Analysis
- max time kernel
121s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
23/07/2026, 08:20
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
votemesh.apk
Resource
android-x86-arm-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
votemesh.apk
Resource
android-x64-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
votemesh.apk
Resource
android-x64-arm64-20260325-en
1 signatures
150 seconds
General
- Target votemesh.apk
- Size 3.4MB
- Sample260723-j8dvssthkf
- SHA256 49c89396b37af1699727e4f24fe05e0aaf6407f2367ac70bcd8a3cc580218142
- MD5 a5ff8960e0117ac05edf46990fe93724
- SHA1 e8d9ffa2063722763f194c0644c691199f3b5201
- SHA512 b2a8c6e109041e466bb47b8e20fdeb6dc18d3a34776f79db4cc318f22f0f8d23fee857f7c936b46c7a668b226ce38107f7f70f4cb8b560994ce62819728c9c10
- SSDEEP 49152:is5mND2LTgb/aBPtmlfegfm4jVtYSxGjc9ybezojNPJjGg3U/Kr3lJNMPy:s2XM0sYMm4jEgn93zotFU/Kr3lJNMq
- TLSH T1F0F5D0C6FBE95E2FC4774072CDAA52B1126A4C26C6439F476948371C78B76E80F49BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground app.zls.votemesh
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/app.zls.votemesh/files/enc-key.bin
- Size 237B
- SHA256 c2d2646d7ea6a42db0d6034147b3338deb5d8abf0da911298265b47b51a798a5
- MD5 237000b86c358c5ad8d331261766c6bc
- SHA1 a9fa3b3fc04e34e066b492dd53f3f130ded0aec0
- SHA512 a8e5bf6b49116a982bf513de56ed905dce8676a8fa1cb246a888c5a4d30a02a40f7f356a0288b62dab9ee9ee85553e726e0586239e9abcda2dbc433d3632066b
- TLSH T18ED0A710A4E8203DD570538D836EE52E974CE607BACAD46FF1D185BE37511B38A11292
- MD5 SHA1 SHA512 TLSH
- Path /data/data/app.zls.votemesh/files/profileInstalled
- Size 24B
- SHA256 047f64834732e64a7b181be9f60dac23ff49d086a42b1a3ac4fcb6cc4ba1d8bd
- MD5 2f1a39244748ce5a3abe63a0f96f6024
- SHA1 3dff6eae7e8a01917924234635ebd722997aba0b
- SHA512 12dee32051f92f95035d15854425cc999fab0376b335ff0c08de933e1c401e03ea3df5fdf6648b0c7929b1245e0800c6cd882aef37ecc9b761b453c904fa4f5f
- MD5 SHA1 SHA512
- Path /data/data/app.zls.votemesh/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 9bd4febe58f5ce7783f0b367a3e154a3f68079d4379c4beadbbb7e8d686c9a1a
- MD5 7c2d9d24be6ed2cb584bc6a78b5f2599
- SHA1 48d8dda87df8728129a900706b4be0f82de6cab1
- SHA512 de7f93530f9e15c10eb727b3fbc84b53bf80a0d89d03a89ceba90d31b10e1c2c9bad68d3a07c888de937200edb7af98887f6e85e14967c004a9dbcebb740cf9e
- MD5 SHA1 SHA512
- Path /data/data/app.zls.votemesh/files/registrar-key.bin
- Size 1KB
- SHA256 f53663fbee990b0d7a45608f0b99b9769323fbdb65a04ddb249c7688579e57c8
- MD5 d4a3a57b0206f32a10f6fe19dfe70c6d
- SHA1 4cc15b3f73d6a8eb9a5fa92fec9a006400f37fee
- SHA512 3ad64c5bb3fd80138d91f4d255f0207844b0cef128e14ed7754a381d314df3efa6fec16fa9e73361fa4f822034de99a2dee413fa52637e789fad4c303f5a00c6
- TLSH T1E231D7B2B7498BF8F5388E21DB6AA51B2267C7674EC552202F71CC56D93A090058B4D2
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/app.zls.votemesh/primary.prof
- Size 1KB
- SHA256 ee095ee45f1bcbed58939c444934e9b0afaab9435456f965b0448e4914bb73af
- MD5 6e6d534c728f6d603e59c5ed53b20758
- SHA1 cc140074975b800221cf952e325532d864e41beb
- SHA512 b6416d941c64188cb9fd5d618166187f2e556023c07d8cfef348c4dbb66f7bae2dcdbb4f72b8d2af69a657001326be090a5b74adbda9960940b0a55d4f77e9b3
- TLSH T1C8412A488866C5690E3CA3D12FD1B30EE449166F5CBC4AF0114C2F3A3395DFA44DCD2A
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/app.zls.votemesh/primary.prof
- Size 3KB
- SHA256 d8c750ad34d93bdd39d091c88244cc92048ef4d22b4a75e6880afa3a41ca4531
- MD5 1f03c9435f47ce14a7799accf1b30ef5
- SHA1 e794338924be56152d9622a09ece559b83aab5f0
- SHA512 6e9a0ac84f2dcf3f28b1c6aadb60813a0415459d5f4fa66189444e6bef3117c648eb57807998145e4e6b2bfabc1c6c96a670bc6df61260604160fbdc6bb81b62
- TLSH T138815B7BABB45C169E8D634AB81BC7F2EE01D8DB70A927359B28050627A79D5F070028
- MD5 SHA1 SHA512 TLSH