393050e5e547e6a6b92f7159dc71c032ab85cdc93ec792da24a28a44012f3c5b

Analysis

geolocation tags

asiadelhiinindia
user interaction
yes
max time kernel
787s
max time network
619s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
20/07/2026, 21:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AG Virus 9.apk
Size 6.3MB
Sample260720-1rybjsft8k
SHA256 393050e5e547e6a6b92f7159dc71c032ab85cdc93ec792da24a28a44012f3c5b
MD5 fc659debd6a98f5bd1f0c0e9edc4efa9
SHA1 a5496cd402f625cf94f2d30666b9318ab76a160b
SHA512 0b73dd59c9ad0b043b1f11a84ffca4924d13e29fb59d14e4e5f0e48933f63e3334484cb556884cc6640b129c0813ed3513e0d17aee1707573c33ba7ec8189cf0
SSDEEP 196608:TBlg7Zf9zC38/CfMGSuAZC0PZG/hbptanL4:byftkDGyb3aU
TLSH
T1D066E188FB89D52BC8775532457A5732414B8C0A9E83EB53B958B20C6CB75D90F8EBCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.android.shell.app

Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs

defense_evasion

User Evasion

T1628.002

description	ioc	Process
Intent action	android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	com.android.shell.app

com.android.shell.app
1⤵
- Acquires the wake lock
- Requests disabling of battery optimizations (often used to enable hiding in the background).
PID:4893

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

User Evasion

T1628.002

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads