5c42d9fcd967c4021144f9cb88fe7e58847ab0488257d8b3f15f08110a5c9ff1

Analysis

max time kernel
2s
max time network
154s
platform
android-9_x86
resource
android-x86-arm-20250917-en
resource tags

arch:armarch:x86image:android-x86-arm-20250917-enlocale:en-usos:android-9-x86system
submitted
23/12/2025, 15:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Kylhavy Mobile Security.apk
Size 3.4MB
Sample251223-smt5bsvmht
SHA256 26d2555a2c73fd7f49ae1d5d335f4cc983e3fab3f564989dfc3262ee2355a2b9
MD5 9fa1e4b615d69f04da261267331a202b
SHA1 e15fdcec9a76b4ca9db183a71963107fcd6520e0
SHA512 b0b5bcd1dc732497b72b2690230d0c934b510af7868e0b520428cbf09eccef371c9e89d0efa07d78bafea05b1a29e84a16be1e92dbca7d94b467d0044cfe6696
SSDEEP 98304:HtU+qyfprZ12LzRyDuzlD82Eigpv4v+Tp4YAfF:HtU+bZ12Yize3w+tm
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery persistence

Malware Config

Signatures

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.kylhavy.antivirus

com.kylhavy.antivirus
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4234

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

vxoid.bin

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin
Size 240KB
SHA256 aabdab286ce3af465a7c54d3900bd619a8ebac0896b9f8af3d41a530925b9b58
MD5 5cdd040c249d8180c87539fd0cd4b593
SHA1 bbb556c8762885b0bd54b739c513168d11f8fe89
SHA512 50d4dc1ab636ee7b8dd46290dd1a66c4fa09f40d75ee3a8a11bf02ca0d7a86a83e7e728ce65f0b0af1228ccaa6ffe1121021fb8f1a0fd633045cd85bf9e35524
SSDEEP 3072:2vTvzvHvT5vTGFCdRfl3okG9P+bjtiucAtw6ZrpitMoTZNoZkMcetw+k6P/2KmjG:pKmkqGb8ZKpwMok00PsN3qH
MD5 SHA1 SHA512 SSDEEP

Submit Download

vxoid.bin-journal

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin-journal
Size 512B
SHA256 b09219c1f2a2180efeed496a4d843f4425556552c8c110c6185f1905d0d07d68
MD5 e7884079026d204aa66c94a8a9839af5
SHA1 f6d33e5598e0860f6a4b31bb5d38620f6aab4404
SHA512 73c35556ff42197a6bf02e930636f0d72c6c24e5293476be3adeaf183845655f23e088b674ecd280aa53e9ecc1cda3571b528c8b45fe5a339fe52ec88295ac51
MD5 SHA1 SHA512

Submit Download

vxoid.bin-journal

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin-journal
Size 4KB
SHA256 88d48afbef570316ca64dd7a2d944f9813d93a827ffe165128d1a8fe9a5b6dbb
MD5 0bb8c31691248803284c7c58d8595a84
SHA1 4e1053d27568a49042d8b08ae98162a4174d9a56
SHA512 d234774fe85258854cc7da054c73bff1852bf9b05a6eb1da6403d61daff4a6f2f9a0da50ca3a21ed344dab495eaeec673a285f944f1eb77b2ee49bdbfb3dc01e
SSDEEP 6:7+/lBHOPg9FZO17lOERX4PBX4ogLugMBX4suuKR:7+toqzqDRmBEyPbC
MD5 SHA1 SHA512 SSDEEP

Submit Download

vxoid.bin-shm

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin-shm
Size 28KB
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

vxoid.bin-wal

Path /data/data/com.kylhavy.antivirus/databases/vxoid.bin-wal
Size 20KB
SHA256 6e4e5b0d4c4bdfe9ff0ab29d40697da23a1bf18eb9ffcd9b043ef24483cc48ba
MD5 d98a33a2084693de547ecd8b961dc02f
SHA1 4cdebaf448e9ff45ed9c40827fda839df8e71b54
SHA512 5b828d4c754292149d0652f79ecacd4a5d47c1056692a05c19ff14a80109a4ea7832eab79e357fce4f9f6f0709e498c1108bf5f8a8214e82160280d6f1e5a0bd
SSDEEP 12:KoMzdTRmBEyPbP//VIiOwCld63qzqDRmBEyPbV:KoMzyGSP/NVE66zDGSV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads