d319074af1da444965a29c3945998244ad99e391366eda80c6510df49f2503e2

Analysis

max time kernel
7s
max time network
138s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
22/05/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
BAIADNA.apk
Size 5.8MB
Sample260522-pgq9psds6w
SHA256 d319074af1da444965a29c3945998244ad99e391366eda80c6510df49f2503e2
MD5 542124a7c8ecebc066d9c84a686fb9cb
SHA1 aca94a0978824fb679f325f2de4883d81963ce35
SHA512 5c2c18f3cce40fab51a503d3c1fb5e23a8e4afa8330b7ca224d1fd295011ba43e2383077acfb75063d2fb11d24df162d1e648b1a38bfdf0a2d6e828d51bde768
SSDEEP 98304:mvTHtYPV3TEQZpOYO2aIkxvtDoX7B/ffG8meK0Hz1fhNDNoMeO+6xReyUZ:mvTHuOy/kxvtDoXZdmeK0HzVRoQ+6xRw
TLSH
T1E35601A3B7825579C4F24B321CB51A6036079DB18F939687BC10373D6CBB6D81E99ACC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

banker discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.orfxq.yohsej/[email protected]	4753	com.orfxq.yohsej

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

com.orfxq.yohsej
1⤵
- Loads dropped Dex/Jar
PID:4753

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

classes.dex

Path /data/data/com.orfxq.yohsej/app_dex/classes.dex
Size 1.4MB
SHA256 42e76870e64f6ef840063e702d78db2bd958fe8668d41c1aeba29c6b9bff6820
MD5 abb341148e49f676968bf04859191f44
SHA1 684f4a32546bce196afb1e91f43f2ad805e7a331
SHA512 3b0ad859d36a3f5ee86646984ac56a2212814768a77f567a7f9fd65a3c55be61fdf7d6195c01cab55ed08360495b5dd81559a9e0b9e7383630ea296ff9d7f60f
SSDEEP 24576:FRf6Ic0QH8p0kvAQrHEVDgl82aoidXj5X6ItJL:3fnPQH8pRIQLAgQdXjn
TLSH
T115653A21A603BFE3C62FE3B860592F707F24AC65B9961F210B0FC9B0AD931DE5675944
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp_install.apks

Path /data/data/com.orfxq.yohsej/cache/apks_temp/temp_install.apks
Size 171.5MB
SHA256 c49f7a08be477596c673609b4397aefcd8e3064b81b445fd9a1f9a4c0f552cc7
MD5 5e050b83e147314df252de719c395439
SHA1 7e64a06866bad62a57b18c07ff6ef2880d597870
SHA512 187551e724a4b6fddfb6f6abd376a7404163aa4977c8231986bd7ab59032b63a11bd89d0599f337d2568c49753bb20e55d4374d0acb62be5a9569406ba076ff6
SSDEEP 98304:3yAVr2vR4RT8Eh1XeaXLFHqKeVfNLltUU:iAVrUR4FNh1dBKKeVfNLltR
TLSH
T1498808B6B35104AAE46E35F81F6022902A138C5789375F0D9F4B76243573FE26ED7CA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base.apk

Path /data/data/com.orfxq.yohsej/cache/temp_extract/base.apk
Size 167.9MB
SHA256 e15631be59692239f1f4daa91b2ed832fcc888a480f6c8f88fa215c901885c8d
MD5 e7f35a6c906bb508cd6eb9513780cf88
SHA1 dd3ce10204597f973fecdb8b2973e993f88e5e33
SHA512 af5ebde81eea616863aa9d812760f06343ca3f4c3b5f7d9d2bdaa481a37df40e2508b22267aff5e9d64825428cbfdbd0840886e0e312b1facb382f2d499a1bbe
SSDEEP 24576:EYAivUg/aLliG8+IPjvN8/yLkpSIK0ObFnzICoTEsFIQlB3QpUxHJ+:nAEUg/ahBbyAYvOKOjI
TLSH
T158882853F7C48D69D8F643F5487A53652A4BAD30CF07839BA904323C38B32D52E99AD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

[email protected]

Path /data/data/com.orfxq.yohsej/oat/x86_64/[email protected]
Size 240B
SHA256 d3c501ed1c6de62b5586be98d7f0be9b66e520ce7fbf89a88725699a4a7382de
MD5 3931c7f24ad35284bffe36dc970df951
SHA1 ee7284b23ed4214f1e2f727fc10047c8739c4601
SHA512 eebb48916bf492637e630738c841774d0adbee3440674b1c2c069f4d1e7f0b75aa62e08d27970f8e225ad64bd71b3ff39906a565e999c89ff31e4f3aa0cf90c1
TLSH
T1C0D097F162098000CC112338A3991902338832D33C8A18735AD61681BC87CA83C0901B
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads