205f893b6e2078e5c74f328ee5ecfcf561e34b8c569ead2b6be354ee3e02db02

Analysis

max time kernel
45s
max time network
150s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
23/07/2026, 04:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
205f893b6e2078e5c74f328ee5ecfcf561e34b8c569ead2b6be354ee3e02db02.apk
Size 4.6MB
Sample260723-e8ttssgc55
SHA256 205f893b6e2078e5c74f328ee5ecfcf561e34b8c569ead2b6be354ee3e02db02
MD5 239565c3e3f72984ec0ffe9b6b19b409
SHA1 fb6c6f14aff3e777825046378a868b8e1a1d2c19
SHA512 6f1f4ee57d1efd8aff2e4f4206a55b58d2d367aa283f9394e106db2307daf9bfc5b8c11e6d77c601be5c120ad5a641b9b35140e475e6a0c313b5fac4bb94a555
SSDEEP 98304:D8eW1cyZAUsg3Mq3KSH+XBtmntgwQhaL130PO1Tt0rZMkRy:D84KFB8q3KY+RIgkhlkRy
TLSH
T19626E089F7589E2FC877503209AA5235524B4D12CE879B87695C371C38BB6E80F4EBCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion

Malware Config

Signatures

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	com.mtf.app

com.mtf.app
1⤵
- Checks the application is allowed to request package installs through the package installer
PID:5121

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.mtf.app/files/profileInstalled
Size 24B
SHA256 15f9e0c2d9199943f471482ff59c08e6c74dc83bad72662f8d08e05436ad20c8
MD5 336494ca07afdd7cedd784ae8de7f64e
SHA1 9d6027d3c1321591dc1787102e20db6272a5baaf
SHA512 642559d0cf096cb353bd43af2375ed4ce5c9efd1a6c356f6ffbc879bdf4e0c97060a8751967c8330b458dcf1479a2839ce923d8eef09cae26eefc7ed3b96dfa3
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.mtf.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 428184a3ac6662af4f68bbd11c4bc1bbea1898e6bf1b40d4eef18f33eb98f700
MD5 c4b16d99c732cb61111c15c531848629
SHA1 49258bc0dfcf3982b3c30a8f000182c7cd02cfaf
SHA512 1c1a2be731a9f643226682ef33437e095e93a9f4f5c2fe9b71a15958ce04e94f880e7ba0733658ff7b5b0c026bb62406e0894bbc5b8469ad36ed6bc0565a9fff
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mtf.app/primary.prof
Size 2KB
SHA256 0c0a616a09c053d14872a09718c7c5d61e9d54b2cf8fa8f8a01454a0060442b6
MD5 22e1a36677fb7000550cdf85bc62aa82
SHA1 006b084b3027f0d8618c2ccc0b60b18b100d0d44
SHA512 fa0f54afc14482272173b8b793dd8fbc1ab19641d12e54f9c0d9fcb77765305a6b7dbbc9d31ae9f8bd35dcb3c55d0433ca5359a0a9b18e14624c553c9470f5ad
TLSH
T1E3514D6FB7E1B6965C669C1C7E6998C5367284F05F0B0DB8572CD2839300D3C746F652
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mtf.app/primary.prof
Size 8KB
SHA256 3da9725c331cbb41940240b163c8bcf674248f3ef0662ea5678eec7646f5329a
MD5 2f7ea3df447293be09988e0a3fa5b36c
SHA1 8e8f4e5def9d4cc12c6e83ee0347a72af05e8acd
SHA512 5be858334540d1968f0d377edd9269afca2e8ba45a2acf05b00499fd5aa14a64cdbef3e32913184d725f9134ccb9ab1c487f81491ffd21f750608821bb4fc148
SSDEEP 192:psApvuvmPLncY2QIsqRRHXW2ySfV2K9ofQs3oNhP:pJlLnLusHTq9ofQs4h
TLSH
T1C302AE83393724D3E5339A2CB8D1925AAD72E901BEC80DCA87F8401F88D9C5DA0D2F24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads