Analysis
- max time kernel
26s - max time network
153s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
07/11/2026, 12:21
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
AgendaFlix.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
AgendaFlix.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
AgendaFlix.apk
Resource
android-x64-arm64-20260325-en
5 signatures
150 seconds
General
- Target AgendaFlix.apk
- Size 1.0MB
- Sample261107-pjp5esyscw
- SHA256 c3d0cb113d37953de040d07525e8ca21e71093fe8e019118f51efd515effeb37
- MD5 1474fa4b118dfe9c03debb972b5fd296
- SHA1 ac96a0cc03eefbd8b538cc01ff6ba266cdb1b2e2
- SHA512 f10f431e58715ec75680ac73f643cf577ca64c40741381bb1628ac1a9d8ecaddcb8eb98ba47a23ebd19db6e24223fdf28890315a5abdc9be5d1a7f7023dfe525
- SSDEEP 24576:vYxj1qA88/jHyrso8LYjlp8P3NBHEXhvgwFEUpgZRpt:vYxjn88/Ghp8FBkXlaUpA
- TLSH T1A035BE52F7D1AD1FCC77C0322B86533661169D1ACA82E70B649437AD2C7BACC0E99BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock br.com.nrodrigues.glowagenda - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo br.com.nrodrigues.glowagenda - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone br.com.nrodrigues.glowagenda - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver br.com.nrodrigues.glowagenda - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo br.com.nrodrigues.glowagenda - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo br.com.nrodrigues.glowagenda
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/br.com.nrodrigues.glowagenda/files/PersistedInstallation403086921102730619tmp
- Size 90B
- SHA256 9909f97299ab5131dd398da63a9ee53f724cb25a2447c4b2df768affff23da06
- MD5 4c8889afbe0dfbf1209af802c114e33e
- SHA1 642fc31c04afd1399bf955df51de42f0d8a3511b
- SHA512 1c0c8d1dde4bc8a8be4c15c2d3891f49e01ca01e0a6ba7c9c8ab8f2dbb37ed1da4b4d9122347b9ebe0c69130e8b6fa416243dbf8da162626642085ed725974eb
- TLSH T192B012895A30C591C48FA30A2C8DE2009F4128800609CE044A28D44001813E4A1079E8
- MD5 SHA1 SHA512 TLSH
- Path /data/data/br.com.nrodrigues.glowagenda/files/PersistedInstallation7733524437968267201tmp
- Size 569B
- SHA256 af879dd59d6d5d347b938881a3140f8545fd9fb6fbe47766a885e24d3a38a952
- MD5 2417e3dee585d5eb2e519df5c3af6f3d
- SHA1 cef522e99fd50e2da8930beea11137c6abf0ec01
- SHA512 b54f6bd13f880f1c4979da471f394df90d8aef00290d7f949d7b58be306c00521eb434b57d6f7df50eccdfeb2e48a08db726b94a6cb693363d66abb3a0af10e3
- TLSH T1C7F0268746A0C766D54AA1430E9CFD040F5E0C911A18549BBDDB48E662E5E3E521FE8C
- MD5 SHA1 SHA512 TLSH
- Path /data/data/br.com.nrodrigues.glowagenda/files/profileInstalled
- Size 24B
- SHA256 a81ff84ff166ae9b709dec0b894322223dc0769533800853d6ab05b1cdb3c325
- MD5 faba08e62c2093228bb0d71bf771e337
- SHA1 4fc37b79d88ef9f53e2ad5c1140b0cc6b282107a
- SHA512 9b87df35c03d967e77e246d488716cc42dc02d776d561a355e482a2025ff080b869e08b1ae97730d6c3d20c48c833263030e5b6029bf9beefe498cf4e8fcd6f5
- MD5 SHA1 SHA512
- Path /data/data/br.com.nrodrigues.glowagenda/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 4d24166e93503dc22e540eb0cd54c822f303924708d72b00d158bf24a1b1efe3
- MD5 35bf458648d70ccf3b32bb2da4e5d095
- SHA1 6ce5ce07ddc0e8b5ff74bb7c6543e8fe8884c53d
- SHA512 2682389d97de8412ed522de929c796d4d93b6783518ff855658df6b8f18aff358e3b0cedeaf4374d4f760ce569797c7b8bcf33986559d2c3ecb1192f65b6ee80
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/br.com.nrodrigues.glowagenda/primary.prof
- Size 1KB
- SHA256 5c8c1621dea241b3aa18e0b5f1f5df39a38e9a76e356f13519abc3c5f354afb4
- MD5 e1f80a5004f58d5931866bfaef1ab653
- SHA1 2301241d2dccc257e57732b3f3e1506c2ca4e7bc
- SHA512 1633667ae252b77e8da6bc7300d8db48d6ae83daa06c4d66b622edba0e849984d009695fe9fa6087b92eedcebc9184811edc4ace2959391a94cf9fa74e06c5f4
- TLSH T18C210803521C5D31310C05146E9523036FDF1770E4EBDE8E019CE7801422EB24ED3BAE
- MD5 SHA1 SHA512 TLSH