152f42d8d6eebc376fb97fa9633cf863bbdbed2646f7eb62a5b3b2aea8bd4dc9

Resubmissions

15/09/2026, 11:29

260915-nlkgaatzg1

07/08/2026, 14:21

07/08/2026, 14:20

06/08/2026, 22:19

06/08/2026, 22:01

06/08/2026, 03:44

10/07/2026, 00:11

Analysis

max time kernel
11s
max time network
547s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
06/08/2026, 03:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
152f42d8d6eebc376fb97fa9633cf863bbdbed2646f7eb62a5b3b2aea8bd4dc9.apk
Size 36KB
Sample260806-ear8baff46
SHA256 152f42d8d6eebc376fb97fa9633cf863bbdbed2646f7eb62a5b3b2aea8bd4dc9
MD5 e1f93c3987cdfc7841ec6bfb78b4e25e
SHA1 8013ac90e173750939bd5d3e43b20293c2e0f512
SHA512 aeb48a525b84f8a0d83c9edd9893ef1d0f24949ef75704ac63b2de3d74db5ff206627b5cbd08e18b85c420e17735eddbc7536e3e7954fe1806bf12b17ac9f029
SSDEEP 768:BjLOVb6vHL935DpWGjOIW6RFrYPlXfpcpP4N:BWbsL93t1TvRF4lXfpcpU
TLSH
T12EF2F147BFA0B676D267AA3A9F691701FCBCF24D692B691AC510053E8D190B19F0B80C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery evasion impact privilege_escalation stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 TTPs 1 IoCs

stealth trojan evasion

Suppress Application Icon

T1628.001

pid	Process
4836	dbsal999.rlaendl9.view

Queries the phone number (MSISDN for GSM devices) 1 TTPs
discovery

System Network Configuration Discovery
T1422

Tries to add a device administrator. 2 TTPs 1 IoCs

privilege_escalation impact

Device Administrator Permissions

T1626.001

Account Access Removal

T1640

description	ioc	Process
Intent action	android.app.action.ADD_DEVICE_ADMIN	dbsal999.rlaendl9.view

dbsal999.rlaendl9.view
1⤵
- Removes its main activity from the application launcher
- Tries to add a device administrator.
PID:4836

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

T1626

Device Administrator Permissions

T1626.001

Defense Evasion

Hide Artifacts

T1628

Suppress Application Icon

T1628.001

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact