964fdba019b69d0644c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/exoplayer_internal.db-journal
        • Size 512B
        • SHA256 577bc88537eb3eeae131c16beafd5d906c3f495e775c15c57d9256913f1da045
        • MD5 SHA1 SHA512

        exoplayer_internal.db-journal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/exoplayer_internal.db-journal
        • Size 8KB
        • SHA256 15e8f18909ba3148951c9446e7b0c70369c44a0f41658d1fb348e5344de84369
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/exoplayer_internal.db-journal
        • Size 4KB
        • SHA256 21ba076c3afe1c002d99d3ba2d08c694b409900f064b64bc8f614ea94e8a037d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/exoplayer_internal.db-journal
        • Size 8KB
        • SHA256 edadeb34e95a12aef33e0d0778491e8c4c50899c083883ecca3c50429b8f55d2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/exoplayer_internal.db-journal
        • Size 16KB
        • SHA256 cec5bc50d7bf6eb82a05b393fa2a758234e3df339dd606ade5dc793fd32ebc93
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/exoplayer_internal.db-journal
        • Size 16KB
        • SHA256 05e431bbcfc5ce3a92fabaa4c98c6b5367b136759a8dd613e2f23236a2fa7cdd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        song.db

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/song.db
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH

        song.db-journal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/song.db-journal
        • Size 512B
        • SHA256 e16348ae7d6baaa152f806e0d0074b9ce33cd1a916796442e8978072663b0860
        • MD5 SHA1 SHA512

        song.db-shm

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/song.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        song.db-wal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/song.db-wal
        • Size 16KB
        • SHA256 4132b2ffbeaff382c2d4a81e1ea687d00dd9b16834b26c6c9e276c0b2b3b0895
        • MD5 SHA1 SHA512 SSDEEP TLSH

        song.db-wal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/song.db-wal
        • Size 181KB
        • SHA256 96badc704d8e84f4cda9b3dfad05e852ff02b36e0f55acf1a82089943c81cf40
        • MD5 SHA1 SHA512 SSDEEP TLSH

        settings.preferences_pb.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/files/datastore/settings.preferences_pb.tmp
        • Size 468B
        • SHA256 0f5cfd8d1b1556902ea77e6c488201e212847fda6fa57e5c5cccc201d7080634
        • MD5 SHA1 SHA512 TLSH

        settings.preferences_pb.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/files/datastore/settings.preferences_pb.tmp
        • Size 491B
        • SHA256 c9a6323a6d22aaab53a32a1066cdaf7c047a81d48e4bbdffb7f4c708788ba1be
        • MD5 SHA1 SHA512 TLSH