Resubmissions

23/07/2026, 15:48

260723-s8zxpsscnf10

23/07/2026, 15:24

260723-ss6qbasamd10

22/07/2026, 19:41

260722-yeb7fay1dy10

Analysis

  • max time kernel
    46s
  • max time network
    151s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    23/07/2026, 15:24

General

  • Target
    35d220d4bfeec29b788e018405b60f42f63d8003ba673a09465b2be8a0456667.apk
  • Size 977KB
  • Sample260723-ss6qbasamd
  • SHA256 35d220d4bfeec29b788e018405b60f42f63d8003ba673a09465b2be8a0456667
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • system.bin.svc
    1⤵
    • Acquires the wake lock
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Schedules tasks to execute at a specified time
    PID:3326

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        primary.prof.KeGzNL.tmp

        • Path /data/misc/profiles/cur/0/com.google.android.system.service/primary.prof.KeGzNL.tmp
        • Size 252B
        • SHA256 7cf4d2a1cc269a679ee92c612f42af5ae459a406db3f7bd8ab2a3c0419cc6416
        • MD5 SHA1 SHA512 TLSH