e41e18ef0840961dc895e5e8b3085b1db3f6751e17edc94df36364871078ea13

Analysis

max time kernel
85s
max time network
86s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
11/05/2026, 17:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
QQ安卓版.apk
Size 209KB
Sample260511-vlkklsft5v
SHA256 e41e18ef0840961dc895e5e8b3085b1db3f6751e17edc94df36364871078ea13
MD5 8afd7733558b5ed7eb6b7b337060d6c3
SHA1 afbbab751de2cc61ac7014032e7517f0a26c95d1
SHA512 a0d53d8003115b1aadce5949a66f7f597ee28ee4d639815800d04dab7c843a1238b5cc605ebaf8dd83a7ab4132f401e16cf69a807b52c5f42b04ab47432dd807
SSDEEP 3072:dqEnH5FrNXPjTVEzqunruFS1d0ATF1ncX/2XWJK647IgmSoalfRzK1M5XR:ddnH5FFPHsnCFS30ucX+G/43mhYfRv/
TLSH
T1222412025B349037E67FF23DE2451BCA5B159AD90F1C6BB73F294C081EE2B76184E589
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

impact privilege_escalation

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	my.app.qq

Tries to add a device administrator. 2 TTPs 1 IoCs

privilege_escalation impact

Device Administrator Permissions

T1626.001

Account Access Removal

T1640

description	ioc	Process
Intent action	android.app.action.ADD_DEVICE_ADMIN	my.app.qq

my.app.qq
1⤵
- Acquires the wake lock
- Tries to add a device administrator.
PID:4890
- logcat -c
  2⤵
  PID:5001
- logcat
  2⤵
  PID:5039

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

T1626

Device Administrator Permissions

T1626.001

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Account Access Removal

T1640

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads