Analysis

  • max time kernel
    121s
  • max time network
    152s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    23/07/2026, 08:20

General

  • Target
    votemesh.apk
  • Size 3.4MB
  • Sample260723-j8dvssthkf
  • SHA256 49c89396b37af1699727e4f24fe05e0aaf6407f2367ac70bcd8a3cc580218142
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

Processes

  • app.zls.votemesh
    1⤵
    • Makes use of the framework's foreground persistence service
    PID:5083

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        enc-key.bin

        • Path /data/data/app.zls.votemesh/files/enc-key.bin
        • Size 237B
        • SHA256 c2d2646d7ea6a42db0d6034147b3338deb5d8abf0da911298265b47b51a798a5
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/app.zls.votemesh/files/profileInstalled
        • Size 24B
        • SHA256 047f64834732e64a7b181be9f60dac23ff49d086a42b1a3ac4fcb6cc4ba1d8bd
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/app.zls.votemesh/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 9bd4febe58f5ce7783f0b367a3e154a3f68079d4379c4beadbbb7e8d686c9a1a
        • MD5 SHA1 SHA512

        registrar-key.bin

        • Path /data/data/app.zls.votemesh/files/registrar-key.bin
        • Size 1KB
        • SHA256 f53663fbee990b0d7a45608f0b99b9769323fbdb65a04ddb249c7688579e57c8
        • MD5 SHA1 SHA512 TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/app.zls.votemesh/primary.prof
        • Size 1KB
        • SHA256 ee095ee45f1bcbed58939c444934e9b0afaab9435456f965b0448e4914bb73af
        • MD5 SHA1 SHA512 TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/app.zls.votemesh/primary.prof
        • Size 3KB
        • SHA256 d8c750ad34d93bdd39d091c88244cc92048ef4d22b4a75e6880afa3a41ca4531
        • MD5 SHA1 SHA512 TLSH