223ba16b8e975caea3deede36f8e18deabf116ed6ecd6b077c99415ef517f684

Analysis

max time kernel
6s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
15/07/2026, 02:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
NFC_Tools_PRO_9.0.apk
Size 8.7MB
Sample260715-ddj6faat3n
SHA256 223ba16b8e975caea3deede36f8e18deabf116ed6ecd6b077c99415ef517f684
MD5 e8d38b195b9a458d0b80f1c206e70e27
SHA1 eb17e1f4d50179daf413d09fdd23b49b7b6141d5
SHA512 817bcf537ecb741781192b62b6c593b65f7d8df14a85002fe4673e0c9198b0862f79afe1f3c108597639e6a64da030b6935d5bba580ef943e2e94bba059a9fd9
SSDEEP 196608:PClHIx25gzB4a2KrtF+Ntc8VMmgtgF7hLY:PC22c12ctEuJDgFlY
TLSH
T1B696E0DBE3797C3BEB361533859D4231A9294E248607670B1808BB2E64732D54B8DFF6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4740	com.wakdev.nfctools.pro
/system_ext/framework/androidx.window.sidecar.jar	4740	com.wakdev.nfctools.pro

com.wakdev.nfctools.pro
1⤵
- Loads dropped Dex/Jar
PID:4740

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.wakdev.nfctools.pro/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 fbd124c58d378f7569676c4fc9fe857c17fe23710eb203812bc118d6caa82f7e
MD5 f1bce5263fbf868561a3907c9d1035cf
SHA1 62b8c23fe2e0f2726c0e531cb06046acc4e18a35
SHA512 e6cd28652baddf6f1b828bdcd74223d546d3b29c724fb117b58bb6a310c8d43b929444a55ce8cb80a4f2f0904b3be53801cacf4acc1d4ddbf28e9d74df03acf5
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.wakdev.nfctools.pro/primary.prof
Size 2KB
SHA256 537dbbe73eb5bbeacfb813810d5f46a1a4420526ec7089f1f2581491eb4ea5b0
MD5 af41c9c67561a34d6665deffbf41a9ed
SHA1 ba256418b065b81f4a47c30455470b012616456d
SHA512 2065f380fb044d78746ea3ac9463a5c6d4513b243404f963548a081d743e279c80ac260fd976657bacc429cae0c9f9af1c032bff807fea1cd06dd09798b0bce7
TLSH
T101515A1389C8A09D906EE70DA2636988CEF82CB0344DF7241E78C8E08E74E15E1F641F
MD5 SHA1 SHA512 TLSH