eec5096dfca6824317863f9225c29f6c4b3442c48fefa62dc382e3569bca5a60

Resubmissions

03/07/2026, 07:32

260703-jc9btsds2s10

02/07/2026, 22:55

260702-2v4heags2z10

07/09/2024, 16:10

240907-tmkrbsthrh10

Analysis

max time kernel
122s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
02/07/2026, 22:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
eec5096dfca6824317863f9225c29f6c4b3442c48fefa62dc382e3569bca5a60.apk
Size 813KB
Sample260702-2v4heags2z
SHA256 eec5096dfca6824317863f9225c29f6c4b3442c48fefa62dc382e3569bca5a60
MD5 a51334ad82fbdbd4e2f1483b57eccf42
SHA1 00840f90c6860f840f138220a77c31db866fdcf4
SHA512 3af3ffd37e12aedec3ec30b5aeebf3a81060e1c14bee2f9ce79342d65b2c2481c2e7eca721d9731389c3b751ab0c68233d59d8817f6e437e87945f1fd6913873
SSDEEP 12288:WuypHdK2vxu5FbAE7DKcbN78blukHCnBh8vDHzL8qKB/A:Wuy3lxu53PlbN78bkkHCnBeDHsqKhA
TLSH
T187058D83F74BA866D5F3CB3642B9076A1A568C184747D7630A91B63C0DBF9C05B89FC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
31	0.tcp.ngrok.io
37	0.tcp.ngrok.io

yps.eton.application
1⤵
PID:4754

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads