58ce1c37cbcd0bbb2797953580da56435654a2aa9c2e0480e1548270e2375095

Analysis

max time kernel
18s
max time network
161s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
01/06/2026, 12:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0a0e12ed7a_lmd_mod-pro-strannik_3_381.apk
Size 10.6MB
Sample260601-plbptady2q
SHA256 58ce1c37cbcd0bbb2797953580da56435654a2aa9c2e0480e1548270e2375095
MD5 ffd7cddb5673c4659bc91d2e0b4ac8b9
SHA1 cb31ec736764045f824731631d2e98493bd7899a
SHA512 1e06de4d8dcd60dc0d8d8de8fb615fdbce2c9648361c764c96a32790226a264a24ce711c73950e76942bce72aa453dc63818d4d3bb3a5804cf61d8a20a2f7de6
SSDEEP 196608:0Wozqi/H6Hl7iQrDm3GB6BLd1APuzdsnzZNTN0weJNkK0K7p+KKgB:bC+l711B6/2W6zfO9kdEB
TLSH
T148B6F1C6F7589F2EC47745724C5E033A2A6A4D2ACB43A7476A44375D38B31E80F49BE8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion execution persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4735	com.lazycatsoftware.lmd
/system_ext/framework/androidx.window.sidecar.jar	4735	com.lazycatsoftware.lmd

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
45	raw.githubusercontent.com
46	raw.githubusercontent.com

Looks up external IP address via web service 4 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
34	ip-api.com
37	api.ipify.org
38	api.ipify.org
40	api.ipify.org

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.lazycatsoftware.lmd

com.lazycatsoftware.lmd
1⤵
- Loads dropped Dex/Jar
- Schedules tasks to execute at a specified time
PID:4735

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

data.db

Path /data/user/0/com.lazycatsoftware.lmd/databases/data.db
Size 72KB
SHA256 264431d0d1c72800a4a06e576780fa25df00a05462cf617a0b211fd227bd6bd3
MD5 a05fd110aec540624e2fe3a66d92055c
SHA1 b9faa9a48ca0b140cb61f6cd4cc4f15a62d569b3
SHA512 b5119d140474bc44fe862db67ef2f68e8d57cb9908628fec5e80031f0348c14830518cfbadc4371a3b96f4351f40b4674816d32f86bee61a174d69707aa8f779
SSDEEP 48:TNTq3OOkn2Ypn7CQvny4HWQg1kF7RjvZFsRZr45AVpStKpnyYWpr+vn:523H4dCQvVg1qiRZr4Fzpqv
TLSH
T172739C81B3E41722C10560B26DB0A53B037CF82DC1A366D22AF924A74DE58C7C8B5DFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.db-journal

Path /data/user/0/com.lazycatsoftware.lmd/databases/data.db-journal
Size 512B
SHA256 2ee0abc94a3bdc2def382870b149a83409d9dbb1a9103d2f97b1af27b8e4558f
MD5 f40a94dc85a2f1c2c7c34602614cfa00
SHA1 3e0006984aa266ed6a56dc0a216f4924ed58ede0
SHA512 5798cc5e589f75898416b87573824e283d83983e1c68d84913d9f7a7282c6782b81e74d03519e49bc0fbc295a6114fb43b4ce4866a402bf98c1b53bfa71291d3
MD5 SHA1 SHA512

Submit Download

data.db-journal

Path /data/user/0/com.lazycatsoftware.lmd/databases/data.db-journal
Size 8KB
SHA256 5da2b2c770a819831324468d972f8839de8d78c9061ad74db47a36677773fb40
MD5 1ba8f96cf190470e5e42130889447f7d
SHA1 49cd2a89b6ca8e55559efba406f83efba984c613
SHA512 544637b8e8c3bca591cad9a620fbb2ad4132d285c1a5d2cc64aa78e06717fd4c9574d311f825aca4a2473657aa4f8958af0c69b4151a0043492fb6e57e52861b
SSDEEP 6:7+/l9tfgn15ng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuK29:7+t0qLiuWdYRmBEyPbH9
TLSH
T1E402228863810812C82D367B90E483800D00ABFDA5A1CB1B16A0089C2C074CCA4A1D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.db-journal

Path /data/user/0/com.lazycatsoftware.lmd/databases/data.db-journal
Size 8KB
SHA256 64dd255866d7c8f053c6f59c67d341bf4c8f66655f8de4f5b8a0dff5d0c00ca5
MD5 d34ee26ab06aca53520f2935b2f2c951
SHA1 b146d93068911ff2b9d7ebdf2f0687f7b0a9ed1a
SHA512 46eff00613095d9b8dc9daf479d2597e1c4f0c5c8fa606e5859e2938e771e32947abfcb5b0bbe6a20a1a33caee4706e7201e685e9727ca6d26e79c450bf2e00a
SSDEEP 6:7+/l9TjPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKg/E:7+txbqLJdeWRmBEyPbzE
TLSH
T1E402228863400803C02B27B7E0C983CA2E10AB29A2B3CB0716A208543C06ECCA890D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb

Path /data/user/0/com.lazycatsoftware.lmd/no_backup/androidx.work.workdb
Size 4KB
SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
MD5 7e858c4054eb00fcddc653a04e5cd1c6
SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
TLSH
T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
MD5 SHA1 SHA512 TLSH

Submit Download

androidx.work.workdb-journal

Path /data/user/0/com.lazycatsoftware.lmd/no_backup/androidx.work.workdb-journal
Size 512B
SHA256 dd69f048e530054ea8432b4944ace132ef5971fd2af7a8277502fb31b012a4e9
MD5 f49d0d1337061ab2ed83c3096331c16b
SHA1 f8a9f21bc0f26333cc7c44b7b88b27c70829e6cf
SHA512 401a844997cd382549256a4077e49023b1a9a5851efa775f412c65d9fdc4411828d056dae3eef2ddcfeb200be7d2add64be64239a6e049cfae14337d2014f468
MD5 SHA1 SHA512

Submit Download

androidx.work.workdb-shm

Path /data/user/0/com.lazycatsoftware.lmd/no_backup/androidx.work.workdb-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

androidx.work.workdb-wal

Path /data/user/0/com.lazycatsoftware.lmd/no_backup/androidx.work.workdb-wal
Size 249KB
SHA256 ea880434bb131f31dff979e0ef90f56af23cfdb7e363b69a7b654cc82debbc7a
MD5 c5dd4eb4b4f1893428ec103ddcb22ab5
SHA1 f5e2c80b97d6478cebc5c48329f1ed7172c98e0f
SHA512 456acc2613353ec0e61436928c725bf5ab0acc6d93f17bc2d844ac0596ceb0103281728a3d50e80ab44a9c01a137d82a9ec3e987590d65b41b737992c3ff0d4f
SSDEEP 768:QtY7tYTtYXtYRtYbtYUtYTtYUtYTtYfctYTtY1tYZtY:wYJYRY9Y7YpYcYRYcYRYf0YRYHYTY
TLSH
T10C44AA16B7106B03FAF74FB8F88258E107B795F04B36746409ABC2B334C4A16942A9BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/user/0/com.lazycatsoftware.lmd/no_backup/androidx.work.workdb-wal
Size 16KB
SHA256 c2842598b5277e6cf6b87e332c0869049d5a435956ac4aa13b6329531c128a67
MD5 09075fa845e261925d46aecd94a00725
SHA1 6dd0bdb6f1f663ed71bd145ed29d7f29a3727ef8
SHA512 26559928f416ee55cfd1f1cf697efa62cbb5388307900b8c43e8dffcd635b57b8f1bccaee9a27f8cde4f1896f4e6f463c14e3281678369d14de5139315c13e5f
SSDEEP 6:KQ6k/0yLTg9FZde/kPlOERX4PBX4ogLugMBX4suuK+/+4LOrllvIO3gOw2:KYlTqzdeWRmBEyPbP/ROZyO3gOw2
TLSH
T10172C269F3C10F83E12FC776688783450F6063989323D70B5E9159D76C417CAE090D48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.work.workdb-wal

Path /data/user/0/com.lazycatsoftware.lmd/no_backup/androidx.work.workdb-wal
Size 108KB
SHA256 75b9c4206e8a70360fe4b3064611fc84844cacfe5c58791e81a91a22e074a981
MD5 a43d7906c4a6ff397f5094e5905da01c
SHA1 cab3c5c9294101f45e5feb15e937af101a17adbf
SHA512 6b904a9ebaa87407c2d67d9be3ff77bc711ec0eb119669cf75bd8fa022b303ce2b30884a30d85e20103cf55d03b5553db68c6a60cba29b7b2358e4c5e1f73370
SSDEEP 48:lFY66M/31pp8aEKeWrFhVtD/ymmumWAhrBlOymdGWOWKuWov6xl73JcXSMmchI9C:z6+hdjnHtDRMpf8UzS6+BD8q0ExPdsq
TLSH
T111B3474E1F592E41C0AAD8F099D10FE17A3E422DC793F3E16D9181B6ADC2921DD29CF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

androidx.window.sidecar.jar

Path /system_ext/framework/androidx.window.sidecar.jar
Size 12KB
SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
MD5 bdf3529e80318eb14e53a5bf3720c10d
SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
TLSH
T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
MD5 SHA1 SHA512 SSDEEP TLSH

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads