Resubmissions

05/07/2026, 14:53

260705-r9a5ascz8s7

05/07/2026, 12:15

260705-pexnpsfz7r7

Analysis

  • max time kernel
    140s
  • max time network
    152s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    05/07/2026, 12:15

General

  • Target
    ev3rly.apk
  • Size 4.6MB
  • Sample260705-pexnpsfz7r
  • SHA256 8a833ca3ac2ed15c46603dd9e10c4b7ee213d0ca63d0f0f19299fdac31827a28
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.ares.eevee.audiobooks
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5110

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        profileInstalled

        • Path /data/data/com.ares.eevee.audiobooks/files/profileInstalled
        • Size 24B
        • SHA256 58485ffc4243f7125e3f181d150ed8a16f33c9641f02b4ccda8bcb831ad7016b
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.ares.eevee.audiobooks/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 1092ef151676ef8cf713ef14e9498e58694e60dc095697cf99c501090b34f099
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.ares.eevee.audiobooks/primary.prof
        • Size 2KB
        • SHA256 c3ce835d866a08f0e75f8f2545726f8e9346aaf63a6c3de6370de5d2487eea4e
        • MD5 SHA1 SHA512 TLSH