Resubmissions

27/07/2026, 15:05

260727-sgn15avgqf7

27/07/2026, 12:35

260727-psnb7asdne7

Analysis

  • max time kernel
    145s
  • max time network
    150s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    27/07/2026, 12:35

General

  • Target
    1785095449105.apk
  • Size 5.4MB
  • Sample260727-psnb7asdne
  • SHA256 ed6ab577c5a114df3caa16b08258c4dfe6f435b81f02accc4ee06d4432ca95cc
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.cyez.orho
    1⤵
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5115

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        libjiaguv1.so

        • Path /data/data/com.cyez.orho/.jiagu/libjiaguv1.so
        • Size 250KB
        • SHA256 1a85a981d025557b03bd3bc75888c48f893f8594384fff24839abd3e90060f02
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/data/com.cyez.orho/oat/x86_64/[email protected]
        • Size 10KB
        • SHA256 5112dd9467d0ea0dcaffb2daced41d0e42e63dcffe54cc93e4dbcb06a49829bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        • Path /data/user/0/com.cyez.orho/[email protected]
        • Size 9.2MB
        • SHA256 5141e8f17791aa864a7ad0ad8fb87b1132729672362f4cd5fa02075c2fd0e2d1
        • MD5 SHA1 SHA512 SSDEEP TLSH