Resubmissions

22/05/2026, 10:23

260522-meyvnagz9q

22/05/2026, 10:13

260522-l83v2abw717

Analysis

  • user interaction
    yes
  • max time kernel
    16s
  • max time network
    303s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    22/05/2026, 10:13

General

  • Target
    ΙCΙCІ Crеԁit Carԁ.apk
  • Size 10.2MB
  • Sample260522-l83v2abw71
  • SHA256 d69b813ba7aa8914206991549ba2f8120d136af80d0e0a15f397653f454b089a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.qeuyiah.rlelctj
    1⤵
    • Checks Android system properties for emulator presence.
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries information about active data network
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Checks memory information
    PID:3394

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        base.3394.tmp

        • Path /data/user/0/com.qeuyiah.rlelctj/cache/oat_primary/x86_64/base.3394.tmp
        • Size 16KB
        • SHA256 c237b04c480cdd2df60ccac7eedd8d3529fc3898e684acda33027001803a1a29
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation3257511603028057265tmp

        • Path /data/user/0/com.qeuyiah.rlelctj/files/PersistedInstallation3257511603028057265tmp
        • Size 90B
        • SHA256 9f16f79f12673c7c7fe1265a9602c44b261a207156cc3a39bd53e1cd6f9a042b
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation4124101438158575485tmp

        • Path /data/user/0/com.qeuyiah.rlelctj/files/PersistedInstallation4124101438158575485tmp
        • Size 114B
        • SHA256 4054ccbe628db098a1b20f9a79f68c133411992f131eb9acb92440070cbbca87
        • MD5 SHA1 SHA512 TLSH

        of3grwny

        • Path /data/user/0/com.qeuyiah.rlelctj/files/of3grwny
        • Size 265KB
        • SHA256 154975300a8e52f2b20b9c9daa94b43cd2da8ec982ee6f60039feae6f2287ee4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        rn5jHQB4

        • Path /data/user/0/com.qeuyiah.rlelctj/files/rn5jHQB4
        • Size 13KB
        • SHA256 bd191a4533ee1529e633fa8ed4741064ce48ae27e200183d229562c77e7b433d
        • MD5 SHA1 SHA512 SSDEEP TLSH