Analysis
- user interaction
yes - max time kernel
53s - max time network
150s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
02/06/2026, 02:18
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
zqapp.apk
Resource
android-x64-arm64-20260325-en
2 signatures
150 seconds
General
- Target zqapp.apk
- Size 6.3MB
- Sample260602-crdedabw6z
- SHA256 4581c56958b61b5f853b1e274b4662486117f294a38899d4bf73e9ba69a58f75
- MD5 ea2bd5206709ccf0be8ef6f4e47f1a9a
- SHA1 8ccca8334a6acc09c9abaf78d65ad00afc7d0e45
- SHA512 5db424218d7599177e173834e8fa9973cd44efd32b98e435e756cad5a0bf8309dba99ab772322fa445fe53b4d4d45047c8d7762c9621546de05fee709a042633
- SSDEEP 196608:KTOKmq9RoO5bkJJXi+Jm4YHxYSmCxpfP1LTZQ:Kav8buXi+s4YRYRCtTi
- TLSH T1EF66016BFB856566C8F647360CB01A702A039C708F979697A910773C68F72D46F89ECC
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process Anonymous-DexFile@0xc80ab000-0xc82157e8 4307 com.hbnhax.bcbvsm - Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.hbnhax.bcbvsm/app_dex/classes.dex
- Size 1.4MB
- SHA256 a5c15b0e1eee0d43ed6cd844f07612ec4659b54356e738b9c40daccdd635f3d5
- MD5 cc170cedeb4ac206c95a2eaa57b9ca40
- SHA1 24ad5e23736c5772b8e0dde34a62e8c019ac7fb4
- SHA512 8584dcc628169b11b03b66f1d01e228d35298a5df1a304eb25b4310a26d5a9a019aff77fd5c5d7412102e63dfdb085f39afc848f6d51c3bdc1da970dc9366aed
- SSDEEP 24576:gPnVLevjv3QQH8pLKOKQc9web/tjnKOuUdnFcWC7:L4QH8peOhSPnOWC7
- TLSH T166653B21E603BFE3C62EE3F860552F607F245C25A9A26F210B0FD970BD931DD5675A88
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.hbnhax.bcbvsm/cache/apks_temp/temp_install.apks
- Size 171.2MB
- SHA256 8ba2653514c0a7f30e12876fb49c73586c16df652420a7ef246b000b7f396106
- MD5 e09978e3998d708cc4ac1c56d3556c37
- SHA1 ce3c5258b967ce04b9ef2a37558a1cee092da57c
- SHA512 916ebd3c45194e61bf855c707f58848455d727885d0c667243497f1a45a108da6a89088435b85deb1217c77d3130b9ff3f548474516d85372e8a42b3157baead
- SSDEEP 98304:+tVksYNEx14Dz7MzjkNA1rMCa7DLx+689FjrmmI:ECe+7a2XfLx+TFef
- TLSH T1A788173DD1870A21C4B92E7F5F190ABE36475CD345C17147BA203ADCA972BF3254ABA8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.hbnhax.bcbvsm/cache/temp_extract/base.apk
- Size 166.9MB
- SHA256 34346898bd2cdc58c45b0036bc823432aec465cf8905b1e0eb5587d59e5026e6
- MD5 b739a34978ea4077dd05dbd12dba7180
- SHA1 952e79a59701b58c1571606a1439dac50ce9d312
- SHA512 ba34a22fdc6153cea22be7afe06d0d4a998f23656d39bd915affa0c2dcef50239897436e6b42d6c974fe93f27ab31cb0505c908b8bfdc88f4042b3834e6b21cb
- SSDEEP 24576:e6lVUg/aMrIRy/tA4xJYBFx14fTq/vnaVzYD2NFfxH7XF6DXWLBEjh:emUg/awWx14fr5NHbZoh
- TLSH T16A882863F7C84E66C8F647BD897653751A0B9C20CF07939BA810363D68B76D42E84ED8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.hbnhax.bcbvsm/files/profileInstalled
- Size 24B
- SHA256 fd1a31ba6559daf5e5e99ca27d63158273bd7bca80bb4a6948a3d311fbd20248
- MD5 e8c7573ea962ca1ec55b4564a3e78164
- SHA1 3779ab22cc405a255008125a6e31bf1c22a201b6
- SHA512 b69299c57cd49b258980296be1d2b15deda4e69064b0de8cab1ec837d12cf86d99766808121c8567f33f51d489138f3414d87019a33cec260b23f29851c544b5
- MD5 SHA1 SHA512