Analysis
- max time kernel
1s - max time network
151s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
28/07/2026, 04:07
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
LuxSpin.apk
Resource
android-x86-arm-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
LuxSpin.apk
Resource
android-x64-20260325-en
7 signatures
150 seconds
Behavioral task
behavioral3
Sample
LuxSpin.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target LuxSpin.apk
- Size 2.9MB
- Sample260728-eptppayscs
- SHA256 18f9d93727fd08a26a0ed2a7bbbb9b7ae3a9d3b50b99086e77d907527067d2e2
- MD5 c774104b6d25ef1af31ba9a43266b278
- SHA1 41c2c0bf484f367dd2afe91b42153ed4bf524bdb
- SHA512 2e88192910aef3655a5d06da042507b82c87490b90693e3fdf02783961986e87785f8170fc333ba3a59f2cfd51ab7dfa42f7bd96756746a63098c1707229e1d1
- SSDEEP 24576:G3ArLp9q/kjPSC/HeZG/Meycut81QlEMPjJi++777F0GgiCSm7C9WjZf5FzAlC96:drLp9c81QnA77FGFCCZ2SvBOmg8DDK9
- TLSH T145D5F1578F961F62C47D523698AA439C3371AFF24253CB8F055472647F733E42BAA288
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 9 IoCs
ioc Process /system/xbin/su com.espinoza.introrsely /data/local/xbin/su com.espinoza.introrsely /system/sd/xbin/su com.espinoza.introrsely /data/local/su com.espinoza.introrsely /system/app/Superuser.apk com.espinoza.introrsely /system/bin/su com.espinoza.introrsely /data/local/bin/su com.espinoza.introrsely /system/bin/failsafe/su com.espinoza.introrsely /sbin/su com.espinoza.introrsely - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.espinoza.introrsely - Reads information about phone network operator. 1 TTPs
- Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.espinoza.introrsely - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.espinoza.introrsely - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.espinoza.introrsely