d319074af1da444965a29c3945998244ad99e391366eda80c6510df49f2503e2

Analysis

max time kernel
7s
max time network
152s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
22/05/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
BAIADNA.apk
Size 5.8MB
Sample260522-pgq9psds6w
SHA256 d319074af1da444965a29c3945998244ad99e391366eda80c6510df49f2503e2
MD5 542124a7c8ecebc066d9c84a686fb9cb
SHA1 aca94a0978824fb679f325f2de4883d81963ce35
SHA512 5c2c18f3cce40fab51a503d3c1fb5e23a8e4afa8330b7ca224d1fd295011ba43e2383077acfb75063d2fb11d24df162d1e648b1a38bfdf0a2d6e828d51bde768
SSDEEP 98304:mvTHtYPV3TEQZpOYO2aIkxvtDoX7B/ffG8meK0Hz1fhNDNoMeO+6xReyUZ:mvTHuOy/kxvtDoXZdmeK0HzVRoQ+6xRw
TLSH
T1E35601A3B7825579C4F24B321CB51A6036079DB18F939687BC10373D6CBB6D81E99ACC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

banker discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.orfxq.yohsej/[email protected]	5093	com.orfxq.yohsej

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

com.orfxq.yohsej
1⤵
- Loads dropped Dex/Jar
PID:5093

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

classes.dex

Path /data/data/com.orfxq.yohsej/app_dex/classes.dex
Size 1.4MB
SHA256 42e76870e64f6ef840063e702d78db2bd958fe8668d41c1aeba29c6b9bff6820
MD5 abb341148e49f676968bf04859191f44
SHA1 684f4a32546bce196afb1e91f43f2ad805e7a331
SHA512 3b0ad859d36a3f5ee86646984ac56a2212814768a77f567a7f9fd65a3c55be61fdf7d6195c01cab55ed08360495b5dd81559a9e0b9e7383630ea296ff9d7f60f
SSDEEP 24576:FRf6Ic0QH8p0kvAQrHEVDgl82aoidXj5X6ItJL:3fnPQH8pRIQLAgQdXjn
TLSH
T115653A21A603BFE3C62FE3B860592F707F24AC65B9961F210B0FC9B0AD931DE5675944
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp_install.apks

Path /data/data/com.orfxq.yohsej/cache/apks_temp/temp_install.apks
Size 171.5MB
SHA256 c49f7a08be477596c673609b4397aefcd8e3064b81b445fd9a1f9a4c0f552cc7
MD5 5e050b83e147314df252de719c395439
SHA1 7e64a06866bad62a57b18c07ff6ef2880d597870
SHA512 187551e724a4b6fddfb6f6abd376a7404163aa4977c8231986bd7ab59032b63a11bd89d0599f337d2568c49753bb20e55d4374d0acb62be5a9569406ba076ff6
SSDEEP 98304:3yAVr2vR4RT8Eh1XeaXLFHqKeVfNLltUU:iAVrUR4FNh1dBKKeVfNLltR
TLSH
T1498808B6B35104AAE46E35F81F6022902A138C5789375F0D9F4B76243573FE26ED7CA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base.apk

Path /data/data/com.orfxq.yohsej/cache/temp_extract/base.apk
Size 167.9MB
SHA256 e15631be59692239f1f4daa91b2ed832fcc888a480f6c8f88fa215c901885c8d
MD5 e7f35a6c906bb508cd6eb9513780cf88
SHA1 dd3ce10204597f973fecdb8b2973e993f88e5e33
SHA512 af5ebde81eea616863aa9d812760f06343ca3f4c3b5f7d9d2bdaa481a37df40e2508b22267aff5e9d64825428cbfdbd0840886e0e312b1facb382f2d499a1bbe
SSDEEP 24576:EYAivUg/aLliG8+IPjvN8/yLkpSIK0ObFnzICoTEsFIQlB3QpUxHJ+:nAEUg/ahBbyAYvOKOjI
TLSH
T158882853F7C48D69D8F643F5487A53652A4BAD30CF07839BA904323C38B32D52E99AD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profileInstalled

Path /data/data/com.orfxq.yohsej/files/profileInstalled
Size 24B
SHA256 b0984f9ed60dbc7f607d08a501511ace5255fcb8f656465786282c906a189727
MD5 b5852c51d467686fc55af3541e7372ce
SHA1 1768319bdeb7875e13119c08c4e7b1243812ee6c
SHA512 82c1f0b0443ba494f968404c240cfdd54e0a47f43f2aa50b17b004a1efaf10566d94c082d64e6a77ae944c78c7f731ccb6842919f627139f7241fe26e1995e46
MD5 SHA1 SHA512

Submit Download

[email protected]

Path /data/data/com.orfxq.yohsej/oat/x86_64/[email protected]
Size 81B
SHA256 0936f76da081d7428a15bb2bf40e5ddc1cfc8d740d9850c948953ea699a5830b
MD5 df3787ded518bab946a8a5f5689e2ecc
SHA1 f4d9d1e142a7ccea622811430b775dd99a9d60cf
SHA512 9c52e1dc6b6b0d4ae03df940a4b7497ab9fd83012af0e3342d9b71184af2e12b73bb8e8947d7191a7fe8ffd08e776a952634af3ef052c02b75e4f13afd4f6f27
TLSH
T188A0247750001DC4CDC00F31074405C30D0070C1140111515CF4C1C5CC130103C1470F
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads