Overview

overview

6

Static

static

6

%40Wartyso...5D.apk

android-14-x64

6

Resubmissions

12/10/2026, 21:33

261012-1ehqbsxv7m6

12/10/2026, 21:33

261012-1eezfafv8s6

12/10/2026, 19:54

261012-ymrxvsev716

27/10/2025, 13:38

251027-qxf94svphj

27/10/2025, 13:34

251027-qva1bafp216

27/10/2025, 11:53

251027-n2bjbael616

27/10/2025, 11:49

251027-ny1n2ael416

27/10/2025, 11:45

251027-nw2hjstmhp6

23/10/2025, 22:04

251023-1zbgrabl5y6

23/10/2025, 22:04

251023-1y5zzabl5x6

Analysis

  • geolocation tags

    asiadelhiinindia
  • max time kernel
    48s
  • max time network
    157s
  • platform
    android-14_x64
  • resource
    android-34-x64-arm64-20250917-en
  • resource tags

    arch:arm64arch:x64image:android-34-x64-arm64-20250917-enlocale:en-usos:android-14-x64system
  • submitted
    27/10/2025, 13:34

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    %40Wartysofware%20%5B0.35.3%5D.apk
  • Size 10.0MB
  • Sample251027-qva1bafp21
  • SHA256 a28c778eb80bb4d2caf37292abfbba2a4f19d09748b3dfd226787b79580a9a60
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Signatures

  • Looks up external IP address via web service 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

Processes

  • com.tinycards.duolingo
    1⤵
      PID:4388

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          debugger.lua
          • Path /data/user/0/com.tinycards.duolingo/app_lua/debugger.lua
          • Size 472B
          • SHA256 11393e4671b09c661703842d0a641f6217f1db80eecd92862c125161066a5cce
          • MD5 SHA1 SHA512
          Submit Download

          debugger_mode1.lua
          • Path /data/user/0/com.tinycards.duolingo/app_lua/debugger_mode1.lua
          • Size 14KB
          • SHA256 0a69d53d30651b3b9a34fcb28d4e493c76478fa6f962a76a6a24d36b405e928f
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          debugger_mode2.lua
          • Path /data/user/0/com.tinycards.duolingo/app_lua/debugger_mode2.lua
          • Size 4KB
          • SHA256 35ffbe52f80c8fe0567a225d93b219a84c3e84c64432d56f5231e217ddd229e1
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          http.lua
          • Path /data/user/0/com.tinycards.duolingo/app_lua/http.lua
          • Size 7KB
          • SHA256 82da706415f2b2e2641767d799bc2704c25049a9024f429472051c6f36160f7d
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          import.lua
          • Path /data/user/0/com.tinycards.duolingo/app_lua/import.lua
          • Size 6KB
          • SHA256 3894aed52eca0ea966ff65e71c11c289eaa41e4b8aae47f297cd6f1ff5044c54
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          loadbitmap.lua
          • Path /data/user/0/com.tinycards.duolingo/app_lua/loadbitmap.lua
          • Size 540B
          • SHA256 566ce414495a710cc3931b63201a03effb266adae2a9fd35b67dc3e1ad6a01b0
          • MD5 SHA1 SHA512
          Submit Download

          loadlayout.lua
          • Path /data/user/0/com.tinycards.duolingo/app_lua/loadlayout.lua
          • Size 14KB
          • SHA256 8f96d278ebf14176be9c0fb667067676c4199ec316655e128c5604bf3a0ffc3b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          loadmenu.lua
          • Path /data/user/0/com.tinycards.duolingo/app_lua/loadmenu.lua
          • Size 1KB
          • SHA256 1b19369e59e57ea79aad889ee50d9eb2a46d4a73a489e103076903e85adc3c68
          • MD5 SHA1 SHA512
          Submit Download

          ltn12.lua
          • Path /data/user/0/com.tinycards.duolingo/app_lua/ltn12.lua
          • Size 2KB
          • SHA256 7f579ba455afd56270777466032af04a8798f298df8ea5b0fdf1a87e0c0aae24
          • MD5 SHA1 SHA512
          Submit Download

          mime.lua
          • Path /data/user/0/com.tinycards.duolingo/app_lua/mime.lua
          • Size 1KB
          • SHA256 675a84f0f1956088c7eecb290d6bcf9d4ca60f38490d74f08d2590087e276082
          • MD5 SHA1 SHA512
          Submit Download

          socket.lua
          • Path /data/user/0/com.tinycards.duolingo/app_lua/socket.lua
          • Size 1KB
          • SHA256 095f8880f02eafbd2c6180934d449216289e5ffeab7a8a8fd3c9789f804a0f83
          • MD5 SHA1 SHA512
          Submit Download

          headers.lua
          • Path /data/user/0/com.tinycards.duolingo/app_lua/socket/headers.lua
          • Size 3KB
          • SHA256 c3922bed072825e4d51dfdd22ec993c7e9263357e4c36328ec649eae92b630f1
          • MD5 SHA1 SHA512
          Submit Download

          url.lua
          • Path /data/user/0/com.tinycards.duolingo/app_lua/socket/url.lua
          • Size 2KB
          • SHA256 cf82431b4a13162568ff24d120520f1ded70a7bd9b2a96216c3a3803aa2beb59
          • MD5 SHA1 SHA512
          Submit Download

          Import.lua
          • Path /data/user/0/com.tinycards.duolingo/app_lua/vinx/core/Import.lua
          • Size 4KB
          • SHA256 86441a812e065779847b0a259cf8b9a54b21043d4c17be47467d053e00bcf552
          • MD5 SHA1 SHA512
          Submit Download

          base.4388.tmp
          • Path /data/user/0/com.tinycards.duolingo/cache/oat_primary/x86_64/base.4388.tmp
          • Size 440KB
          • SHA256 bd3f832f02045f05f82858068220af5e50d671ac73b6f77797ad4635479b0035
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          icon.png
          • Path /data/user/0/com.tinycards.duolingo/files/icon.png
          • Size 18KB
          • SHA256 5403d7d78d7f03ff4b47e98dde88c2ad77a93ce2bafd19850e81bb9ff6eb8c57
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          init.lua
          • Path /data/user/0/com.tinycards.duolingo/files/init.lua
          • Size 408B
          • SHA256 e6d7feaffd433c731e5c486a66369fa07fca043c502247c378113e9476def4d6
          • MD5 SHA1 SHA512
          Submit Download

          layout.lua
          • Path /data/user/0/com.tinycards.duolingo/files/layout.lua
          • Size 1KB
          • SHA256 909ffd97b3740f16fa1411f49c4c1ded4dcdd92b780e523147e229d9de6fc4fe
          • MD5 SHA1 SHA512
          Submit Download

          warty.sh
          • Path /data/user/0/com.tinycards.duolingo/files/libs/warty.sh
          • Size 3.3MB
          • SHA256 80181257e31b6181ec6f9afe998814a6c143201ce046529e08453d0bdbb64af9
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          main.lua
          • Path /data/user/0/com.tinycards.duolingo/files/main.lua
          • Size 79KB
          • SHA256 09d2fa7956e23f22d4536a2d86a28366a05664ad1b5b9f2ab9384baa0c0b7f36
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          profileInstalled
          • Path /data/user/0/com.tinycards.duolingo/files/profileInstalled
          • Size 24B
          • SHA256 692d9253df43bddf0f85166fbae244eead543241fef5c1b4a88c357205f9fbb7
          • MD5 SHA1 SHA512
          Submit Download

          tg.png
          • Path /data/user/0/com.tinycards.duolingo/files/res/tg.png
          • Size 13KB
          • SHA256 e7edeb9e21ab433ca59dd20065f72e064354149afb59e740706705884fdba11a
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download