21a514e4d8595fc8cf30324e020616181535e58a9f47184b0425fb7534b68996

Analysis

max time kernel
9s
max time network
155s
platform
android-13_x64
resource
android-33-x64-arm64-20260708-en
resource tags

arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
submitted
04/08/2026, 16:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
app.apk
Size 11.5MB
Sample260804-vfzscadh45
SHA256 21a514e4d8595fc8cf30324e020616181535e58a9f47184b0425fb7534b68996
MD5 9cd854a37daf10f06a0a1a8a21f66c02
SHA1 aabae0498cdcd1959c53504fd736ca725c1d591d
SHA512 7dc3f9796eb1b9c51ed89abcb28df2249c526b0f4fd9cac4096837aec9f524b3668279faa85de9e659b3f4900a08a1ba47f0db0c7eb59c380f5694069673e0b4
SSDEEP 196608:qR1kdbmdRFypVn8H+zoDURVDEuB0LqJyK9tvH0WAi8u6CppSJHCTLILCm:k1kS40ezPEuBkqJyKHvUBippwHUM3
TLSH
T1D3C62319FBA49E5EC477D0320D1A623A140AD933C743D38BC93D5B9C688F9F84E866E5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.extensions.jar	4086	fi.dortsanders.testapp
/system_ext/framework/androidx.window.extensions.jar	4086	fi.dortsanders.testapp
/system_ext/framework/androidx.window.sidecar.jar	4086	fi.dortsanders.testapp
/system_ext/framework/androidx.window.sidecar.jar	4086	fi.dortsanders.testapp

fi.dortsanders.testapp
1⤵
- Loads dropped Dex/Jar
PID:4086

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/fi.dortsanders.testapp/files/profileInstalled
Size 24B
SHA256 8222b6161e36b8df87aa103f3f48fdc5ea5b5e4c6800017c88bad096aa9b1329
MD5 a768452558f0a66323337b7ab020471a
SHA1 76e8712b8eb4852aadb5be40472b2af163361d6b
SHA512 27c22015f924b4aeae7d30c8a76d9670deebbf9a54dd4a70fa70ae0b4bebddad49b1a470e4ffa5e7ec6f2dca22dfb0658df66f821cd091200f84c9672e835a84
MD5 SHA1 SHA512

Submit Download

androidx.window.extensions.jar

Path /system_ext/framework/androidx.window.extensions.jar
Size 123KB
SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
MD5 3056e1bdb7d4e19789d0319eff484bd0
SHA1 6791ae47aa9466fe0bca27ad6643f846853bbee4
SHA512 c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
SSDEEP 3072:8Pmsa8v0v8FYNMhpjLXZ/pziNQdysk4p26PQ:Qmsa8vXhRLXXOQGJ
TLSH
T19DC31951FA4159A1DEAE933B959B1301AB30A648AB2383137654D0BCFCD73C39F87AD4
MD5 SHA1 SHA512 SSDEEP TLSH

Download

androidx.window.sidecar.jar

Path /system_ext/framework/androidx.window.sidecar.jar
Size 25KB
SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
MD5 29469324e59dfcc052f24b5af4e7b2c4
SHA1 10c1e17ac6f598037bb51baa07945663645de4eb
SHA512 5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2
SSDEEP 768:bjydnTmp8WNAupUuvkg5NrtsESOMXIpc3dRwQA0:bjydCpF0uhtsxOQIqdSj0
TLSH
T1A5C2F716E7400C63E9FF9A3B6A5B13009F35E3A4AA43471B640585A4BDC63D3D9EE7C8
MD5 SHA1 SHA512 SSDEEP TLSH