931d8de7648307cb119ee44aa664895614477bb7f3e45c7026a933665c781656

Analysis

max time kernel
22s
max time network
151s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
01/08/2026, 00:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bancagob.apk
Size 5.7MB
Sample260801-ajksdatwas
SHA256 931d8de7648307cb119ee44aa664895614477bb7f3e45c7026a933665c781656
MD5 054c02df0ba1bf5b55ced1e4f1ae4323
SHA1 3aec8304bb226de1edee80bb65e5cd43571495bc
SHA512 81a187d31aeba25ad102367880ae8d20fde3b00bdcaf278843859a7304b36b0dd4576f1d30fa1d2dd8eabc0534119101a1b21ab8fb0e63984bee4e5d19f72d93
SSDEEP 98304:O5rgR2oTYrnP/lS9gZmDXreBQFa0bEHp69fu1L7EKc8lmWGtLNh03/8w5m7Ql1dj:sjt7ZmreBp0bEJWm1LPcNtPhm/tmUl1p
TLSH
T1FD56F1C7F798A92FC43710B2897E527155874C528A83DB836D58360C6DBB9D42F8AFC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.example.bancagob

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.example.bancagob

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.example.bancagob

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.example.bancagob

com.example.bancagob
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4378

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.example.bancagob/files/profileInstalled
Size 24B
SHA256 db139ca3dfb4d0f54db6665657e3a4f245e1b0c9da16ec4d2d54558371464369
MD5 1b48dd9a2c30df73a0212d43d1da9bb3
SHA1 662c7b4f02cf4db0901dccda82e7a09ed6643389
SHA512 42293bf2e560e0a9b84cc17cbb1fb2b9a4c3ffbed8b767a0d9b717f0667ce565e28271d0eb2d39dba04d069cc218ce833b1cfe88ed51ea032049b9272424d0da
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads