d6592f915bf119974f4f99bc0adbd687d3329ba1ff13179f827596b0bfee6b76

Analysis

user interaction
yes
max time kernel
1s
max time network
86s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
04/06/2026, 18:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d6592f915bf119974f4f99bc0adbd687d3329ba1ff13179f827596b0bfee6b76.apk
Size 141KB
Sample260604-w8mh6act2v
SHA256 d6592f915bf119974f4f99bc0adbd687d3329ba1ff13179f827596b0bfee6b76
MD5 af59407f9534c537f885a9bbdba2964b
SHA1 69ab6607bb2df40d0b714e7550b6cce241f2941b
SHA512 8cc4af6746e1acfa1c58a045da7a5c806cb8ec2379544c4be0688f2d25ec69edc5ff3fac7a2a782cc5c6e002e1a341888c797ffb282fbe1a2afeb66b14804da4
SSDEEP 3072:uJhzoW3ww4R0QE2fmpXFSbIpm0aE8ygvYgHlqE:ox3wheQELpoblpPlqE
TLSH
T1FCE31266DA5AF3DBE4FB5A7181B8200BC3BD65C09E109B9C0718B520C9F3BDA57C5A4C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/dj.czm.ygq/app_en/dj.czm.ygq.jar	4237	/system/bin/dex2oat --debuggable --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --debuggable --generate-mini-debug-info --dex-file=/data/user/0/dj.czm.ygq/app_en/dj.czm.ygq.jar --output-vdex-fd=43 --oat-fd=45 --oat-location=/data/user/0/dj.czm.ygq/app_en/oat/x86/dj.czm.ygq.odex --compiler-filter=quicken --class-loader-context=&

dj.czm.ygq
1⤵
PID:4211
- /system/bin/dex2oat --debuggable --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --debuggable --generate-mini-debug-info --dex-file=/data/user/0/dj.czm.ygq/app_en/dj.czm.ygq.jar --output-vdex-fd=43 --oat-fd=45 --oat-location=/data/user/0/dj.czm.ygq/app_en/oat/x86/dj.czm.ygq.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4237

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

dj.czm.ygq.jar

Path /data/data/dj.czm.ygq/app_en/dj.czm.ygq.jar
Size 92KB
SHA256 3a78dff9682ffa965b4e5da4a2c850c8d58d0e4d298b40ae8d3231fc7a8cae17
MD5 b959db2183585a4b6c801b3626f753b5
SHA1 836b0739308c5e909501831d82b39a5c8b22dab0
SHA512 6d0f4b6022a971d7647c0eda13ccbefb08efff2f6b6f43d70ac0d4dcf1e9e301a11d1ad6df248cf7d01b5acf8949a66741a1cb0b5d130695983e98dc9cef2e2d
SSDEEP 1536:bVODrJUr4CPAnbxKXdhk5qLWa39KlP7TOVEBv3SUZ7Kyfumg3jQoREIy1bTdmmLg:5OHa8CPAnbxi7kQ1QlP7LwyfgjQoREI1
TLSH
T166931207FE3CDCF28DB67AC0A8708C4E6C3E9B58A758D5264573F6153C091719A86CBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download