43fcb5d765e9b83e0ae8c8ef0dabc140ea98543d28ed86f7c7d71f3170ca9b77

Analysis

max time kernel
46s
max time network
153s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
29/05/2026, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Vastorapp.apk
Size 5.9MB
Sample260529-pgewnsbv7v
SHA256 43fcb5d765e9b83e0ae8c8ef0dabc140ea98543d28ed86f7c7d71f3170ca9b77
MD5 c671e845cd17feebe2707160c6da62fe
SHA1 d262dda27ae57bfb3601d89e0ea2d7e39bfa473a
SHA512 2fa9789fd1caab8e1a1de29be73387167ea00d0fbf0cc0f28d4ef5f35aabd9551fb86bb40423806b4a2d21eda8fc692372e8f365abb313d7d00d8dbaf0a71be7
SSDEEP 98304:j9r5KU7DCfAtaIF0robT7usDt0uchhBaZDgj4r41Tt0ryGfyp+:j9VKU7DKRo/7usBbchT8Dgj4bfv
TLSH
T1B856F19EF7199A2FC47710B28C76523312574C12A6435BB36968331C78BB6E88F49BDC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	co.median.android.odpjlrm

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	co.median.android.odpjlrm

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	co.median.android.odpjlrm

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	co.median.android.odpjlrm

co.median.android.odpjlrm
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4331

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

INSTALLATION

Path /data/data/co.median.android.odpjlrm/files/INSTALLATION
Size 36B
SHA256 8ff60f364b0b2629fe253508db2e90d435f91fd0de6594536b4983dad52e5033
MD5 9fb5754cf9c3c3a7ad71bfc650fd9181
SHA1 c0c6a195fc9ffb2a9b514e8ebdbe67cca7310a63
SHA512 a804145b8ed03aadf1e1529f0fbde972d311602da3505c8a305e8f002492a64ffcb6a8682c34ce43f1f55fa2ed4c9b06f18e96211146c8d37a6871defee75d1b
MD5 SHA1 SHA512

Submit Download

regexintext.json

Path /data/data/co.median.android.odpjlrm/files/gonative-config/regexintext.json
Size 1KB
SHA256 07a2eaf8c00a43b93041d9b86e163c2c4ebff4f046ca53df3e7d266d461826a0
MD5 2ebd3c67011155925972a2bc9d081dfb
SHA1 e18f943922eba5ce754c3fc2ef730bc73e034102
SHA512 a9e07d230d02707dfb3f064a9f76908e25a92883bffc1c6273fcec2b7c3069895848438231d00357794f697604b3be6288b48741b286478d960e5e363d4f4a54
TLSH
T15A410274C9780DB398C82864B26E421B7A76615B2FD6391CFB8C062C1F4C5BE69B820C
MD5 SHA1 SHA512 TLSH

Submit Download

profileInstalled

Path /data/data/co.median.android.odpjlrm/files/profileInstalled
Size 24B
SHA256 5719f71105a9cb224a26bbde92c9e78613034175572c3e40987b859b83c2aca1
MD5 783bdb5b194618d6a91468e2b352f93f
SHA1 3d1d73c28488be858788ecfc3ff8572018327ce8
SHA512 38207b2f9b84037f4cf5fa285e6eb329eef1e9dcdc9c03921f5b4597e78d1d32db108fea5b1b9d913755177444bbeafc6c362f32adcf581aff9b404a3fc7c008
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/co.median.android.odpjlrm/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 a26df63d4a9357540f560915b1d337de84a8fead254779ee74900cd4a64ad13d
MD5 2aebf4c539696d7cf40eebda5dead2fc
SHA1 bbf06f6047697e7fc33590ef2de380f7608b9336
SHA512 8c54fad1f4048eaef104b48e506e41970af1da624b9b36ff849b164bd150b438e3aa9231ac3f73a3b5c48f8b8a180b7d816b8a24ae248fe8a9c94b74e2abf217
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/co.median.android.odpjlrm/primary.prof
Size 1KB
SHA256 a3fcabba4ad632e6501e9372f4f17ebe2f31abb236683a42c8cb65f465673ff1
MD5 e59bdc56719ae03d7b270730f599767a
SHA1 023ad1796207756d124f2766735a58e445a4fcba
SHA512 e6cd464e8338e59ff4bc5aba60c457638069ad31b7725fa217c26f249dab5be5c49f2692ec18f735d4a1eeb87003aa3fb1bd8a9c716a9947d0dd5119234ae33a
TLSH
T15E31FB19986EBDC6D13210F7BDE15A1A7701D7943D819FDC2D26A6C121C86E5580B8F1
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/co.median.android.odpjlrm/primary.prof
Size 4KB
SHA256 aa541a0b7692f0da7a45f667afd705503ce108416d698e4ef03f76f32328ee23
MD5 74866d548b27961c754b53d84fc047a4
SHA1 ca2dca2d92143c577ff38fec27b1aac815b15460
SHA512 f017cf9caab13d7107f1db9d799f3ce3615f8ebb20c867b850761796890e96e3b221ec21751181ab38fd4f5d1859938bf2fbf3e6003f53fb8d86d3a7d8e01ab6
SSDEEP 96:91C9n6d4jC8mdGZgaso4FR9/KlM/bPh7meJqhYd5BPxoP1PmL519AGd:91UNjCqjSHPtRUYd5B5oP1Pm3K+
TLSH
T136A17E38172A91262E8C399A89204DA8A7F75F788E75CF5DC7D908F602F3127D04C727
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads