7a0d9a3c94f7d81ac627a20a02b425603d2f6ec3b997004a32d5c3105f92e52f

Resubmissions

21/03/2026, 17:22

260321-vxselaht8v10

21/03/2026, 16:50

260321-vcmnlsbt4r10

Analysis

max time kernel
8s
max time network
39s
platform
android-9_x86
resource
android-x86-arm-20260306-en
resource tags

arch:armarch:x86image:android-x86-arm-20260306-enlocale:en-usos:android-9-x86system
submitted
21/03/2026, 16:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Chinese Nulls Brawl Virus(Telegram @APXUBbl_BUPYCOB).apk
Size 566KB
Sample260321-vcmnlsbt4r
SHA256 7a0d9a3c94f7d81ac627a20a02b425603d2f6ec3b997004a32d5c3105f92e52f
MD5 957b7514943671f4248b99bf11d52455
SHA1 f4d945cdca2167ef61ba544ec6e71973c9ca5920
SHA512 248577cd8de9cbc990f4c51109e2e22cdbddb0cf3d173db53aafb7ca4fa9958d9ff25b317246ef7bfbd70a64a8992bd3399a5d7b184757aa3a1efbe3e74107e6
SSDEEP 12288:7t8SRIGYoVTWpPRSBpD41leMx4PsvRO33ncp4:7ySRIGYoVysD4neMSHM4
TLSH
T1CBC4AE83E308A9A3CCF7DA334676176A4297DD254747AB871C94723C09BF6D02B59EC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.nulsbrawlmode/app_sgdgmcumf/kartisx.jar	4270	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.nulsbrawlmode/app_sgdgmcumf/kartisx.jar --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.nulsbrawlmode/app_sgdgmcumf/oat/x86/kartisx.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.nulsbrawlmode/app_sgdgmcumf/kartisx.jar	4246	com.nulsbrawlmode

com.nulsbrawlmode
1⤵
- Loads dropped Dex/Jar
PID:4246
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.nulsbrawlmode/app_sgdgmcumf/kartisx.jar --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.nulsbrawlmode/app_sgdgmcumf/oat/x86/kartisx.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4270

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

kartisx.jar

Path /data/data/com.nulsbrawlmode/app_sgdgmcumf/kartisx.jar
Size 224KB
SHA256 d54f92c248831084d5b77eb1161f53410c2d3df814680af915918bdfdef0b25a
MD5 ed67bcfa567bb2d94c16eba935e17306
SHA1 61598d620767220f63d645453ebd12dd49e050a0
SHA512 8580021000d0925d86aa609aba40dc91bec176516c7f20daa890c3e9828d33bbaa45902526bdf70ffdf8e933bcefe0f3c374bc22d77821fcbab0ec425ded9a7a
SSDEEP 6144:PmQFRgGlduNNUugwyjIvWJvdzTitUGoBVXkYHNAq4Z:LFRlduMugRIMzWtUGoBV0Wv4Z
TLSH
T1892412BFE0175C9B098B5F44DA92912B91424EDD9C81F9C23C2B2445E9C0EE8D2F5B7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kartisx.jar

Path /data/user/0/com.nulsbrawlmode/app_sgdgmcumf/kartisx.jar
Size 558KB
SHA256 c5eb7ec669c78613c5a33ef58cc4476ea70bf79040fca60290bb78514d9ae58a
MD5 d0410aa6e99968935f2f9847aaa345e3
SHA1 96c584ff8d9213432fca0521945a841108ab2bcc
SHA512 5c645306dca93f0fabab23e430d6f2f70c96edd8e713071299cf3a6ea40123712cd2460e81dbf620e9131db3d27807b0c136edaebb5700578b0e80d15ff83acb
SSDEEP 6144:0ZmO1bFleIIl7c+l39BvI6YPrNm23ZjMZS0ibR7jvHPOwre/f1CE/7n9K:0YsOzobJvW820upK
TLSH
T1FCC42802A2501E23C87E5B3294EB8BA5633671095F43CB075590537EFCBB6C17BEA69C
MD5 SHA1 SHA512 SSDEEP TLSH

Download

kartisx.jar

Path /data/user/0/com.nulsbrawlmode/app_sgdgmcumf/kartisx.jar
Size 558KB
SHA256 3b3437b4b6ebb65dda61331f48da83674fbd144b49fbd883578e9896497cde1b
MD5 0a2f026036505aeecd65339d26dc3d2f
SHA1 7a0576a8b2138d0e42bf73ca3e4f071b40524c1c
SHA512 417b842a671a9d4e4496ddadb8f97a281c0b64fb4803b674ba39012897ab45c41921b9e0cac4d17bba1b7435053a6a540103f04b9d52b3fcc0614b0b9e5f4ea4
SSDEEP 6144:0ZmO1bFleIIl7c+l39BvI6YPrNm23ZjMZSgH8E3bTKc57HXmbbC14/7n9K:0YsOzRc0TKel6pK
TLSH
T11BC45B02A2914E13C8BEA33A68EF87203734B1488B47CB475591DB7DBC7B6D57AC528D
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads