Analysis
- user interaction
yes - max time kernel
20s - max time network
19s - platform
debian-12_armhf - resource
debian12-armhf-20260126-en - resource tags
- submitted
21/04/2026, 14:55
General
- Target manji.apk
- Size 110KB
- Sample260421-satm2aby4x
- SHA256 f74f3659cc7abc205eef5be1f4806554a1105ad3f7b5079d9613253097d007fd
Score
7/10
Malware Config
Signatures
- Traces itself 5 IoCs
Traces itself to prevent debugging attempts
- Changes its process name 2 IoCs
- Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
- Reads runtime system information 2 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/manji.apk/tmp/manji.apk1⤵
- Traces itself
- Changes its process name
- Checks CPU configuration
- Reads runtime system information