205f893b6e2078e5c74f328ee5ecfcf561e34b8c569ead2b6be354ee3e02db02

Analysis

max time kernel
46s
max time network
150s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
20/07/2026, 05:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
205f893b6e2078e5c74f328ee5ecfcf561e34b8c569ead2b6be354ee3e02db02.apk
Size 4.6MB
Sample260720-fwcv7aas21
SHA256 205f893b6e2078e5c74f328ee5ecfcf561e34b8c569ead2b6be354ee3e02db02
MD5 239565c3e3f72984ec0ffe9b6b19b409
SHA1 fb6c6f14aff3e777825046378a868b8e1a1d2c19
SHA512 6f1f4ee57d1efd8aff2e4f4206a55b58d2d367aa283f9394e106db2307daf9bfc5b8c11e6d77c601be5c120ad5a641b9b35140e475e6a0c313b5fac4bb94a555
SSDEEP 98304:D8eW1cyZAUsg3Mq3KSH+XBtmntgwQhaL130PO1Tt0rZMkRy:D84KFB8q3KY+RIgkhlkRy
TLSH
T19626E089F7589E2FC877503209AA5235524B4D12CE879B87695C371C38BB6E80F4EBCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion

Malware Config

Signatures

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	com.mtf.app

com.mtf.app
1⤵
- Checks the application is allowed to request package installs through the package installer
PID:5116

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.mtf.app/files/profileInstalled
Size 24B
SHA256 4e32c27fac26c63eb497e0dd16988c2a5e6a9a47aaba6cbb65aaa6913796c9f3
MD5 2096c0d140fa15781cd61faa6ef51163
SHA1 41bafff67ab2afc2b1a2bc63f9453a557ec47504
SHA512 ca61636dac613c222226d958789d0873606d8806b89170c5a00e049bff53ef61c7a8e685f30f90422080fe36e37501783f0d6119623674a35e32393d14d8bf0f
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.mtf.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 e64bbd2b441567439ce416666f5967a72120d35ec9ef768035c1edc8f8004f71
MD5 faa04d7999fbf74e9262f15884189f23
SHA1 1c350e247bd3839c9082155d282a0e6a8922e3bd
SHA512 95238834ac38d2606a2c4fc970f1a17cece9714e91912ff1e90d2625bbe4ae51feab49eb5ce502e0154728a4e9f4bfc382b49a55756ab02cbd3512c4a3947991
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mtf.app/primary.prof
Size 2KB
SHA256 0c0a616a09c053d14872a09718c7c5d61e9d54b2cf8fa8f8a01454a0060442b6
MD5 22e1a36677fb7000550cdf85bc62aa82
SHA1 006b084b3027f0d8618c2ccc0b60b18b100d0d44
SHA512 fa0f54afc14482272173b8b793dd8fbc1ab19641d12e54f9c0d9fcb77765305a6b7dbbc9d31ae9f8bd35dcb3c55d0433ca5359a0a9b18e14624c553c9470f5ad
TLSH
T1E3514D6FB7E1B6965C669C1C7E6998C5367284F05F0B0DB8572CD2839300D3C746F652
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mtf.app/primary.prof
Size 8KB
SHA256 3aa0eda296c370725b71d4a03fafedfec5c29f5aa25f7f2bddd91b8f5bd4f8be
MD5 16d5244cf42c057b7eae10caf02ad1a5
SHA1 f9db60f543f4f7a210ab7bb34b01b1798e83a58d
SHA512 12c6cb69f601406da3afb0e14ab311f4d2adf0d24fdfa8924176c3707ea5f5b6f076f5bd451cfe7038e6812273f120fad1f0e51781ddac694b962c0785b02a52
SSDEEP 192:1eJmB7fT2KWKo+okIl47U0dhNBhvCTh4jzczZN7+5r45:1eJmdLfuTl2U8heb7+65
TLSH
T1A602BF1691D23BC8D7852EB095C56D16A68BC8C520C12F2BAEB12F6452B94CE51E135C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads