cec5cb60352e1a0239d4038a8a628c2cbc1fed082df68410cd526159a293b797

Analysis

max time kernel
41s
max time network
154s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
03/08/2026, 16:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
System Monitor-v11.10.7_build_136-Mod.apk
Size 11.7MB
Sample260803-tt7vfacb33
SHA256 cec5cb60352e1a0239d4038a8a628c2cbc1fed082df68410cd526159a293b797
MD5 582680d8e673d69417278b1782f25b80
SHA1 64eb9a717356fd666253107756be95676ba88ebb
SHA512 aaa5a9b9625584a0b17ff94c5aed5b5d5e99fcc1a67c6e11879ed27e3b6c6ebe7025af3d212c3e577530e20ec11dd5c6c3923875a9d0c5dabe773a12c5569e22
SSDEEP 196608:WZih0EwDwwvol4P1TaSBXzL7HFJmtokPAFD2hc7uOlF5TaqgagYXLF7825SHFUYp:MG0EUwwwCP1GeLXm+kId2hcKkF5+pYXO
TLSH
T171C60156EB189F9AC4F317334639A622551B0DE58B4397C37E1C323C2BB75C04E19AEA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

banker discovery persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.glgjing.marvel

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.glgjing.marvel

com.glgjing.marvel
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
PID:4388

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.glgjing.marvel/files/profileInstalled
Size 24B
SHA256 5fe117343ba8728eb3f1b6061aa024b3e8180b8a7ba6e11c71f4eefe7e4e1818
MD5 25bcf9388db06cad5d342937216505ca
SHA1 24e9f2b06dbda1a1933e5cf62fc3598cc9512a3f
SHA512 27fdb34fe7a28111c1fe0c578b8f41a84d6af24aabc572f3e4a65add3beb5e3eeeb8d0687771a6fb584e8492ae34a719c67840df0307c01fee0970a8ab8126d6
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.glgjing.marvel/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 47e3f59217ab0a1f1a488052aea0a7ee45a4d69dcc95e548b71ced1a0e922956
MD5 c0f572e876c5c937ef724bfaabecf13b
SHA1 e921fb31a96be6a45a88f5dfc229796e62568943
SHA512 60dfd91f3e177563978417302afd44746ffac5b982ba279b31ee8508e67b91883648cd3f2c519c3481ae00fbb1febdcdb6ed893c07287dab9edbb667685e7bf3
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.glgjing.marvel/primary.prof
Size 1KB
SHA256 c3ccc293daf7d422d3e418f797bd35387599048fc24ee16a82005faeffb5030d
MD5 c99f3a14079ba2c3f0cefa826ea3cccd
SHA1 bfd0955aebcc2a8e32ccaeb9c8656329fa7bfbbe
SHA512 8ade8f0f50f508051a1952c91710f74c6e803a16c9aef9c127394573c69397e2bcb22c888a66e71db3321959f3ebdf3e6e1527d8ab3f95b135b8b243fa13bb36
TLSH
T1EA411939ACD1388F7CFCBF729600146A129BEBF9D7972580AD91088C16D640396DC646
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads