a977e69afb3586cfea1302ac4d7dc491914c72639b578375fc142294c119dac0

Analysis

max time kernel
46s
max time network
152s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
05/05/2026, 04:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a977e69afb3586cfea1302ac4d7dc491914c72639b578375fc142294c119dac0.apk
Size 4.4MB
Sample260505-fdaccacw2l
SHA256 a977e69afb3586cfea1302ac4d7dc491914c72639b578375fc142294c119dac0
MD5 b5ddab31a79f638ebf25986e3d29c6c2
SHA1 beac369e876ac416211e84f53cb8b7b65d82ff22
SHA512 cab2915e97e3e187da6812081bfcccfa3c6c6e7875c928cb9f7f86c4db7b28907bc963e2a4650cb79c61f0c0afaadf6c132c72bebb4425b0cf408ba3b98969fe
SSDEEP 98304:mZRrfKsHuWgpSnq0KDm7ng/Wb9dO8ftRrAw+g:82sOpgnQD+g/2T+g
TLSH
T18826E186F768DA2FC877743209AA5231564B4D128E87974779443F1C387B5E80F5EBC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion

Malware Config

Signatures

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	com.mtf.protect

com.mtf.protect
1⤵
- Checks the application is allowed to request package installs through the package installer
PID:5067

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.mtf.protect/files/profileInstalled
Size 24B
SHA256 3f0021925c876c77e1cf17b1a91e222a1c936fef783033d9218306c883930b25
MD5 8a66ae666b5498ac842774127ed50d93
SHA1 828bd4ea493a35f23009ed61fee88e33655dc6ce
SHA512 6f3a0cecc259f51deeee98810805ea43608d83b7bfafbdd2cf8a13340282322fe18a72539bd4d42e26be9cb571581e90b9546c425dfc08788e60c240c8c259a5
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.mtf.protect/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 bfb1b4550a7f12edbfa39075b87d4906701e879ead3a9efd604925913f800c19
MD5 0f04ff15f71efb3415ab51e32e6d49eb
SHA1 cba630fe44e0fa547f045d0247a5624beaaf3bc9
SHA512 4c69cb3a68f1a02f081f31d12fa5feef069d28daeedbc9be7f4928a960cb935a1c61481c35a4232a023c813a70ff960cd9fb4ca6b0c3b32a528d2d31072c4d03
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mtf.protect/primary.prof
Size 4KB
SHA256 ebf70be81741a0df35d027c7473305debcc71902d37447c42c3a48dc38e22129
MD5 24179160c60dfd1b7ef7adba84c4f99a
SHA1 07d4b76319bb4c14c831eb4f29ac313736d8d4e1
SHA512 9b5f4c06a96e6600c2fa447ab34f4c0f465c10d10672d996c732013adcd694fa1429fe658af26f3e4fe835e62260c260532595dea2313a96b43388efe9096c9b
SSDEEP 96:gawFvyuiWaHeZxnkTo88TvhExiCHrTUblt+U6caw0X/7dM:4FquiWPxG5IEk+Mlt+rO0X/7C
TLSH
T1D2A15C3DAD527F51A01978F1DCEC1DA2A398D9814A691C9C32D8E812431A3B62B5DCFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mtf.protect/primary.prof
Size 7KB
SHA256 66f8e9d0d02c48df8b0622114d83a36b4f395d4a468e7b36cb3a08b1862738c9
MD5 e914d6d50d6454b3fb661f65c4ae285c
SHA1 6a90f34921cdcceb38050d65b5e227c2bb541cda
SHA512 483330dff78012d9f38d1ae1e8dfc2d1b29a3acd867fcd93a97ea741ddb138537da9c484d7552f5734cbbd9067ebcda698878b810b4974bc14efc15ea710a784
SSDEEP 192:Zu4kZU5TgmWUhXMunqZfkkcuqFhqSIMbJ1mN:Zu4kolJMcqxkkgFHI8Jm
TLSH
T13DF19F613022C568BAC587AF4F765DB7FFBBEA297C54103C8C926A10702B3277476167
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads