Resubmissions

23/07/2026, 15:48

260723-s8zxpsscnf10

23/07/2026, 15:24

260723-ss6qbasamd10

22/07/2026, 19:41

260722-yeb7fay1dy10

Analysis

  • max time kernel
    48s
  • max time network
    150s
  • platform
    android-14_x64
  • resource
    android-34-x64-arm64-20260325.1-en
  • resource tags

    arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
  • submitted
    23/07/2026, 15:24

General

  • Target
    35d220d4bfeec29b788e018405b60f42f63d8003ba673a09465b2be8a0456667.apk
  • Size 977KB
  • Sample260723-ss6qbasamd
  • SHA256 35d220d4bfeec29b788e018405b60f42f63d8003ba673a09465b2be8a0456667
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 64 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • system.bin.svc
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Schedules tasks to execute at a specified time
    PID:4443

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        framework-adservices.jar

        • Path /apex/com.android.adservices/javalib/framework-adservices.jar
        • Size 326KB
        • SHA256 c1a4b59ea8d2fc38cccee7f0fb32521c8fb2116b3a01818467b7710c5bf86d25
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-sdksandbox.jar

        • Path /apex/com.android.adservices/javalib/framework-sdksandbox.jar
        • Size 64KB
        • SHA256 842233dd46f31abddaa1fdf001699860e08b3697c1eeb3bfa8d3cd51c97f01b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-appsearch.jar

        • Path /apex/com.android.appsearch/javalib/framework-appsearch.jar
        • Size 169KB
        • SHA256 daef8bd66a572bd090ec1a81f887c2819b04d5d521948a6d489cefff5447fd4d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        apache-xml.jar

        • Path /apex/com.android.art/javalib/apache-xml.jar
        • Size 1.1MB
        • SHA256 72fa596bcafba7f2558124f80e350f70a28eb2e32b95e7bbdb7decae60899954
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bouncycastle.jar

        • Path /apex/com.android.art/javalib/bouncycastle.jar
        • Size 1.4MB
        • SHA256 bfa6f6e81b5f36c50b06bd9db33398f111ee90a43c9f1c1088a6eaea386d67ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        core-libart.jar

        • Path /apex/com.android.art/javalib/core-libart.jar
        • Size 558KB
        • SHA256 f8446de0652007eccd8ef142f772aba8df7c728d07b7f66319af5cf9ab1dc646
        • MD5 SHA1 SHA512 SSDEEP TLSH

        core-oj.jar

        • Path /apex/com.android.art/javalib/core-oj.jar
        • Size 5.3MB
        • SHA256 26f2a49dffe39e31bf24520d07802e1409526c0ebecf6426d447f8fa3101e9a0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        okhttp.jar

        • Path /apex/com.android.art/javalib/okhttp.jar
        • Size 395KB
        • SHA256 f6365c62b8b92ad4d9860f0c480e567cb5b9aeaaae21994f939bbe0b8d1e3d1b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-bluetooth.jar

        • Path /apex/com.android.btservices/javalib/framework-bluetooth.jar
        • Size 1.1MB
        • SHA256 910aed1aa1a636a17790c6ff6e3bcd3acf8b162deead4da34b68002279f0a18e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-configinfrastructure.jar

        • Path /apex/com.android.configinfrastructure/javalib/framework-configinfrastructure.jar
        • Size 137KB
        • SHA256 7bff466a8417cb8690791ac9dffa8d5d23ca57fdb42aa7d22481b87449ba74db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        conscrypt.jar

        • Path /apex/com.android.conscrypt/javalib/conscrypt.jar
        • Size 455KB
        • SHA256 51e9b229e1e536b932558ba7f14a8d6033879acfce32a0a79e93d3c2519203b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-devicelock.jar

        • Path /apex/com.android.devicelock/javalib/framework-devicelock.jar
        • Size 26KB
        • SHA256 94928a87282a5a2375ed472291460af08c7af156497a3e80e7c72a90bf4102c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-healthfitness.jar

        • Path /apex/com.android.healthfitness/javalib/framework-healthfitness.jar
        • Size 509KB
        • SHA256 0b43f811dcfb0ebb50d0b481d6d270b96c623e3eb942773a71f67c6f8461765f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        core-icu4j.jar

        • Path /apex/com.android.i18n/javalib/core-icu4j.jar
        • Size 2.8MB
        • SHA256 ca57085a574661788d93d614a2fb4c8193e2a3bd11181fde7739e360cad3005f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        android.net.ipsec.ike.jar

        • Path /apex/com.android.ipsec/javalib/android.net.ipsec.ike.jar
        • Size 683KB
        • SHA256 e53a3fb4bedad85ceedd41eb4500ceda0679a36125ca7091620e08a07ed09481
        • MD5 SHA1 SHA512 SSDEEP TLSH

        updatable-media.jar

        • Path /apex/com.android.media/javalib/updatable-media.jar
        • Size 747KB
        • SHA256 3a95a47f87da082da5cd87caac80569853a34988cdc4c2f19565245233af9ec6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-mediaprovider.jar

        • Path /apex/com.android.mediaprovider/javalib/framework-mediaprovider.jar
        • Size 76KB
        • SHA256 fb0bc659e1744a0bb75d60e809258ffffc3652e2fd38662aaa32ef514199f660
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-ondevicepersonalization.jar

        • Path /apex/com.android.ondevicepersonalization/javalib/framework-ondevicepersonalization.jar
        • Size 178KB
        • SHA256 61871aa107958d9c2f7cb949c6a1c09198273a265c5cdc83849435c61cf324b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-statsd.jar

        • Path /apex/com.android.os.statsd/javalib/framework-statsd.jar
        • Size 94KB
        • SHA256 11193f65a235bb7f03682bbf6cc6e3da73c92d977e0a36f452a95a469cf0484c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-permission-s.jar

        • Path /apex/com.android.permission/javalib/framework-permission-s.jar
        • Size 207KB
        • SHA256 753f557b1e79af71fde3cfa80342642dada1665c8b42f7a340b1ea05210d9dc0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-permission.jar

        • Path /apex/com.android.permission/javalib/framework-permission.jar
        • Size 608B
        • SHA256 34dfd75d140b601d1617346e628d35d0ffe3e9c57e41449001ef3529d2cde4eb
        • MD5 SHA1 SHA512 TLSH

        framework-scheduling.jar

        • Path /apex/com.android.scheduling/javalib/framework-scheduling.jar
        • Size 12KB
        • SHA256 a5ad3f8db021142a8ba5666e4bc29fd163f553364ae5c30d9e660dd97cb31074
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-sdkextensions.jar

        • Path /apex/com.android.sdkext/javalib/framework-sdkextensions.jar
        • Size 6KB
        • SHA256 e73f45edf54bcf93ffa20f70776cd2ddc9c853766e2e87c0f40dc9d8e05825b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-connectivity-t.jar

        • Path /apex/com.android.tethering/javalib/framework-connectivity-t.jar
        • Size 392KB
        • SHA256 c725432d7e6084c8fc93473dafd3cbf1ad533bd9c67ccec441c767f2944941d5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-connectivity.jar

        • Path /apex/com.android.tethering/javalib/framework-connectivity.jar
        • Size 1.6MB
        • SHA256 c1cb8d0bfd1177aa7abad79af9e8cb5de7f39005a37bb8b29e23da3f4167acc5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-tethering.jar

        • Path /apex/com.android.tethering/javalib/framework-tethering.jar
        • Size 67KB
        • SHA256 e5af73c493d50ff6de72cf2bf70c2eec42c8642ac990bb043d1ee7f06a287421
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-uwb.jar

        • Path /apex/com.android.uwb/javalib/framework-uwb.jar
        • Size 134KB
        • SHA256 dede2e234f1d5493522c2f922083ab066843f527160bad9aefff2b8cf42e7592
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-virtualization.jar

        • Path /apex/com.android.virt/javalib/framework-virtualization.jar
        • Size 78KB
        • SHA256 2fbde57fd13dc3c630bf476c4992e98942cf841c8f69f358ad0a8b2a89e8230d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        framework-wifi.jar

        • Path /apex/com.android.wifi/javalib/framework-wifi.jar
        • Size 1.1MB
        • SHA256 aa98e93aefe8e988ac6b929b3b59404fca6b62c4724617975aad4bac29dceb7c
        • MD5 SHA1 SHA512 SSDEEP TLSH