cc22b59fbd936bf998c538c722e1ea059a688e3cf7a2a383ddd3bfa4f3145b4c

Analysis

max time kernel
6s
max time network
818s
platform
android-14_x64
resource
android-34-x64-arm64-20260325.1-en
resource tags

arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
submitted
03/07/2026, 17:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MT Manager v2.26.7.apk
Size 30.0MB
Sample260703-vxnfmsc161
SHA256 cc22b59fbd936bf998c538c722e1ea059a688e3cf7a2a383ddd3bfa4f3145b4c
MD5 a2a017562af6f1a26b5003cb515a40a9
SHA1 8e919531246a76fa1084b9f7ac50892dbd35e21a
SHA512 cc682c99e5362937dba22a2473237dfc48c8cf893e7db706e0a27b21c85119bb1812e618cb22a4b6a3c1be5bd185a343cbd240d4c45afdb11bb392a883248a7a
SSDEEP 786432:9+mWHdCDlOoAhY5IWm3Ux2U8HXl8aoeyegjzxMxS9KMf:9+mWHdQlYh6IWqU0U836J3xMY9h
TLSH
T12E6723D0138914AFC532527B8C522B3B3AAB4CBD37A7531715543A2E28F76E44F6EAC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/apex/com.android.art/javalib/core-oj.jar	4472	bin.mt.plus

bin.mt.plus
1⤵
- Loads dropped Dex/Jar
PID:4472

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

core-oj.jar

Path /apex/com.android.art/javalib/core-oj.jar
Size 5.3MB
SHA256 26f2a49dffe39e31bf24520d07802e1409526c0ebecf6426d447f8fa3101e9a0
MD5 e86c9eb7418c41207df5641bc0de3f6d
SHA1 8a9701f74dcc4fb12c3ff281893c0b4fb72238b8
SHA512 f45feab5613edd0702bffee9b998f4f9110ec6e0d2a28992e9439a57374c198df90be66ae85022f758608270e81aa84af37654e5f29621143cfc4ad9da034703
SSDEEP 49152:zsYn7xMlf9a0RT7B4RmQURzzhJqJBIfOF4K371O/Yzz24g+34jbnGNuPA:zsy7xMlf9FP+Bcit
TLSH
T179469D53E6A31F32D06CC33784F34B95B73AF1A92B870B838404A6746E537E67E561A4
MD5 SHA1 SHA512 SSDEEP TLSH

Download

base.4472.tmp

Path /data/data/bin.mt.plus/cache/oat_primary/x86_64/base.4472.tmp
Size 60KB
SHA256 4f7b73989bc06f5d4e68297cde9c2dc55664bf22529483c6942f56610e038c93
MD5 8c9d6903098786bc51ab93709a4b9106
SHA1 afa9e8262fa26dbacc0a5bf5cd47d4e4e4698034
SHA512 ff0fa099c77593c615e0dd3eeb0fa6bd81c2a61b467aeec7107d93ec6ce2bb7d70aa3e40997da490a2d3c481067e1efd2d4a0a1076cf00b41b10a8dbb1f4746a
SSDEEP 768:ZRgiTS67ZPiGGs52sVPyukArK04Gg/GUzfu33//tmT1gWsAfhdNKLQqc4fpxPU11:8iTRaGGs5jcukd0mRgW/VYqBzI6
TLSH
T187535C9FBE328061C07A3EFA5B4541E4BB75C0132156291854E2A73DA4A3F58BF74FE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1783099363500.log

Path /data/data/bin.mt.plus/files/log/1783099363500.log
Size 105B
SHA256 52e97827f108087b3ae92274a57fdf3f8cf04a12bb617a3f80b7dc3984eb7e9e
MD5 2548ba07e540aef919a60cf907d39a33
SHA1 ec2edeb7e2647b91dace8fdfa18924dd5f5694c6
SHA512 8aca068f0155fdf94c78000f5b788d835cbc6ab6531360bdc441851d125b8ec9c2a6e2bae4b07ba0dd7f3e2edd3626e81a8273868ed2ade375d879311a8a1961
TLSH
T1F0B01291423310D1CD84C50DF2690E84B9D3F528100F53D07F30139C05404278F3C88C
MD5 SHA1 SHA512 TLSH