cec5cb60352e1a0239d4038a8a628c2cbc1fed082df68410cd526159a293b797

Analysis

max time kernel
149s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
03/08/2026, 16:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
System Monitor-v11.10.7_build_136-Mod.apk
Size 11.7MB
Sample260803-tt7vfacb33
SHA256 cec5cb60352e1a0239d4038a8a628c2cbc1fed082df68410cd526159a293b797
MD5 582680d8e673d69417278b1782f25b80
SHA1 64eb9a717356fd666253107756be95676ba88ebb
SHA512 aaa5a9b9625584a0b17ff94c5aed5b5d5e99fcc1a67c6e11879ed27e3b6c6ebe7025af3d212c3e577530e20ec11dd5c6c3923875a9d0c5dabe773a12c5569e22
SSDEEP 196608:WZih0EwDwwvol4P1TaSBXzL7HFJmtokPAFD2hc7uOlF5TaqgagYXLF7825SHFUYp:MG0EUwwwCP1GeLXm+kId2hcKkF5+pYXO
TLSH
T171C60156EB189F9AC4F317334639A622551B0DE58B4397C37E1C323C2BB75C04E19AEA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

banker discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.glgjing.marvel

com.glgjing.marvel
1⤵
- Checks CPU information
PID:4795

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.glgjing.marvel/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 582d08332a7d802cd5550845d5d05fba95ebb1ba41c875740b865273b10ff4d8
MD5 2b75aa39b9fe9c2c00b99fc8d757e635
SHA1 ca743b3be13e5f149455c25f0def5e9455ded387
SHA512 f44ec805b27d0e64b85c4de73bfa7e94f72c3340ffb727610072ba469543fcb0142f5a645582df263cd89ccf514522b757a4503b4300b4928779e75a1db42912
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.glgjing.marvel/primary.prof
Size 1KB
SHA256 c3ccc293daf7d422d3e418f797bd35387599048fc24ee16a82005faeffb5030d
MD5 c99f3a14079ba2c3f0cefa826ea3cccd
SHA1 bfd0955aebcc2a8e32ccaeb9c8656329fa7bfbbe
SHA512 8ade8f0f50f508051a1952c91710f74c6e803a16c9aef9c127394573c69397e2bcb22c888a66e71db3321959f3ebdf3e6e1527d8ab3f95b135b8b243fa13bb36
TLSH
T1EA411939ACD1388F7CFCBF729600146A129BEBF9D7972580AD91088C16D640396DC646
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.glgjing.marvel/primary.prof
Size 4KB
SHA256 5dab47cf0df881ff405b631e77776bff8ae6b020b6e306d48b4cb7c1308044ee
MD5 2d0a14d2807663175339f3eead22eea2
SHA1 ce61e8378fd1b30fab350fde9d1f34db4ee055dc
SHA512 896fbd9f1f5d6cfbb46205010340a013f85f87e7a38383eb5a4122dcb0e1fd7162e8f70d437eb438a94e4b11507bb3d8e1932c102f594e71174b4bc4b85e6765
SSDEEP 96:KJLb9zKhwFuZNxqM1yiaIAxP/GqKBP+R2Ixab+ka:KJLb9jcvtsia9P/GqOPC5cBa
TLSH
T10BA18E723760E80FBA88B50610E943E96D168FE7CEAC5278DF944ACC07D23562F15B56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads