3cfe9f386e41fbedea79950c8bfae722c47f3d76724991f6e1412f4944cca4b0

Analysis

max time kernel
8s
max time network
151s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
02/08/2026, 16:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
stuk.apk
Size 49.6MB
Sample260802-tkxccawemd
SHA256 3cfe9f386e41fbedea79950c8bfae722c47f3d76724991f6e1412f4944cca4b0
MD5 ee39c00d3b335bae287fc614ce1bab17
SHA1 5ede492d35ff20513e93d9572357e5f9b3538256
SHA512 0905f5c1d9062625bb9831733f1f664cd74b9ca60d143a226795cd7a44514971158fe2f97447e4ee8cba365f821d203a4fd128d1f64fb515d2e092908c2ae072
SSDEEP 393216:9kN9BREb8RKmdFiDQXxTHVS47Iv8hf8fOxdbWwra5ouo:WN9jHR5dFkQBrr+s8mTbWQ
TLSH
T1B0B7D007F059853AC8EAE238F72F06327234784C46E6955B7A4CA3147F9B5F01BA67E1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4700	kz.stuk.app
/system_ext/framework/androidx.window.sidecar.jar	4700	kz.stuk.app

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	kz.stuk.app

kz.stuk.app
1⤵
- Loads dropped Dex/Jar
- Checks CPU information
PID:4700

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/kz.stuk.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 040ddcc1e4e985c1b032cc869ef5a6e6713f76bacd18682bc092248069b9ad1d
MD5 ed5dfe72b8ced4a85383851650ed86ce
SHA1 3bab465d2874f9f980461b3f67869324255a1dd4
SHA512 3e8f89766c47ba04030578c65fb07a842c7c0283197defd573f49de0a318fb48eea5a5bc3b508d8a67da1da43e73945a026175a5073a64e0a3bfd6b2399fca50
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/kz.stuk.app/primary.prof
Size 185B
SHA256 3e7f6e4415cef373b2358b3f99aae5ed74a145a65d33059a0a11b6d476e72971
MD5 15d1b4f28f11d2bda8ed70a9c457a163
SHA1 f53d3f7ec547db04db29f7ca1206ab139d69528c
SHA512 e98788a418b4a3738187f663317ecc31460d2212987e7e1a9e3dcadaf6a610f2548e2b867ab319db255169a8268032d12bafc89835d6427269e91f7c733fedae
TLSH
T180C02280E3800149912828E091FBF11FABD9289C0E80B001312F0E04670A3623990020
MD5 SHA1 SHA512 TLSH