Resubmissions
05/03/2026, 19:15
260305-xyamaaax3z05/03/2026, 19:10
260305-xvr26aax2v1003/03/2026, 14:05
260303-rd357sat3x10Analysis
- max time kernel
145s - max time network
150s - platform
android-10_x64 - resource
android-x64-20260129-en - resource tags
- submitted
03/03/2026, 14:05
General
- Target CMAccessIndex.apk
- Size 197KB
- Sample260303-rd357sat3x
- SHA256 4cbcb8f8eafb3d475362bdb7eddc4cb255c89926e03813ff0efa7652bb696e97
Score
8/10
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 2 IoCs
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
- Queries information about active data network 1 TTPs 1 IoCs
- Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
com.drsweetservice1⤵
- Checks if the Android device is rooted.
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
ContextData.xml
Alvin2.xml
Alvin2.xml
Alvin2.xml