dfda8e52df5ba1852d518220363f81a06f51910397627df6cdde98d15948de65

Resubmissions

26/06/2026, 10:15

260626-maf42sbs8r10

26/06/2026, 08:37

260626-kjhccsax4p10

Analysis

max time kernel
149s
max time network
150s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
26/06/2026, 10:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dfda8e52df5ba1852d518220363f81a06f51910397627df6cdde98d15948de65.apk
Size 602KB
Sample260626-maf42sbs8r
SHA256 dfda8e52df5ba1852d518220363f81a06f51910397627df6cdde98d15948de65
MD5 d846f7ac66a9a932235fb415b96fee5d
SHA1 5e2a43b89edd2ab76be6fbebb051669b982fa922
SHA512 2755d6b73cddc935513ea45af886d298da5058f05b6b5919038440a9009b4a6107f5b7bad676025c228d4ee2da3c4a6b9f5295b1bdbaa28829f533c23ddb7ed4
SSDEEP 12288:K70ps/RtaEVmjdrNb1EUdJ9MEPDhaEFSQpjJJkqZ9MrL6ral5aaRIx9:KIUtaEcpNOYJBhalqsPrL6YS
TLSH
T15ED423287D60A09FC3CA017B3A9721136B5EE8A8EA27B57FC4ED6ED714531E41E14CE0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.xbot.core

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.xbot.core

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.xbot.core

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.xbot.core
1⤵
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
PID:4794

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads