Analysis
- max time kernel
7s - max time network
150s - platform
android-11_x64 - resource
android-x64-arm64-20250917-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20250917-enlocale:en-usos:android-11-x64system - submitted
07/11/2025, 03:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3f6dee91da3d1c09fff32094d256351983cd55fd6bc98175e1e4de0b212e285a.apk
Resource
android-x86-arm-20250917-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
3f6dee91da3d1c09fff32094d256351983cd55fd6bc98175e1e4de0b212e285a.apk
Resource
android-x64-20250917-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
3f6dee91da3d1c09fff32094d256351983cd55fd6bc98175e1e4de0b212e285a.apk
Resource
android-x64-arm64-20250917-en
1 signatures
150 seconds
General
- Target 3f6dee91da3d1c09fff32094d256351983cd55fd6bc98175e1e4de0b212e285a.apk
- Size 4.4MB
- Sample251107-drywrazldr
- SHA256 3f6dee91da3d1c09fff32094d256351983cd55fd6bc98175e1e4de0b212e285a
- MD5 9f5702ec3179b58b37ae1cb2fef75886
- SHA1 1353a0ea04bbe7ee31b183e742f7823af9aac355
- SHA512 7cbdcc5d4ce4249e641e20d395de12279a7c250c69b7f5af3a0fd3cd2ce0898147e1663892f1612228c47a17a6d1fbbba9a37492a529933104561d55cd7a5c0e
- SSDEEP 98304:QmNgBwCXz2eSl9LqAvPJ0bDRQaGzz93FidjIO8ftRrAetf:5SwCXiXlV3JQRU9VysB
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
description ioc Process Framework service call android.content.pm.IPackageManager.canRequestPackageInstalls com.protect.download
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.protect.download/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 f63b6f5b4be6b38f523ad63253c0ae3af91b53a52a320d7256b4972019b2e3dc
- MD5 b43f261b8a426cfed41c545d31cfcef7
- SHA1 09f15392a73d1d1d9e3e3c2af74e4e8b2fc10401
- SHA512 62c73db1fc4b059662841608528cedacb40a5a5594b3c228d6263f585836b815f7b02157457a4d36ebca670d8f58f0b88403e17e87171d2886fe299779a6a28a
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.protect.download/primary.prof
- Size 4KB
- SHA256 427bcccd16acf7e76975f0ca23865d5c4303c806d41c5bde879cea1e87ff9a82
- MD5 3e2cc9946a2a1a8b71c560f985362024
- SHA1 efac70c4eb98cbbcd2af625dabee1612eb80dcce
- SHA512 f6c3f206c87a2ca61f7ed3abf620705065c054fe0bd5c693d65665f4eda93bbaa54e00a33b6dfb50aeedfeb3cabb449c9c2fd3fae75b1cccedf12f48e605d7f8
- SSDEEP 96:TYBS+RVjVoerLc6b2Oqkv5C3BRqVlMbbcJdhTDJiGzSAdqPLwZUTo:nUVxjrLc6b9qkv50CJd5Zh+LwuU
- MD5 SHA1 SHA512 SSDEEP