Analysis
- max time kernel
6s - max time network
150s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
17/07/2026, 11:37
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
vela-maps-v0.4.651.apk
Resource
android-x64-arm64-20260325-en
1 signatures
150 seconds
General
- Target vela-maps-v0.4.651.apk
- Size 82.4MB
- Sample260717-nrmtlady21
- SHA256 7241d7a369e7dd6a46822e73ed8b80f36faa8a4c40217d087b4aa7a0f8bb7ff6
- MD5 3dc34fd479a5a489b74efc081f610b85
- SHA1 f6748ff5aa1dc316a0d78ca7422ca75d2151fa26
- SHA512 f2ed47792664a56bc8d50ba159ddeb29c594c67b61b3de14a7732de01b772592557228cf5275f45538602c08036d48d7fa9031f6f1da9b2b8bd2f80e6d43b14d
- SSDEEP 1572864:wW9eG9odKATQHW/PoPdpAvsa2eTKz4YrYDs4o01LHxarZdr52OGphphcEFeNUXUs:reRdPQHW/PoPdpAvsa2eTKz4YrYDs4oo
- TLSH T1AE18AF49B70DA42ADDC6B0BC4D0900A6B6263C554725D1EF2945E60DFEF3BE2073A7E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 41 raw.githubusercontent.com 39 raw.githubusercontent.com
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/app.vela/files/calibration.json
- Size 8KB
- SHA256 de44177ab33b7176644af802fa4aa06e26cd519f45ab93d127fef8ec98052dff
- MD5 242b5cffbaca15674ac44c46c103c218
- SHA1 50b2f498180f170802d96e80aefd07d247f77fe2
- SHA512 095e6936b135748cecd4e5b439449c9baccb50004251624b175de45e16d04bd12cfb4d3ceaa9a908a3ddb021bc1f59858a6ccd438df2c469b9e45a01b2138ca0
- SSDEEP 192:k96VDdHVWOXaXHbO7KaN7mNXonwMXHKcZaDYul2vgFzNNYdX45:ehOXaaOM7A4PauUairQ45
- TLSH T13E123185E4482DF2168D92376809498A7B15D597CCA73D9C33AC08CC0F6ED2F1BFA59D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/app.vela/files/calibration.json.sig
- Size 96B
- SHA256 7da4fef28d5a0ddef671cd4eec30a46caa712368e42b7ac8d74f5547a887085a
- MD5 7b1eaf165a18e3fbb5da65ef5b94368b
- SHA1 062bda18311579f52ef50bb4e755f89c837fc309
- SHA512 c6868bd9137b05971b5c43388b15c79ba0f3b84efde772ec43ccd2dd73354059b8194858363b67bc954b1132030ce1e59b97ee0b0a5c98eb8479849e196359cc
- TLSH T1E2B012C38062992763DE23400B3042B741AB511EC02B0B060240E53220825723CAF1D6
- MD5 SHA1 SHA512 TLSH
- Path /data/data/app.vela/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 753dc4fb46fc3925b7e5ac902e9d8954483251a560572020e6751a9d088330f3
- MD5 7d81b3f4c886e9d0ba3afc36cf0d7e07
- SHA1 8f6b2e9e378986f97a9627cd98ab397547c5edef
- SHA512 710d6eabf23093b7e050d03b081529dd813301ada8af3a360dac0736033b96ca451194f402275dc3f7d637f6f65a5f4863d13216b2f2c6f0c4a29d854935165f
- MD5 SHA1 SHA512
- Path /data/data/app.vela/files/style/liberty-roboto.json.tmp
- Size 42KB
- SHA256 20c9b676ed4ab28c84f1be16705f0467fe1392617b0e2781d48ea26f0270560c
- MD5 1062461a4b6f25672beb2bb174fc7c97
- SHA1 3976f5c7331a06cb929c075a929dac8fc96eaf2f
- SHA512 bf54a75404c690b2bd4a68d7ecc1ae1eb075b0d7b052fa1a771ce939041736dde7cff59ddab05a8ba8bdcb5cc721531034d5a7e4f0722ded043e81d61a1aed9d
- SSDEEP 768:+DR5MU4h6s3SvyH19t9ALA3x8XYIztuSgy9jox8dkIlCsZyiZ9Ey90fE9fkBFanU:ZHh9FrX
- TLSH T14A131F4589966C7CC445B3F6E4DB2E071D5E0003F38F9A6CFAB107ABC3D939EA122946
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/misc/profiles/cur/0/app.vela/primary.prof
- Size 4KB
- SHA256 de78416f99fccc9bb1af021837fd2992cf7b531e0ce2178fd35045bc399da7d3
- MD5 4971d9239da85d3ac6af34658676a5dc
- SHA1 298ebbde1000f9a4f41399d4af6173fc88c8bef0
- SHA512 3318a397ef0601bf437799e2a279058ee60c13e59885c2aee97e1d0f4b8260c2d7bd759804baa9b0876b6505746d3a930ff6231668cb81495c4fbbd4946b18cd
- SSDEEP 96:BuJCiss2p0CgyGV6/KR6endxvABH4QHAIm9SBbLA1v6BSdn:B1lJetbo4QRbzYn
- TLSH T15FA17CF45C31092A06DFA9DCCA80F880F073E4E23637502D6C746D2C5AF3848A263B26
- MD5 SHA1 SHA512 SSDEEP TLSH