Resubmissions
11/05/2026, 19:07
260511-xsv12acv5m1011/05/2026, 14:34
260511-rxyd3afy8q1011/05/2026, 14:17
260511-rl11tab19v10Analysis
- user interaction
yes - max time kernel
11s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
11/05/2026, 14:17
Behavioral task
behavioral1
Sample
android.taks.apk
Resource
android-x86-arm-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
android.taks.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
android.taks.apk
Resource
android-x64-arm64-20260325-en
3 signatures
150 seconds
General
- Target android.taks.apk
- Size 3.7MB
- Sample260511-rl11tab19v
- SHA256 149319e5317cb78981e78e1ffb27fd9f21cad06f74049a60dc5bd16aa13c881f
- MD5 f6c7f67fd79db2e09dea3b78633e4834
- SHA1 b683fbfcda1832a4da0a911a4800d111bcef7f92
- SHA512 3b11dbe2881071f3347a3ba11fc60cc23327bdfefc005f3b729c2e01165e8ed4f6085ad1c1d263dc66d2af21d0a59ea19268103a2bb1369098b253251e47f482
- SSDEEP 98304:JQvrxhW2GOm+fIWNtNC00mmzpzB6TL0t8KhLO:JQvdht/m+fDN90Rz+0B8
- TLSH T16206E003FF89CAD7D4BA83F56B330CA91A171F54C643AAD704153A6E2EB71C54D86A8C
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.contackt.android - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.contackt.android - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.contackt.android - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.contackt.android - Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.contackt.android
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-05-11.txt
- Size 29B
- SHA256 be9f50f33b0dd955877cd232631b76f054886fe846ca0f8ebcd145555715c3b0
- MD5 914c91cc95c9d7a36921e38addfaced7
- SHA1 dc957a60d51e3e099b4f20c32d5ec275388f8839
- SHA512 9c8dbcbf29d89035ef118425f8386da730429cbaf8324f122ef0df3aef01817ca2cfe8fb5c42563b1ed444da4b32d311c9ada45a2ed6c6f8ed04b677e97671a2
- MD5 SHA1 SHA512