Analysis
- max time kernel
2s - max time network
71s - platform
android-11_x64 - resource
android-x64-arm64-20251229-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20251229-enlocale:en-usos:android-11-x64system - submitted
29/12/2025, 22:53
General
- Target evil.apk
- Size 2.2MB
- Sample251229-2va6vsfp8s
- SHA256 d83d817137001c62010ec8d3044a91e60410bf25cdd1a827563b6122e81600eb
- MD5 1ae2274a8cde557721d9348bf65397af
- SHA1 4f675e057adf5d05a21b85d7611218f2691a6296
- SHA512 121b2c54ebf461237a2d5817dc70190b266cfe227766b84e5b2050e63f57ab2a9bf1cb9401953e4e350b4f61cec158078d8395fc4d490edbbb1c5b819cef16a7
- SSDEEP 49152:AY9l8FXNHt0RIoeXVQ/lTiiLl8qLmRk43tJOhbk/gvYrqi:f9l8F9aeoeXVElTiiJjgF0kDrqi
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
-
pid Process 4790 com.example.reverseshell2 4790 com.example.reverseshell2 4790 com.example.reverseshell2 4790 com.example.reverseshell2 4790 com.example.reverseshell2 4790 com.example.reverseshell2 - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.example.reverseshell2 - Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.example.reverseshell2