999975c4a23228efed67a0a86dce127a5bc69177b8489e68f5ce07040c6b4bf0

Analysis

max time kernel
6s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
28/07/2026, 12:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e-ChaIIan.Mobile.App.V9.apk
Size 10.9MB
Sample260728-pawkvawxbs
SHA256 999975c4a23228efed67a0a86dce127a5bc69177b8489e68f5ce07040c6b4bf0
MD5 5a586c98a5a75b6a74c5423c207db471
SHA1 ba3b3e739a559854acd954ef05e0ee839e2d70aa
SHA512 c9b89d8d1ba4064bbe09f5b966a43190855a7f017d6fcfb98db22b5c9336f73a9ae650c07f0a95728897a5908abbe9691f11d12ad2f0c3462e8ccc1a898cddeb
SSDEEP 196608:3sju6fKIbCR6Zu3SKcDnZ+l6JvTAtfvGoud5X58Yr/HMeF1yiSjsfBpaCsQL:3sjrK8JQ3SKApWGoudT8IXF1yiFpwBQL
TLSH
T17AB62285B704952FCC7715360DAA5774924B4D838E87ABA77804370CACB72DA0F5EACE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/co.lino.fado.fazepo.fagece/[email protected]	4900	co.lino.fado.fazepo.fagece

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	co.lino.fado.fazepo.fagece

co.lino.fado.fazepo.fagece
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4900

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

dex0.dex

Path /data/data/co.lino.fado.fazepo.fagece/code_cache/p/dex0.dex
Size 3.2MB
SHA256 b00a6b7bc3a98cae29b59241ca5047e76b9eeb5ea1d9f45f8de08d832fb15210
MD5 fcce4f1450a74c44db172d893c0424f5
SHA1 ba1930f516881a52b8e70d5b40c1037cf180fbcc
SHA512 9c0bba5a9b56d02193139ea32f342ba2d242000ecb718c55d10ac950bed0e4f6cc67f3d8177dc1e0ab5af2cdac436b90d8a6cfe67fb4e293745a87054e3237b6
SSDEEP 24576:R+RC1wpLgHcHjh5Y6jg8pYCHlj5BGaBDVkW+2aw4sUcBkzB+U3Y2p8vk2373CGY+:oBSz8g8pn7V3+PsC1+DtTlJ
TLSH
T102F59E06D253CE66CCADD33A68F3978077316109BF439B26540AA6B5FC43ADD5B832D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

[email protected]

Path /data/data/co.lino.fado.fazepo.fagece/oat/x86_64/[email protected]
Size 477B
SHA256 439b72c2aa5a2853691fb342dfcb2724fec7a55a45500361fe3bf521712bf28e
MD5 edae1fbbf6c2d380e932f84f4072f866
SHA1 7fb5e6a348c4d6b0e353467f7051d2e550a705ac
SHA512 08dca2c49224ac33ab423c75ddc4fe467c947fef16a37566f954d67df3d38319c0104b495e2b93b603d7efd5002187e2f71785f83c0e4d53b16c22c7a35f13f5
TLSH
T1FBF0D4DF338E0256CF252E38164D401B3B1C12906C4102D399DB16C97D27BF4348481E
MD5 SHA1 SHA512 TLSH