Overview

overview

6

Static

static

6

0c333047d2...73.apk

android-15-x64

6

Resubmissions

02/07/2026, 04:09

260702-eq933ah16l6

02/07/2026, 04:04

260702-em5n6sbw8s6

02/07/2026, 03:57

260702-eh86ssh13r6

Analysis

  • user interaction
    yes
  • max time kernel
    275s
  • max time network
    291s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-ja
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-jalocale:ja-jpos:android-15-x64system
  • submitted
    02/07/2026, 03:57

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    0c333047d22bb7147f5f95bd8562f96eb5326321fb269dcc889465e7c455bc73.apk
  • Size 171KB
  • Sample260702-eh86ssh13r
  • SHA256 0c333047d22bb7147f5f95bd8562f96eb5326321fb269dcc889465e7c455bc73
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
defense_evasiondiscoveryexecutionpersistence

Malware Config

Signatures

  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
    defense_evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence

Processes

  • com.dtyqef.rgvw.qipsu
    1⤵
    • Queries information about active data network
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Schedules tasks to execute at a specified time
    PID:3386
  • com.dtyqef.rgvw.qipsu:hm8h1d
    1⤵
      PID:3413
    • com.dtyqef.rgvw.qipsu:hm8h1d
      1⤵
        PID:3741
      • com.dtyqef.rgvw.qipsu:hm8h1d
        1⤵
          PID:3880
        • com.dtyqef.rgvw.qipsu:hm8h1d
          1⤵
            PID:3920
          • com.dtyqef.rgvw.qipsu:hm8h1d
            1⤵
              PID:4001

            Network

                  MITRE ATT&CK Mobile v16

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  base.3386.tmp
                  • Path /data/data/com.dtyqef.rgvw.qipsu/cache/oat_primary/x86_64/base.3386.tmp
                  • Size 16KB
                  • SHA256 a928cf896b730a59b14d21314dd3172d703d1b985d4c4e74c8cb5fc57d8e01d2
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download

                  [email protected]
                  • Path /data/data/com.dtyqef.rgvw.qipsu/oat/x86_64/[email protected]
                  • Size 16KB
                  • SHA256 f2b8e821e7633c29a1f1c77b5e900986065b3c5d07d18e61ae13e91cca82d740
                  • MD5 SHA1 SHA512 SSDEEP TLSH
                  Submit Download