393050e5e547e6a6b92f7159dc71c032ab85cdc93ec792da24a28a44012f3c5b

Analysis

geolocation tags

asiadelhiinindia
user interaction
yes
max time kernel
417s
max time network
445s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
20/07/2026, 21:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
AG Virus 9.apk
Size 6.3MB
Sample260720-1rybjsft8k
SHA256 393050e5e547e6a6b92f7159dc71c032ab85cdc93ec792da24a28a44012f3c5b
MD5 fc659debd6a98f5bd1f0c0e9edc4efa9
SHA1 a5496cd402f625cf94f2d30666b9318ab76a160b
SHA512 0b73dd59c9ad0b043b1f11a84ffca4924d13e29fb59d14e4e5f0e48933f63e3334484cb556884cc6640b129c0813ed3513e0d17aee1707573c33ba7ec8189cf0
SSDEEP 196608:TBlg7Zf9zC38/CfMGSuAZC0PZG/hbptanL4:byftkDGyb3aU
TLSH
T1D066E188FB89D52BC8775532457A5732414B8C0A9E83EB53B958B20C6CB75D90F8EBCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.android.shell.app

Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs

defense_evasion

User Evasion

T1628.002

description	ioc	Process
Intent action	android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	com.android.shell.app

com.android.shell.app
1⤵
- Acquires the wake lock
- Requests disabling of battery optimizations (often used to enable hiding in the background).
PID:3385

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

User Evasion

T1628.002

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

base.3385.tmp

Path /data/user/0/com.android.shell.app/cache/oat_primary/x86_64/base.3385.tmp
Size 243KB
SHA256 44fd84a327d4eb712ec48f82bb8d7b582a820eb19391e7563ff728378a50a52a
MD5 ec95ee77cb8e047e4a6c08816fc1131c
SHA1 2e1d193df2ca72d0d07f040850ecb92474211f5e
SHA512 01d4f70932d6007cb823f5772041dd5f54cd41ac87411a9b7faea2aa3bd2d8265b0f0d1a1ee54373d71eb04ed3c931a3b199c859751f5fdac6fc4db82e282660
SSDEEP 6144:WT7GnMx5rI4rPHDcDA4QiR0FzS4skPXFS9Ap6Y+:0GnML5Rv
TLSH
T199343A5FB5634002C09BBDF75E9A44EAF966D456E1CB3950D8E07B7EB023E00E721AD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download