Analysis
- max time kernel
149s - max time network
150s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
- submitted
02/06/2026, 00:23
General
- Target Mparivahan.apk
- Size 11.3MB
- Sample260602-apfevahx7x
- SHA256 80bb990332c47e720092bad37a3cfd245336c6fcb44078e1e7920e11b802b54a
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
- Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs
Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
- Requests allowing to install additional applications from unknown sources. 1 TTPs 1 IoCs
Processes
-
com.elong.android.hotel1⤵
- Loads dropped Dex/Jar
- Checks the application is allowed to request package installs through the package installer
- Requests allowing to install additional applications from unknown sources.
Network
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
apk.crazy-v1.security.jar