Analysis
- max time kernel
20s - max time network
150s - platform
android-10_x64 - resource
android-x64-20251229-en - resource tags
arch:x64arch:x86image:android-x64-20251229-enlocale:en-usos:android-10-x64system - submitted
29/12/2025, 22:28
Behavioral task
behavioral1
Sample
evil.apk
Resource
android-x86-arm-20251229-en
android-9-x86
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
evil.apk
Resource
android-x64-20251229-en
android-10-x64
3 signatures
150 seconds
General
- Target evil.apk
- Size 2.2MB
- Sample251229-2d43lsxmbx
- SHA256 c5ab0adaedf391a395387df33b0bf6854f1ccc9c5da937915ea86b5eec6e6103
- MD5 54a7d8d8f6ee586e266f369b0a8a8dee
- SHA1 3db0f3cb7565a183f8601f5515315ce8e36823d5
- SHA512 2b609671c4f9b36bd0e62f8bd4a70fd0b7b95dde2af1931f08c187c81fb178b750e1da2a8828844418908c857ad03dd09632aab16971a0fe555149ae712a7107
- SSDEEP 49152:CY9l8FXNHt0RIoeXVQ/lTiiLl8qLmRk4kNtwHDAdgvY9Wh:t9l8F9aeoeXVElTiiJjgaMAV9Wh
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
pid Process 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 5074 com.example.reverseshell2 - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.example.reverseshell2 - Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.example.reverseshell2