6e53895018ec0ca7af4473d0865a43f948cd8ffc121cb4689a7c08fc1fbb5993

Resubmissions

06/07/2026, 01:26

260706-bt2z3scx5m6

06/07/2026, 01:13

260706-bk3v1sgz5t6

06/07/2026, 00:57

260706-bbfdcscw9p8

Sharing

Copy URL Twitter E-mail

General

Target
Facebook_564.0.0.48.74.xapk
Size 305.5MB
Sample260706-bbfdcscw9p
SHA256 6e53895018ec0ca7af4473d0865a43f948cd8ffc121cb4689a7c08fc1fbb5993
MD5 8f2eb94a79ebc4cf43b0c411906d5370
SHA1 a52587f9360d2ef6069818c07f1d4d98d3f54d9c
SHA512 28fa8586c1c7db197905c233e3c467a2751ee96c136879bff84c059ccf34c8ee7fcb9aed58f3b2185c722e93b4ef36cad597e47021c5f15eed49307ef4f6cf61
SSDEEP 6291456:VDoSAK8ka9vEjvcEuB/Z9HaCa2GlfwMfcspj/:Vqoa9vE+BzaCa2GlfwMfcEj/
TLSH
T1C6E8C000B90D5823EACFF0BD8ED1039232173D598561D38B2167A22EDE936D6579B7F2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Facebook_564.0.0.48.74.xapk
- Size 305.5MB
- SHA256 6e53895018ec0ca7af4473d0865a43f948cd8ffc121cb4689a7c08fc1fbb5993
- MD5 8f2eb94a79ebc4cf43b0c411906d5370
- SHA1 a52587f9360d2ef6069818c07f1d4d98d3f54d9c
- SHA512 28fa8586c1c7db197905c233e3c467a2751ee96c136879bff84c059ccf34c8ee7fcb9aed58f3b2185c722e93b4ef36cad597e47021c5f15eed49307ef4f6cf61
- SSDEEP 6291456:VDoSAK8ka9vEjvcEuB/Z9HaCa2GlfwMfcspj/:Vqoa9vE+BzaCa2GlfwMfcEj/
- TLSH
  T1C6E8C000B90D5823EACFF0BD8ED1039232173D598561D38B2167A22EDE936D6579B7F2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral1 behavioral2
- Target
  arservicesoptional.apk
- Size 584KB
- SHA256 4d5678f090b3a0a886d7560e31588f52fa62c7d7381046a1051b3fb299c91159
- MD5 da47e8b84f99e4e277856fa7526097ed
- SHA1 59c99e3d1cac5f17507bc46ba7fb497c03d42466
- SHA512 ae433f6c509681d08eaabd99e5ff2ff7139bfc6360eec4588dc37e1d2ae84df42eb9208635588287562ec4ca283c49ce476278dfa1ccdb28a2c5ea1da083572e
- SSDEEP 12288:zYzYJY8P844qIoXqCPAFPYPPijYxyYXBO1vGC9zlHaxO:OYUiXqWAFPYPPNyYRO1dl6xO
- TLSH
  T174D422C8D2E20D29F87832BF1E6747217B21C2B11D23DBB78695436CAD2A3D079475D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  executorch.apk
- Size 1.4MB
- SHA256 c2b1c2cfbdf9fbc21195b9942cab7463fe46a00a3f8a69e04a173556a2e6980d
- MD5 3d63e47373a4e7864d202c2add5f269d
- SHA1 ec94f31462bd0277d1c369df777289051da03aa4
- SHA512 230b27e879c53cb86e7b50f2d66dce434d312807b464e9ca82267014549fb0bb50dce807266a60445a84e3517cb0978e58c9fc147d1eb0a181f9982ecb45412b
- SSDEEP 24576:RpRZCy3mYdh/R7pwadN4/Y92vagyz2F8rKIzCNmjvEPurbLFx11QYves+BfkMFtG:RnZFdh5Nw3YX2F8+I2gEmn5xAnWstG
- TLSH
  T1BF6533D7EFD08E44F45A187E84D39AA03726D1B34A7683FBB71C01187C89166BE096ED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  heliumcore.apk
- Size 14.3MB
- SHA256 9565ee8cd89669cfc5bcbff61ecb46266d16a26ac90ee9b46d2ec717a9f5af6d
- MD5 9ab02c4e2b27b1c52bd1dd22cf664990
- SHA1 950d5d480b7ef175d382745d0c446f1c3fcd19fe
- SHA512 0c4700e85934dc98a400e2bfc0181b2c06874d3170e1f985e59f3bd2e799d9316dcdd86922943b228f0f2c44e432dad387130075eeabae5087fca8f8e00507e3
- SSDEEP 196608:TVeZUWiXUxv/IJk3IWhlonJjBoinL7PEZoPrk0iOzx:TE6WiXUxv/IJk3IWhlonJjnWKViO1
- TLSH
  T123E66B03A2E78EC2F9FF5A74A8F553739567BD59BE32828A01082F3B1C737904651762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  heliumiab.apk
- Size 138.9MB
- SHA256 e9722d5dd36866714f05a8ed41da8289a9ab7a4c8ffdc6d90db947d0b45d6abb
- MD5 5a47c51e4b40d95064287b61d1f6e7e1
- SHA1 cf6ec113179b823a3083a16d023a52dbfdf8ba14
- SHA512 1a1b95190a2518d091ed94bc52b0ae90fdf97d97136a82f379e00b0c9f0cc51d75b8b70ea710b894bf5ad3f5598345fc08e8dbedc04f946434d8d60b7e80f766
- SSDEEP 1572864:5o9A0trzaCa2GlfwMfc7snVVpttvUORe/fo:qtHaCa2GlfwMfcspjD
- TLSH
  T129687D00690D6423FBCBF4BD9F4107D5300B3DAD85B4D2D73567921EC781A9A93ABAB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  instantgames.apk
- Size 152KB
- SHA256 a3c07c9152add0aed1ae97f33061c81539b0708b7069bce6b1304fbf4990bb34
- MD5 2fb377fa7498c30b5834b889cd5ee817
- SHA1 84c05ca53474053e52e6b96c8ed574eacf668219
- SHA512 b431d163e2ca345265709bbb322f6b114d6407e7258cf5f7de0161688ada910916fcb9191db25e146b862898266492a8e3d422ad4df42eef9f143488545c6bd7
- SSDEEP 3072:5/rWH7D6zrc5wykmoCvRiiA5dBMZOQP/jKBGFLNptbJCc:5/rCn6zg5w5xzB2PNpCc
- TLSH
  T1E3E3F1D49BE90D0AF475B93B9D2723423F01CAB41E23D7B7D381A25D6D2BB9238071A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  instantgamesads.apk
- Size 1.0MB
- SHA256 180172704d483145f26a6123db91adb6f3a5aa03d75b5436ad370685c64d0845
- MD5 f002b20aaf464457baaf769c266ecc8b
- SHA1 e9da5e27359e3102c9e06aaee148c06478ae671e
- SHA512 277f8752f1b10120343c3d37533af9cef911a50977449e9057e45946f463d8357910be3feaaf5973818c3dc488034bd8402ee557b0c7503240585045cc241c3c
- SSDEEP 24576:Z2xgQyWN+QDmzsQ0AdmWgZ5XcHV3g36hKJ5vjpNCkhFwa:ZcnpN+QigzAd/A213rwJ5vjjCAwa
- TLSH
  T14F2523E427541D04FB3D713E8102C348FB61E4419E33CB7B8B44B1ED2D69AA5BFA529A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  maplibre.apk
- Size 1020KB
- SHA256 128cf2dccd6315bf8bee390750fc64382d3e7b67451e49549287119a922fdf29
- MD5 956cf29ceb99fed44f369aad421ba3b4
- SHA1 474b8eecff46b25eabba0c585788b228b6a40e3b
- SHA512 72e9a7d3da9344d9fe8ff4dd49e7126810943a9929bafc6aedf449609e87f1f41bbc1448988503738ad68b9f70bcd88e058222610f671dd02083f4a5f94cffa1
- SSDEEP 24576:BBwukSHz7ygiPKTmBGjfj2y7ByqXccfMaMeW6wfIiZ:8upfviPQ9HtPXcckwWUe
- TLSH
  T1152522C9A7F90C49FAA076760D6767906F71C27D27A3C3B387E45A6C2D071F0B206299
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  papaya.apk
- Size 76KB
- SHA256 982c2d5acfb51306f4ab2f79f31be4282aa411e8fd5dc85ff9bf0e14937154ba
- MD5 8ec9eb42adc6c75de2b35cf92fff7d22
- SHA1 991494653598efb8812c43b8ebf82455052efd45
- SHA512 df50aee73f74dd6523952b938612242bb04e090136c6901290fc6af763587ffc60b28a191ec039d0e570197658f0d335f6b64386e8f96ee260efcc9fc4611f6f
- SSDEEP 1536:Vnw0tRx2665IZF/PxBqnFYsTPyJSJLWPxoo:u0nZF/keO0SdWPh
- TLSH
  T13773BFC2A2F04C4BF974B27FDD66A661776487364A429FE3C29013ECA944AF327070D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral17 behavioral18
- Target
  papayaanalyticstorch.apk
- Size 52KB
- SHA256 b80e7e6d6298436602160675a5b08cd4efaf75aedb4736f46ad0beebefd76132
- MD5 e8b6cbf9d368c30d91b4834126d29c4a
- SHA1 385839b3517ef77bb8b4496e249e5bd2610afc3d
- SHA512 c71925aaf0f460b46a906adad812659f8bae26db2dc45aea4009ec101fe08a2aed77b67231c4b8dc8e202ec58da9594754237a2045ee814e9bb01a5123f3a76b
- SSDEEP 1536:ccqRDDEY93NQyHj4wz2wHCoIW8O2PKE2Wl:cLRvE/yDjawHmh
- TLSH
  T135336BC1A6F14C9AF9B5B23F9D66F724331183740A428F9BC2C813985D966F227531DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  papayatorch.apk
- Size 156KB
- SHA256 d6999527ee6d55bc58f09b4b0673fb2869c61badfaefc8a8aac641caa8a17f76
- MD5 a5a9a90b714a431bcc0468b7036c4044
- SHA1 329d8f20dc9b80e509ccb79323cb4a1d105d6f35
- SHA512 d1dd37e939c992beac2d09989799ed15c600574854c7ff1dc34f749ca537d60c483a9db7f9ad374396bd987a8dab78248d2f6ebcf89909a82b2bde1071ce1e9d
- SSDEEP 3072:SfWQZTVJcan4Hq8gwQfN/9r8KJv6zW38ArTz7aoJ31:yV34HrgrfH8KJyKj/mOF
- TLSH
  T1A6F3E1E4EBF94C16F6B1B33F4D66B661B719C3700B129FA34794129C28947A37A0B0D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral21 behavioral22
- Target
  pytorch.apk
- Size 1.6MB
- SHA256 88b45cbebb8b02bab60e52a05756b28c6c28966b5ccdbb3b02dcd735d9cbbb74
- MD5 6a31b5533115b816a44831d42160f9cf
- SHA1 0db84c6fb4958d82474c8caf3de4af77a0b5ed61
- SHA512 4ebdbe8e53c2ced6f8ffbf5ee38da12d1cb2cab0843bb8ab7bef8957c4472151de0043634c06d8f806c4a9ebd78f887a616617a7eef10d6cf188a01cf35be6f3
- SSDEEP 49152:7pvi9jhz3JW7MHnpWvGM8g44yj+/NI119SQ7bc:7Q9jhDJZHoFyC/wSGc
- TLSH
  T1488533E4E7EACE6EF0BAB1B59453FD862A28CE709237C7B34A80381D6F75105708614D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  s_arservicesoptional_slam.apk
- Size 16KB
- SHA256 451d61cb38307af9489c864b178c76228377732c9d0ce2fcccddd1e501efe3b3
- MD5 64b85b44dbd880a839f4470806c752f4
- SHA1 2c1091ccc2ff92190abedd92ed492ad70c4b68e0
- SHA512 d891fcf417b20d4f8e39845c7a81936f74ed53b30edcb9e45cef9f5e1df0d351a6bd61ff03a278bd13fec05f231a9d682c8dca542c8cecf581c30189e3f9689f
- SSDEEP 192:Ca/bkXBWFybC9apHi+vuTJvyeTXbymj9tFHSAmcoEgFdf:ZabnV9W1vyQ2mj9tpn6
- TLSH
  T19E7208D5BAE44E1BF429317FCE69A2627B22437206844FCB498463C435953F7270B0EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral25 behavioral26
- Target
  s_papayaanalyticstorch_papayatorch.apk
- Size 36KB
- SHA256 7c0a8bb69eb7c412291aa861a6871733faed43c8b8f22a41565ba372937bfd09
- MD5 596410094dc49b13ff324f6db4ea2c6a
- SHA1 da5b680e14ca9386e9fe36decb6043c575afffbb
- SHA512 80f93e54da10082ed8251da87f7514e08dbaf1ebfab74cbc4c30406e460354498b17f0bb72e88b84259710953c1d2222718ccc0621d8cb732653272b4dd92f52
- SSDEEP 768:hKRmiW/3vcqK4nsK8vrTQqBWCqpzH2FC6neB/ax1ZDmGo:h+miW9K4nwTTZBWAFCYeB/aMGo
- TLSH
  T184F2E5C47AF05C0BF1B6727FADA6E22137A283740E124FDB86C517D868452F727161EA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  s_papayaanalyticstorch_papayatorch_torchedlooper.apk
- Size 44KB
- SHA256 dbacaa504ea8eb674614d510a3744e86553947054f4e377f38d59dea44c53b72
- MD5 9f59b16bbed25745662ded56e9e13bbf
- SHA1 686e9e99f056ee1892a16c54bff80dd159c5a64b
- SHA512 6a0c3a7ed4689c2c74443837015490a1b72b7c367d42f89009c0136e85dca91a89fbf3f44b239de533b4a5a9f58de50ff44d5e3091775bcab67cd1642b4fbf2a
- SSDEEP 768:3yvX/7z1bXjyEq3GKUKmRfST8vlU5vnFmBP0SgVBw9rjin6nO+wnviEM258Ldi:3y/HhXyPUK8fSKU59mBMtfw93gYO+m64
- TLSH
  T16B2339D176F46C0BE5B9B23FAD92E261336183780F405B9398D40398B9922FB27435E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  s_papayatorch_torchedlooper.apk
- Size 52KB
- SHA256 e27bb0067253e4c2c20d6bfd0410b0b3d8c1a342f3f69eb671ce29b48a661f4b
- MD5 d4acd12c41956cdb5e3fcc7f2466f53d
- SHA1 a996d23078093551586c9b204d20e070eb3cbec1
- SHA512 2fa98d0a82e9db544fc506bff1ea00bf67f370a3e60be9ff798d8ef3379d532eb0a163a05b16057a85c67d06a81a380e23d2f191e8e2cc6c34c9cfc69013b9e8
- SSDEEP 768:8RTQQwTHq0tyfQU3tPZOVhO06nZWEHVMbdZsVFDPFXlrI9ebCbCyWYn:ULwTTyoit2hsZ5VESO9eUyW
- TLSH
  T12E337BD1A2F08C0BF5B0B27FAC76A660372583740E019FEBC6C55388A9462E337571D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32