Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    03/07/2026, 18:18

General

  • Target
    PX-LOVEDATING.apk
  • Size 10.9MB
  • Sample260703-wx2hyaay3l
  • SHA256 a92e41ed7f9e748d0362c5a8643e3c8bef5385881c5182d592f4f676e369faca
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.mupa.ipegsfq
    1⤵
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Checks the application is allowed to request package installs through the package installer
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5126

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        payload.dex.cur.prof

        • Path /data/data/com.mupa.ipegsfq/app_p_dex/oat/payload.dex.cur.prof
        • Size 4KB
        • SHA256 b40a1cda7e153718fb00f74e61d41ba4e27a6f70a90fd4e9be4141e6491e70b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        payload.dex

        • Path /data/data/com.mupa.ipegsfq/app_p_dex/payload.dex
        • Size 8.2MB
        • SHA256 714e76a7006d9c36d3ca36c9a38f06fe830b165a7da63087712884e5bbfe7cc8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Google_Play.png

        • Path /data/data/com.mupa.ipegsfq/files/assets_i/Google_Play.png
        • Size 25KB
        • SHA256 48a59feb4aa446c3c6c6343dc5163e127b4cf4609fbbbe4bdd1dcf3f0e5dc895
        • MD5 SHA1 SHA512 SSDEEP TLSH

        b.apk

        • Path /data/data/com.mupa.ipegsfq/files/assets_i/b.apk
        • Size 6.2MB
        • SHA256 ffae34f70d60fbf487bb75e55e476d76e2718b3d67c6f4115edaa078f878c1e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        baseline.prof

        • Path /data/data/com.mupa.ipegsfq/files/assets_i/dexopt/baseline.prof
        • Size 2KB
        • SHA256 83c12efaf1b2338a1ae6899bbd543b19e01c0ba21d1130e72fb8a6868b2c409d
        • MD5 SHA1 SHA512 TLSH

        baseline.profm

        • Path /data/data/com.mupa.ipegsfq/files/assets_i/dexopt/baseline.profm
        • Size 240B
        • SHA256 b17ef32451cfca08809c2044d28641f27323623ba9088e74e0952cccb0808a8c
        • MD5 SHA1 SHA512 TLSH

        installing.html

        • Path /data/data/com.mupa.ipegsfq/files/assets_i/installing.html
        • Size 6KB
        • SHA256 5fcae3eefb738a51957102921e7dc4ba1997bc69f62d592eea46affff1a050ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        profileInstalled

        • Path /data/data/com.mupa.ipegsfq/files/profileInstalled
        • Size 24B
        • SHA256 cf44a57ee6a20ec32b850cd4db60901c01333b36543b3c5c979970f79eea5bd0
        • MD5 SHA1 SHA512