Analysis
- max time kernel
6s - max time network
153s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
07/11/2026, 17:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
app-release.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target app-release.apk
- Size 66.4MB
- Sample261107-web6bsdw9t
- SHA256 b053045ec2bd3141630fd6f7c6b23ac3c76ff05f9c0fa4739f7982efee0f847c
- MD5 7fa92f797551cda0a886a33830a0ccbb
- SHA1 a4d13f28b7c1432253e8bc46e3ef5fa4f724206e
- SHA512 7a172eff46d557f5a5e5fb934063c870e8f6d8e6f36a6e92b5efc7d5ba6895245599604e9982a4f19e3587802fd7867c77947b46eb795033e4fea72c2b8fecf6
- SSDEEP 786432:IuvHhDSaO2vhlylUzOe1P0FU43/xjY74FJ:IgH37ylUCEP0FU43/xJ
- TLSH T195E7D047F0A98A35C4DBE238BB6E05727234398D46E29557790CA3207FDF5A00BE66F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4814 com.example.worddown_flutter /system_ext/framework/androidx.window.sidecar.jar 4814 com.example.worddown_flutter - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.example.worddown_flutter
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.example.worddown_flutter/files/Outfit_regular_28fe0a241b5270b9a576ef60c21bec15aefd15ac11df0537e954ef6bd4aece9c.ttf
- Size 46KB
- SHA256 28fe0a241b5270b9a576ef60c21bec15aefd15ac11df0537e954ef6bd4aece9c
- MD5 eb42ff29910a719d9e805643dde506c7
- SHA1 a7c40cc716971b0e1832c82a5077f2ba9fd532cc
- SHA512 1f5c48f3bb8c5e0c31d1b850b7f7e938acf1ad0be3bd47d55dc84ebebc9d57cc2e8c6c569ad8992c8f3996cea6a8208ffee708d992a3275f43e1ea2a6738f49e
- SSDEEP 768:zHCxkHlrlAQNWJObohwyqaAgqnZ+BVMuiY22Brq/4:zHfAQNvYwyB02FBrqQ
- TLSH T12D236B51F386A609D30B7DF8843353342667A838FAF90307566AB738FA8BCD55EA5344
- MD5 SHA1 SHA512 SSDEEP TLSH
FirebaseHeartBeatW0RFRkFVTFRd+MTo4NTE4NDU0MTM2NDY6YW5kcm9pZDpjZDJlYzk4Zjk3OGJjZTMzZTk3NTVm.preferences_pb.tmp
- Path /data/data/com.example.worddown_flutter/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTo4NTE4NDU0MTM2NDY6YW5kcm9pZDpjZDJlYzk4Zjk3OGJjZTMzZTk3NTVm.preferences_pb.tmp
- Size 362B
- SHA256 c8174d347523f2f3e5efc547d399bcc893a7b5f5f8d80f9b6ccf44a30de0ef0c
- MD5 d9beec16e411f2dd8d14c54607f27297
- SHA1 e108a35e826ad519a6c1825e95aa862828514437
- SHA512 d22852629e33dacc1201df1d298cfcf5e67102bdd5e29c728bc30949a5f122f7ee55f263256c451b7eee75c98b917f66e6ccb06a396016b71cf0a3eaa93ffa2a
- TLSH T140E0D816EB8A5DD0B56A9945377C253C0E5FE3D269B500AD11AC8484F98E66844C1E0F
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.example.worddown_flutter/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 bec661db0e286845569ba4fb08a439c20a4c513c25750d00e926c4a49327e36d
- MD5 0b5fce7099a9e773e926db5382ec148b
- SHA1 085cb8fa413d5a9cd4853f64ef753e337bcd9440
- SHA512 5070361f5bd8b61edd23ed14bd02064961e469389ce0a5ad95f1ac89d36d2792ca0bca1bdef977f38e0de8e9fb61f95852cc969b089236fd8be43b12bab992d0
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.example.worddown_flutter/primary.prof
- Size 968B
- SHA256 fcd737ad35ef06af3887b912aa9081ea52fa845d6f30a2c1a5d7226aed6b05e5
- MD5 c2b91583e76b28ca6d961eeb6c0efee2
- SHA1 0f442375e4cfb4275fc6f384d901fea8c7b32501
- SHA512 bb21f024a9199a9ec23ba098bcb4902a76403b22bb9409ea7b33df84a9a4a82a5b96b0215d339d5b8282201fe4e798885932cda1b2b43e39deabfd3f5400231f
- TLSH T15211944A2179E808536BDF5C5BE74741B1863AA4890A37DA65A3A700130B8E80EC029C
- MD5 SHA1 SHA512 TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 12KB
- SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
- MD5 bdf3529e80318eb14e53a5bf3720c10d
- SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
- SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
- SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
- TLSH T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
- MD5 SHA1 SHA512 SSDEEP TLSH