Resubmissions
07/05/2026, 18:29
260507-w4xhkagz3s07/05/2026, 17:42
260507-v949xsbz3j707/05/2026, 17:41
260507-v9rntsbz2p707/05/2026, 17:41
260507-v9pjgabz2n707/05/2026, 17:35
260507-v6evvsgs917Analysis
- user interaction
yes - max time kernel
146s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
07/05/2026, 17:35
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Transportadora (14).apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Transportadora (14).apk
Resource
android-33-x64-arm64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
Transportadora (14).apk
Resource
android-34-x64-arm64-20260325.1-en
1 signatures
150 seconds
General
- Target Transportadora (14).apk
- Size 24.5MB
- Sample260507-v6evvsgs91
- SHA256 e9fdfc03ce719f6c3a53950113a82933dab107b8b9d47a19a4250271d5528f0f
- MD5 228bce76756c51ec25cf8e5a912cc3a4
- SHA1 614d88cd5f1e04ca13ebdaccdb21a0bfb60f2f37
- SHA512 4dfd9193b47987946fb169cc32270d874fb407c34c07b3c89812b6aa186f46e2adb3d47f91f1338ee58926093a8006c6f8e9d21a15de0fabfe12d9e6a932117e
- SSDEEP 393216:QFGMImwSMJMlNRY4D0PAEGmEiZScGYF5lR3VHCbm5i0G68sqpKc5t5HDZyed:KTMONRHDDiEnYXZHCm5i0Guq1t5j4k
- TLSH T187473347E70F944AC4F75337BE36472A24251C6ACB42D257A831B33CBDBB5C19A4AB84
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4759 com.mdltje.lenkka /system_ext/framework/androidx.window.sidecar.jar 4759 com.mdltje.lenkka - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.mdltje.lenkka - Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.mdltje.lenkka
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 12KB
- SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
- MD5 bdf3529e80318eb14e53a5bf3720c10d
- SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
- SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
- SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
- TLSH T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
- MD5 SHA1 SHA512 SSDEEP TLSH