Resubmissions

20/07/2026, 14:41

260720-r2eshsdv7r10

20/07/2026, 09:50

260720-ltyb1agt3z10

General

  • Target
    3c62b24594ec3cacc14bdca068a0277e855967210e92c2c17bcf7c7d0d6b782a
  • Size 6.9MB
  • Sample260720-r2eshsdv7r
  • SHA256 3c62b24594ec3cacc14bdca068a0277e855967210e92c2c17bcf7c7d0d6b782a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10

Malware Config

Signatures

  • Family: CyberAzov

    CyberAzov is a fake DDoS Android application attributed to the Turla threat group.

  • Android CyberAzov payload 1 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • 3c62b24594ec3cacc14bdca068a0277e855967210e92c2c17bcf7c7d0d6b782a
    .apk 6.9MB

3c62b24594ec3cacc14bdca068a0277e855967210e92c2c17bcf7c7d0d6b782a

  • SHA256 3c62b24594ec3cacc14bdca068a0277e855967210e92c2c17bcf7c7d0d6b782a
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Android CyberAzov payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
a5f782f709737f5137db32ab05c0baebc83ff2b16b2d106e4709fe6b637a7fe2
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Bob Cors,OU=UA,O=UA,L=Kiev,ST=Kiev,C=UA
com.cyber.azov2

Android Permissions

3c62b24594ec3cacc14bdca068a0277e855967210e92c2c17bcf7c7d0d6b782a

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.USE_BIOMETRIC

android.permission.USE_FINGERPRINT