Overview

overview

10

Static

static

10

predz.apk

android-11-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    70s
  • max time network
    73s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260129-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260129-enlocale:en-usos:android-11-x64system
  • submitted
    25/02/2026, 00:48

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    predz.apk
  • Size 38.2MB
  • Sample260225-a55dxabv8a
  • SHA256 ec21a7364f354fc5955ee9b4ef73f4bbbb3d2e392002a42c2f50ff3bd533bebd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoveryimpactpersistence

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • openpc.ocular.migraine
    1⤵
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about the current Wi-Fi connection
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4897
    • sh
      2⤵
        PID:4941
      • sh
        2⤵
          PID:5020
          • logcat -c
            3⤵
              PID:5045
          • sh
            2⤵
              PID:5084
              • sleep 0
                3⤵
                  PID:5103
              • sh
                2⤵
                  PID:5139
                  • sleep 0.2
                    3⤵
                      PID:5159
                  • sh
                    2⤵
                      PID:5200
                      • cmd package list packages -s
                        3⤵
                          PID:5219
                      • sh
                        2⤵
                          PID:5280
                          • mkdir /sdcard/MCP/Scripts/
                            3⤵
                              PID:5299

                        Network

                              MITRE ATT&CK Mobile v16

                              Replay Monitor

                              Loading Replay Monitor...

                              Downloads