c2d0866ff04c02b0d7616fabf74159f7874f9e8765188aa5f4b6e52a98c646fb

Resubmissions

08/07/2026, 10:20

260708-mdd4vset4t7

08/07/2026, 10:20

260708-mc8bbaet3y6

Analysis

user interaction
yes
max time kernel
2s
max time network
9s
platform
android-13_x64
resource
android-33-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260325-enlocale:en-usos:android-13-x64system
submitted
08/07/2026, 10:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
base.apk
Size 9.5MB
Sample260708-mdd4vset4t
SHA256 c2d0866ff04c02b0d7616fabf74159f7874f9e8765188aa5f4b6e52a98c646fb
MD5 4a6073de6a3601f00571ab354a90e16c
SHA1 ccaaf4b48940bc91e42b638286bb86ae65885e18
SHA512 ddc5b9f3ba48bee6e7e0569d3004a82815ef825872db46128382ae2ef6409d13974d3b4ff1a4ba3c9b8d0490a115111210e4311d92253cfd68008ff1e5d97796
SSDEEP 196608:t7nZ/kxDVjSpncgAfVwAVLGDe4ze96hqFGpuWFJcqn12CoZdnM4:VZ0JSxAf9VLGDe4gbo1Yq01dnM4
TLSH
T1DFA6330FD87E0C25D98534BD7D18532F39332C981761C11EB5324239FAE7A95E6AE2E2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.tliup.inteeirgzlyphh/[email protected]	4247	com.tliup.inteeirgzlyphh

Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

defense_evasion

User Evasion

T1628.002

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.tliup.inteeirgzlyphh

com.tliup.inteeirgzlyphh
1⤵
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation)
PID:4247

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Hide Artifacts

T1628

User Evasion

T1628.002

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

[email protected]

Path /data/user/0/com.tliup.inteeirgzlyphh/[email protected]
Size 3KB
SHA256 4848633769faeaf9cb3be087308a3f4afb13fd6027b929e371dd2771c3f7bc74
MD5 20a484bf1d36202b0631bc7472ff6e78
SHA1 69a58437b21bfd5be543847db1e519d8c67e90e7
SHA512 4255c861cfc4ff92af8cf74057813c1b7646908c4d8455d212ec797b0197e778d1066df4805530140870db997dce1d6da6b158bdd44629f26e39bfa06e260265
TLSH
T13A613E0BFF05DB60EA6CA2B6781B8760633684C4D6135B0A2B5D63350DC39B1BED278C
MD5 SHA1 SHA512 TLSH

Download