205f893b6e2078e5c74f328ee5ecfcf561e34b8c569ead2b6be354ee3e02db02

Analysis

max time kernel
46s
max time network
153s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
12/07/2026, 05:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
205f893b6e2078e5c74f328ee5ecfcf561e34b8c569ead2b6be354ee3e02db02.apk
Size 4.6MB
Sample260712-gbfa9aez9v
SHA256 205f893b6e2078e5c74f328ee5ecfcf561e34b8c569ead2b6be354ee3e02db02
MD5 239565c3e3f72984ec0ffe9b6b19b409
SHA1 fb6c6f14aff3e777825046378a868b8e1a1d2c19
SHA512 6f1f4ee57d1efd8aff2e4f4206a55b58d2d367aa283f9394e106db2307daf9bfc5b8c11e6d77c601be5c120ad5a641b9b35140e475e6a0c313b5fac4bb94a555
SSDEEP 98304:D8eW1cyZAUsg3Mq3KSH+XBtmntgwQhaL130PO1Tt0rZMkRy:D84KFB8q3KY+RIgkhlkRy
TLSH
T19626E089F7589E2FC877503209AA5235524B4D12CE879B87695C371C38BB6E80F4EBCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion

Malware Config

Signatures

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	com.mtf.app

com.mtf.app
1⤵
- Checks the application is allowed to request package installs through the package installer
PID:5049

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.mtf.app/files/profileInstalled
Size 24B
SHA256 2342b2cbb339bfa02dc4f36ad6c4fe1e589a1bb3c3b3e640bfd0b60d6c12d818
MD5 5d6b13676e17196f412e76abd305468e
SHA1 00ef4d5c74c2226abea0a3fc18798a3e2ba9fecb
SHA512 a27c0e3f05679960dc4d93aa956e37946322ba1e7666370e0f92563e20d5859d0a3ff5f3c65bc28f6fa157e8404e2357df6f54e207b47d40644049ee33985609
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.mtf.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 e5f7a8ac51527acf982507dcc1a5689553565fad69dd0f0121540e783a37d011
MD5 3d4ff5ba0e104f03e7d5dd50c3804c5e
SHA1 cea926056c607c926f6b8071299f70cc6c1a4b94
SHA512 cb41a09b9aa4c8c1373febbef1071fbcd6d83d8ce923d7bdc2ad2e5a2e9b09acd7a0fe794f14dbe26572e57a038bc03ac0c48ae1c1fe39c387467d5660ac747a
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mtf.app/primary.prof
Size 2KB
SHA256 0c0a616a09c053d14872a09718c7c5d61e9d54b2cf8fa8f8a01454a0060442b6
MD5 22e1a36677fb7000550cdf85bc62aa82
SHA1 006b084b3027f0d8618c2ccc0b60b18b100d0d44
SHA512 fa0f54afc14482272173b8b793dd8fbc1ab19641d12e54f9c0d9fcb77765305a6b7dbbc9d31ae9f8bd35dcb3c55d0433ca5359a0a9b18e14624c553c9470f5ad
TLSH
T1E3514D6FB7E1B6965C669C1C7E6998C5367284F05F0B0DB8572CD2839300D3C746F652
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mtf.app/primary.prof
Size 8KB
SHA256 409b33024b4bf62646a4e76257ad12a72a5667a4f0c934d7f9fbf98d0316fa13
MD5 f8bde44725f67e65a91991e1588af8f6
SHA1 ab8392f53c96342bba4cd24cbf3e8db1d10f6bf8
SHA512 d6f28286a36cf1c2d6e5a76ab0c3665bd8cdb4f80b66d02b226bd97d552cf67c61dd54c9514b1a016279a54886cffea204f7ed7fc3de7fb81cfdf7fbe7dcc043
SSDEEP 192:FeIZBnGMgrYQww5Bhhx5KnoiyHFQPIe21YkiS/IeRDmK2W0:FeWBGMgrYrw5BhhxcoiylQPT21aSAe0H
TLSH
T19F02AF7CC9166F021C98F0C5BDAF4108A8DCB6686BE5C7E9454C478E27C5F55CFD4822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads