arsink | PAZUZU🙏🙏🙏🙏[.]apk

Resubmissions

04/04/2026, 06:41

260404-hfvgeaby3w10

04/04/2026, 06:40

260404-hfmfssby2z10

03/04/2026, 19:08

260403-xta29agy7n10

Sharing

Copy URL Twitter E-mail

General

Target
PAZUZU🙏🙏🙏🙏.apk
Size 300KB
Sample260403-xta29agy7n
SHA256 6d06806ccee64d3baa5b9da63019c3ac7a23dfe210747fbdbc048a84196325c5
MD5 a410bc124dc47ee82650d2db6a2f24d9
SHA1 1306a4c9fe96e320473c805d8c984b2a08ecf47a
SHA512 095150ae5567297ff33c777e779ba5a194a8e2647b3621422c90a6bcaa014c5ffda7b5ebce4250f8703fa541fbfbccbd848e638f88a21e227ea5f500bfdf6825
SSDEEP 6144:GEwH8ncOF0cRkU/aD2hOF9wTLLTnjfPGJl8FV5QDKhN9CK/SRRh:G/8ncs0g69wTL7uloV5Q+hN4aW7
TLSH
T16664235AED08D916D8E61CFD9CB9E40EDEA0336325E9DB0B0F2785152EA71750A3037B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

arsink

Malware Config

Signatures

Arsink family
arsink

Detects Arsink RAT 1 IoCs

resource	yara_rule
sample	family_arsink

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
PAZUZU🙏🙏🙏🙏.apk

File Explorer

PAZUZU🙏🙏🙏🙏.apk

.apk 300KB

PAZUZU🙏🙏🙏🙏.apk

SHA256 6d06806ccee64d3baa5b9da63019c3ac7a23dfe210747fbdbc048a84196325c5
MD5 a410bc124dc47ee82650d2db6a2f24d9
SHA1 1306a4c9fe96e320473c805d8c984b2a08ecf47a
SHA512 095150ae5567297ff33c777e779ba5a194a8e2647b3621422c90a6bcaa014c5ffda7b5ebce4250f8703fa541fbfbccbd848e638f88a21e227ea5f500bfdf6825
SSDEEP 6144:GEwH8ncOF0cRkU/aD2hOF9wTLLTnjfPGJl8FV5QDKhN9CK/SRRh:G/8ncs0g69wTL7uloV5Q+hN4aW7
TLSH
T16664235AED08D916D8E61CFD9CB9E40EDEA0336325E9DB0B0F2785152EA71750A3037B
MD5 SHA1 SHA512 SSDEEP TLSH

android

Detects Arsink RAT
Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

49d7858860184cf545dd341f6a62e3d535f0ecb8798af79a99ee4e3b0cb6ff43

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d

com.Izzy.Pazuzu

Android Permissions

PAZUZU🙏🙏🙏🙏.apk

Permissions

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.SET_WALLPAPER

android.permission.WRITE_CONTACTS

android.permission.READ_CONTACTS

PAZUZU🙏🙏🙏🙏.apk

File Signature issue

.MainActivity

.DebugActivity

com.Izzy.Pazuzu.AndroidManifest