26b7c0b09bf02742ce0a07d7584a20c3bf78382d696e5e76f0dcc4b5da9425bb

Analysis

max time kernel
5s
max time network
25s
platform
android-13_x64
resource
android-33-x64-arm64-20240910-en
resource tags

arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system
submitted
22/03/2025, 00:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

26b7c0b09bf02742ce0a07d7584a20c3bf78382d696e5e76f0dcc4b5da9425bb.apk
Size

13.5MB
MD5

daeef69481050078388141a95cf5aa6d
SHA1

c0cbfefd361a15bf8ec180f7da35bcfba3ea4593
SHA256

26b7c0b09bf02742ce0a07d7584a20c3bf78382d696e5e76f0dcc4b5da9425bb
SHA512

96e711b122504c0489019e366869b622d1c26f766c2adb05c8c4d431b74c8e35376c7c9180293326b17b58379629ab65e371f2180416e1602cb60fde321b3800
SSDEEP

196608:ZqHM1pMza6/6a4OAY8kl4gCnLyZvP84RnI39qpIsEsptCZGSfbgVLbNfEtv5bHf:ZhpMORh3kl4Z+6II3Owspt0MVBwBb/

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.hammer.leaf/app_sell/mDHXyp.json	4463	com.hammer.leaf

com.hammer.leaf
1⤵
- Loads dropped Dex/Jar
PID:4463

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.hammer.leaf/app_sell/mDHXyp.json

Filesize
2.6MB

MD5
f9f5965a28897eddfa36f8c7edcf8244

SHA1
aeccf514e8508850df14846e5538dcf9459ec4bb

SHA256
359cba0e58a4f4a940054289c34d67d8e493c33581044cf74aac9021807df958

SHA512
08bb852c01282c32ec3bde118c4b63a471ea3c4fffa4cd122fba13f6085ee2b66055546dd2c60c1d9f73272e26f861d9faef5ebafde7b0351109546e485a4a78

Download Submit
/data/data/com.hammer.leaf/app_sell/mDHXyp.json

Filesize
2.6MB

MD5
bb36548597be5349af05bf0cc034af96

SHA1
0a2b33db705c01ac087d22b89429c96bd28d3a69

SHA256
4226d0a6a031eb838505b07ab88a5bbfcc2c5b030c44dff3605a2fa6b876b37c

SHA512
2c86a72a34f191b73440cec01ad4b9a40a980174e440269d26bd09e04d122f14fe99a48a5617ff4ccb1c971d988a1d1acece7810b6c196dcba89f52be46395a1

Download Submit
/data/data/com.hammer.leaf/app_sell/oat/x86_64/mDHXyp.vdex

Filesize
105KB

MD5
3b529c65e08eec5eb94a49b189f16576

SHA1
8f72b0e0012e4c53bd4b4724dfe4fb1badd355fb

SHA256
7d10d2a09ff273dd0e44acc453c5954141238df215232b8a3ce855af61a9b2c7

SHA512
4340d5f93dc376bb8eded8c4588f2b79d6b83060a5e7ca799636fc0a89240b867258cf93d2b72bca11e1c9c7721dfe09d14e25a6fb933719f896d95703d736ab

Download Submit
/data/user/0/com.hammer.leaf/app_sell/mDHXyp.json

Filesize
6.7MB

MD5
03469eb3aa4bf58ef3649c63aa20bf57

SHA1
6c9992116957392dc7c9bf274e2c29636491cd76

SHA256
dd5f57504f6427503449dd9d4903864db47a7b904695a4def70b8b1495c5d49a

SHA512
d81b914d73fe7e5b8387123445981457504fcaff9613eaba126238ae4559ae69884dcfe511b79aa3674ed44391b2277a5d817ebc232b6c3ed6275c845d9c8c4b

Download Submit