Analysis

  • max time kernel
    52s
  • max time network
    152s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    16/04/2026, 12:19

General

  • Target
    app-release.apk
  • Size 6.5MB
  • Sample260416-phex3aex3n
  • SHA256 759948e04dfc9c433a7b820539f1844c3ddbb989811965d34befaca962b2f3c0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • co.median.android.qdplryp
    1⤵
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4210

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        INSTALLATION

        • Path /data/data/co.median.android.qdplryp/files/INSTALLATION
        • Size 36B
        • SHA256 785a0951e795b608c2dbbb3b8f57136baa0803ca185ed0ae9c16323aea69d111
        • MD5 SHA1 SHA512

        regexintext.json

        • Path /data/data/co.median.android.qdplryp/files/gonative-config/regexintext.json
        • Size 1KB
        • SHA256 5c8c872ca8aaa89d3195758ebf1679cddd024a3411a56353aa04824671899ac7
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/co.median.android.qdplryp/files/profileInstalled
        • Size 24B
        • SHA256 8d44e0422c8e081bacac28b710c27881d8a18eff677592f0133b9f8779f58253
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/co.median.android.qdplryp/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 2e6b07450bf0f8bbac516ff010d3f17a22e4c27f3b688adac41e898d883878e7
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/co.median.android.qdplryp/primary.prof
        • Size 1KB
        • SHA256 ad604b9ba6a1b9e7cba4c43dac6246ad05a08c34d4613dba8ea0e8a1c2c7eddc
        • MD5 SHA1 SHA512 TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/co.median.android.qdplryp/primary.prof
        • Size 6KB
        • SHA256 6821f1b2b2160e156ccec907c469f3040e374cf04d86caf41746ddf071143d55
        • MD5 SHA1 SHA512 SSDEEP TLSH