205f893b6e2078e5c74f328ee5ecfcf561e34b8c569ead2b6be354ee3e02db02

Analysis

max time kernel
7s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
23/07/2026, 04:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
205f893b6e2078e5c74f328ee5ecfcf561e34b8c569ead2b6be354ee3e02db02.apk
Size 4.6MB
Sample260723-e8ttssgc55
SHA256 205f893b6e2078e5c74f328ee5ecfcf561e34b8c569ead2b6be354ee3e02db02
MD5 239565c3e3f72984ec0ffe9b6b19b409
SHA1 fb6c6f14aff3e777825046378a868b8e1a1d2c19
SHA512 6f1f4ee57d1efd8aff2e4f4206a55b58d2d367aa283f9394e106db2307daf9bfc5b8c11e6d77c601be5c120ad5a641b9b35140e475e6a0c313b5fac4bb94a555
SSDEEP 98304:D8eW1cyZAUsg3Mq3KSH+XBtmntgwQhaL130PO1Tt0rZMkRy:D84KFB8q3KY+RIgkhlkRy
TLSH
T19626E089F7589E2FC877503209AA5235524B4D12CE879B87695C371C38BB6E80F4EBCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion

Malware Config

Signatures

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	com.mtf.app

com.mtf.app
1⤵
- Checks the application is allowed to request package installs through the package installer
PID:4995

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.mtf.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 f6112c6dfc3544d5c990d6c4493ce3b118114d253416e0f6de5c561d1102d69b
MD5 bbefd89b422cbd9700a2b7438dbdb567
SHA1 1e404a2443c24cb63426cdb0d79af0db7e45d1ed
SHA512 73b11e1715d023044086819d83a9938a9071131d0d46cd7801fbb217b75e24106516967b438323bfa73d3e28e08601ece638b9529342894c4cd0cdfe494ebe3b
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mtf.app/primary.prof
Size 2KB
SHA256 0c0a616a09c053d14872a09718c7c5d61e9d54b2cf8fa8f8a01454a0060442b6
MD5 22e1a36677fb7000550cdf85bc62aa82
SHA1 006b084b3027f0d8618c2ccc0b60b18b100d0d44
SHA512 fa0f54afc14482272173b8b793dd8fbc1ab19641d12e54f9c0d9fcb77765305a6b7dbbc9d31ae9f8bd35dcb3c55d0433ca5359a0a9b18e14624c553c9470f5ad
TLSH
T1E3514D6FB7E1B6965C669C1C7E6998C5367284F05F0B0DB8572CD2839300D3C746F652
MD5 SHA1 SHA512 TLSH