4dd6de084e0bd5b743b964b521067557eb37bab41bcb5e7cf0db72397c3a82ea

Analysis

max time kernel
47s
max time network
50s
platform
android-15_x64
resource
android-35-x64-arm64-20260104-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260104-enlocale:en-usos:android-15-x64system
submitted
06/01/2026, 12:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ready.apk
Size 8.5MB
Sample260106-pqrxlaslez
SHA256 4dd6de084e0bd5b743b964b521067557eb37bab41bcb5e7cf0db72397c3a82ea
MD5 44155ff64feb10ff2f66b5442dfe114c
SHA1 a1e27716a07f4aaf3481380519a52a6a78a904a4
SHA512 b2336ab20ee5d5b0ea02ad14fae21d273cb61887142118aedfae181dbbb1da4284fc2a1c7cca983b0e9ff563834533a9e5f1caa06ca57a2ef21a26aefab25ca2
SSDEEP 98304:pCuE7bbjJSWdw6uR625VbEWgmzuzBrTK0tBn:p70bbjcWdrunsWfzSpt
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

collection credential_access defense_evasion impact

Malware Config

Signatures

Makes use of the framework's Accessibility service 4 TTPs 1 IoCs

Retrieves information displayed on the phone screen using AccessibilityService.

collection defense_evasion credential_access

Input Injection

T1516

Screen Capture

T1513

Keylogging

T1417.001

GUI Input Capture

T1417.002

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	shall.hundreds.unknown

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	shall.hundreds.unknown

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	shall.hundreds.unknown

shall.hundreds.unknown
1⤵
- Makes use of the framework's Accessibility service
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:3198

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Input Injection

T1516

Credential Access

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Discovery

Lateral Movement

Collection

Input Capture

T1417

GUI Input Capture

T1417.002

Keylogging

T1417.001

Screen Capture

T1513

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Input Injection

T1516

Replay Monitor

Loading Replay Monitor...

Downloads

primary.prof.yb2e8w.tmp

Path /data/misc/profiles/cur/0/shall.hundreds.unknown/primary.prof.yb2e8w.tmp
Size 392B
SHA256 2843ec10e7fd23d78902c6e84c5c1a4acd46332e3abb729f9f8914c527ebbbdc
MD5 f26eaf7d5fda1d347dd032bda8babdec
SHA1 193ddaf4f79fb7a1bd804db112cf8555bd7d0be5
SHA512 e342cb017a736bc526ab70e5ab5250465892a6d5e0e9b55eda98b5f4c2f921c39eef53c7d4dfe1c1a064c327f47cf9a22a5f35407e887f7a1dd2f2317576d607
MD5 SHA1 SHA512

Submit Download

base.3198.tmp

Path /data/user/0/shall.hundreds.unknown/cache/oat_primary/x86_64/base.3198.tmp
Size 16KB
SHA256 ed2cbae15eb0799004f5d1f43e43657b764b87cac55988efb183dc4653e6d382
MD5 f88e395550578a63ec72ca368fc43301
SHA1 615d0f817416f5067a86ba20581721b26fd5b6fd
SHA512 0d9971d92f8e066aae7f28259f880409cbbdd738e49dd859562143b728b4703131ce8e0f2145839a702cd77fd09ded0511e66f174de262304e8b1b4b1b100c06
SSDEEP 192:AnxKNqi7m4tqrC6r0K7VGNPjHGaZI8fFr0EFKprUYivD/wLueo:CKNqWjoRl0xZI8fNLFYUYivrSue
MD5 SHA1 SHA512 SSDEEP

Submit Download

log-2026-01-06.txt

Path /storage/emulated/0/Config/sys/apps/log/log-2026-01-06.txt
Size 33B
SHA256 0a6f86946b122728952d9d932b2262029502d42b4e7ec2be7a297659e85f1dd1
MD5 adac2a3a49a1e86a81069e5604973483
SHA1 e2f48c1bc3eb1588ddf5140293576378dae7e261
SHA512 c7fb4153604dfa199dfc8a44378c72bcd6e3cf33825cb3fd91c0a5cc5907931787eea82f5bb813c855746e78455d569b93f5821bb18e5d932c005ec5c2c2cd38
MD5 SHA1 SHA512

Submit Download

log-2026-01-06.txt

Path /storage/emulated/0/Config/sys/apps/log/log-2026-01-06.txt
Size 33B
SHA256 a7f63da9797585957f923d9226c697d5d3d80c059b3b381baaff04c6c73b8a10
MD5 457bb67ebbcfd6615a72a57bbaba8611
SHA1 800c43984ec29c34462d915109edd5202c28b74e
SHA512 dd94d35b710137a719ef3ada6f609ef1d05b96e2a32e2c8435809786095db09a049b8aa2e9c40de7af941be67904eecff76b22c4470f57d23a7b3c31970c02ae
MD5 SHA1 SHA512

Submit Download

log-2026-01-06.txt

Path /storage/emulated/0/Config/sys/apps/log/log-2026-01-06.txt
Size 45B
SHA256 c47b1353029508b39f7b6c7660a73a6434fc47c67acbcc5fc0a4d536484594d5
MD5 11e464064dcae11be7956bbd5e854dc1
SHA1 33f37d3846cab06a54e791fbd683e5c6359add58
SHA512 02bc0a1469cd93bb63027291c7e9ccf21a0cdebff5a56996b7e03f92020b40dbada10bcd09ab41e29415bda65d9cafe948415a9542af897fd9561560adfb3ba4
MD5 SHA1 SHA512

Submit Download

log-2026-01-06.txt

Path /storage/emulated/0/Config/sys/apps/log/log-2026-01-06.txt
Size 57B
SHA256 941bd7bc2cca4cb941d7f89acdbb1ee3ae2613482c34a030eafbed10d22ae865
MD5 4bb997cc2b2ec94fcb9bc341325b0d77
SHA1 6c6974fea18700f412b7e7b2d4be49e7c2a993ae
SHA512 f4d3e8b37c0f607a61468f702fe723572e47f41a869720833fc2bc3f4b9340f809484d6435f3ff0a3d45f8a5bcd765540980a9a9ac1ae5591deb0c869bd3a9a5
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads