Overview

overview

8

Static

static

6

4108250e76...19.apk

android-11-x64

8

Analysis

  • max time kernel
    43s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260721-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260721-enlocale:en-usos:android-11-x64system
  • submitted
    13/11/2026, 07:55

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    4108250e767b64031a6c4f7c11738f508bdc222e1f36fd7541b3118456897e19.apk
  • Size 68.1MB
  • Sample261113-jscmsshv9l
  • SHA256 4108250e767b64031a6c4f7c11738f508bdc222e1f36fd7541b3118456897e19
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryevasionexecutionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    defense_evasion
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Checks the presence of a debugger
    defense_evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • org.traccar.client
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    PID:4932

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 1e79d473297e73840206b34f74adcf6b6a2ae807babeb4be880ff7c7ca7a6d5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 4a1acf34fb0502687ddec50ef33e2c70901bf731d0077729b7b8b618d58cdccf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 5a4459ba2e0f362b63a1db9ba5820c46f3df0bc3d6e0dcf208dadac6e3ed62ef
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 e8df73ebd7dab4195e3c0933e630ed1d30ae643f31ed19fcab67cca5170a9a58
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 16KB
        • SHA256 ce1889d2760070f6b405daa5331b7491d89451cb5033abba09bf7e82e44f255b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 20KB
        • SHA256 ebdca1e91dbb6ff1e05ee30ff50fd3a37b673e63839db7609276daa695dcabbd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/org.traccar.client/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 8ecf1c6b7e2410e2618c1dcbead48722be669fddeb682ca188ba4063ce6e764b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 fecda2e650a2cbb3652d60ee1843b2e8fa9858bab765aee964b59b80a73d5c97
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d915eb67b66b98010d8cecb735869830b52fdf243255f86213f30bfd9209e43c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9ce60f71b96aaf76e74ce1fdb479ab7044813204803b8caee410312c172420cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 0e098df0498f5f6580b517c537674c05b4b99c4a2ac8ab5cdee229bfe6f4be47
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 915835077e7a2c28147adda8674bc2329781417b7ec5c3253a326cf899b52de1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9821764b63f652bd60ee0d8ae2b44bd2cd4c3bfc836c92ac68a06e7ec0c3d33c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 1cd10d31ffeafb7667e26fa30d3bb7699103fa0ba9575f2a9ea8863e56c4e803
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 255fd01b1400fa8dab26115cd7fc13f18190559e99dc8fa9062e90d776417393
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 1f4b7dc2ae3efc1bc4b7f5f4415a715ceca4aab8a91869c8ebca2d5006db2a65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 63efb1aed83ce37bb0b56e4d9d0ac97a17cbf3bc7c8c236ff80ad0ed8918bba1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 3ef1a19abae7551e3b844c4a29fa5a5764bdb814e4a72e1db781af88b8c29222
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/org.traccar.client/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 4e71f45ebafbcdb9b72d08ea5fb4495f04d43be6260845f289baa918c9977f52
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db
        • Path /data/data/org.traccar.client/databases/tracker.db
        • Size 32KB
        • SHA256 59d7a17d184f246f3476a3737b92e6fdcd85a92ec71ef96e39ec9e6adcd5c846
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 512B
        • SHA256 4858f56fe24526ca38c565d0708832277aa3cf304b02689db450b0152da1f718
        • MD5 SHA1 SHA512
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 8KB
        • SHA256 ac8ac8e08361f4196daccd46b253f61956531f21e88e2d57a75f708755a89029
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 8KB
        • SHA256 24adee6f139362cccdf5fb170b503224a97775870ae5d268f1045a3449c0aaea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 8KB
        • SHA256 e384ecf8dd4a5b226c6736d302091babc2e2269ef8851a5d865962dcfe4d29a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tracker.db-journal
        • Path /data/data/org.traccar.client/databases/tracker.db-journal
        • Size 12KB
        • SHA256 408b00fa536b5b9b610736cce3653cb4b4534ea2e020f7815e5356281ee8517b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/com.crashlytics.settings.json
        • Size 767B
        • SHA256 de4562d96304787dd2a93889d7748e92b71c579a147938b09c4c8e01f00ff5cf
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        internal-keys
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/open-sessions/6AF6C2C602AF0001134407C535D5F0D8/internal-keys
        • Size 107B
        • SHA256 2e5b79823384123598ae879303e552f5ae0bbb28f2c96b74e82a2e8abcb6840f
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        report
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/open-sessions/6AF6C2C602AF0001134407C535D5F0D8/report
        • Size 823B
        • SHA256 228c79a2be92758a9f4cfdca80b5a4de52d76a419b88bb2abf9d16531927a3a2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/open-sessions/6AF6C2C602AF0001134407C535D5F0D8/userlog
        • Size 190B
        • SHA256 0624651818312c0b55d504eb928f3167e5a50e50543f8e076740d0056710a364
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        userlog.tmp
        • Path /data/data/org.traccar.client/files/.crashlytics.v3/org.traccar.client/open-sessions/6AF6C2C602AF0001134407C535D5F0D8/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation2715235058310620267tmp
        • Path /data/data/org.traccar.client/files/PersistedInstallation2715235058310620267tmp
        • Size 559B
        • SHA256 cd0ef4bf861e1555e2ec8647c2a681216d613560a5ae2021a14305041bb4dd2c
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation531830389080433521tmp
        • Path /data/data/org.traccar.client/files/PersistedInstallation531830389080433521tmp
        • Size 90B
        • SHA256 2e2fd25a4d557e896f4ab29749454ed19cb588af5d90ffa961aa6d0c08c6adc5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTozOTAxNjQ3MTM5NjphbmRyb2lkOmIxYzcxOTRjNjk5YmZhMjU.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTozOTAxNjQ3MTM5NjphbmRyb2lkOmIxYzcxOTRjNjk5YmZhMjU.preferences_pb.tmp
        • Size 480B
        • SHA256 d5f9fc787de858a5193078697341985419278675d78c360e0437571fb39cafd3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FirebaseHeartBeatW0RFRkFVTFRd+MTozOTAxNjQ3MTM5NjphbmRyb2lkOmIxYzcxOTRjNjk5YmZhMjU.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FirebaseHeartBeatW0RFRkFVTFRd+MTozOTAxNjQ3MTM5NjphbmRyb2lkOmIxYzcxOTRjNjk5YmZhMjU.preferences_pb.tmp
        • Size 504B
        • SHA256 4672944d62b16b8c62e9fd24756cc2e10c0e0ac89a460505df6fa3394876119a
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FlutterSharedPreferences.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FlutterSharedPreferences.preferences_pb.tmp
        • Size 34B
        • SHA256 ee9502deb5c1a9382051fd905f0d05d5509d9d5f1bfc0963054fbc31f4520107
        • MD5 SHA1 SHA512
        Submit Download

        FlutterSharedPreferences.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FlutterSharedPreferences.preferences_pb.tmp
        • Size 60B
        • SHA256 32f1c6be8fd830a8da313bf7572c418643455938d69dca99b78cc1a855794be2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        FlutterSharedPreferences.preferences_pb.tmp
        • Path /data/data/org.traccar.client/files/datastore/FlutterSharedPreferences.preferences_pb.tmp
        • Size 92B
        • SHA256 df9c077211ef22f7eb1999fb9571abf2a91e0f4dce3b2241c954f482f8ca0db2
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionConfigsDataStore.data.tmp
        • Path /data/data/org.traccar.client/files/datastore/firebaseSessions/sessionConfigsDataStore.data.tmp
        • Size 145B
        • SHA256 9ccb85a10c0ebc66bf265008ca59ffded7445463aeca63069cc5f0d686d161aa
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        sessionDataStore.data.tmp
        • Path /data/data/org.traccar.client/files/datastore/firebaseSessions/sessionDataStore.data.tmp
        • Size 278B
        • SHA256 d57772397b228b15effbb578a3e6c5c43c0dfd0ec29d1afb1ebcbb605a8739d8
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        flutter_callback_cache.json
        • Path /data/data/org.traccar.client/files/flutter_callback_cache.json
        • Size 226B
        • SHA256 d569ac2f32d1dc07ea9feb5fd881d78786e724bbd95743de69e2d82a940048c9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        flutter_callback_cache.json
        • Path /data/data/org.traccar.client/files/flutter_callback_cache.json
        • Size 389B
        • SHA256 cf90534b15b1f7497d031e5911bdc6a75578fb215f8d66beeaad72f9ad7e1fc3
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        snapshot6646547879747788770.pb
        • Path /data/data/org.traccar.client/files/phenotype/shared/snapshot6646547879747788770.pb
        • Size 122B
        • SHA256 a425408c321c6c34bb44308ce545efa3ad304ffddddc03864a511f209ede4f89
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/org.traccar.client/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 42284f0b6a9e3bf41d1aebc90b41966f006f6c019fa1c59f6d163e0e901b85cc
        • MD5 SHA1 SHA512
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/org.traccar.client/primary.prof
        • Size 1KB
        • SHA256 ea9885f8cb7d36e1664a77e3d1d47a910c6fd85eac4d5906dfc7da716d0d79d5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/org.traccar.client/primary.prof
        • Size 10KB
        • SHA256 35c808c1834244ba37fbf07273a26c743194de04419f720d8b198235e7a295e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 12KB
        • SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download