Analysis
- max time kernel
1s - max time network
153s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
07/07/2026, 00:13
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
GGTV-v1.2.apk
Resource
android-x86-arm-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
GGTV-v1.2.apk
Resource
android-x64-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
GGTV-v1.2.apk
Resource
android-x64-arm64-20260325-en
1 signatures
150 seconds
General
- Target GGTV-v1.2.apk
- Size 9.1MB
- Sample260707-ah3a2abs2l
- SHA256 63a4e6336cf902369f5b7b6ad67124cb98ad773c34ae6a2b8ec5041ccd337ef7
- MD5 9ce1366225c975ad92bcbac9814bedb6
- SHA1 3f12b8e1397480407c39daa3a567bd482565ba1b
- SHA512 891f11661be860326aa1b69ca3d9c5d38a9a831e721837eb8e6c76e321affb0699566d33c5820e79ce921acbf35d5dbd6fba74f41396445a859dfa774c571ba6
- SSDEEP 196608:5Qmj7tRTyjlGHkO2Fs9PY2oGFUIGElDXPyCiI:yQtZMb8wQU2l7PyxI
- TLSH T162A62343FBC4442AECF786354BFB421226079D65C753C38BA644B53C68B76D48BCAAD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 5 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/rtpx.bcpmqf.jgslaeh/code_cache/i11111i111.zip 5045 rtpx.bcpmqf.jgslaeh /data/user/0/rtpx.bcpmqf.jgslaeh/code_cache/i11111i111.zip!classes2.dex 5045 rtpx.bcpmqf.jgslaeh /data/user/0/rtpx.bcpmqf.jgslaeh/code_cache/i11111i111.zip!classes3.dex 5045 rtpx.bcpmqf.jgslaeh /data/user/0/rtpx.bcpmqf.jgslaeh/code_cache/i11111i111.zip!classes4.dex 5045 rtpx.bcpmqf.jgslaeh /data/user/0/rtpx.bcpmqf.jgslaeh/code_cache/i11111i111.zip!classes5.dex 5045 rtpx.bcpmqf.jgslaeh
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/rtpx.bcpmqf.jgslaeh/code_cache/i11111i111.zip
- Size 748KB
- SHA256 35a7b1f48f0f25bcf3cc7b72c62808aefd0a5c24bc2b8e1ffcf61cb7c10a9220
- MD5 eedfe144b5c0e3caf7a66f78e2df28c9
- SHA1 06194f00d64f4a78b42cd20400a8a8d32318da14
- SHA512 c031458222db2d0b2a8d8f190894c9853b4c4336b36e4f79433ef203f08b04b112a1e4daaf06a4e862fd0f27e74258ebf248dfbf5094691585929033269a8be2
- SSDEEP 6144:Pn0IlK/s1F26v8t/560lMwAacTmElNmCplop+D9ejejbw9yOUeZnPRRPajZ4p4wr:v7R8jlFcTmEZhoywnPON4WlQtsO
- TLSH T126F41807FE806F67C96F6B7718AB9A203331E1453B278317D504A97EBCC16809E97B91
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/rtpx.bcpmqf.jgslaeh/dpt-libs/x86_64/libe3a39e7c325355a1.so
- Size 683KB
- SHA256 35e7a69c4f8b638b65332166feed142252a2181254a79bec02552f9373df8faa
- MD5 fd7a9344b2cbc84c9393c74ddffcf32b
- SHA1 f60dfe88e6ade88ebbd42440447110dd7513a141
- SHA512 1a91712d1e222d252c5e100d3b5f3ec7e056d271f85a67337615ee3b086b48b19acb4f803b66bdb1a263c7ae54f501dfd13e3f312207a2ab8d497ce48bb8439e
- SSDEEP 12288:iJ1RqJV7wUSQ5RzJ1DupmTbJyuDzKm3E1+X6f/:vi6zG8Pmm3U+K
- TLSH T1C1E47E66BEA6016DD9B9DC34834EA071F730B486835256EF2380A6312E5A5F49F3DFD0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/rtpx.bcpmqf.jgslaeh/code_cache/i11111i111.zip
- Size 167KB
- SHA256 9839306e8ca7961e11e5512e49ff9396ca2041c21bf73d9a700ce1a52d087bc6
- MD5 1ae5ccec2ff2536651a8fc9d4f0f114c
- SHA1 33703889051eafc01c48d89a2166be40595588fb
- SHA512 4a8dc32b3ebbaa3919d1efae8f3d8f8f56567f311d55f497e8b1593d57ec61517b897fb3fa59cc7463daf15913f5ebef207d0b68606cd7553c4bb0faca6827a6
- SSDEEP 3072:JrnXDza9IlK/s6iEFlB9cZ5FJ72nt/JmXUZY8Ya2gQUcrLl:Jn0IlK/s1F26v8t/s
- TLSH T193F3181BFD812F57C96E6BB718ABAA607732D04637238717D844753F7C906808EA7B81
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/rtpx.bcpmqf.jgslaeh/code_cache/i11111i111.zip!classes2.dex
- Size 200KB
- SHA256 181bee9a31b587b8a8a92cc18d05b285b928940e380df9712e7e5dbe011c11bc
- MD5 48efac17adf1e07bb91eb18cf3180a13
- SHA1 a254784e0aacffdcf3de4114711148ec688ca4e7
- SHA512 85f3ff56dd49c77c75387faa79ce864470ccffd4e81d72feeea651a5dad8adb91c02cfaad502b531832e1ab61996a6f540b6643547e62e190eb16a8df2c52d3f
- SSDEEP 3072:6UZHUlDwwAancDU1afPhwREDNMvcsVhx7azpNKB5gW0tizG+MXlo1T+D9m9yEr6y:660lMwAacTmElNmCplop+D9ejejbw9y0
- TLSH T1A5144917FD806E67E96F637B18AB56207331A4443B27071BC504B9BABCC2B809E97791
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/rtpx.bcpmqf.jgslaeh/code_cache/i11111i111.zip!classes3.dex
- Size 139KB
- SHA256 21b1274448225e4daa18369818add6192acb4b2099f90d9020332a772fb0b3f1
- MD5 be8aac6071567f6e8597ee3a1f4a21e5
- SHA1 2421a341af97f36e823805ede9b22e299b1e353e
- SHA512 b378fa19f038a7e9deb423fa0bf16364e7b100e682e45a2d384b75542a0bdd81d647fbcd3c6d6bc1e439d28e70c128a67ec479617f14ad3a0dbedd2f8ab76745
- SSDEEP 3072:6Ue/BzWFoOjkt3FdZA9sdNXnFFhaie1Cwp6VPaz:6UeZnPRRPaz
- TLSH T16AD30A06F9816E6AD91FDBB7186AAB743736E1403B17C713C400A67E7C90BC05E5BA92
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/rtpx.bcpmqf.jgslaeh/code_cache/i11111i111.zip!classes4.dex
- Size 214KB
- SHA256 37ecc3467cc18df6eaf4942a035664571272ec47daf00081116b5a51750f881e
- MD5 cdb141d14ee9e94774d9031f9c880ca2
- SHA1 ca93d73831188e0abae1e90c67687ce1f5efa47b
- SHA512 0030fcedfb61d8906df67498e74c54917611d1e3f29bbc09b415f1c444288f3ca606d4176b56071d16c9ea903c78718d5f822010c99afa0fb24d78d0f236e6d6
- SSDEEP 3072:fmZ4pWPVfIr3EcWmNc8uF0yNP2+8EHbVivJdLjoRqxbWuoKxaIMKeJrSE1E+otsH:+Z4p4wPQxLvIeviJtsQb+
- TLSH T18F242907FEC17F5BC95E7E72145B8A107331D285373A832BE604A97ABDC16508FA6B90
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/rtpx.bcpmqf.jgslaeh/code_cache/i11111i111.zip!classes5.dex
- Size 25KB
- SHA256 41db970be32ac1c1fc417fc1702bf723b13854ea7aca8c300850b2536bf8de54
- MD5 9ff3d5000e914ae1a8ac5a90cc164501
- SHA1 9081d961747a4e482ce46d5fc2f9e316ec0f8262
- SHA512 34b2bd5ffe201a464cc1ea7006b49a05972b6479ee3f01ce2231729d8624411f6e21e8eeb82feec411c3144f64f896ac4c825c61cc643ea3188a2fc91724e4fe
- SSDEEP 192:VKkX8mI8s8iXTnH5WHMqFL7J/v1E4tmGik/aZAarsKPW44fts:TXG8VibwHxFL7J/tEfGsVrD+44fW
- TLSH T14EC2D503875480A3D76F8A3ECDE7AF1B2B74918DC2373385191DDB1D8E942927E9429E
- MD5 SHA1 SHA512 SSDEEP TLSH