fcc8d79e053a18f618e8f4d0a6284ecdde8823acc88c0e66cae9337fb6904b42

Analysis

user interaction
yes
max time kernel
27s
max time network
135s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
29/05/2026, 12:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SBI.apk
Size 7.3MB
Sample260529-pbt4eaaz91
SHA256 fcc8d79e053a18f618e8f4d0a6284ecdde8823acc88c0e66cae9337fb6904b42
MD5 2758ae8ad835a9061f69e713a1bbd6d6
SHA1 e02cafaec1b5d3ab7f2422f929330b9c99c70c48
SHA512 4474770e49dab59eca1dddc0e75fd63c34f269821ead0e921dc46b2d7e185deceda9e95604a93bce4c4d843db53570938f1465532d93c7be9f9c714c3ada8c39
SSDEEP 196608:2H25T6QOXn3JMZYDaNspge3nbr8Sl0JfdD6ksU8:2H25K5y7NYgCbw0LP
TLSH
T112761267FB845679DCF2863648711BB42617AC728F83A297B804733C68FB1D41E59EC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

banker defense_evasion discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/net.soeppq.hjrizz/[email protected]	5119	net.soeppq.hjrizz

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	net.soeppq.hjrizz

net.soeppq.hjrizz
1⤵
- Loads dropped Dex/Jar
- Checks the application is allowed to request package installs through the package installer
PID:5119

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

classes.dex

Path /data/data/net.soeppq.hjrizz/app_dex/classes.dex
Size 1.4MB
SHA256 6ccc422d0e700eef366618449c1c1d55b6c5fc2952d945873e22734d3a00fe58
MD5 aa6d02e5e7811d29fe2ea43723ef7e5e
SHA1 9d6473f9b29d27360646511e991d77533e70c7c6
SHA512 5831e018a2d850803ee9d0efd3ee5ca30971c924c32471c75042d761959a940bc23bc1affe81348ce4f0d2e493e7fb38e946a5d13cc9cb64e8917e6e2914b373
SSDEEP 24576:NP345KVme01erHQH8pYfQvCW5wM1sDz1P22UdujM:8cQH8piQvSYeM
TLSH
T156653A21E603BFE3C62EF3F860552F607F249C64A9A25F210B0FD970AD931DD9675A84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp_install.apks

Path /data/data/net.soeppq.hjrizz/cache/apks_temp/temp_install.apks
Size 171.7MB
SHA256 ecd7bbb4fa8485734cbd71308380d55febea60215801c7df90eab8827cf90951
MD5 6d83be8f635eabe196c91ccd9b6b3522
SHA1 4c57c3777e5c503ac5924b88db6de2906b4dcb50
SHA512 39b6159acfffb09dbba2d97a2fcd538c3b1574ba5c3639cf570c98c65bfab1a03c7a85005451fb9359d7544eb0a76e9af33521b2be9c636559660c3dc0f404d6
SSDEEP 49152:tVUg/aOwNgAhkaCFnNbXX//+kzl/AEbGyrHyqYkQol2wAyf6yfWLAwOrMUeDOfN1:bwNgAhkaC3n+kp4pQ292EMoSIZqxuikm
TLSH
T17E887C9B7D443610D472637CACBE3122D9C79EA05B0B716FAA09F29CAC711F22E44767
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base.apk

Path /data/data/net.soeppq.hjrizz/cache/temp_extract/base.apk
Size 168.1MB
SHA256 5d53083e53aab16feaccf91258cedbb26f68598f7020f4293bb42d625df645e8
MD5 ac619a01a9fcdfe9579570fb8094baa4
SHA1 bb7190d29c04af55b12282d30f09d165faa8705d
SHA512 82a0a111f1575409bb1173f4225801097a1925b6754e351efccce8ccf8d931e856a47e5a869e0c09c8f071d90def05293de01d70cd5490c6067e1f6122b8e562
SSDEEP 49152:fVUg/aOwNgAhkaCFnNbXX//+kzl/AEbGyrHyqYkQol2wb:RwNgAhkaC3n+kp4pQ2i
TLSH
T17B889C97F7C94E65D8F783B1893A57A5160BAD30CF538387A904327C28B36C02E99DD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profileInstalled

Path /data/data/net.soeppq.hjrizz/files/profileInstalled
Size 24B
SHA256 750435d22b3b798ebd6973c343d085e34d3541e393f110bd6b669582b7e68430
MD5 b858b90ad9ebf320e4e1455097986422
SHA1 a773ffb9c8f6df0b722743fc9a1e07047e5796c0
SHA512 e88ee90ff290aa1e3134fb872d3490d0866c247bc29062e26a6eb2050f194151059b1b57e30af2de2e126dc8032a8b80b0ae2683cc8f6d1856629033eaaf6b83
MD5 SHA1 SHA512

Submit Download

[email protected]

Path /data/data/net.soeppq.hjrizz/oat/x86_64/[email protected]
Size 81B
SHA256 1f45b17715417f3417a3f66c46da8baaf80ba57f0abca1db47ed7b3769429d20
MD5 b698ac34c3a294957cfa2574f5c4fe9f
SHA1 6fe77e15083b4987b49ff46a7bcae1dbe23f2068
SHA512 718bb39537d47bc2d47c5806978e7f6c8a989fcbd8e3c37fa9ee5cd3981ff801d68cdbf42a61d26bde3515af0039704d21a69013d936aa7db09a7e29d155b7fb
TLSH
T1D6A011AAA2002AC8CAC00A328BA822820E02B0A2280202A228A8828288030203800A0B
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads