Analysis
- max time kernel
52s - max time network
152s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
16/04/2026, 12:19
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
app-release.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
app-release.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
app-release.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target app-release.apk
- Size 6.5MB
- Sample260416-phex3aex3n
- SHA256 759948e04dfc9c433a7b820539f1844c3ddbb989811965d34befaca962b2f3c0
- MD5 af0cc1fdd944802be43dc22368b09cff
- SHA1 1be4ee5817cf88e878b3008e08ddbf6a58781e2a
- SHA512 6210676e54d919cc3e5cb0319ae89810dca4e62b1d961305c96855cf03679e74607174a6e18b1ceeffb6715064a16789561b876d6a7f72a5ad3b96bb2750d7f3
- SSDEEP 196608:T44HpSy07DKRo/7usBbchPFPeeu47fTUz:E4HpHRo/nBwPFmeB7g
- TLSH T1EF66029EF7689A2FC47710B20C6A5231165B4C12D6839BA3696C371C787B7E80F4DBD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo co.median.android.qdplryp - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone co.median.android.qdplryp - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver co.median.android.qdplryp - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo co.median.android.qdplryp - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo co.median.android.qdplryp
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/co.median.android.qdplryp/files/INSTALLATION
- Size 36B
- SHA256 785a0951e795b608c2dbbb3b8f57136baa0803ca185ed0ae9c16323aea69d111
- MD5 c8ae3475f16569d2ec38e0ced69d875f
- SHA1 fb20cbb2b04c3c5bd591693eaeffc4a26ea6e735
- SHA512 e568c5c0f125b55561737f9633340d25f018927dd55e5cf300868567a6a5a74e0496f5e832f544a6adb6bb93fd456a4ec33e013d210d552d03dbbd48a198ea07
- MD5 SHA1 SHA512
- Path /data/data/co.median.android.qdplryp/files/gonative-config/regexintext.json
- Size 1KB
- SHA256 5c8c872ca8aaa89d3195758ebf1679cddd024a3411a56353aa04824671899ac7
- MD5 f9159c71c56dc8b3ca91b014f9b6cb29
- SHA1 19c0398a7406d1178dc48f762fb56a9131aa4021
- SHA512 e543524835b0a63874f9a9ff22f8475bee4900726ffcb7fe1bd00caa60e801a54e55c649f70b94885107ec38ba32e8c50fa4630f1d35e6ff78833ab2eb11a148
- TLSH T1B841E274C9680DB399C82864B26E421B7A72615F2FD6391DFB8C162C1F4C5BF69B820C
- MD5 SHA1 SHA512 TLSH
- Path /data/data/co.median.android.qdplryp/files/profileInstalled
- Size 24B
- SHA256 8d44e0422c8e081bacac28b710c27881d8a18eff677592f0133b9f8779f58253
- MD5 5a0fce8d739c3f192871576e475a1ffe
- SHA1 75900f5fefaf54e7b4ef285776d2978f686bb95f
- SHA512 623ec94e0c17d20192d0d9d9cfe2d5579b9dc0333224e7aea2023f6b3138df95ff23dc128d2a3c078d3afc9082eb5c8baf552dd02c7f2e3bac152c33ea7609ba
- MD5 SHA1 SHA512
- Path /data/data/co.median.android.qdplryp/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 2e6b07450bf0f8bbac516ff010d3f17a22e4c27f3b688adac41e898d883878e7
- MD5 fc0d8b5f41819a65111207f1e3afa245
- SHA1 c29aaac75484907117a43d5a5596d79a082a76c7
- SHA512 2d88debb7750ef5001ce3f5234a90c945eae4dee7fe2179baebc7df7fbe12f081dd3707653a200b949e7e6f41dce24c2943951d2d81cfcf7c26fb64bde34819c
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/co.median.android.qdplryp/primary.prof
- Size 1KB
- SHA256 ad604b9ba6a1b9e7cba4c43dac6246ad05a08c34d4613dba8ea0e8a1c2c7eddc
- MD5 ef3b403df323556ec3e0cded4fc3fbde
- SHA1 0d06367d219007446791fe5fd01e2bdb68876a68
- SHA512 37c258b2b45db5c7d3ffa4c5e2222e2206f62ad922ba75bfe4ed01e93ad3c56415ec4b456ba7d20e8e1d0a8a09add36edb0c8b2ca26e00b494d72f6492cece9c
- TLSH T1BC412A098BE0DE36A647A96CBAC5381F6B40F0C66E4E943609AF03198C78A612918C96
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/co.median.android.qdplryp/primary.prof
- Size 6KB
- SHA256 6821f1b2b2160e156ccec907c469f3040e374cf04d86caf41746ddf071143d55
- MD5 b143c6a30d987984da0bc37e14be3023
- SHA1 75afebf29769a62931462abf0d21dfa455c49e7d
- SHA512 bcc833ed7acb25b6464d2fd32a5580bf4a61f1bb4f6c72a08669860cca4f0ea98ec11b4944da6e043719622e5e53712f2583332de68dfc0c119b954768262a4b
- SSDEEP 192:twKT4fejgHfPdWb+rcRu50m5+pwqIuLuLd:tlTuejCNTwAT5+B7LuLd
- TLSH T193D1AE30E91539D50A28E28EA07A9893C263675C385BCF8A47E38A09D5F570573C06FB
- MD5 SHA1 SHA512 SSDEEP TLSH