cab60b895651915f0dc56ec3a5e258903f50568bfe2ed579162f6c52a0f95bb3 | Triage™

Resubmissions

25/05/2026, 01:44

260525-b51w6aas8j8

25/05/2026, 01:41

260525-b4mcdaas7k8

Analysis

user interaction
yes
max time kernel
12s
max time network
25s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-es
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-eslocale:es-esos:android-15-x64system
submitted
25/05/2026, 01:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
com.milink.service_18.0.0.1.2604271739-180000001_minAPI28(arm64-v8a)(nodpi)_apkmirror.com.apk
Size 72.9MB
Sample260525-b4mcdaas7k
SHA256 cab60b895651915f0dc56ec3a5e258903f50568bfe2ed579162f6c52a0f95bb3
MD5 3712f57aa3f408f184d39686774e56e0
SHA1 f39955e3fe764358c6c018fbbf17fb9ffe9d9d1e
SHA512 ba16ddf4922a51063272a6dd20e5bfedad5216e3112efb51a271ed1c3453f8c6c53309ccc3dd5d99e0264f9bbf3b7b9fa2b4a86427b533141e3c2353f5e43930
SSDEEP 786432:X+weS9rD5Ev7vsitf8CT/dDXSLN1q3CQMgto76xA/ytItM+Z5:X+we25QZSLN1JQI764vH
TLSH
T153F7BE02EA4E4D22EADEA63C6DA70341BB336E4977439B9B2401F178BDB32C55E553D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

defense_evasion

System Information Discovery

ioc	Process
/system/bin/su	com.milink.service
/system/xbin/su	com.milink.service

Queries information about active data network 1 TTPs 1 IoCs

System Network Connections Discovery

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.milink.service:ui

Checks CPU information 2 TTPs 1 IoCs

System Checks

System Information Discovery

description	ioc	Process
File opened for read	/proc/cpuinfo	com.milink.service

com.milink.service
1⤵
- Checks if the Android device is rooted.
- Checks CPU information
PID:3401

com.milink.service:ui
1⤵
- Queries information about active data network
PID:3596

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

System Network Connections Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads