1fe38d4ee21bc0fecbba6f9aad7559d4c42d9385852d0df872cb814ab6bfcbb2

Analysis

max time kernel
11s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
21/03/2025, 22:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1fe38d4ee21bc0fecbba6f9aad7559d4c42d9385852d0df872cb814ab6bfcbb2.apk
Size 3.5MB
Sample250321-2blhgswkw6
SHA256 1fe38d4ee21bc0fecbba6f9aad7559d4c42d9385852d0df872cb814ab6bfcbb2
MD5 cb072ad519e8386f2f8acf82a6f57ed0
SHA1 08aa5ef185c1add8871bbaa163184de2e88c7c7a
SHA512 587a3f5167001d4f1af6b65f8eb3421e68c56443b7bf61e4c0ff65efb0626b4b76a95a4c73b4440c4985c6f63168d4133b5b8a565e1434743c894278dd19dd62
SSDEEP 98304:/tU+qyfprZ12LzRyDu7t9SWUiMpH4B+TpQ24Mj:/tU+bZ12Yi7Wre+tN
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.kylhavy.antivirus

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.kylhavy.antivirus
1⤵
- Queries information about active data network
PID:4778

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

vxoid.bin

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin
Size 240KB
SHA256 aabdab286ce3af465a7c54d3900bd619a8ebac0896b9f8af3d41a530925b9b58
MD5 5cdd040c249d8180c87539fd0cd4b593
SHA1 bbb556c8762885b0bd54b739c513168d11f8fe89
SHA512 50d4dc1ab636ee7b8dd46290dd1a66c4fa09f40d75ee3a8a11bf02ca0d7a86a83e7e728ce65f0b0af1228ccaa6ffe1121021fb8f1a0fd633045cd85bf9e35524
SSDEEP 3072:2vTvzvHvT5vTGFCdRfl3okG9P+bjtiucAtw6ZrpitMoTZNoZkMcetw+k6P/2KmjG:pKmkqGb8ZKpwMok00PsN3qH
MD5 SHA1 SHA512 SSDEEP

Submit Download

vxoid.bin-journal

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin-journal
Size 512B
SHA256 076cae574bb0228b9448774ef9871ad31c61ec0813b61b7aeb29baf8777fc534
MD5 540fb9d709c3931f5bf99c02ea478161
SHA1 c6ef0af21a6a93e3813bef0a22e6c45b961ed771
SHA512 864d581a2e034b3d96ea31e6455301051cbf50849a7fa849e650d2b32a368090ab07db11c508603853fce13ae493dbf851a10c8f1285380187f48f9bee535387
MD5 SHA1 SHA512

Submit Download

vxoid.bin-journal

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin-journal
Size 8KB
SHA256 968f07094d8cbe8cceb9c64bc26cc62bfa322ff2efba287fa4c1ba5be46be7d3
MD5 524e575268438cce6c5ae683e7ee81e7
SHA1 6df8a61ab96a51c4da29ab855dcda019315b6da7
SHA512 cf39d96106892b74e492c39258b05130b30649536647d518b8630e6437d4386bf3105e1c352407f1a8720e225a42702d250f7d3d9f46f987509f9c0c9999f7d0
SSDEEP 6:7+/l9q48Hn1y4+Wg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKI:7+tsyWqLiuWdYRmBEyPbH
MD5 SHA1 SHA512 SSDEEP

Submit Download

vxoid.bin-journal

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin-journal
Size 4KB
SHA256 df8883f395860472b710c735e63e5e766918b93ac536e5ede5c88975a8c147f4
MD5 e1110793ce097b469c81686e159327b6
SHA1 1cefa50ec6bfbc379bd677ced3690336f82db863
SHA512 a192daedbffb96b92ce7643373302e3d89bef43368ed8122a90945aa27826e3361cb72eb9ca17f28cc1a695b1a4f52b3de9104c498f4f74374f3103ce4ed1cab
SSDEEP 6:7+/lB6HPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKr:7+tB6vqLJdeWRmBEyPbI
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads