Resubmissions

05/03/2026, 19:15

260305-xyamaaax3z

05/03/2026, 19:10

260305-xvr26aax2v10

03/03/2026, 14:05

260303-rd357sat3x10

Analysis

  • max time kernel
    132s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260129-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260129-enlocale:en-usos:android-11-x64system
  • submitted
    03/03/2026, 14:05

General

  • Target
    Barsik.apk
  • Size 251KB
  • Sample260303-rd357sat3x
  • SHA256 8b19f070988204f44da34567b4b81aa9869ca399827c92ea5a6397cee250c4f7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.mufc.fireuvw
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    PID:4729
    • ls /sys/class/thermal
      2⤵
        PID:4778
      • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
        2⤵
          PID:4833
        • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
          2⤵
            PID:4857

        Network

              MITRE ATT&CK Mobile v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              ua.db

              • Path /data/user/0/com.mufc.fireuvw/databases/ua.db
              • Size 36KB
              • SHA256 1fa1b6e6bd75bcef64d35785e2fd6f2e73dcdf92dce73c8b2a8fed49746d53bb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ua.db

              • Path /data/user/0/com.mufc.fireuvw/databases/ua.db
              • Size 24KB
              • SHA256 7ce61eccd1ae5b68635ffbf45fa57059e0137bf9a093cb3f5985a65a697ff5a8
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ua.db-journal

              • Path /data/user/0/com.mufc.fireuvw/databases/ua.db-journal
              • Size 512B
              • SHA256 5b1527aa918929296e60618965d6ba9d73b28ef429748c6805522a05df8b2ff0
              • MD5 SHA1 SHA512

              ua.db-journal

              • Path /data/user/0/com.mufc.fireuvw/databases/ua.db-journal
              • Size 8KB
              • SHA256 fd2ded45ba74727faabcbd49485fefc2a0815499766e209872ec01e71985f018
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ua.db-journal

              • Path /data/user/0/com.mufc.fireuvw/databases/ua.db-journal
              • Size 8KB
              • SHA256 e8eaabe5edf7c4b4136b0ed308738907df4c1dbe3a7dcca0e374ff584b3097d7
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ua.db-journal

              • Path /data/user/0/com.mufc.fireuvw/databases/ua.db-journal
              • Size 16KB
              • SHA256 3f604c0a732edd7052e6ff7ca23d56d446af75ab20b852fe783b5f2e3680f5a9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              a==7.5.4&&3.0_1772546789248_envelope.log

              • Path /data/user/0/com.mufc.fireuvw/files/.envelope/a==7.5.4&&3.0_1772546789248_envelope.log
              • Size 1KB
              • SHA256 da63319d686846a87c02af5be27fb5bad7ff1220c3c6087b62fa70d70110d656
              • MD5 SHA1 SHA512 TLSH

              i==1.2.0&&3.0_1772546784752_envelope.log

              • Path /data/user/0/com.mufc.fireuvw/files/.envelope/i==1.2.0&&3.0_1772546784752_envelope.log
              • Size 2KB
              • SHA256 e194e9609e5603fefb89021b85cf2e2a37acbad700d9b0a4d4b242f05d36c405
              • MD5 SHA1 SHA512 TLSH

              .imprint

              • Path /data/user/0/com.mufc.fireuvw/files/.imprint
              • Size 488B
              • SHA256 70d7b24dc4ca2022e4a7f171bdfa3f6db34d86bd587fb6110e5200769cc4b235
              • MD5 SHA1 SHA512 TLSH

              .imprint

              • Path /data/user/0/com.mufc.fireuvw/files/.imprint
              • Size 995B
              • SHA256 154b2a12c3b5987c4875dd27785d4bc2b15a91e4ab0acac05aa5495786746d8a
              • MD5 SHA1 SHA512 TLSH

              exchangeIdentity.json

              • Path /data/user/0/com.mufc.fireuvw/files/.umeng/exchangeIdentity.json
              • Size 206B
              • SHA256 ac3c0153d86e8b6f0fac8eab0840296d5e0b12a1b02d8f2da02970b23fdb7035
              • MD5 SHA1 SHA512 TLSH

              exchangeIdentity.json

              • Path /data/user/0/com.mufc.fireuvw/files/.umeng/exchangeIdentity.json
              • Size 162B
              • SHA256 8282fa0b8127f062cbad50a3826a8d1a6dfe7f3f04736478155e8f0eebe06515
              • MD5 SHA1 SHA512 TLSH

              396383d53ce06946633bdf865c290271.d

              • Path /data/user/0/com.mufc.fireuvw/files/396383d53ce06946633bdf865c290271.d
              • Size 32B
              • SHA256 ac65487080a99ebcfdd50bdbdf266b007e721a5cad188bb4d69cd1d69a3dddba
              • MD5 SHA1 SHA512

              exid.dat

              • Path /data/user/0/com.mufc.fireuvw/files/exid.dat
              • Size 97B
              • SHA256 6cba942787270920d6fe749c11e3aaccd806369e0fcd6759f74249818e061f90
              • MD5 SHA1 SHA512 TLSH

              exid.dat

              • Path /data/user/0/com.mufc.fireuvw/files/exid.dat
              • Size 55B
              • SHA256 961f7788e4eec232fdb4245d2b19987a80aa0da491e70ef401ef7bdfe30719ff
              • MD5 SHA1 SHA512 TLSH

              firehelper.jar

              • Path /data/user/0/com.mufc.fireuvw/files/firehelper.jar
              • Size 21KB
              • SHA256 b678a11102acbf3d118fa6b4d153d6c9bcc93e4a9530fcb8a7c5e0f985c70857
              • MD5 SHA1 SHA512 SSDEEP TLSH

              firehelper.jar

              • Path /data/user/0/com.mufc.fireuvw/files/firehelper.jar
              • Size 21KB
              • SHA256 0e80f9711450da54f7e7650848370f5276319c1627fcc33e2388214e0318d75d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              firehelper.jar

              • Path /data/user/0/com.mufc.fireuvw/files/firehelper.jar
              • Size 44KB
              • SHA256 48e844d5d4eb116bb0aaef8e5da85f12958d53a58ecf95d737359b2699a24c82
              • MD5 SHA1 SHA512 SSDEEP TLSH

              dW1weF9pbnRlcm5hbF8xNzcyNTQ2Nzg0Mzgy

              • Path /data/user/0/com.mufc.fireuvw/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzcyNTQ2Nzg0Mzgy
              • Size 1KB
              • SHA256 14e4473e1220d3f866dea794764263438019a77585595a7ff5b5c95469a62010
              • MD5 SHA1 SHA512 TLSH

              umeng_it.cache

              • Path /data/user/0/com.mufc.fireuvw/files/umeng_it.cache
              • Size 178B
              • SHA256 f124a55795ccf0b664c5cd1f7c140d487b44c188c78d575a2c11abfdde3526e3
              • MD5 SHA1 SHA512 TLSH

              umeng_it.cache

              • Path /data/user/0/com.mufc.fireuvw/files/umeng_it.cache
              • Size 350B
              • SHA256 9d07eda1ecd56a93d34f18d9f7f8ee9a5dca2aa71566d9752b5a0d27c5d8576f
              • MD5 SHA1 SHA512 TLSH