39901ffa746a6f6ac3de2b36d9e61e0d60b221f4d9510436fd3cb3d2d7362130

Resubmissions

15/04/2026, 19:35

260415-ya4e5abv9y7

15/04/2026, 12:57

260415-p7ectshv2t7

Analysis

max time kernel
142s
max time network
152s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
15/04/2026, 12:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
39901ffa746a6f6ac3de2b36d9e61e0d60b221f4d9510436fd3cb3d2d7362130.apk
Size 10.6MB
Sample260415-p7ectshv2t
SHA256 39901ffa746a6f6ac3de2b36d9e61e0d60b221f4d9510436fd3cb3d2d7362130
MD5 31514358bf684a1e466a9e8069c11031
SHA1 71e292745c4d86ef0d5c69b724d93379915dab15
SHA512 9631a9b14919d145122152899be32abea2e621af46a7b7986b7b2e7fa6ccac650ede729acf5ddbd3ed4b8f77edb88f0fabf81e14d9f55462e2ff59732a738020
SSDEEP 196608:0lS8A1d2Dzj8ORCWEEtit462b1ISD3YiFgNxqjX/aK+JBW/X2XBS3e2bo+2:0RA1wDzRuEosbewmNxQXC16/X2REe2b6
TLSH
T11BB623C6F7A89D2FC8B710B68D6A66B1125A4C12C7839F477944371C38776E80F99BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery persistence

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	gov.lens.net

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

defense_evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	gov.lens.net

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	gov.lens.net

gov.lens.net
1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
PID:4332

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation1821636601410966502tmp

Path /data/data/gov.lens.net/files/PersistedInstallation1821636601410966502tmp
Size 90B
SHA256 8710a40f0c7d39ab018af56e2259623e3183b3316b3b5c18ac8bd52e215b06a6
MD5 2aa45ece9500d58d2b12cb0c09bf3bdb
SHA1 2cc9933a44e30b4c8399c983f028edacbcbfe5fa
SHA512 3c23ae5b2f5c120e9bd2a9b71955328e6120d3f141806991d5425f0031adcab9f2277aed3597bae3776c5e3f39be36151885cd1240f913e45f2173fc278458c7
TLSH
T14EB0124046718143C586E7026C8DA1401F91144058098B048A4DE0D040821E88283AE4
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation3151628775240711005tmp

Path /data/data/gov.lens.net/files/PersistedInstallation3151628775240711005tmp
Size 570B
SHA256 4015edc507bee41632852e932e9ea8a0b64c40bc2fb7e12ec1883a15b9828089
MD5 76e25db28fdac903da424072fdf8190e
SHA1 1c5e97c829e680e63aaf5f788132b814929fa6d2
SHA512 084ae2413a4a39a263ee56bb9b0f02d5b5b6729b341b3746d2a11ab8c16662596f35bbd1517ea9da5b252abf17a02dedb7e8d6e259b2683e0c4b5c8b7f036c79
TLSH
T142F026D59B97834ADCCF6412348D3C401D494496560301F46EFD84647BB26ABB36B592
MD5 SHA1 SHA512 TLSH

Submit Download

profileInstalled

Path /data/data/gov.lens.net/files/profileInstalled
Size 24B
SHA256 8bd4e14aede857f9b9137d861b5f3e0ec93359a42d9b60919a7e688a7b72b3b5
MD5 b3b85e1e97b434a09afa0bc176bdddb4
SHA1 3b23c48129e6af61a79621b529622e41d929cce2
SHA512 53a40704af686c31b1bbd703a5ac15da3db8dcccdf48cd5bb0a1687ecb6b8cc45cc59a1798479d8905aafe1efee13cd6bd5e4d6191ee63b32c59d0f808fb5819
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/gov.lens.net/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 21e277c9e84a415900f78ec3162b3cd98be11ebaac37e1f7b0b89eb9805213c6
MD5 3ed229ce2cb717e348c42f9529f74747
SHA1 d3344c086f2ebf5d02a6634a8617430f8a6092e7
SHA512 83459f0dcfbc848090883ae3bb3dfa13e8086906f09e2de21a5b72d429c79114065a657e56ae6c9c1aa1a42883b03d6f5220a5c8c5d0ef13eb3a5f798b5c18c5
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/gov.lens.net/primary.prof
Size 13KB
SHA256 063c4704945f12ed9cb6a4bdb2d87f373db4f3cd99a2707bd21fb850cbfcc309
MD5 bfdff16dbbd268ee843f40104d4297ae
SHA1 39388157ce2976bbfb2b6137f2ff9c8dcf350a61
SHA512 7374ac2a9d1bd400bc29ef829f091be841956f1e186efca87d5bdc15e7065e6437d34858501f14a913a7a781de2986de3e03eabf8ade0298df867a6284a3261c
SSDEEP 384:AMJHlwv6ByCohtZ0nk5aNEelNv3NBrLd7:VFwv6cCuik5aZ3
TLSH
T1BA52C00AE377D1163C1CB38D4B287C036CD695AE7C78B1286165CF26736378825ACC98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/gov.lens.net/primary.prof
Size 4KB
SHA256 bf23ee715a0425d567f50f975f2fc05628f3bf867230a69c6f48094c0f2c6dcf
MD5 3925b471ec4cb0cae004f8395d9ba2f1
SHA1 b89b2365a97870499d0314a541f57b29b6d7b680
SHA512 0353f7576717a0247fc518cb843ef6ab6c1ab0cd401c0ad6b8cf734b0d1ae5cd8a3da464af5346eb9375dad48f15ff19145bab17634458b4bdd51ffbfffaa708
SSDEEP 48:lbUW7eBYPBG99Ub8iVSuIxgMs4c33O3M9gvGxSnXpQKM6nwnIeyKH6u+w5kxpGSZ:1tPBGy8iVx5+8TSXaROKb5kKlUN/pN
TLSH
T166812B190459491A8BF77492FFB2EA845934FDE43A5C334879F17A032AE4863AEF11C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads