Resubmissions

04/08/2026, 05:42

260804-gehwjsw1at

06/07/2026, 12:37

260706-ptxx1sfs6t10

06/07/2026, 12:34

260706-pr4msaa16q10

18/06/2026, 18:36

260618-w8wrtscx4w7

General

  • Target
    dropper.apk
  • Size 9.2MB
  • Sample260706-pr4msaa16q
  • SHA256 6a32c6deb3d68301b677c7d8cb3d1b533032f838a9d1d1e517d6bf2c39e472eb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      update.apk
    • Size 13.0MB
    • SHA256 890ecea4ebe4fea692ad36adf02abeb37c181cb7bdb6122cd52d9aaafe7d6cf3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Rokarolla

      Rokarolla is an Android banking trojan first seen in 2026.

    • Checks known Qemu pipes.

      Checks for known pipes used by the Android emulator to communicate with the host.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Mobile v16

Tasks