Overview

overview

10

Static

static

10

HANA_SMS.apk

android-10-x64

6

HANA_SMS.apk

android-11-x64

6

HANA_SMS.apk

android-13-x64

6

HANA_SMS.apk

android-14-x64

6

HANA_SMS.apk

android-15-x64

6

HANA_SMS.apk

android-9-x86

6

Resubmissions

03/07/2026, 07:31

260703-jcr3jsh16j10

02/07/2026, 23:28

260702-3f1nmsgv5v10

24/04/2026, 01:12

260424-bkq68abw9y10

Analysis

  • max time kernel
    4s
  • max time network
    34s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    02/07/2026, 23:28

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    HANA_SMS.apk
  • Size 10.4MB
  • Sample260702-3f1nmsgv5v
  • SHA256 16f961b4f3f974109ae0de2546b092138bd29dcc1b8ec12efc487d34ddea2bd4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discoveryexecutionpersistence

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • com.raidlayer.smsprovider
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    PID:3302

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        PersistedInstallation5431481371624807088tmp
        • Path /data/data/com.raidlayer.smsprovider/files/PersistedInstallation5431481371624807088tmp
        • Size 90B
        • SHA256 c0dece8c1e2a0059e0482939b527399f33dcd616b97b33ca8e95baf3bfd5e066
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PersistedInstallation5594665790759184352tmp
        • Path /data/data/com.raidlayer.smsprovider/files/PersistedInstallation5594665790759184352tmp
        • Size 567B
        • SHA256 607fdfec96ada993b7ce9125eb1c67263888773cb3908cff5753b891f92f73cc
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.raidlayer.smsprovider/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 bfaef8fac18709034d1b023086575733ab2f5ba0628478989b5e704180ca2513
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.raidlayer.smsprovider/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 27d53131e2b26f0b429c0dcfc4dfd9b34bb35e6e4995b098c59a43c4ae87ceee
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.raidlayer.smsprovider/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.raidlayer.smsprovider/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 e8bb708c3869b464b886ae29e3d6fde863f4052484150f09a03cd6ea2cb3aedc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.raidlayer.smsprovider/no_backup/androidx.work.workdb-wal
        • Size 321KB
        • SHA256 6aeab945c40a812329ada905bfb9496627ffa56c7dd38a932266a5bb688570e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.raidlayer.smsprovider/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 a4b08633c86ca62efbd69be8c46918a708eb618b1825017775fb76ba215e6ab1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download