Extracted

• • Target
    dexopt.sssgf.apk
  • Size 6.9MB
  • SHA256 3269a0116ce0915afdd32e8d87b05ae9f5c00fcf0a6729add39a6a87aaf30089
  • MD5 b7555d45ec31adc23ea13ff173926251
  • SHA1 eb53b2e264c2eb9561b75ece770a259d55319820
  • SHA512 b70075402ba6d11f8b2dfe059acf1320389d8a995ed722f699679017724276f99daf53f13bbcdc441082fa35cbfdcf17d2470ad22e6346ccbb8767467ceb2c7e
  • SSDEEP 196608:ymztyyGUWebdmCr+0B7ed2HoCdKyOG9cw:y0YUWepr+Ac2H0yOG9cw
  • TLSH
    T11076E08AFFC6989AC0F35B33CD7591B541475C2647838A836D58B26D187B6F08E4EBC8
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  bankerdefense_evasionevasionexecutionalbirioxinfostealerpersistencerattrojan

  • Detects Albiriox payload

  • Family: Albiriox

    Albiriox is an Android RAT and banking trojan first seen in November 2025.

    bankertrojaninfostealerratalbiriox

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Acquires the wake lock

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Requests disabling of battery optimizations (often used to enable hiding in the background).

    defense_evasion
  behavioral1behavioral2behavioral3