Analysis
- max time kernel
149s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
25/05/2026, 12:32
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
ready.apk
Resource
android-x64-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
ready.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target ready.apk
- Size 3.0MB
- Sample260525-pqrltsa16w
- SHA256 92a1324ad9b9dc18d005096b76628d94981591ada8585b5af83758572113a481
- MD5 867789111895cd9560bb938b40df30f3
- SHA1 a8e269ddd74089cb9f88374af5bcedcdf82a815b
- SHA512 1f9c840f62473fd3531c773ef145676d62256503dd15f9098e20cd7f635fef90677d1dbbd52dc01cfc10caa9a043b13c5f39a274840b25fe3ddaa11190a9cf0b
- SSDEEP 49152:rf5keOIeTnl+TuDm8As2mzPzdGGOQTOc1cUoYqe0cgw3PH8fMj6fK:zGpToTuiC2mzPzBhT7H0tw3Pyy
- TLSH T13CE5D003EB45CA9BD4FA83F56F270DA92A070F68CA42BAD704557A7E2E771C10DC568C
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Makes use of the framework's Accessibility service 4 TTPs 1 IoCs
Retrieves information displayed on the phone screen using AccessibilityService.
description ioc Process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId jason.trans.orgasm - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock jason.trans.orgasm - Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground jason.trans.orgasm - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver jason.trans.orgasm - Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule jason.trans.orgasm
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-05-25.txt
- Size 13B
- SHA256 ad2d914ca347cd1930e32f21c6d5448c34104bea181b93abc85ec518985653ab
- MD5 de2c41a51ee9246eb1708f65b511add0
- SHA1 2f442d634c8a18760a232c8829d4b5d74a52f074
- SHA512 7cdfbd001594503644e9ed80ae852f90ef9e841a8382e2eec6979e149a2c400a3b83055d205b4d1d66e1600e5127482932d5127eb5800d35a4ee5673fe34d84a
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-05-25.txt
- Size 25B
- SHA256 a1ea0cecec3d74e34e9874060753be7786995c8cc62e1daa420f930122f43eec
- MD5 29c860eaf6f36678345f0a9f6b9cc0d9
- SHA1 7ffbfbc250be31fd70760cb9f0536e6e4f45c6ef
- SHA512 290f920dbee3dd59bd258ec398f0816ee24a620392ce8deaad0e6d1eaa1208f891393522d8125aea4aef9163f9011a02b3463e2d41a4e24bde065fcbad57ed20
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Config/sys/apps/log/log-2026-05-25.txt
- Size 25B
- SHA256 076eb89055ff3d929eb732e1002a0105652e628682a741151388ce1df3b6ec9d
- MD5 bdb821a955117250611e94cd23842584
- SHA1 81edcea1b44f94cfc140710c8410d0696b760c67
- SHA512 e52ffed4ee84acc414c530c239c8876d9e99c1f2b2c7626c0ed7fbe0c59b9cb8f8a5e9e983541bea3dfdb849dd3b9593df054c2482ed8bcda7c70ebd960ca268
- MD5 SHA1 SHA512