Resubmissions

27/07/2026, 15:05

260727-sgn15avgqf7

27/07/2026, 12:35

260727-psnb7asdne7

Analysis

  • max time kernel
    148s
  • max time network
    152s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    27/07/2026, 12:35

General

  • Target
    1785095449105.apk
  • Size 5.4MB
  • Sample260727-psnb7asdne
  • SHA256 ed6ab577c5a114df3caa16b08258c4dfe6f435b81f02accc4ee06d4432ca95cc
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.cyez.orho
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:4380

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        libjiaguv1.so

        • Path /data/data/com.cyez.orho/.jiagu/libjiaguv1.so
        • Size 222KB
        • SHA256 dd76df09dcf01b53987509bcdd8788b53009df442971c501335da0db0d1af5f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Anonymous-DexFile@0xc99c8000-0xca2ff9d0

        • Path Anonymous-DexFile@0xc99c8000-0xca2ff9d0
        • Size 9.2MB
        • SHA256 5141e8f17791aa864a7ad0ad8fb87b1132729672362f4cd5fa02075c2fd0e2d1
        • MD5 SHA1 SHA512 SSDEEP TLSH