d9e8e6bc2df1863b3d9be74f77f5fe79d30647248b0a0271c658c79cadeebb09

Analysis

user interaction
yes
max time kernel
56s
max time network
147s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
02/07/2026, 16:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LuckyPatchers.com_Official_Installer_12.10.4.apk
Size 10.7MB
Sample260702-trzfaahw2s
SHA256 d9e8e6bc2df1863b3d9be74f77f5fe79d30647248b0a0271c658c79cadeebb09
MD5 f9a0a3501f16fbcaca78e4b8541c91c2
SHA1 18e53482d2a975e7c1165c4d6dcd54b430da010e
SHA512 26337c7ec605b83aed2002dd021e1831d1286c002b20ef61977602a6f41339b5880df5f0412344e205bb1db9132c5fdc0c0154ee940e99a4496fd3f0dd716b74
SSDEEP 196608:8eTwsB3eipjUw2Lh/rJbqkKXjdeQuJ0SIT5zkn/DX7d4SLgb91v:8eT/OMUwmhqbXjd7Umo/DX7d4SLYH
TLSH
T13EB6CFEF36DC252AC83441B3C88DB57966974D7A5F43DA822C08372C34B36F45B49AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion

Malware Config

Signatures

Launchs application installer. 1 TTPs 1 IoCs

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Intent action	android.intent.action.INSTALL_PACKAGE	ru.aaaaabah.installer

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE

ru.aaaaabah.installer
1⤵
- Launchs application installer.
PID:3304

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

primary.prof.g9JVFc.tmp

Path /data/misc/profiles/cur/0/ru.aaaaabah.installer/primary.prof.g9JVFc.tmp
Size 2KB
SHA256 c9adeaedeb6808e55d62ca7f95f29a7c4c06c64c52dd3b2a7393f3855657a331
MD5 c0e24b33cdf578f647a0e9a55fc62c82
SHA1 e1af456f2b238bb32b8eadf03a6991d444ea10a3
SHA512 50604b1b4b1ea0b6b1ae6613f2e343a020d8513566648ade34c98eedc8d05806fe8d48e2f192a7e873e35924ddd8bb028051ee4ac9545a53df1de0f91de2c3e9
TLSH
T1B0514CFC2EB11E254C51C57711AA9ABB93408F69DFC3F8DCE0166630285B7D18DA9D04
MD5 SHA1 SHA512 TLSH

Submit Download

base.3304.tmp

Path /data/user/0/ru.aaaaabah.installer/cache/oat_primary/x86_64/base.3304.tmp
Size 213KB
SHA256 2734152e6d797c62a92c65dd30aa9b1a1e66b920ec7dae5bed388aa9da96f4bf
MD5 7b0f31fd4f528c699d56a87095cfbaf3
SHA1 64747de7a9f12a18f14a3313dc29dec9999e2ab8
SHA512 193637632f2799bdce555f200f0b296879f04c6ce40cda3bb971a20028b8ac9853bed5a96c7fb6efd06989a8d1a1df9a20b06c7f504117bb523d9fff66bb49fa
SSDEEP 3072:TkGYMhu47GLGWzWhZE43GMv2wupS6ZEp0iQtHL9moOjau9t3Bc/R0:7RPWabD2m0iym3eG3Bc/S
TLSH
T17F241A5FF9A35150C2EBAEF3ABCA56ECF91DC025125E0D1094B177BEA026E05E750BE0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PackagesDB

Path /data/user/0/ru.aaaaabah.installer/databases/PackagesDB
Size 24KB
SHA256 a7ced11c429056808e4eb82c000a45bac64c90f1dadf8304bf79f9f1a985052f
MD5 93a977c544f4640dbc748e77e261f363
SHA1 ed99d3750cf1c1fc5755e40ae0d8de81a60a20a6
SHA512 bf03bc61bcef0daa0558f778a9729a858265258686915288d7e3551798a2fe24144e80d5e5120ebd9e6c2a00d750701a6850a0cd6b6629d822392300e8705608
SSDEEP 192:cfkcwpj73CHwKnFJQN6qSyjaIOsYP5a0H65JBx9:cZw1SHFQ8COJg0HyX
TLSH
T1DAB28CF913781907EA64293C88E45713AEFD353F95DA8BD242A24DB4A3C1CCBCB09674
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PackagesDB-journal

Path /data/user/0/ru.aaaaabah.installer/databases/PackagesDB-journal
Size 512B
SHA256 2f5d25623db96b5cdcc270074628f3bf4b0601434380d113b6f2890516ee93d0
MD5 71ecb3be578393604b8139812736198c
SHA1 88f7ed6b81fb864b7ef98d0833e4971fb75d4b56
SHA512 569cf30e67c41519d58d3a9882489dc0cda28bbea3f460d4053bfdd34710e7441f29b902325f0f1ba4262f472b128fa3e3abf3cb1986c6af1a76d64b73669d16
MD5 SHA1 SHA512

Submit Download

PackagesDB-journal

Path /data/user/0/ru.aaaaabah.installer/databases/PackagesDB-journal
Size 8KB
SHA256 ecb9cd3099bcf682750c45ad7bc3e810f93c785d65845428b1f9332c4ddb93c1
MD5 d1632fbdd89d28ef7fb688d528efbccf
SHA1 41a41e5136368edeaf6e3cb9d31ba6747c17c4be
SHA512 cc595b56bff4e1db758d41bafb1fae61675881915b01dcc27f19785aa15befd9900cecf44bd021e4bff56b375d04afd9d78c1fb1f7ebdf55323c351c15e885c3
SSDEEP 6:7+/l94on1wXXvg9bNFlEuWdkG4lWlOERX4PBX4ogLugMBX4suuKX:7+tOXfqLiuWdQoRmBEyPbE
TLSH
T1780222896B840812C81A1677D8D4835C2D10EB188169CB2F0554089CAC078CCA8E0D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PackagesDB-journal

Path /data/user/0/ru.aaaaabah.installer/databases/PackagesDB-journal
Size 8KB
SHA256 4d94edd0f66a2b0b9e1aefa4ceecc5c2a52cf9ee408bca8db3450f0f52a6590d
MD5 0b3d5087882159c4966964dcba63f54c
SHA1 2654fa6c885c2228b8da93d9ea5c8a241a0cbff8
SHA512 0b8a2293e2be8d41f5f79c23aa8066c4eb9ee9f5238642319d775119bae25becb691df1a8b9a3c30c06055e52d5b88792fe080362d9d24590fe3218510676026
SSDEEP 6:7+/l9/XOPg9bNFlLdvlWlOERX4PBX4ogLugMBX4suuKk10//H:7+tdyqLJdvloRmBEyPb/0H
TLSH
T15E02129D6B850D13C5195777B0D987EA1F20AB2A8263CB57195008646D466CCAC90D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PackagesDB-journal

Path /data/user/0/ru.aaaaabah.installer/databases/PackagesDB-journal
Size 16KB
SHA256 0782fcc81b2faeb7f3934346519077ccec8454fd4f96a33d21c901116c2dd94d
MD5 eb0817630d9195f0e24c502187b120be
SHA1 1c1e8cb903a2ea8b57c51079b2c79b8ed1d61975
SHA512 24e324d96a633a8f8ce5975c4ffb6238727e3a2fabe7da25fd2eeed7efdc4b808094df50722d6ac48f73d641c778552a21874e6dd68dbd0d39d8ab1881a00970
SSDEEP 12:7+t7FnHqLI4yFuaKz08F2Wl7b138mSgVfiEJLm3Bew8Nz4RmBEyPbo8XU:7+t5HqLI4yFuag08F2WllsDOnFRGSnk
TLSH
T12E72444687601120DFAEAF39A46942200EBCB58D9AF647D32790ECF828C2C46D4A5D28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PackagesDB-journal

Path /data/user/0/ru.aaaaabah.installer/databases/PackagesDB-journal
Size 20KB
SHA256 ad7155771fc399902da9ea8ed0c24a7cb13848fd43bd2f84981c088210db14c8
MD5 a400afa180b85a92e405cecda49a751e
SHA1 efcafea198418fad7cfcc0b67bf2ec41450d6202
SHA512 b89ddced399abf9e2712a1421c6318f7ff3a095f1518ca67e783ffcc95f7667a1cbe8c92becaf38286ab71ff0225c9a898ed9bee6277673156e5244f4912ee46
SSDEEP 192:7pwpj73CHwKnFJQN6qotfkPyjaIOsYP5a0H65JBxp:7pw1SHFQ+tECOJg0Hyj
TLSH
T1DB929DF913781907EA25293C88E45712BEFD352F95D68BD243A68DB493C1CCBCB08670
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PackagesDB-journal

Path /data/user/0/ru.aaaaabah.installer/databases/PackagesDB-journal
Size 20KB
SHA256 cab8a4917c034a7ffe13a61062ba5198077f71d58d1da4d38efbd3821a060e7b
MD5 7d64c7854c69d67cd74d2ef11246604e
SHA1 9690ac3304c7f58f77d73bd1f3b2b1e4084a2fd2
SHA512 d657d2d98325fa6023344e2fdcad55099dd7e5164466188a79c87a9fa21b2301ce03c1b344cb0ecba0c23338f63260ab877f723441e7c434fcc710c3a952ed52
SSDEEP 192:71wpj73CHwKnFJQN6qf9fkoyjaIOsYP5a0H65JBxh:71w1SHFQB9/COJg0Hyr
TLSH
T102927DF913781507EA342D3C89E41713BEFD752F95D65BE242A28EB492C18CBCB09670
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AdsBlockList.txt

Path /storage/emulated/0/Android/data/ru.aaaaabah.installer/files/LuckyPatcher/AdsBlockList.txt
Size 1KB
SHA256 eb89dcf955fca4d11d336236724ad91d6cd4803e1c3706a265191ffe58499462
MD5 a39d3e83724992bacc8e8618952cd4ba
SHA1 7bea1709ae2ae49bd4178fddedaeb04414e447bb
SHA512 e31f7dc2bbdfbbe90646f87f7c21156729955f91b6a4ac300464e048e28f9eb87c05b6bb8f171c8bb1a85c2ac49110d7fc3efe943443baca46d7d83dd2501e96
TLSH
T1CE21CE594AA079635923D22A9D492F54604C77B0CCC7FFCA2AFCC8563081D8D35D78F9
MD5 SHA1 SHA512 TLSH

Submit Download

AdsBlockList_user_edit.txt

Path /storage/emulated/0/Android/data/ru.aaaaabah.installer/files/LuckyPatcher/AdsBlockList_user_edit.txt
Size 29B
SHA256 5b36134b695f0a9a32f570b08cc3ef74e0687a0d2aa228853bc0346f77bffebe
MD5 302f7b6d9a4ffeccdda9ef94184c8326
SHA1 d4038ca0629f57b7e5c4056e74a395e5598aa16a
SHA512 299fda4936acf6479e22f9166d545976d5d99ba6fe7a5b7298cb336cf730eb7790524e4569fe64bc03c598c7e4117f163ddffc2e2889439f709c4d80ff665039
MD5 SHA1 SHA512

Submit Download

testkey.pk8

Path /storage/emulated/0/Android/data/ru.aaaaabah.installer/files/LuckyPatcher/Modified/Keys/testkey.pk8
Size 1KB
SHA256 495675d32e89a149d5abe191f4e9c0e218b9068714e9b53a7c91e164a0741a23
MD5 1823e4bcadb53e275a8ff8e1b261b7ad
SHA1 92de052cb804dea75f9815a66d7d3f6f911cdb63
SHA512 b0d46eee477ae57c4dcb417f4f5b7b51691620c51603ed9097bc0d1e39ce94a2d7ade29d1ab80819e3639fd404034dd025c13c824d9cb21ae71ae366a2ce21b1
TLSH
T1CC21E727F54DC5E928455C97EB03FE0483F92382A730C24F2DEB837488A94E60387A51
MD5 SHA1 SHA512 TLSH

Submit Download

testkey.sbt

Path /storage/emulated/0/Android/data/ru.aaaaabah.installer/files/LuckyPatcher/Modified/Keys/testkey.sbt
Size 1KB
SHA256 0c234449bab53af16510e32102ab99b861a8c5a575cf1daa287d5f25010eb3a6
MD5 dab2cead827ef5313f28e22b6fa8479f
SHA1 74054568f9bf25c23e59498d3458e4d98fbb4b5f
SHA512 acb7ed9422761aef8995b221aeed72e1bae35ca2ade9f3aafc2abf5c2952669c90fef9d11ec6ecb24d4118d7fac07d46bc941dfdea61b2285f54ee8a1286be49
TLSH
T16E31EDF30BE86045B74E9A18B3ECDA667F334766A86002973465DC853DD0B7119C888E
MD5 SHA1 SHA512 TLSH

Submit Download

testkey.x509.pem

Path /storage/emulated/0/Android/data/ru.aaaaabah.installer/files/LuckyPatcher/Modified/Keys/testkey.x509.pem
Size 1KB
SHA256 a4384ba815b9499a5ce349b4e33c1755278873fe2eac150a068823f526e6dbde
MD5 4033dafc873dc7271e205b83cc9b4b17
SHA1 ef543a467d830d9975ccf0d569a7841c8b5df988
SHA512 6051af324ad8b3837086092f213904b26d63cbd9bcde46a75bce6dde69669ae418c265ebc91c1fe163ea1199959f4b594d982d4e38c201895a948f9490357ec3
TLSH
T1FB31A8EE9FC5254E9557AE2587FF0B3D4932C2142CF6F6434903246CD1888C60E6F493
MD5 SHA1 SHA512 TLSH

Submit Download

AndroidManifest.xml

Path /storage/emulated/0/Android/data/ru.aaaaabah.installer/files/LuckyPatcher/Modified/tmp/AndroidManifest.xml
Size 52KB
SHA256 942ee1308f737775a3041dcf59fbd4d10d4b2a04e6749daacc5d850264b2cac4
MD5 fd0a1f2597265130e513e23f73ea5f96
SHA1 69cca774634b5ce132826ee3c9393757fd64b623
SHA512 083eb3a7e29a780b2d07ba57884240a1701ebf55f26808667ea2d442763865d0dfa9ac087036eabe293713cbff6e8185d2d3921a6b11dd788cd6a14cd76103ff
SSDEEP 768:IZxv346AhbnR6cq989D+1d49IhlL/F3UQt95Rs83KtyD8XyAavXFVQKcKYWZekCl:GeULL4
TLSH
T174331D903395BF02EA7EAB71EFA9C1E542A5BE49EF2053077202370C05B65D68D63D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AndroidManifest.xml

Path /storage/emulated/0/Android/data/ru.aaaaabah.installer/files/LuckyPatcher/Modified/tmp/AndroidManifest.xml
Size 52KB
SHA256 3000654808107ff232ed9dccd83ce00333e6b6eab82c01d045dfecbed446c9ad
MD5 0949e3867603a5be74178cfb71bf24fd
SHA1 10185e64e5eb994c13aaa807ef0a1c238e9548c7
SHA512 95d9962c6994a9abbab93dee835b2dc7124a51b04d83f9998414f32a5e3112461d0db287a75cd67d307b137bb3d6b2e3f3716f156188a865b68e1493220ff00b
SSDEEP 768:IZxa346AhbnR6cq989D+1d49IhlL/F3UQt95Rs83KtyD8XyAavXFVQKcKYWZekCl:GtULL4
TLSH
T156331D903395BF02EA7EAB71EFA9C1E542A5BE49EF2053077202370C05B65D68D63D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

classes.dex

Path /storage/emulated/0/Android/data/ru.aaaaabah.installer/files/LuckyPatcher/Modified/tmp/classes.dex
Size 5.8MB
SHA256 a876e94d84fa4e9d16029763163ea761ac78219a6b6f0f7eabf112ca739683e3
MD5 5390919316695949717f64ba3878759d
SHA1 9dcc8c0c1c7867f16479e83c5cfb98c4fc64cecf
SHA512 6fa61d067fd3b6ec2be3e08b9884628d6256d4e3fb2b097dde5c3c623f799822e6b2db7a983980af3fbeecd0545b62ff030b1123aeaa4067f47fcd9e87182b9f
SSDEEP 49152:00BglFOHmeSYpX9IMcastLu+5bn4/RW3UUn/H6myJ1Nh7kXvQm6e3Gv9HOuri9uZ:04WMW1jY+n/HcNJkX56e3SsueuZ
TLSH
T190567C8365510AB1D47C263735B60B06BB33F242AF434797111AA9BB6FB72C09FED189
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

install.apk

Path /storage/emulated/0/Android/data/ru.aaaaabah.installer/files/LuckyPatcher/Modified/tmp/install.apk
Size 10.7MB
SHA256 c1c95ed49445bf57fb0885a90083316496b92736a3342660bf00ed6bb7c416dd
MD5 2a49286053f9245c6c6d4ac22b753da5
SHA1 b95be24c819e79d5c226d5831387dff72044e639
SHA512 dd911df0b05033b85d4bc5cfe1313248f81f61e0eb04701b81191fcd99d60837dd021767769e6ea1293f9cfd6ccd0957d1aee8687ac86544fd929b007cd2d984
SSDEEP 196608:kdz68Dd3xhwjdSluJ0SIFkzk0ZuFJd4YLgb91i:Mxd3fwjdmUdoEuFJd4YLY6
TLSH
T159B6CFEF36CC252AC87441B3C84DB57966A74D7A5F43DA822C08372C34B36F45B49AE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

install.apk.temp_for_add

Path /storage/emulated/0/Android/data/ru.aaaaabah.installer/files/LuckyPatcher/Modified/tmp/install.apk.temp_for_add
Size 2.2MB
SHA256 2e7c0ab2bbb669faa097cf5042c7182ba394064dfad0d75c48a97bd42053887d
MD5 84eb39fc02baac08b1ad23358e780e55
SHA1 cac8a4afa3708440b2f1ad50108f3871491433ca
SHA512 53fc714aa175579e0ad5c80185a3a9ba1b71b656d5f0f791d5c1ef2c537dae16ae90dd5106438f1e060f548dcd443442148c95122f7a5f4351e796dbd782b5ed
SSDEEP 49152:xH8t95hRtziWv9dS6QsG3hs6LqEGUp+kgi6YcSe:xcrR9imd5Ia6LYDEe
TLSH
T153B533F67A4D258F6BB0EF60E370B8389E7840D71127CF4E9EE26264B3D47A18625C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads