6338e66c753a115679db77fd18d8b7ab8820361db7433348d17c7656ea4f4544

Resubmissions

20/07/2026, 14:35

260720-ryapdsft4s10

20/07/2026, 13:31

260720-qsva6sby4l10

Analysis

max time kernel
6s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
20/07/2026, 14:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Центральный Банк.5b2e.apk
Size 3.9MB
Sample260720-ryapdsft4s
SHA256 6338e66c753a115679db77fd18d8b7ab8820361db7433348d17c7656ea4f4544
MD5 99a4a508f45ab80a2198b2c3dce19faf
SHA1 be8ddee2475f974af60d296765d1346dc386cccb
SHA512 510f5cc19a8b8c62c5f39e4a2452203b228e5f4d23059912de0d2946f7812cc68235ff4961267be877749c1573b6f00bb5ea9b5df0e70b480934ff74e5987988
SSDEEP 98304:R2/LDrBqex5S+dM1jrBAcyKGFIuxmDgIrTwr+UnZZPkgu:qZqQ5S+wlqKGFIHgxK
TLSH
T17016DF8AF788E86BC4F35336897592A255474C268B43DBD36F44763C18BB6D04F4AEC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4794	de.nfc_problems.top.once
/system_ext/framework/androidx.window.sidecar.jar	4794	de.nfc_problems.top.once

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	de.nfc_problems.top.once

de.nfc_problems.top.once
1⤵
- Loads dropped Dex/Jar
- Queries information about active data network
PID:4794

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/de.nfc_problems.top.once/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 5b5ca3f652d2f5b37021dfeacc1bc0b1a9ecbee7c92a970b42aec56b01df1ccb
MD5 d8dd4e978848d653ff052b54dbcda7db
SHA1 2a285a27b54c77312c5a5df1bd431512d31ddfff
SHA512 d0527ac02178f61c04c2a725472d3bd389879b95f4c8433fceb7784b1e8d8835c3dd6ff0d3d2328b51de9b90b3316395a557be71d358aa7b578bfedbb43ea32c
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/de.nfc_problems.top.once/primary.prof
Size 1KB
SHA256 2145f89a261b6d777c36d61d0ff1c5b3b73b1b2421a9d4674a5db18b1bf664c0
MD5 09442332f3bf210589d02a787a160fdb
SHA1 f6c8885b944070809e8c7d5ed026c91aa76ef053
SHA512 1a21f747acea1d7d1317d7ae30c38679bc46b878316148c1fd4488daa92e67d70a1498ebeb246921733e5bc2ff6926176f2fc94d9176d4962adc86006b076913
TLSH
T169314C178474838A808E7041D1348ECFAACE44685104FECBDB33BFB004990D755F6A3E
MD5 SHA1 SHA512 TLSH