59e4a019d3449f5889fd28db26ff2f998a7af81092b26a9bd95b2ad1c55ef8ca

Analysis

max time kernel
149s
max time network
154s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
01/07/2026, 06:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
maycash-1.0.4.apk
Size 7.8MB
Sample260701-g3tmyshy21
SHA256 59e4a019d3449f5889fd28db26ff2f998a7af81092b26a9bd95b2ad1c55ef8ca
MD5 d1d35d1b4d0cfb8a5c6f3b83c12d39b5
SHA1 98e4eadb2a86d991d6b0131a0b69ff08a86e8f41
SHA512 d065f42ecba5314387a4fb258c5d0b71331ade8629d1b4e2a257d7bd253483675b7e5e480a1cb8ae844649fb746be5fcf8c7045784bbb0936dbf9a21219652bf
SSDEEP 196608:xQ5nI2qWu7DKRo/7usBbchlgg8QrgIQgi9Iyadm:y5wWRo/nBwzJQgiyyv
TLSH
T1A386029EF71A992FC87710728CA5523312574C12A68357B37978331C78BB6E88F49BD8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	co.median.android.mbdoedq

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	co.median.android.mbdoedq

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	co.median.android.mbdoedq

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	co.median.android.mbdoedq

co.median.android.mbdoedq
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4266

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

INSTALLATION

Path /data/data/co.median.android.mbdoedq/files/INSTALLATION
Size 36B
SHA256 daf9a9c0a9e5f263ff4c8602e2fa6b91a054dcc2fffd22a44e3968a634b29868
MD5 38177676a10c4da0a3f6b30ff248a2bd
SHA1 dba75e99b508aa63838bff928f56019b3d9c27cb
SHA512 17072332a4f04bc39e7beede961019d7273921c619b018f1a5726fc566e7a9662ab4cace4298b5f4f579fc2f181bd76785c19c89ab38b11ccd91a1a80a7a1861
MD5 SHA1 SHA512

Submit Download

regexintext.json

Path /data/data/co.median.android.mbdoedq/files/gonative-config/regexintext.json
Size 1KB
SHA256 3aa41c17f0f6e74689a69377a9069f851b2d3ba2a4dd9558457909d8703f72de
MD5 c1672f822c972e1bdab333ab4a143221
SHA1 6e311ee5b4a71ba396f27831569d072cc054d652
SHA512 2a13aa4499bf75f784b299700d9a9345e4b2d8d7bbb1554c63c77295d82e2888ba055309b743dd875c1bc9075e91fd132cb31bbb72786c8dec7a5875e6467f2b
TLSH
T188410274C9280DB398C82864B26E421B7A72215F2FD6391DFB8C062C1F4C5BF69B820C
MD5 SHA1 SHA512 TLSH

Submit Download

profileInstalled

Path /data/data/co.median.android.mbdoedq/files/profileInstalled
Size 24B
SHA256 cb36bfd38f4a03b8b664247f66270528962ae394ea0ae85fd2b0e3287d77be0d
MD5 d0702f3a128666ed35f2e2e4804f4d10
SHA1 e281d568a3a476b9468d77cd6f2d22217125ac20
SHA512 48e0bfc174104248bdeb94ceacbe0a7ca3ba9a56d8948f1093fed17b4caebc8835898b93aae6719d837cb8d232d723062af1120661f8d18eb1ebe486b7988f87
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/co.median.android.mbdoedq/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 8037831a326fc55dbf93331a337d00806dd6c968e1f3a9c92c42e4e179841eb2
MD5 935cf4a795ddfb009b01928ce39e35cc
SHA1 6b9ef92bfe28122e70c68adfa6f3bdbbbb5d33c0
SHA512 49f2893fa019638c6f72e14c57c2273088e6db85d20e661b2d45a545d3a1bc7494710f6b694490d478d5b687cac675965cb8aceb7c06a55b65b8cc7e4b2c7761
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/co.median.android.mbdoedq/primary.prof
Size 1KB
SHA256 99bf39902a2a76ac90518493480a37072ca6d9a464fce9078b84cbfd268cce41
MD5 125a99410890d798992d13425d407bf8
SHA1 2a2d92c2aa4da7aeeb9e380da3692930923a2799
SHA512 efa83c5e529cb7b1417a9e9e4f77e53b81748565ed9c7bd1807eda7b19a1654167d6abea7da5a5c619028fb60565ba47e9a0faac36659f079bdc4cb6b4397624
TLSH
T12E4119978409518F92D03F73E5E850A64A8AA43748ECD868713F89FAD4CE908791DB00
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/co.median.android.mbdoedq/primary.prof
Size 4KB
SHA256 9693fcd99af22c79415afffcc2760991ae809a33ada7b16c2c02fff912db067a
MD5 08b4efddc66af80af8d775f551bfe5c7
SHA1 090f3aee22b11176c2417e05173cdfb4a4449b13
SHA512 e27dc1c01194a42e4d34d80da52e85cd2d0bdcb550a792b1f8106217c222f6969f1cc8cee632e01a589304bbe662a8e35b62e73e9dcef5fd1f6f1cb2b6b4d98f
SSDEEP 96:8IWNc9izkdozN7pBYDA9qC3RLmsQ3zWJmeJdQ+PhClCnTNlG6szv+Ub:8IWqqaoIsj3lNQ36tQ+pdnTNlGRzv7b
TLSH
T1CCA1AFE2C6BB6FF7F9BF85337AC266D806E3C625143AE4D68400DC46A3E2001DD64802
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads