Overview

overview

10

Static

static

10

e4aa98c1be...cb.apk

android-11-x64

7

Resubmissions

04/02/2026, 16:17

260204-trpwvaex2h10

02/02/2026, 13:28

260202-qqzswahw6c7

31/01/2026, 08:02

260131-jxb7tsdt6g7

Sharing

Copy URL Twitter E-mail

General

  • Target
    e4aa98c1beee901871fd8a78b37b21ef886e507e65fc6499e3df3769081cd1cb.apk
  • Size 9.5MB
  • Sample260204-trpwvaex2h
  • SHA256 e4aa98c1beee901871fd8a78b37b21ef886e507e65fc6499e3df3769081cd1cb
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
ghostchatandroidcollectiondefense_evasionpersistence

Malware Config

Extracted

Family

  • ghostchat

C2

  • https://hitpak.org/rolex/yyyy.php

Targets

    • Target
      e4aa98c1beee901871fd8a78b37b21ef886e507e65fc6499e3df3769081cd1cb.apk
    • Size 9.5MB
    • SHA256 e4aa98c1beee901871fd8a78b37b21ef886e507e65fc6499e3df3769081cd1cb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    collectiondefense_evasionpersistence

    • Reads the contacts stored on the device.

      collection

    • Reads the content of photos stored on the user's device.

      collection

    • Makes use of the framework's foreground persistence service

      Application may abuse the framework's foreground service to continue running in the foreground.

      defense_evasionpersistence
    behavioral1

MITRE ATT&CK Mobile v16

Tasks