Analysis

  • max time kernel
    23s
  • max time network
    150s
  • platform
    android-10_x64
  • resource
    android-x64-20260129-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260129-enlocale:en-usos:android-10-x64system
  • submitted
    09/02/2026, 12:20

General

  • Target
    TikTok18.apk
  • Size 17.0MB
  • Sample260209-phr8dsd12g
  • SHA256 4284e6bbc2fc274d8b0a1f37f91408efc0404e4cae0ba28abc4d583bc59af6bd
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • net.dress.absorb
    1⤵
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5084

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        YN.json

        • Path /data/data/net.dress.absorb/app_major/YN.json
        • Size 2.6MB
        • SHA256 8bdeb1e80e44e18d6a684afbcc95ae260298b65c77206ba0bcd1eee25dbc753c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        YN.json

        • Path /data/data/net.dress.absorb/app_major/YN.json
        • Size 2.6MB
        • SHA256 82b88dc4a0df055f5f10c8c83351f98bd79c535ea7309efae6444f33154a1b42
        • MD5 SHA1 SHA512 SSDEEP TLSH

        YN.json

        • Path /data/user/0/net.dress.absorb/app_major/YN.json
        • Size 6.7MB
        • SHA256 94ee948c307f116348c4ad2472ef6242397c80624e097265e32f30bd9f7ee584
        • MD5 SHA1 SHA512 SSDEEP TLSH