Analysis

  • max time kernel
    47s
  • max time network
    153s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    06/07/2026, 12:17

General

  • Target
    V1A5bOPLszH6.apk
  • Size 9.5MB
  • Sample260706-pf3lcaay7l
  • SHA256 3f0ef7de595f88f8d521f40e707e8d302266f3555a698f03fff6363f36531b03
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.xkg.mjdpvo
    1⤵
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Checks the application is allowed to request package installs through the package installer
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5060

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Google_Play.png

        • Path /data/data/com.xkg.mjdpvo/files/assets_i/Google_Play.png
        • Size 25KB
        • SHA256 48a59feb4aa446c3c6c6343dc5163e127b4cf4609fbbbe4bdd1dcf3f0e5dc895
        • MD5 SHA1 SHA512 SSDEEP TLSH

        b.apk

        • Path /data/data/com.xkg.mjdpvo/files/assets_i/b.apk
        • Size 5.4MB
        • SHA256 69f03c463b24aeb4feca658b0276bf0cb7da09ce150e8764b8bed78ff4a7b4f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        baseline.prof

        • Path /data/data/com.xkg.mjdpvo/files/assets_i/dexopt/baseline.prof
        • Size 2KB
        • SHA256 83c12efaf1b2338a1ae6899bbd543b19e01c0ba21d1130e72fb8a6868b2c409d
        • MD5 SHA1 SHA512 TLSH

        baseline.profm

        • Path /data/data/com.xkg.mjdpvo/files/assets_i/dexopt/baseline.profm
        • Size 240B
        • SHA256 b17ef32451cfca08809c2044d28641f27323623ba9088e74e0952cccb0808a8c
        • MD5 SHA1 SHA512 TLSH

        installing.html

        • Path /data/data/com.xkg.mjdpvo/files/assets_i/installing.html
        • Size 9KB
        • SHA256 be03a4c0b104170148faf6737b3a4d475f6a234ddbf2875e41bebb14c4e64526
        • MD5 SHA1 SHA512 SSDEEP TLSH

        profileInstalled

        • Path /data/data/com.xkg.mjdpvo/files/profileInstalled
        • Size 24B
        • SHA256 af77061ebdc407a7457228b09a9ea7df7f4394ca9cd1dd96f6bf842b0a9a4521
        • MD5 SHA1 SHA512
        • Path /data/data/com.xkg.mjdpvo/oat/x86_64/[email protected]
        • Size 183B
        • SHA256 5c0e206cbc9b18272d796b0f921f6c3fe10a25cb5ea6439f396c08dbb0fc79ae
        • MD5 SHA1 SHA512 TLSH
        • Path /data/user/0/com.xkg.mjdpvo/[email protected]
        • Size 8.2MB
        • SHA256 5f7f892c1947ccbe4555d4f2114df3d1192a96bfd246d48d9c08ba0d12eceee9
        • MD5 SHA1 SHA512 SSDEEP TLSH