cb570429f72b6fb1ea55ad8e580cb3950f95ae37d7a30bd137ef2f049c0d9539

Analysis

max time kernel
1s
max time network
903s
platform
android-13_x64
resource
android-33-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260325-enlocale:en-usos:android-13-x64system
submitted
05/07/2026, 03:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
signed.apk
Size 103KB
Sample260705-d1frjacw9k
SHA256 cb570429f72b6fb1ea55ad8e580cb3950f95ae37d7a30bd137ef2f049c0d9539
MD5 923c2d86bfb3e9248d119825d9e0b169
SHA1 cfdbf28ea78a6b4aa4bb2afcf971baba633f7439
SHA512 4678605cfa3d6e8ffa986adddaab60246d5bed44d9a56fb3f14976b77b41574604433591111d34673a8a5d245352c415ac7c633289cded61b40915dfc7702740
SSDEEP 3072:cGE9JLJ9nnFy2LmNrJla330z8q0JOMpE6rA:cG490da330mNEuA
TLSH
T14DA3020F78CCC5BBD22AB2F10B675280B5750AD5E8612B899209928F49D1FD12DD6FBC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.softwareupdate.updatesoftware.updateallapp.phoneupdates.appupdate/[email protected]	4279	com.cvmj.exwbpdz
/data/user/0/com.softwareupdate.updatesoftware.updateallapp.phoneupdates.appupdate/files/Factory/Plugins/classes.dex	4279	com.cvmj.exwbpdz

Sends BOOT_COMPLETED broadcast intent. 2 TTPs 1 IoCs

persistence

Boot or Logon Initialization Scripts

T1398

Broadcast Receivers

T1624.001

description	ioc	Process
Intent action	android.intent.action.BOOT_COMPLETED	com.cvmj.exwbpdz

com.cvmj.exwbpdz
1⤵
- Loads dropped Dex/Jar
- Sends BOOT_COMPLETED broadcast intent.
PID:4279

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Boot or Logon Initialization Scripts

T1398

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

[email protected]

Path /data/user/0/com.softwareupdate.updatesoftware.updateallapp.phoneupdates.appupdate/[email protected]
Size 175KB
SHA256 06d42dfbb6e4e640fd2d52f06cd66f1a116d5062f782cdbf9d5052ebb926048b
MD5 a36af6dcc3af89367e0cfbfb32d3eb38
SHA1 b5095d10b1cdedee81b8a438940d11be99f2577a
SHA512 5c83307f9bca16315a89e22617cbb130abce8127c4c7e745d81b0195f043180fd9e790a33e45324b799919fa738cae6f3e60792608c43263754c9c724a6f257d
SSDEEP 3072:Zg0iz8BFDTkhoMg5RT0QsQX4jXX41mHhW0BTYWc9Zb9eReltixC8a0T+7:Zg0iUFsw0Rz41mHFEWM14QJ
TLSH
T1AC046B07F7556EB1FAA9923A34F703422331F549BA2B4313588DD1EABDD22D21E9708D
MD5 SHA1 SHA512 SSDEEP TLSH

Download

classes.vdex

Path /data/user/0/com.softwareupdate.updatesoftware.updateallapp.phoneupdates.appupdate/files/Factory/Plugins/oat/x86_64/classes.vdex
Size 1KB
SHA256 774c88e300dedffec63531e173aa6263e44deac063cff13ab657e44c91778b0f
MD5 580b88da1c6989f4ff6acfc5068e81d4
SHA1 e731c34410dee18a0ee18cc1ac6601df81780f6a
SHA512 ab8cbd34631cd7e36884be506f8bdb1ec014fd206f734c77e7414446fbc59dff7c0810f74a7edb167e5e2510098835681b17a3d3e25567fbdf82c11361aa5042
TLSH
T16E31A71BF79F598FC18DCA38F0080716CC14DA0249779147DE222184BCF47E6C651B0B
MD5 SHA1 SHA512 TLSH

Submit Download