fcc8d79e053a18f618e8f4d0a6284ecdde8823acc88c0e66cae9337fb6904b42

Analysis

user interaction
yes
max time kernel
34s
max time network
149s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
29/05/2026, 12:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
SBI.apk
Size 7.3MB
Sample260529-pbt4eaaz91
SHA256 fcc8d79e053a18f618e8f4d0a6284ecdde8823acc88c0e66cae9337fb6904b42
MD5 2758ae8ad835a9061f69e713a1bbd6d6
SHA1 e02cafaec1b5d3ab7f2422f929330b9c99c70c48
SHA512 4474770e49dab59eca1dddc0e75fd63c34f269821ead0e921dc46b2d7e185deceda9e95604a93bce4c4d843db53570938f1465532d93c7be9f9c714c3ada8c39
SSDEEP 196608:2H25T6QOXn3JMZYDaNspge3nbr8Sl0JfdD6ksU8:2H25K5y7NYgCbw0LP
TLSH
T112761267FB845679DCF2863648711BB42617AC728F83A297B804733C68FB1D41E59EC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

banker defense_evasion discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/net.soeppq.hjrizz/[email protected]	4774	net.soeppq.hjrizz

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	net.soeppq.hjrizz

Requests allowing to install additional applications from unknown sources. 1 TTPs 1 IoCs

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Intent action	android.settings.MANAGE_UNKNOWN_APP_SOURCES	net.soeppq.hjrizz

net.soeppq.hjrizz
1⤵
- Loads dropped Dex/Jar
- Checks the application is allowed to request package installs through the package installer
- Requests allowing to install additional applications from unknown sources.
PID:4774

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

classes.dex

Path /data/data/net.soeppq.hjrizz/app_dex/classes.dex
Size 1.4MB
SHA256 6ccc422d0e700eef366618449c1c1d55b6c5fc2952d945873e22734d3a00fe58
MD5 aa6d02e5e7811d29fe2ea43723ef7e5e
SHA1 9d6473f9b29d27360646511e991d77533e70c7c6
SHA512 5831e018a2d850803ee9d0efd3ee5ca30971c924c32471c75042d761959a940bc23bc1affe81348ce4f0d2e493e7fb38e946a5d13cc9cb64e8917e6e2914b373
SSDEEP 24576:NP345KVme01erHQH8pYfQvCW5wM1sDz1P22UdujM:8cQH8piQvSYeM
TLSH
T156653A21E603BFE3C62EF3F860552F607F249C64A9A25F210B0FD970AD931DD9675A84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp_install.apks

Path /data/data/net.soeppq.hjrizz/cache/apks_temp/temp_install.apks
Size 171.7MB
SHA256 ecd7bbb4fa8485734cbd71308380d55febea60215801c7df90eab8827cf90951
MD5 6d83be8f635eabe196c91ccd9b6b3522
SHA1 4c57c3777e5c503ac5924b88db6de2906b4dcb50
SHA512 39b6159acfffb09dbba2d97a2fcd538c3b1574ba5c3639cf570c98c65bfab1a03c7a85005451fb9359d7544eb0a76e9af33521b2be9c636559660c3dc0f404d6
SSDEEP 49152:tVUg/aOwNgAhkaCFnNbXX//+kzl/AEbGyrHyqYkQol2wAyf6yfWLAwOrMUeDOfN1:bwNgAhkaC3n+kp4pQ292EMoSIZqxuikm
TLSH
T17E887C9B7D443610D472637CACBE3122D9C79EA05B0B716FAA09F29CAC711F22E44767
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base.apk

Path /data/data/net.soeppq.hjrizz/cache/temp_extract/base.apk
Size 168.1MB
SHA256 5d53083e53aab16feaccf91258cedbb26f68598f7020f4293bb42d625df645e8
MD5 ac619a01a9fcdfe9579570fb8094baa4
SHA1 bb7190d29c04af55b12282d30f09d165faa8705d
SHA512 82a0a111f1575409bb1173f4225801097a1925b6754e351efccce8ccf8d931e856a47e5a869e0c09c8f071d90def05293de01d70cd5490c6067e1f6122b8e562
SSDEEP 49152:fVUg/aOwNgAhkaCFnNbXX//+kzl/AEbGyrHyqYkQol2wb:RwNgAhkaC3n+kp4pQ2i
TLSH
T17B889C97F7C94E65D8F783B1893A57A5160BAD30CF538387A904327C28B36C02E99DD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

[email protected]

Path /data/data/net.soeppq.hjrizz/oat/x86_64/[email protected]
Size 240B
SHA256 e6fffb6e47d67429ddfebacdafc2524606204351342f98fcefc68b6ae7a57875
MD5 6acb12e58b87d9263e0e5122215b2376
SHA1 990208567801bcade4d0b6369a79dd574882de66
SHA512 d079968164760fc0ea955c18c75ab6166e2e00c541eefe805f220fe8211e85005887889e8aa3acad796c95f81bf6dde8bed7d95073f8370a1ee80d0ffdd0bf8d
TLSH
T1F1D097F1620A8000CD212338A3AD2502338832A33C8A087319D60691B887CA87C0541B
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads