d6592f915bf119974f4f99bc0adbd687d3329ba1ff13179f827596b0bfee6b76

Analysis

user interaction
yes
max time kernel
97s
max time network
87s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
04/06/2026, 18:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d6592f915bf119974f4f99bc0adbd687d3329ba1ff13179f827596b0bfee6b76.apk
Size 141KB
Sample260604-w8mh6act2v
SHA256 d6592f915bf119974f4f99bc0adbd687d3329ba1ff13179f827596b0bfee6b76
MD5 af59407f9534c537f885a9bbdba2964b
SHA1 69ab6607bb2df40d0b714e7550b6cce241f2941b
SHA512 8cc4af6746e1acfa1c58a045da7a5c806cb8ec2379544c4be0688f2d25ec69edc5ff3fac7a2a782cc5c6e002e1a341888c797ffb282fbe1a2afeb66b14804da4
SSDEEP 3072:uJhzoW3ww4R0QE2fmpXFSbIpm0aE8ygvYgHlqE:ox3wheQELpoblpPlqE
TLSH
T1FCE31266DA5AF3DBE4FB5A7181B8200BC3BD65C09E109B9C0718B520C9F3BDA57C5A4C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

banker defense_evasion discovery evasion

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	dj.czm.ygq
/system/xbin/su	dj.czm.ygq

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/dj.czm.ygq/app_en/dj.czm.ygq.jar	4719	dj.czm.ygq

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	dj.czm.ygq

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	dj.czm.ygq

dj.czm.ygq
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
PID:4719

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

dj.czm.ygq.jar

Path /data/user/0/dj.czm.ygq/app_en/dj.czm.ygq.jar
Size 92KB
SHA256 3a78dff9682ffa965b4e5da4a2c850c8d58d0e4d298b40ae8d3231fc7a8cae17
MD5 b959db2183585a4b6c801b3626f753b5
SHA1 836b0739308c5e909501831d82b39a5c8b22dab0
SHA512 6d0f4b6022a971d7647c0eda13ccbefb08efff2f6b6f43d70ac0d4dcf1e9e301a11d1ad6df248cf7d01b5acf8949a66741a1cb0b5d130695983e98dc9cef2e2d
SSDEEP 1536:bVODrJUr4CPAnbxKXdhk5qLWa39KlP7TOVEBv3SUZ7Kyfumg3jQoREIy1bTdmmLg:5OHa8CPAnbxi7kQ1QlP7LwyfgjQoREI1
TLSH
T166931207FE3CDCF28DB67AC0A8708C4E6C3E9B58A758D5264573F6153C091719A86CBA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dj.czm.ygq.jar

Path /data/user/0/dj.czm.ygq/app_en/dj.czm.ygq.jar
Size 203KB
SHA256 595e5fbb61c86a7c5a557fb63e00222b66f9c57a59e11c8cc34cf2a892ebb3af
MD5 3bf458fffb6e82c5d0abaf3bf88b9d2a
SHA1 e5a5030a6b5f3998c1375c5dea7a455c6c359e2f
SHA512 1ae551a0c2e86f2fca2b83aacc1033417b358bfdfcdc047ed69103c5cff2fea50140c037b1134e4b2e1056ad1c34531c6d369726315d3d0c9205bd93b7a9a162
SSDEEP 3072:BE5R/1eA43S+Bwjue1UJs2QBIRyFNoY4abu0AKXp5DOir:sRfKS+IXmyQYM0AWH
TLSH
T10C148D32B6F09C25CCBD473865F393403F71B883690687635C8567BA6E97387AC496E8
MD5 SHA1 SHA512 SSDEEP TLSH

Download

dj.czm.ygq.jar.cur.prof

Path /data/user/0/dj.czm.ygq/app_en/oat/dj.czm.ygq.jar.cur.prof
Size 318B
SHA256 11e63c54746d2da7d1f3bf53ede8acaf6408912bf424b1985a70f3e5ad6c8ca8
MD5 7f07cf23b7c669520592029bebef17db
SHA1 e3e460a0d91f21a179c4c5120997549cb89bda94
SHA512 b6da647e99b77430ecfaa2731239067c367e3f156a626e63d42204ad099145bccbe684058c47ff03f5f8d3806b3a7c0385144fd8201b3783ef5ffc3d0ab753b6
TLSH
T138E078D864D4DE47586050874D67CB4D177ED5646ED44942408C11917D581F354F4DEE
MD5 SHA1 SHA512 TLSH

Submit Download

c377.db

Path /data/user/0/dj.czm.ygq/databases/c377.db
Size 36KB
SHA256 36d5bf76041ceac1bd741dd2a6316f9af57c400b29e934e541a1b7cab9d76101
MD5 081e7903087d4e1ca102c749727bd566
SHA1 0a581dca39d3077db5639406962eada0341e27dc
SHA512 b96b98ce91fa1f8ff19257a11ffb5eefa48fa7a8763ac895079b26af8cfd54d90cb882a1a95c6c27bfa3fbd569275285ad65261e42f5f59d6aa7e2cff3816112
SSDEEP 12:TLx60cORJsRYwPePIhINVxqejXFjCoaMyofSCHU4zJ0nm56yMdYZJlMeCHU4zJ0r:TLZYd2AhNADlg1mDeDlg9GSgGQQpHj
TLSH
T128F2C30F4304B477DD65C2B5088AC3625B74631FD894D67AF6E42884BD927C424A7F69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c377.db-journal

Path /data/user/0/dj.czm.ygq/databases/c377.db-journal
Size 512B
SHA256 0f6d29faa366e10cdc8203eb6c10f215e5a8d609a10bbd0b4ddd16166b4834f0
MD5 361af93509ed7dbb1a1b7aa25d054c73
SHA1 25b883042c8d20cc1076395cc017e976bc0babed
SHA512 dc2750e9c9f5ade91b9bd99d62abb506c5a059f0fddac62f4717ed464ea326bc7f7ec2e0cd1950551edec782bcad49e2c5c4bebe09a6b968db8e14891e6b1d7a
MD5 SHA1 SHA512

Submit Download

c377.db-journal

Path /data/user/0/dj.czm.ygq/databases/c377.db-journal
Size 8KB
SHA256 6888136d0e7445f41bfcb18c7942252e790149d9fd38fa000a1145b7881ec8e2
MD5 c4a1570a2b5dbf601053249f342beed6
SHA1 42cdabd836195b950ac41fd60fdaa2ea6ae80d47
SHA512 61ae28a27fe0a1d116b9bacca0ace4eecb76d2481710016063c087195d3e59af17175c001398c64b37499c3cb0ef03a260fc0de77b24f87b7b113cae1c4e08e8
SSDEEP 6:7+/l9u3On1Whg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKnj:7+to3NqLiuWdYRmBEyPbej
TLSH
T1D902228CA7800B13C82A16BF90E683500D08B7298161CB271A9068942C074CCB4A4D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c377.db-journal

Path /data/user/0/dj.czm.ygq/databases/c377.db-journal
Size 8KB
SHA256 cafaf1bef89aa0a0b2c5a7ac990fbe268ff0a43649bd33a1257b4ed2a0d1da26
MD5 3e0dfacdf422fe999b18fe30d5c73624
SHA1 5164173807d104c4ba829e3f9c4493677d4042cd
SHA512 8a34f2c97419f1f2a67a1d3c2494bd10e3c3927f22ea1c7868706c56a526ccbe0f51b099b1e53411805a008f928f9695ed2b58a9ddf4c8ff11f9f19ec9416a68
SSDEEP 6:7+/l9QFPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKoTpkl//r:7+tkqLJdeWRmBEyPb4lXr
TLSH
T199022288A7410C03C22A177BA0E983401E18A7289233CB07969309D42C876CCA890D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c377.db-journal

Path /data/user/0/dj.czm.ygq/databases/c377.db-journal
Size 8KB
SHA256 3f06de93484c92429eedbf3764efa73b2c0cdc8626347e620ba007780b6c2970
MD5 7372ce268dc47d14be0eb66f5532b545
SHA1 06c296dabc0c0eeba4a6e8212a102aac25878220
SHA512 0b6250963d3dbe447e56a2875f5566a7b55043f0c3798db317c9b74b8a7c8fdd739afbd08c88f38b9acb41448088bdb34fb5f24f57529cea1f75f038aaa4444e
SSDEEP 12:7+tVYmpqLle0cORJsRYwPePIhINVxqejXFjCoaMyofSCHU4zJ0nm56yMdYZJlMeF:7+tu2qLZYd2AhNADlg1mDeDlg9GSDp
TLSH
T1CF029E0F4604A4B7DAA2C2B9048E8256AA382317D854D5BDFAF42484BD937C460A3F79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c377.db-journal

Path /data/user/0/dj.czm.ygq/databases/c377.db-journal
Size 8KB
SHA256 859803183fd59545ef65b74257402a9164ca4d9d7bad0196928de2513ff37edb
MD5 943b42ea57d1573c87b69af289e0c8ed
SHA1 9be7bc78085a9f93417617925bcc0d6f4d54e03e
SHA512 9d094226c2228bd1573a06598a0a3fe5afb325847679836550ea20b9e810c83bf3ceedacdc4cbe1ed35c2ed5359478320983a3c26b93e1569461a3507794be64
SSDEEP 12:7+tqQBfipqL+lL0cORJsRYwPePIhINVxqejXFjCoaMyofSCHU4zJ0nm56yMdYZJu:7+tqQBSqLJYd2AhNADlg1mDeDlg9GSy
TLSH
T182029E0F4604A473DAA2C2B9048E4256AA742317D894D9B9FAE82484BD937C460A7F39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c377.db-journal

Path /data/user/0/dj.czm.ygq/databases/c377.db-journal
Size 8KB
SHA256 bf902c0482b67acf9978242b4d4d7c07938a24b09caa8aa5e14f9af104ba7bd8
MD5 1024fcc76825cc069eafa2bb82c2e9ba
SHA1 21bbb5d29210ea5449cabf9ca2928b8948f77993
SHA512 57c82bff483d49b05c8cef8ef9f84ff434484845cc415426ecc6b2348a753cdc1b1525457bff4e231d46e4c117f104a85bd27d83169d850403961f678e934e02
SSDEEP 12:7+tu0knqLe6q0cORJsRYwPePIhINVxqejXFjCoaMyofSCHU4zJ0nm56yMdYZJlMI:7+tu1nqLpYd2AhNADlg1mDeDlg9GS9
TLSH
T17A02A20F5604B4B3DA62C2B904CE8292AA742317D454D9B8FAF41884BD977C46097F25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads