Analysis
- user interaction
yes - max time kernel
52s - max time network
53s - platform
android-14_x64 - resource
android-34-x64-arm64-20260325.1-en - resource tags
arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system - submitted
03/07/2026, 19:44
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
tgae.tvlkvk.pssewpk.apk
Resource
android-33-x64-arm64-20260325-en
6 signatures
900 seconds
Behavioral task
behavioral2
Sample
tgae.tvlkvk.pssewpk.apk
Resource
android-34-x64-arm64-20260325.1-en
6 signatures
900 seconds
Behavioral task
behavioral3
Sample
tgae.tvlkvk.pssewpk.apk
Resource
android-35-x64-arm64-20260325-en
5 signatures
900 seconds
Errors
Reason
exit status 1: "{\"level\":\"error\",\"stdout\":\"\",\"stderr\":\"I0703 19:45:39.570939 936493 opengles.cpp:285] android_startOpenglesRenderer: gpu info\\nI0703 19:45:39.570967 936493 opengles.cpp:286] \\nWARNING: could not open libX11.so, try libX11.so.6\\nWARNING: cannnot unmap ptr 0x7f2df4a01000 as it is in the protected range from 0x7f2d74a00000 to 0x7f2df4c00000\\n\",\"error\":\"signal: segmentation fault\",\"time\":\"2026-07-03T19:46:38Z\",\"message\":\"Emulator process unexpectedly exited\"}"
General
- Target tgae.tvlkvk.pssewpk.apk
- Size 68.5MB
- Sample260703-yf8xssft71
- SHA256 99d5f4b3bad791d279b6b5599e232b8f522a7f4b590dc25b725dcda9d20646a5
- MD5 56eb44438ed4a9d9e00b628f0da07dbe
- SHA1 668d2b2202f2fdd1263dfb2fee5348c44abe26da
- SHA512 18aba6c43e535a90098a3a61cf5f1af4c256bcc15e2b98955291e994d1b0a5de98aa767ab047183ba281e68c8956a672e403efb57b59ffe2e3a02a93c24899ed
- SSDEEP 1572864:XzOEanNhGC84s/vii6xJMleajWJsUiwPTj3neTvst:juNUCa/6HxJU9nGPTj3yo
- TLSH T1B6F73353F74618ADF8F76733832A869626148D82C35702875270723C99BB6D85FE1ACF
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
description ioc Process Accessed system property key: ro.product.model ujad.fymnpu.ztmaeyx - Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /apex/com.android.art/javalib/core-oj.jar 4486 ujad.fymnpu.ztmaeyx - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener ujad.fymnpu.ztmaeyx - Requests allowing to install additional applications from unknown sources. 1 TTPs 1 IoCs
description ioc Process Intent action android.settings.MANAGE_UNKNOWN_APP_SOURCES ujad.fymnpu.ztmaeyx - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo ujad.fymnpu.ztmaeyx - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo ujad.fymnpu.ztmaeyx
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /apex/com.android.art/javalib/core-oj.jar
- Size 5.3MB
- SHA256 26f2a49dffe39e31bf24520d07802e1409526c0ebecf6426d447f8fa3101e9a0
- MD5 e86c9eb7418c41207df5641bc0de3f6d
- SHA1 8a9701f74dcc4fb12c3ff281893c0b4fb72238b8
- SHA512 f45feab5613edd0702bffee9b998f4f9110ec6e0d2a28992e9439a57374c198df90be66ae85022f758608270e81aa84af37654e5f29621143cfc4ad9da034703
- SSDEEP 49152:zsYn7xMlf9a0RT7B4RmQURzzhJqJBIfOF4K371O/Yzz24g+34jbnGNuPA:zsy7xMlf9FP+Bcit
- TLSH T179469D53E6A31F32D06CC33784F34B95B73AF1A92B870B838404A6746E537E67E561A4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/ujad.fymnpu.ztmaeyx/cache/oat_primary/x86_64/base.4486.tmp
- Size 12KB
- SHA256 02b4487f023dba2f7cb098792c6d2a9334b265ccae26e3bd95d0c30567f0d270
- MD5 28c10ea9cb2e55d439287a1bdfcc2a45
- SHA1 c4b0782852e42d199e324e107628e2a973c23920
- SHA512 261f3e052e39709527611ac7d168e84a7cbe0448bbe728646e9624766eb118453e911da3cac63b5750d9f73e9d4d857233126a34f8445da5c2bee5eb195817e2
- SSDEEP 96:Eh0f7bWEBvy8RCHp/2gPhXmw1yrnbX1WbPsyVWIn2WFgvR7xuf9G8SAD:EIblszHYgPAr71Wbdb2W2R7xI
- TLSH T18A42650BCA635154C4B7EDF7A78B538CE96F88740B8D1E558071BF7F9828602AB61F90
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/ujad.fymnpu.ztmaeyx/primary.prof.EweuHV.tmp
- Size 447B
- SHA256 0d53eda2ab96461b43d33fc8c64db639e615c2eadf92cf88f3547a7e549aa2c5
- MD5 8e3a34598b4c9fc453cf9ab400b55f51
- SHA1 81756ff35fe3b0170e1c10d8741ff2e727244d22
- SHA512 694a4a62cd121f589d988e040f723ae4ec01d22a1ba94745b1a60171e0c9fe06c3ab2e405da4849b6a351e71d06e8727824f0d76cd389a03774c8d8a965d942d
- TLSH T1CEF0AB580F242EA8C6564D3683B0585A74E146EAB1D101FE5F7588E4E6918CCA0E313C
- MD5 SHA1 SHA512 TLSH