032e9688e0ebfeb3b7d0e0adfd722155c4633bf90685557270795d2e9fac6226 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

AirVPN.apk

android-11-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
AirVPN.apk
Size 142.9MB
Sample260807-1e95kswyhs
SHA256 032e9688e0ebfeb3b7d0e0adfd722155c4633bf90685557270795d2e9fac6226
MD5 3332922d2dfe8dc7c85471dfb5479fbd
SHA1 48c8394f4428102e388395c2575428609825ec26
SHA512 d3fddcf54a6263971bb8087bd01a9ffa9ef0bb54a3ae36a3fd1fbe4dfe5d9827ac4dbd1eee17fae0cc10f38ae457e27fe06b597c9349a1a472d6ea309890d690
SSDEEP 786432:kXYWUc8xTj5FC8oj5FC8oT2XDaj5FC8oj5FC8dVIPchiTj5FC8oj5FC88Weo916z:Jc8xiDFIPchi7WdyRfOZL2X/8p01upI
TLSH
T1A068CF07FBADC13ADCEB90F4875F16927720A012A364C6613D6EC5143FB26E09AB67D1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

android discovery evasion

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

AirVPN.apk

Resource

android-x64-arm64-20260325-en

android-11-x64

3 signatures

150 seconds

discovery evasion

Malware Config

Targets

- Target
  AirVPN.apk
- Size 142.9MB
- SHA256 032e9688e0ebfeb3b7d0e0adfd722155c4633bf90685557270795d2e9fac6226
- MD5 3332922d2dfe8dc7c85471dfb5479fbd
- SHA1 48c8394f4428102e388395c2575428609825ec26
- SHA512 d3fddcf54a6263971bb8087bd01a9ffa9ef0bb54a3ae36a3fd1fbe4dfe5d9827ac4dbd1eee17fae0cc10f38ae457e27fe06b597c9349a1a472d6ea309890d690
- SSDEEP 786432:kXYWUc8xTj5FC8oj5FC8oT2XDaj5FC8oj5FC8dVIPchiTj5FC8oj5FC88Weo916z:Jc8xiDFIPchi7WdyRfOZL2X/8p01upI
- TLSH
  T1A068CF07FBADC13ADCEB90F4875F16927720A012A364C6613D6EC5143FB26E09AB67D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery evasion
- Loads dropped Dex/Jar
  Runs executable file dropped to the device during analysis.
  evasion
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Virtualization/Sandbox Evasion

System Checks

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasion

© 2018-2026

Terms | Privacy