Resubmissions
23/07/2026, 15:48
260723-s8zxpsscnf1023/07/2026, 15:24
260723-ss6qbasamd1022/07/2026, 19:41
260722-yeb7fay1dy10Analysis
- max time kernel
6s - max time network
153s - platform
android-13_x64 - resource
android-33-x64-arm64-20260708-en - resource tags
- submitted
23/07/2026, 15:24
General
- Target 35d220d4bfeec29b788e018405b60f42f63d8003ba673a09465b2be8a0456667.apk
- Size 977KB
- Sample260723-ss6qbasamd
- SHA256 35d220d4bfeec29b788e018405b60f42f63d8003ba673a09465b2be8a0456667
Score
10/10
Malware Config
Extracted
Family
-
mirai
C2
-
boats.dogmuncher.xyz
-
89.190.156.145
-
stresseres.duckdns.org
Signatures
- Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
- Acquires the wake lock 1 IoCs
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
- Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
- Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
Processes
-
system.bin.svc1⤵
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Schedules tasks to execute at a specified time
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
libkys.so