Analysis
- user interaction
yes - max time kernel
73s - max time network
604s - platform
android-11_x64 - resource
android-x64-arm64-20260325-es - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-eslocale:es-esos:android-11-x64system - submitted
04/06/2026, 19:20
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
X-GLOR Techdom (1).apk
Resource
android-x86-arm-20260325-es
0 signatures
600 seconds
Behavioral task
behavioral2
Sample
X-GLOR Techdom (1).apk
Resource
android-x64-20260325-es
0 signatures
600 seconds
Behavioral task
behavioral3
Sample
X-GLOR Techdom (1).apk
Resource
android-x64-arm64-20260325-es
2 signatures
600 seconds
General
- Target X-GLOR Techdom (1).apk
- Size 5.5MB
- Sample260604-x2afpacy5w
- SHA256 4fcb37b6d3aaaf4973bdcdbac0c5006e6bda6aea66e8abc56f580471424cf03f
- MD5 dfeee95be958b51940ec11186c2b6682
- SHA1 fabc9ba8fdff66c6e8e8b8f147a819dc5e87863c
- SHA512 ae4f92545a116b1351bba6cc93307bc79fdf996ad9857078455f8e4d43ff89303de9ef644a17593d95c37293b5eff5565b9178b7ab5ba3ae7fcca43af9eaa67b
- SSDEEP 98304:sQYfFpV01Rx7c/7Uj9wyRUZbLGxsqF25orig+55yxqqu+T2dNSFi/M4GW4FXjfCg:l8B8Rx7c/7UjycUZfGxsq81PqxqrM2dq
- TLSH T19C4601CAFBD89D2FC8771072C96A52F1565B4D128E839F836948361C78776D80F89BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.xglor.techdom - Changes the wallpaper (common with ransomware activity) 1 IoCs
description ioc Process Framework service call android.app.IWallpaperManager.setWallpaper com.xglor.techdom
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.xglor.techdom/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 02d2c9af3783f16ec158c1bfdd915b6cd3c17422b174259daf9fdb1d0d73ed2b
- MD5 5acd8b4507499e919153db2a2a4002cb
- SHA1 4f962b1ec4d70ea423cf4f7c3840341f4c102552
- SHA512 0847531a7c699d76b3870445212d32ac4e6f6d8ec4e17230f008e2307b83f91b82f2d204c7fae2ebb069873bf65eb088ba72f8de4de3aa4cbf3c9d3dafa67e71
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.xglor.techdom/primary.prof
- Size 2KB
- SHA256 30696d8ef19d1248be339e3876444d5d7458f0c48bbb510f79e57ba7b6263236
- MD5 4d3b5f85089e7939220944e2adaab2fa
- SHA1 332b64751a84495b8bf53df0b12c308efba614b8
- SHA512 beb71dfb2767e20ec833c17ea442334b1e5d68c55ba88501672cca2f6d7f5ab7f2d9ec9401b654c0143430b4674d12784de2fc9d797aafb1b9d0ddacaa561017
- TLSH T1B9512B71AE271E6EC53D24296ADC4A2317D1DCEE57943E33172E021467980F564C3E95
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.xglor.techdom/primary.prof
- Size 5KB
- SHA256 d1db44515608243d3b25f927b24e2257b1ca232b908d80f453e1fb4c42f8c989
- MD5 60c3a752ccd6792dfce62189d1d358f8
- SHA1 735a3b999ad3658d0e50e215dd9871865c5a9147
- SHA512 bae224d5a2a00dc6d1b31c61c6fc6536a0b52a7a4431890c884f02cdb625aa110928e67c27348bcf516d07802c420a58be1d319cf1da9d8dd23a9ed07ef3f464
- SSDEEP 96:xCCIpiWfidQNMLKdDUJOGNOWClXdfLdAxYY7nEJddo6k5/lPWyt7+YnPd1r2SOtB:JoQQNEK2JOGNOWClXhdGzEJddo/5/xdE
- TLSH T1BEB1AE910528BBCA04F594AD97720BF238B47151950DFBA40BDC4AAF4BA4F17329F3DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/system/users/0/wallpaper_orig
- Size 171KB
- SHA256 ae9774ca9b4e886481e2675d72dea5b849867b75e1c03f4863a3e381f5968861
- MD5 ef932ea8df9d8bc22726817f9a3d21d9
- SHA1 10c43c4d2494cf61fd1ac8abbfd883d4efb1178f
- SHA512 17a077c2192406757ce1a073b57dff1e4835ca717c6129325cc204677b8a1dc6c3c712ca8d95b4d9b99ea8ffb189180f3227bbad06ca316c1baff93f448d78a8
- SSDEEP 3072:JjxLmdHhqhIRjPMdRHctutf/skTVB7/21iEontTU9gNtdMtijRGroYIVXW7h9u:JFLmHAhI9kdJKq/sam1iEoy6tPjRqoYI
- TLSH T1DE0412184C665DD198FF837D0DF2D640A2C29A2D9C8EDB8B5E5B5D92EC3A30D31E291C
- MD5 SHA1 SHA512 SSDEEP TLSH