2a55895de90d34e7ec4e9cad3a5c1abb34ce9396c535e22ab4d22df600d9dbc9

Resubmissions

06/07/2026, 04:35

260706-e7tseadv9m6

06/07/2026, 04:33

260706-e61vbsdv8p8

Sharing

Copy URL Twitter E-mail

General

Target
com.hongsoft.kittenrun-V1.0.9-en.xapk
Size 72.5MB
Sample260706-e61vbsdv8p
SHA256 2a55895de90d34e7ec4e9cad3a5c1abb34ce9396c535e22ab4d22df600d9dbc9
MD5 56dd96be5e8b4bd07054482dfe3f3419
SHA1 e5244d2829de70ea5e02ef80486b0fcda00f36b1
SHA512 283c9792dbdc00b9b2cbde6a145e76416bdc468fa2bfd3feaa2b59b57007ab3e7b4eca6ef2bcf3ed01b1530f6e3391ea30d261bbc8cff768a2fdc5f382e08a65
SSDEEP 1572864:2HOtoh6oWWJCZhZyIiAIb9pa5NL52cotxPS:2HAi3WWk2iL52XxPS
TLSH
T162F7F1A3B7408F33C5AE4D3390EA871467326E845B036B43A255B7797DB37E0B795288
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  com.hongsoft.kittenrun-V1.0.9-en.xapk
- Size 72.5MB
- SHA256 2a55895de90d34e7ec4e9cad3a5c1abb34ce9396c535e22ab4d22df600d9dbc9
- MD5 56dd96be5e8b4bd07054482dfe3f3419
- SHA1 e5244d2829de70ea5e02ef80486b0fcda00f36b1
- SHA512 283c9792dbdc00b9b2cbde6a145e76416bdc468fa2bfd3feaa2b59b57007ab3e7b4eca6ef2bcf3ed01b1530f6e3391ea30d261bbc8cff768a2fdc5f382e08a65
- SSDEEP 1572864:2HOtoh6oWWJCZhZyIiAIb9pa5NL52cotxPS:2HAi3WWk2iL52XxPS
- TLSH
  T162F7F1A3B7408F33C5AE4D3390EA871467326E845B036B43A255B7797DB37E0B795288
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  com.hongsoft.kittenrun.apk
- Size 52.0MB
- SHA256 344328c0fe72d4b39d9ce192bdb98b1f795c62ed50ee78fcb9791d997db298ee
- MD5 16a84556ba29afadd9fa02957198d246
- SHA1 4b12ab5cb61b5569e6845b4aaebd0418286f08e7
- SHA512 590c4d6bc446e21c8182455d4b745446bbb59b26f429ab13519cb50b5ab4bc5fceb1024a6d00370e7ddc3c4acbe5639e6cc322904bd3a14fe80817387530907c
- SSDEEP 786432:brHOtolTRjeRXodhEQgq0ZyyWvaf8LVGMnZzOLlUDUaS8kZyIiAIbHs:3HOtoh6oWWJCZhZyIiAIbM
- TLSH
  T143C7D0A3B7408F33C5AE4D3390EA871467326E845B036B43A255B7797DB37E0B795288
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

discovery
- Acquires the wake lock
- Queries information about active data network
  discovery
behavioral3 behavioral4 behavioral5
- Target
  config.arm64_v8a.apk
- Size 20.5MB
- SHA256 a496b58d14d27a76b871444172c6f5857d5c16ce034ab6b0358d53261e42e4ef
- MD5 5cadcb4bc6d2e678f70a651912f1f842
- SHA1 0acc4f3ae68606f52183d4dcc0e964f326932864
- SHA512 ade5b5acf9c966f5ad177039032594606f9d1431b4e0e30fab667c26d2a4ff4c0e8b98e0f71891597d7445b84ceeadadd45dbbdf7ba2b0a7c866b84e9790cb6d
- SSDEEP 393216:eqc3NTghDNL5TKol1wodnFN5L2i8yUD+oM3OV/NAaLVj1FdXhxpt37DG7A2g1hDL:eqc9k5NL5TDvw0nIZ3+op/NAgdxxP5Bf
- TLSH
  T18127330DFAABCB12D4165B7EFD916C8ADB602AECD88E2CC374218917FCCD661715814B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral6 behavioral7
- Target
  icon.png
- Size 52KB
- SHA256 95af02ee3b25819c8dbcbd97552f5fc0860ab4924ef3a31183eec8e085904a64
- MD5 980d4b22941d1276c663fb6b26e7b473
- SHA1 1135a90cd77e544f14b0318b04baad6c90b3bc9d
- SHA512 45ad9d3dd00f42ca473b80d178e6337a82a5e32c744cb1de9f3b2601e460929286851d579921b9fa58f04f611a09528baa24148b43c71cdea957027f1e2b546a
- SSDEEP 768:LGBv10WjPTOiszHpWAeKCPs0fqoZTKzFoMbtb2hHP/Lir988NCsCbWRZgqmGZE49:Iv10Wj7mW7KWz5TKNxqPTibYsCbPB49
- TLSH
  T1A433017E68F098AADC39F5D467255BA5B346E2E43C052FD56F938C90343D88414A22F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8 behavioral9
- Target
  manifest.json
- Size 3KB
- SHA256 60f8dfcfe3c49f2c5f7435ebdb4124c21e88fcc9c1709cbc7228b39efc015a0e
- MD5 9f6ad718f1a91f565ca580abb35771ca
- SHA1 5ee9ece3d85913951ec7d3e68189eae3e401713e
- SHA512 671154fdf416b1448dbcdb911054581838462fee0c8846348d9ceff2135a568c309b23fc62cc40602102159d3d42dc2b1d2e06cd43aa3bd2f0bcb8030174b4c5
- TLSH
  T16A61640B061C0B2BBFEFD794B03F864C98DC3953199EBE86CD698B20271F9919145EE5
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral10 behavioral11

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Acquires the wake lock

Queries information about active data network

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11