5a12c146ed9796c08f122b58487d6397e02c4aedc10beaa882dc80f3552239f9

Analysis

max time kernel
6s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
02/06/2026, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
PRO%20ESP%20TOUR%20BD.apk
Size 18.1MB
Sample260602-pea5psdz2k
SHA256 5a12c146ed9796c08f122b58487d6397e02c4aedc10beaa882dc80f3552239f9
MD5 c6afce0230584acdbe6fb2062b19796e
SHA1 1c076b4c309ad1902c00ad8ccd59a6bfb34833a6
SHA512 22874b53666deacc82a7db6bce85a5bfb94b669762991d637fdfd219a5f168fde9750e12b08db8690c6bb296d07b574b3aa43edba9f8d1624f618a9404078923
SSDEEP 393216:oB+w/W5UL9JeLQ4wjGeTZreaRSsXDLqardiCwFu9lc:M+w/W8gYbTZIsXDLrrdGujc
TLSH
T10B1723C6F7C8D82BC4339432C9AA17A2159B4C0A8A839F436D54764C59BBED81F59FCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.pro.tour.bd.user

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.pro.tour.bd.user

com.pro.tour.bd.user
1⤵
- Acquires the wake lock
- Queries information about active data network
PID:4762
- logcat -c
  2⤵
  PID:4803
- logcat
  2⤵
  PID:4822

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.InstanceId.properties

Path /data/data/com.pro.tour.bd.user/no_backup/com.google.InstanceId.properties
Size 2KB
SHA256 5ce365866f58b9ffa0c1453f726c47dba2265d3f4d12668d0a20fdf54a4ca935
MD5 81445a0aaa59f972a7d50e5f38ca1878
SHA1 dcfa33e364a6fa0d440b2904dfb570d1f66d4c47
SHA512 424afbd17df616e9d9d76a270df10f854c1498ba7ceebefdbe85234005036523efd3da6b94abee40ce9bbb4b6defd512e326447d5e66af2f19d0d6ae37c4e1e6
TLSH
T1A1413A6A0ED3CA9AA52E020A4EC59526D61838F8B357C0BCEBFA87000454A554A6D24C
MD5 SHA1 SHA512 TLSH

Submit Download