739009e2a7504b51cee760b85d8642346dcfa0e1e5cb97951447653feb028469

Resubmissions

11/05/2026, 14:26

260511-rrttpafx5r7

11/05/2026, 14:16

260511-rlc9rab17v6

Analysis

user interaction
yes
max time kernel
1s
max time network
51s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
11/05/2026, 14:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
com.discord.apk
Size 120.0MB
Sample260511-rrttpafx5r
SHA256 739009e2a7504b51cee760b85d8642346dcfa0e1e5cb97951447653feb028469
MD5 64db5c59459fde1ee1141f21ebe57b89
SHA1 204b5f6c0a60b8e1a734d35f785b3e44edaa3509
SHA512 feb5a81a89fd7f3f11347c2a134653fbb9ba5d605a1a6fb3606ba82cbe4beab51f2caac22a2bccc7a06f934242fa76e18bc2e0780b22f46e4f106e97d609b2e9
SSDEEP 1572864:9povQsy6VlNNBold6pAY89msN0n689C8XacsZ/v9O834d9dIY9sBRxaC4tXmTW:svQsy6VlNNBoqXIYuRxaC4gTW
TLSH
T16A589D17F541FC54E9AC07BA88B522E1BB7568456F47638B3109BFAD2D73ECC1A802B4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4879	com.discord
/system_ext/framework/androidx.window.sidecar.jar	4879	com.discord

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.discord

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.discord

com.discord
1⤵
- Loads dropped Dex/Jar
- Acquires the wake lock
- Queries information about active data network
PID:4879

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

PersistedInstallation4235696967812674889tmp

Path /data/data/com.discord/files/PersistedInstallation4235696967812674889tmp
Size 90B
SHA256 7323a485dfa36cc56cb29d18ceb87b1c2979d70136d5ffbb2e93c64195f9f2c5
MD5 7db6a9e26e53ea878696bda0f19beaa1
SHA1 09fb88396107358917361147070f6a5e0c64b00a
SHA512 7273cacb47897362f913176c4eb1c8dfec5b45aab9288cdcddc81600c9c358b141c26fd4a161e407d121b3eb378689af739561d7247b6e59c2d7dd2909cd6253
TLSH
T1D2B0124486748A5AD48AA60B7F4CD1402D401641484ACA880F18E09140825D5C1039D8
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.window.sidecar.jar

Path /system_ext/framework/androidx.window.sidecar.jar
Size 12KB
SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
MD5 bdf3529e80318eb14e53a5bf3720c10d
SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
TLSH
T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
MD5 SHA1 SHA512 SSDEEP TLSH

Download