Overview

overview

10

Static

static

10

893b2adb8f...52.apk

android-9-x86

10

893b2adb8f...52.apk

android-10-x64

10

893b2adb8f...52.apk

android-11-x64

10

Analysis

  • max time kernel
    6s
  • max time network
    164s
  • platform
    android-10_x64
  • resource
    android-x64-20250917-en
  • resource tags

    arch:x64arch:x86image:android-x64-20250917-enlocale:en-usos:android-10-x64system
  • submitted
    14/11/2025, 14:56

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    893b2adb8f17b36d0e451fef96818e499eeab5b4f7c4a4aa93b6dede1e308352.apk
  • Size 353KB
  • Sample251114-sa83qaskgv
  • SHA256 893b2adb8f17b36d0e451fef96818e499eeab5b4f7c4a4aa93b6dede1e308352
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
backdoordefense_evasionvo1dinfostealerpersistencetrojan

Malware Config

Signatures

  • Detects Vo1d payload 1 IoCs
  • Vo1d

    Vo1d is an Android botnet that targets Android TV devices, first seen in September 2024.

    backdoortrojaninfostealervo1d
  • Vo1d family
    vo1d
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

Processes

  • com.google.android.services
    1⤵
    • Makes use of the framework's foreground persistence service
    PID:5125
    • su
      2⤵
        PID:5158
      • su
        2⤵
          PID:5180
        • su
          2⤵
            PID:5204

        Network

              MITRE ATT&CK Mobile v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              test
              • Path /data/data/com.google.android.services/files/.zz/test
              • Size 354KB
              • SHA256 b3a27b360890dc0acf447a1c1281efd7e5b922d0fad65a2fb4f99ceeac09ef1b
              • MD5 SHA1 SHA512 SSDEEP
              Submit Download