Analysis
- max time kernel
46s - max time network
162s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
- submitted
01/06/2026, 12:24
General
- Target 0a0e12ed7a_lmd_mod-pro-strannik_3_381.apk
- Size 10.6MB
- Sample260601-plbptady2q
- SHA256 58ce1c37cbcd0bbb2797953580da56435654a2aa9c2e0480e1548270e2375095
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Looks up external IP address via web service 4 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
- Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes
-
com.lazycatsoftware.lmd1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
Network
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
data.db
data.db-journal
data.db-journal
data.db-journal
androidx.work.workdb
androidx.work.workdb-journal
androidx.work.workdb-shm
androidx.work.workdb-wal
androidx.work.workdb-wal
androidx.work.workdb-wal