Analysis
- max time kernel
31s - max time network
152s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
04/08/2026, 11:06
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
85a4802b.apk
Resource
android-x86-arm-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
85a4802b.apk
Resource
android-x64-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
85a4802b.apk
Resource
android-x64-arm64-20260325-en
1 signatures
150 seconds
General
- Target 85a4802b.apk
- Size 15.9MB
- Sample260804-m7l2kaaa77
- SHA256 96008916d6f3eb0bc89f6487fba2a6ec57898cc334745105505a18f5e4897e40
- MD5 e8508b6293cb282bd6ed59873d6bf981
- SHA1 c7a28f5421eccdc1cf99a30c761981184d7651a4
- SHA512 3f06ca081f31676e5e57b3a56bf6381491ea61092e546177afe98eeb0a9cb0a119a74640082d4845012905f668028d2dd014bcec0b602647d7cbbc2ca857d188
- SSDEEP 393216:RQ+LAFF5MV0qI6IFVNn9bGLLiE2l6krLpwCPieH/a8Czy8dONDca:K+8FF540RN8Lj/kq5M/HMt8
- TLSH T112F62286F7845D9EC4F71331853A5661148B9C27CB838AC3AF58323D69BB6D00F5ABC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4727 vt.tmdbaa.qatvl /system_ext/framework/androidx.window.sidecar.jar 4727 vt.tmdbaa.qatvl
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/vt.tmdbaa.qatvl/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
- MD5 7e858c4054eb00fcddc653a04e5cd1c6
- SHA1 2e056bf31a8d78df136f02a62afeeca77f4faccf
- SHA512 d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
- TLSH T1A8810240534000E1D06406B2549113080B0AD1A4A5410B13264200428C455840C60A85
- MD5 SHA1 SHA512 TLSH
- Path /data/data/vt.tmdbaa.qatvl/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 0d5a076bbdab7321e6a6ec1d12e0448f41b42c98c369f7a525ce56c25117710f
- MD5 d3ca7af4312ca7bcd4a61248665b6f60
- SHA1 490d0d6ca10e40c9425a53a167e3dde32144c7bb
- SHA512 050cd7bd418e796d1167b98586fc061dc61ab7c5b270e8c51c1b763bb892f7411ccac3bbc148ed794f6f6f6b1a8f2793ff7c74509d1b5dc026853e3c24470487
- MD5 SHA1 SHA512
- Path /data/data/vt.tmdbaa.qatvl/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/vt.tmdbaa.qatvl/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 0a2cfb777bc1c85efd32ad891ad762467b3256b224ebfb92c5f61742186a3d98
- MD5 bde3c07eeed76332fbc91afcb1a636f3
- SHA1 7be55dc93e6e7d6943ca69606539715d21aeec8c
- SHA512 70e0767d5d68c3a6e93bca796b2ba3b4cfc7978a1cd056d251e80621ceac5ce837d92db97a765cdc284fa48c5e89f58edd14d76a217a481fe90031d7325a7644
- SSDEEP 6:KVLJ0Dv8DeWg9FZde/kPlOERX4PBX4ogLugMBX4suuK+/TqMDQE84lV14mkTOw2:KfUzdeWRmBEyPbP/GMDpJV1+Ow2
- TLSH T1CB72C284B3463F23C219733654D5C3811DA8D75D7753C78FD29116556E423C8A871F08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/vt.tmdbaa.qatvl/no_backup/androidx.work.workdb-wal
- Size 116KB
- SHA256 e5407a866bb3621e729f1f28583b74dbb9eea4041e433068b30dea974e5315de
- MD5 2ab7ddb0e791754137bfc2569710327b
- SHA1 9cb2ad66a220be1bb9e0462f5734cc2221a32607
- SHA512 c3a230126d2675f131a47316ddca49e81559b57c1589dc36dee472c29154d337174fd2f31f81ce8f9811c63592055fc68f5dc4cd49a8acca5db39672f794cb4d
- SSDEEP 96:ptf1oAe6+etidjnZRWzzb8/KeKcK+zSytKz+eD86u0ExV:/f1pDtidjnfWzzb83zS/+eD86u0ED
- TLSH T1E7C3038D0F5A3701C4A964F095E00BA17D3EC12EA393E3D5A59101B5AED2921DE39EF9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 12KB
- SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
- MD5 bdf3529e80318eb14e53a5bf3720c10d
- SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
- SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
- SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
- TLSH T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
- MD5 SHA1 SHA512 SSDEEP TLSH