Analysis

  • max time kernel
    126s
  • max time network
    152s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    02/11/2026, 16:49

General

  • Target
    NovaTune-1.3.1-foss-debug.apk
  • Size 21.8MB
  • Sample261102-vbv9csdx6j
  • SHA256 2efb67dceb7e4dff47ffa5a34708a726bf3e0cf5f227ba3165cc3297570716f5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs

Processes

  • com.agastyatomar.aaditune.debug
    1⤵
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    PID:4768

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        05ef7f8fbf56e1a1a0e1317c92718faa932800098e3df24efc2c9981dbb20b54.0.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/05ef7f8fbf56e1a1a0e1317c92718faa932800098e3df24efc2c9981dbb20b54.0.tmp
        • Size 555B
        • SHA256 74640b1c581bd78bc2a052abc4e1c025e6907f7a6604dd98ce9bb92e5aaf588e
        • MD5 SHA1 SHA512 TLSH

        05ef7f8fbf56e1a1a0e1317c92718faa932800098e3df24efc2c9981dbb20b54.1.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/05ef7f8fbf56e1a1a0e1317c92718faa932800098e3df24efc2c9981dbb20b54.1.tmp
        • Size 64KB
        • SHA256 4eab269f717ea9e290df0522a8d4598ba8dc918aee372e7a28301aabbc275c96
        • MD5 SHA1 SHA512 SSDEEP TLSH

        11232e7ca4c7744b5d272bf7e7d4e1db8195ca9390cadb223b1071a974b384c7.0.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/11232e7ca4c7744b5d272bf7e7d4e1db8195ca9390cadb223b1071a974b384c7.0.tmp
        • Size 555B
        • SHA256 cf2e368208ac7a30a41eb4ecf0ee42be2b2b325d4f9d21d6112d81cb6fac3f3d
        • MD5 SHA1 SHA512 TLSH

        11232e7ca4c7744b5d272bf7e7d4e1db8195ca9390cadb223b1071a974b384c7.1.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/11232e7ca4c7744b5d272bf7e7d4e1db8195ca9390cadb223b1071a974b384c7.1.tmp
        • Size 65KB
        • SHA256 3cbe44353de3c2c38972119ad5c4f873f97d74c7e75a3f2fa1790fab3d03da58
        • MD5 SHA1 SHA512 SSDEEP TLSH

        4a802f2dc13e955a9c46764c216fb3087c5e0c0facd70635a243609eb246fde4.0.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/4a802f2dc13e955a9c46764c216fb3087c5e0c0facd70635a243609eb246fde4.0.tmp
        • Size 556B
        • SHA256 3a1e1a50071503dc90866cb9ae66a76e12595c97c1121a65a85e27cb215041cc
        • MD5 SHA1 SHA512 TLSH

        4a802f2dc13e955a9c46764c216fb3087c5e0c0facd70635a243609eb246fde4.1.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/4a802f2dc13e955a9c46764c216fb3087c5e0c0facd70635a243609eb246fde4.1.tmp
        • Size 88KB
        • SHA256 2db8b6197f0404282fdcb1c8a61b0051a748f8db14da26ad0e05ed13d6ab3da7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        7149caf188546a131ef9e2bd2eb8d7c2d66021e43716f14f19d3bbc075e5dd7d.0.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/7149caf188546a131ef9e2bd2eb8d7c2d66021e43716f14f19d3bbc075e5dd7d.0.tmp
        • Size 555B
        • SHA256 bab4d3b674a87699bf29eeaf019e2be78a03e714a87f970a1f67044a9c1ff3ff
        • MD5 SHA1 SHA512 TLSH

        7149caf188546a131ef9e2bd2eb8d7c2d66021e43716f14f19d3bbc075e5dd7d.1.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/7149caf188546a131ef9e2bd2eb8d7c2d66021e43716f14f19d3bbc075e5dd7d.1.tmp
        • Size 76KB
        • SHA256 1ef22d834b26a1ef8dd46d2a0c4c1988324b94c54ebc4645bcc7dea81b66b3d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        b3f7d928fd651eaac87361eb7971179fa24f2dc574ddeee37af4e8367bb431b9.0.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/b3f7d928fd651eaac87361eb7971179fa24f2dc574ddeee37af4e8367bb431b9.0.tmp
        • Size 555B
        • SHA256 44f3730ff80585a4a6cd84d7e20380b8e1405062edb294d98e764c853b8e3e89
        • MD5 SHA1 SHA512 TLSH

        b3f7d928fd651eaac87361eb7971179fa24f2dc574ddeee37af4e8367bb431b9.1.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/b3f7d928fd651eaac87361eb7971179fa24f2dc574ddeee37af4e8367bb431b9.1.tmp
        • Size 92KB
        • SHA256 65494219f2c99e34e9955263dab2feac2eb04816fabbc2998a949c8a98b3572d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cdd7ea40ce14a9a9dd07ecf670ad3dcb9536b31040faadbc87ed76aacacc1eb7.0.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/cdd7ea40ce14a9a9dd07ecf670ad3dcb9536b31040faadbc87ed76aacacc1eb7.0.tmp
        • Size 556B
        • SHA256 472f13de41b49a7c59faa6ea722fedb90b59793a992d014affe58547f3b7441e
        • MD5 SHA1 SHA512 TLSH

        cdd7ea40ce14a9a9dd07ecf670ad3dcb9536b31040faadbc87ed76aacacc1eb7.1.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/cdd7ea40ce14a9a9dd07ecf670ad3dcb9536b31040faadbc87ed76aacacc1eb7.1.tmp
        • Size 101KB
        • SHA256 2622ca878d61b6036a34d13035d3e8111a989957ef4350679f52a7012aa3a9a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        journal

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/journal
        • Size 1KB
        • SHA256 e1e8776e21805b114cbdc714a0412339d77befaf61adeb72e366697e2369034f
        • MD5 SHA1 SHA512 TLSH

        journal.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/cache/coil/journal.tmp
        • Size 31B
        • SHA256 8f22a32cd8de58916041d1097976f2b9c80f7e9a18593d5a6b058bcaed17e22a
        • MD5 SHA1 SHA512

        exoplayer_internal.db

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/exoplayer_internal.db
        • Size 52KB
        • SHA256 bcda91560d27e5d0dae509eec65ffc8d0e25bcf8e87eca4c41b3ae86cd56a9a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/exoplayer_internal.db-journal
        • Size 512B
        • SHA256 cb0ef8d4949b04feca052661fe475e83c5fa7963b867797d3daeb06be9daeeff
        • MD5 SHA1 SHA512

        exoplayer_internal.db-journal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/exoplayer_internal.db-journal
        • Size 8KB
        • SHA256 18002cf76597984cdce0b1c1c30e7e0b30c6e76b86ea4b177adb159559690c82
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/exoplayer_internal.db-journal
        • Size 4KB
        • SHA256 05a5f8a85e7ce7ac4ffbeef6089ac2be2b9898659a229098d799b5d32863207d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/exoplayer_internal.db-journal
        • Size 8KB
        • SHA256 034b36886f1955a111f5053a26c3913798216697e9ecaacc1cc803a076df1cd6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/exoplayer_internal.db-journal
        • Size 16KB
        • SHA256 fc2545a0c22a6319dc2ae920897a39299b9fe826379f11ef66ee8fc67c1c98c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        exoplayer_internal.db-journal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/exoplayer_internal.db-journal
        • Size 16KB
        • SHA256 4153df554659aee05317515ebb6b218ec23dad26a954697e86b2c1d8444e9721
        • MD5 SHA1 SHA512 SSDEEP TLSH

        song.db

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/song.db
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512 TLSH

        song.db-journal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/song.db-journal
        • Size 512B
        • SHA256 7a151c42e02400c77576c344b4673ecd75a73d143fec164c2b41cf0c345df77b
        • MD5 SHA1 SHA512

        song.db-shm

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/song.db-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        song.db-wal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/song.db-wal
        • Size 16KB
        • SHA256 495803181841cf73014a1c955b5659b9f7683eec724163775b668e470bedbbdf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        song.db-wal

        • Path /data/data/com.agastyatomar.aaditune.debug/databases/song.db-wal
        • Size 181KB
        • SHA256 6af402f629a9bb522b688fd4627143c979259bfabfcf832a37825a799cc7fcb3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        settings.preferences_pb.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/files/datastore/settings.preferences_pb.tmp
        • Size 470B
        • SHA256 3fc14326606baa0621f649712fecb892a9a2d718498d0ea4e763530b135ea300
        • MD5 SHA1 SHA512 TLSH

        settings.preferences_pb.tmp

        • Path /data/data/com.agastyatomar.aaditune.debug/files/datastore/settings.preferences_pb.tmp
        • Size 493B
        • SHA256 eae448d7e05d20da56018f561dad74c5579063d632eaf44f7c509764bcf1faa5
        • MD5 SHA1 SHA512 TLSH