1fe38d4ee21bc0fecbba6f9aad7559d4c42d9385852d0df872cb814ab6bfcbb2

Analysis

max time kernel
11s
max time network
149s
platform
android-10_x64
resource
android-x64-20240910-en
resource tags

arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
submitted
21/03/2025, 22:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1fe38d4ee21bc0fecbba6f9aad7559d4c42d9385852d0df872cb814ab6bfcbb2.apk
Size 3.5MB
Sample250321-2blhgswkw6
SHA256 1fe38d4ee21bc0fecbba6f9aad7559d4c42d9385852d0df872cb814ab6bfcbb2
MD5 cb072ad519e8386f2f8acf82a6f57ed0
SHA1 08aa5ef185c1add8871bbaa163184de2e88c7c7a
SHA512 587a3f5167001d4f1af6b65f8eb3421e68c56443b7bf61e4c0ff65efb0626b4b76a95a4c73b4440c4985c6f63168d4133b5b8a565e1434743c894278dd19dd62
SSDEEP 98304:/tU+qyfprZ12LzRyDu7t9SWUiMpH4B+TpQ24Mj:/tU+bZ12Yi7Wre+tN
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.kylhavy.antivirus

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.kylhavy.antivirus

com.kylhavy.antivirus
1⤵
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5220

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

vxoid.bin

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin
Size 240KB
SHA256 aabdab286ce3af465a7c54d3900bd619a8ebac0896b9f8af3d41a530925b9b58
MD5 5cdd040c249d8180c87539fd0cd4b593
SHA1 bbb556c8762885b0bd54b739c513168d11f8fe89
SHA512 50d4dc1ab636ee7b8dd46290dd1a66c4fa09f40d75ee3a8a11bf02ca0d7a86a83e7e728ce65f0b0af1228ccaa6ffe1121021fb8f1a0fd633045cd85bf9e35524
SSDEEP 3072:2vTvzvHvT5vTGFCdRfl3okG9P+bjtiucAtw6ZrpitMoTZNoZkMcetw+k6P/2KmjG:pKmkqGb8ZKpwMok00PsN3qH
MD5 SHA1 SHA512 SSDEEP

Submit Download

vxoid.bin-journal

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin-journal
Size 512B
SHA256 f638e3fc07deab9bf110e79e795ae88a5ecb850e3109ac7102e05c01f6247084
MD5 4e927c69684e4b9b3530e1c4dc3f1d6f
SHA1 69c9d0ba040e7eac6abd766c772fa1e1abaae4d8
SHA512 0dbce6ea4433e6bb9a26b74773cef21fa1aae11e2d5ba410354df29f3e09fb06a191e618c4743ba716b1af2c031f3d7506f2287570600c261c00ae5e576ac626
MD5 SHA1 SHA512

Submit Download

vxoid.bin-journal

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin-journal
Size 8KB
SHA256 782d84bf96b86ed7520cd19b02470d5130a72230b5117a73397c3789e842ca9d
MD5 7d3230786130f58e749fb160b560eecf
SHA1 92538cb104330cab25b04fe9bd774273f5658196
SHA512 3e22895752bc4d19314d7814365622655988a873f64cef636571ab210f116e7b457c9861d52a802f1b777722c672de99bb8b8fa7e78b23c47f8222097f554578
SSDEEP 6:7+/l9+n1Zg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKY9:7+tAqLiuWdwRmBEyPb/9
MD5 SHA1 SHA512 SSDEEP

Submit Download

vxoid.bin-journal

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin-journal
Size 4KB
SHA256 03cc64167e314d925e92dc74f802601fa7e1f8dbe7b3501792aa37a1e17d8727
MD5 2f6c7922fdd404817e6055aa5ae0ea29
SHA1 5feafbeb37df4a1adc93aa4e8bcb86992ffc0ace
SHA512 cf35d379328ccdc5d5a48dcc338932c52e882b29595e14769fc127ce00b38e327d2429b933dcd799b70afcea28cf12f1c4158a076e87456db984439c244a12a3
SSDEEP 6:7+/lcHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKEs:7+tcvqLJdTRmBEyPbo
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads