Analysis

  • max time kernel
    6s
  • max time network
    150s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    17/07/2026, 11:37

General

  • Target
    vela-maps-v0.4.651.apk
  • Size 82.4MB
  • Sample260717-nrmtlady21
  • SHA256 7241d7a369e7dd6a46822e73ed8b80f36faa8a4c40217d087b4aa7a0f8bb7ff6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Processes

  • app.vela
    1⤵
      PID:4752

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          calibration.json

          • Path /data/data/app.vela/files/calibration.json
          • Size 8KB
          • SHA256 de44177ab33b7176644af802fa4aa06e26cd519f45ab93d127fef8ec98052dff
          • MD5 SHA1 SHA512 SSDEEP TLSH

          calibration.json.sig

          • Path /data/data/app.vela/files/calibration.json.sig
          • Size 96B
          • SHA256 7da4fef28d5a0ddef671cd4eec30a46caa712368e42b7ac8d74f5547a887085a
          • MD5 SHA1 SHA512 TLSH

          profileinstaller_profileWrittenFor_lastUpdateTime.dat

          • Path /data/data/app.vela/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
          • Size 8B
          • SHA256 753dc4fb46fc3925b7e5ac902e9d8954483251a560572020e6751a9d088330f3
          • MD5 SHA1 SHA512

          liberty-roboto.json.tmp

          • Path /data/data/app.vela/files/style/liberty-roboto.json.tmp
          • Size 42KB
          • SHA256 20c9b676ed4ab28c84f1be16705f0467fe1392617b0e2781d48ea26f0270560c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          primary.prof

          • Path /data/misc/profiles/cur/0/app.vela/primary.prof
          • Size 4KB
          • SHA256 de78416f99fccc9bb1af021837fd2992cf7b531e0ce2178fd35045bc399da7d3
          • MD5 SHA1 SHA512 SSDEEP TLSH