1fe38d4ee21bc0fecbba6f9aad7559d4c42d9385852d0df872cb814ab6bfcbb2

Analysis

max time kernel
11s
max time network
151s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
21/03/2025, 22:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1fe38d4ee21bc0fecbba6f9aad7559d4c42d9385852d0df872cb814ab6bfcbb2.apk
Size 3.5MB
Sample250321-2blhgswkw6
SHA256 1fe38d4ee21bc0fecbba6f9aad7559d4c42d9385852d0df872cb814ab6bfcbb2
MD5 cb072ad519e8386f2f8acf82a6f57ed0
SHA1 08aa5ef185c1add8871bbaa163184de2e88c7c7a
SHA512 587a3f5167001d4f1af6b65f8eb3421e68c56443b7bf61e4c0ff65efb0626b4b76a95a4c73b4440c4985c6f63168d4133b5b8a565e1434743c894278dd19dd62
SSDEEP 98304:/tU+qyfprZ12LzRyDu7t9SWUiMpH4B+TpQ24Mj:/tU+bZ12Yi7Wre+tN
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.kylhavy.antivirus

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.kylhavy.antivirus

com.kylhavy.antivirus
1⤵
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4222

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

vxoid.bin

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin
Size 240KB
SHA256 aabdab286ce3af465a7c54d3900bd619a8ebac0896b9f8af3d41a530925b9b58
MD5 5cdd040c249d8180c87539fd0cd4b593
SHA1 bbb556c8762885b0bd54b739c513168d11f8fe89
SHA512 50d4dc1ab636ee7b8dd46290dd1a66c4fa09f40d75ee3a8a11bf02ca0d7a86a83e7e728ce65f0b0af1228ccaa6ffe1121021fb8f1a0fd633045cd85bf9e35524
SSDEEP 3072:2vTvzvHvT5vTGFCdRfl3okG9P+bjtiucAtw6ZrpitMoTZNoZkMcetw+k6P/2KmjG:pKmkqGb8ZKpwMok00PsN3qH
MD5 SHA1 SHA512 SSDEEP

Submit Download

vxoid.bin-journal

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin-journal
Size 512B
SHA256 898c61969d149342fa33a89c361a1dbf41f71204d0dbbfeda466c3a439178cce
MD5 0bda1365614cfd5c6fdeafb5194f6b08
SHA1 bb33d3a24c5c837586fb46b000ed5206b124f534
SHA512 2785cabe27ca9de5e87bea36178aa8d197f6a73d7e62bffa89d310000a8a3732d3048c8662ade15046d926c9e67da66e1ea4b945b80819058d42e17af836b27f
MD5 SHA1 SHA512

Submit Download

vxoid.bin-journal

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin-journal
Size 4KB
SHA256 50867a4ccba2c845f5e18ed4b65df1a317c35780768e94624e70e65da94ec108
MD5 4c085eeddc4ffcb0e0d48636cde86d20
SHA1 cedeb965f54f7e0b913cee5d6482108273a25db6
SHA512 dc7af30a9e24922589418b8eaad663be06aaebd7437dd273d65e3d1d281b31466038d4fbdc93a6ced7aec76eb7173e62ae3f3691748e76bd8a1c8bbc55ad1712
SSDEEP 6:7+/lfee4Pg9FZO17lOERX4PBX4ogLugMBX4suuK2i:7+t2ewqzqDRmBEyPbHi
MD5 SHA1 SHA512 SSDEEP

Submit Download

vxoid.bin-shm

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

vxoid.bin-wal

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin-wal
Size 20KB
SHA256 bb25b19dcb996d17e97aa765b3356b3b9f0cdc535620cf5969fce2b89c6f9d30
MD5 05e17ad513b85acc444a54ace2cb395b
SHA1 61c0d5c7cbae0c416c1a14af1644daa9ed7cf183
SHA512 74727c4effacc5902f6ea750950b994be372a524d96e6a8d3ec0ec9d46308d4b240ba091e25d8b91f5129aa8c8a8eb2c69336e26ac99dce5140beaec10a12cf1
SSDEEP 12:KtJVwzdTRmBEyPbP/IPVl/9OwCldv8FzqDRmBEyPbV:K9wzyGSP/UPhEkFzDGSV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads