Resubmissions

26/06/2026, 13:42

260626-qzw4cacx5k10

26/06/2026, 12:42

260626-pxt1jact2n10

Analysis

  • user interaction
    yes
  • max time kernel
    2s
  • max time network
    82s
  • platform
    android-14_x64
  • resource
    android-34-x64-arm64-20260325.1-en
  • resource tags

    arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
  • submitted
    26/06/2026, 12:42

General

  • Target
    RTO-E-Challan-500.apk
  • Size 14.4MB
  • Sample260626-pxt1jact2n
  • SHA256 860b79ec3a237149b42c9c4756cbdd96b27d68fcb782b101c25d3bb506636b3b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.cyr.gujslzcrdciz
    1⤵
    • Checks Android system properties for emulator presence.
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries information about active data network
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Checks CPU information
    • Checks memory information
    PID:4403

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        PersistedInstallation1278127390294299951tmp

        • Path /data/user/0/com.cyr.gujslzcrdciz/files/PersistedInstallation1278127390294299951tmp
        • Size 114B
        • SHA256 bfe8081db9cb0ebd0fda3f48caf16d3d32a5d109233c6d9413e841c16ea510b2
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation3817463349018176680tmp

        • Path /data/user/0/com.cyr.gujslzcrdciz/files/PersistedInstallation3817463349018176680tmp
        • Size 90B
        • SHA256 e47eab9458a60fd94c7d244757ddc3fe2b1cfd682fd880b4e7fa135a71695fe6
        • MD5 SHA1 SHA512 TLSH