Analysis

  • max time kernel
    3s
  • max time network
    33s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    04/07/2026, 16:55

General

  • Target
    Downloader.apk
  • Size 37.4MB
  • Sample260704-vfcmtaas21
  • SHA256 16a77ad1ddbef5f8b10da2fce96c3dc40d5c65bb474ecff37cd983f7a0e65f3a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 11 IoCs

    Runs executable file dropped to the device during analysis.

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

Processes

  • io.github.besmartapps.n001
    1⤵
    • Loads dropped Dex/Jar
    • Makes use of the framework's foreground persistence service
    PID:5028

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        FGiFHPIact

        • Path /data/data/io.github.besmartapps.n001/databases/FGiFHPIact
        • Size 354B
        • SHA256 132879834bed761ffaffe951ce4aac5e32e0437b87fae922bca10f88455e8ffa
        • MD5 SHA1 SHA512 TLSH

        Uzbext

        • Path /data/data/io.github.besmartapps.n001/databases/Uzbext
        • Size 1.3MB
        • SHA256 427cde339e30fc60cc4ba035d5658f6293903588dfe56d7723d886d8318ffdbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        encFbaVdat

        • Path /data/data/io.github.besmartapps.n001/databases/encFbaVdat
        • Size 12KB
        • SHA256 a61c791a50d8fac7086098fcb263a50ea98609c66b6b2b7a40d2c0138ca06a19
        • MD5 SHA1 SHA512 SSDEEP TLSH

        iMxmdt

        • Path /data/data/io.github.besmartapps.n001/databases/iMxmdt
        • Size 13.8MB
        • SHA256 e685f2ee0e9184ece6f8e13f30ea078e335a82b6031dbbedb325cee5fa53a616
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xShnQ

        • Path /data/data/io.github.besmartapps.n001/databases/xShnQ
        • Size 16.9MB
        • SHA256 f295e1fc9e11a89ba2d375a7f9305290208f39b4d74d497b8a303f5351a2d543
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xShnQ

        • Path /data/data/io.github.besmartapps.n001/databases/xShnQ
        • Size 16.9MB
        • SHA256 b5d8f18e7388960bbd9417822e89227de59275653a9b6fc831527dd9bd6b9c9d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xShnQ-journal

        • Path /data/data/io.github.besmartapps.n001/databases/xShnQ-journal
        • Size 4KB
        • SHA256 2e031f6730cc9d1f01cef56a314eaff8e38a18afc6f7535ae82def3dcc855d99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xShnQ-journal

        • Path /data/data/io.github.besmartapps.n001/databases/xShnQ-journal
        • Size 8KB
        • SHA256 56d28da9cbe49fab4e1e6c92448321ad623ed724e9bac3892bddc1a815e85e63
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/data/io.github.besmartapps.n001/oat/x86_64/[email protected]
        • Size 357B
        • SHA256 46248c5d48a34aa807a94ca443fae3e914e6a7957516878631c9211297df757d
        • MD5 SHA1 SHA512 TLSH
        • Path /data/user/0/io.github.besmartapps.n001/[email protected]
        • Size 1.6MB
        • SHA256 70a2706d81d78812949a762cdc0aed8998a061481edefdf80ecfbc38bcc1edd6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/user/0/io.github.besmartapps.n001/[email protected]
        • Size 998KB
        • SHA256 438a97d3c7dbd944b534b2d6680089efc71f4f813163fd307c7c80a999542e45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/user/0/io.github.besmartapps.n001/[email protected]
        • Size 8KB
        • SHA256 20b3fc59d3a9c0cabde16c180acf0bc6d1ff7cc0313ca55d5e5864a172bd7f66
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/user/0/io.github.besmartapps.n001/[email protected]
        • Size 403KB
        • SHA256 d64398c44a8990c6185583d323e4ccdae765aef21f104c3ebc8eff79ce4d137b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/user/0/io.github.besmartapps.n001/[email protected]
        • Size 26KB
        • SHA256 8e924bd8f11b3e156abd8b2ad52bd830bd36d0186e27d4371b4fbd75f493f0df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/user/0/io.github.besmartapps.n001/[email protected]
        • Size 3.3MB
        • SHA256 f4605af1b97381482768188e189c10bde98f8c9d4ef1d80ad4205e3bdb4e8b6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/user/0/io.github.besmartapps.n001/[email protected]
        • Size 180KB
        • SHA256 ef47172ebb8df8c9174663554691fc16df6e2469646f7079608e8d74a6c66100
        • MD5 SHA1 SHA512 SSDEEP TLSH