e9fdfc03ce719f6c3a53950113a82933dab107b8b9d47a19a4250271d5528f0f

Resubmissions

07/05/2026, 18:29

260507-w4xhkagz3s

07/05/2026, 17:42

07/05/2026, 17:41

07/05/2026, 17:41

07/05/2026, 17:35

Sharing

Copy URL Twitter E-mail

General

Target
Transportadora (14).apk
Size 24.5MB
Sample260507-v6evvsgs91
SHA256 e9fdfc03ce719f6c3a53950113a82933dab107b8b9d47a19a4250271d5528f0f
MD5 228bce76756c51ec25cf8e5a912cc3a4
SHA1 614d88cd5f1e04ca13ebdaccdb21a0bfb60f2f37
SHA512 4dfd9193b47987946fb169cc32270d874fb407c34c07b3c89812b6aa186f46e2adb3d47f91f1338ee58926093a8006c6f8e9d21a15de0fabfe12d9e6a932117e
SSDEEP 393216:QFGMImwSMJMlNRY4D0PAEGmEiZScGYF5lR3VHCbm5i0G68sqpKc5t5HDZyed:KTMONRHDDiEnYXZHCm5i0Guq1t5j4k
TLSH
T187473347E70F944AC4F75337BE36472A24251C6ACB42D257A831B33CBDBB5C19A4AB84
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Transportadora (14).apk
- Size 24.5MB
- SHA256 e9fdfc03ce719f6c3a53950113a82933dab107b8b9d47a19a4250271d5528f0f
- MD5 228bce76756c51ec25cf8e5a912cc3a4
- SHA1 614d88cd5f1e04ca13ebdaccdb21a0bfb60f2f37
- SHA512 4dfd9193b47987946fb169cc32270d874fb407c34c07b3c89812b6aa186f46e2adb3d47f91f1338ee58926093a8006c6f8e9d21a15de0fabfe12d9e6a932117e
- SSDEEP 393216:QFGMImwSMJMlNRY4D0PAEGmEiZScGYF5lR3VHCbm5i0G68sqpKc5t5HDZyed:KTMONRHDDiEnYXZHCm5i0Guq1t5j4k
- TLSH
  T187473347E70F944AC4F75337BE36472A24251C6ACB42D257A831B33CBDBB5C19A4AB84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion evasion persistence
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Makes use of the framework's foreground persistence service
  Application may abuse the framework's foreground service to continue running in the foreground.
  defense_evasion persistence
- Listens for changes in the sensor environment (might be used to detect emulation)
  defense_evasion
behavioral1 behavioral2 behavioral3

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Hide Artifacts

T1628

User Evasion

T1628.002

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Loads dropped Dex/Jar

Makes use of the framework's foreground persistence service

Listens for changes in the sensor environment (might be used to detect emulation)

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3