39901ffa746a6f6ac3de2b36d9e61e0d60b221f4d9510436fd3cb3d2d7362130

Resubmissions

15/04/2026, 19:35

260415-ya4e5abv9y7

15/04/2026, 12:57

260415-p7ectshv2t7

Analysis

max time kernel
143s
max time network
153s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
15/04/2026, 12:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
39901ffa746a6f6ac3de2b36d9e61e0d60b221f4d9510436fd3cb3d2d7362130.apk
Size 10.6MB
Sample260415-p7ectshv2t
SHA256 39901ffa746a6f6ac3de2b36d9e61e0d60b221f4d9510436fd3cb3d2d7362130
MD5 31514358bf684a1e466a9e8069c11031
SHA1 71e292745c4d86ef0d5c69b724d93379915dab15
SHA512 9631a9b14919d145122152899be32abea2e621af46a7b7986b7b2e7fa6ccac650ede729acf5ddbd3ed4b8f77edb88f0fabf81e14d9f55462e2ff59732a738020
SSDEEP 196608:0lS8A1d2Dzj8ORCWEEtit462b1ISD3YiFgNxqjX/aK+JBW/X2XBS3e2bo+2:0RA1wDzRuEosbewmNxQXC16/X2REe2b6
TLSH
T11BB623C6F7A89D2FC8B710B68D6A66B1125A4C12C7839F477944371C38776E80F99BC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery persistence

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	gov.lens.net

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

defense_evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	gov.lens.net

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	gov.lens.net

gov.lens.net
1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
PID:5107

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation349727303089684751tmp

Path /data/data/gov.lens.net/files/PersistedInstallation349727303089684751tmp
Size 90B
SHA256 2cb82ffd4012e85f321b7b9db78dc92598ad855f2c43010e9473da8cf4171583
MD5 acca51448704b82dc016f859aa6e5422
SHA1 11d0fd05e1ff4cb68ac51d35c66f5d43d263d316
SHA512 779baac8417090f306c732c500e9b536f96e87787a65205e1bd6e00055a5febb91539c99bc42dda40ff26d60fe696344484e499e26cf0189dd03ede25ab33ce9
TLSH
T1CAB01210A63087418499A3071DCCA1002D916880040B8F084B19948481C27F18223E98
MD5 SHA1 SHA512 TLSH

Submit Download

PersistedInstallation7185254545557613853tmp

Path /data/data/gov.lens.net/files/PersistedInstallation7185254545557613853tmp
Size 567B
SHA256 ead928865d229920378dccef83fb1c271d72789b7046c0c0b7306583ef5d1a5e
MD5 fa724372cbf36e4f77c205bf2bc808f8
SHA1 5eada93073dc11dece854ea025ba41203428b0c9
SHA512 4f68976a63f2d5e594ad97d1428fd9bcc3900b353029613cb2bbc211b4c6bc148f6673480221dcbba0fbc2a8c223973de35f33fecf4528656bb54afc9e285d85
TLSH
T1E1F0E1573793860BD8EAE151784CBC4C0EDA68A9524B12E66BFD0405AAD1B6DE3031C1
MD5 SHA1 SHA512 TLSH

Submit Download

profileInstalled

Path /data/data/gov.lens.net/files/profileInstalled
Size 24B
SHA256 b98b0341c91e3b4fea2990bf0f6e0f4a291c5975bd63168f635dfaffd58a7cc8
MD5 4ad3ccdadffccbe09b611b5821574551
SHA1 8687efb753c14918f9f56465ee3a9f0b8b427101
SHA512 d1f82136065cffb0f8e3d0db5f309fd3936e88960eaba0eb4b7d87e0cd6d0090ae9b5c651236728cba27437eedc57648267b8edf81e9ef8acaaab8f37cebc4f9
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/gov.lens.net/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 d7f6c2c6f6c17c366306011c7864fd26817876d07bbd48afc77e7ae6a079d232
MD5 07f77081fba8d09b2a78a8efbbb862f7
SHA1 9066510f7bb165746c5381cb64b90ec4d209e27a
SHA512 d79ccad866eee3c7eda9933ddc08ce964a2090b4afb8190c4a21fc5305ffcd4ef62c3c60d08e9638b53aadb4d8fa482909ea1b8b6832d081b60f0b3c04a2005e
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/gov.lens.net/primary.prof
Size 12KB
SHA256 3175159564d440385f117eb6827f925bf1becf45711a137e9f5766d8584a863d
MD5 2c86bf15ef9e8b78d92abe04dc07ac05
SHA1 802343e998479616044e36abc8596257628bb2f4
SHA512 fec3bf6139a2d96ce6b0b971f196c87f98c42d44c9bb4e282f4e66ff238df73ae0640335a8adb507a65a4dbc6760376ba7214fae9c57a32678fe9549899fc316
SSDEEP 384:QilHs3ZrPK63yV4i5QCpg3nTPAEpLt0R+AF+NXhR:PMJTwV4ipW3nTPAkLt0QAY
TLSH
T12942C04305F11BC6683BE9E1EB210D9FDB0D11573A60CB2B7EF1E5E60AFE86612040AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/gov.lens.net/primary.prof
Size 4KB
SHA256 bf23ee715a0425d567f50f975f2fc05628f3bf867230a69c6f48094c0f2c6dcf
MD5 3925b471ec4cb0cae004f8395d9ba2f1
SHA1 b89b2365a97870499d0314a541f57b29b6d7b680
SHA512 0353f7576717a0247fc518cb843ef6ab6c1ab0cd401c0ad6b8cf734b0d1ae5cd8a3da464af5346eb9375dad48f15ff19145bab17634458b4bdd51ffbfffaa708
SSDEEP 48:lbUW7eBYPBG99Ub8iVSuIxgMs4c33O3M9gvGxSnXpQKM6nwnIeyKH6u+w5kxpGSZ:1tPBGy8iVx5+8TSXaROKb5kKlUN/pN
TLSH
T166812B190459491A8BF77492FFB2EA845934FDE43A5C334879F17A032AE4863AEF11C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads