Analysis

  • geolocation tags

    eueuropelondonukunited-kingdom
  • max time kernel
    47s
  • max time network
    33s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    08/08/2026, 03:29

General

  • Target
    Twilight-Pro-v14.25_build_606-Mod.apk
  • Size 12.9MB
  • Sample260808-d2d94asvfv
  • SHA256 29d9ddbd5dcc6c49bf61e5132ff6e7279c536c19aca14a1b37c9b22d584cefb4
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Queries information about active data network 1 TTPs 1 IoCs
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

Processes

  • com.urbandroid.lux
    1⤵
    • Queries information about active data network
    • Schedules tasks to execute at a specified time
    PID:3377
  • com.urbandroid.lux:background
    1⤵
      PID:3415

    Network

          MITRE ATT&CK Mobile v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          logbuffer_com.urbandroid.lux:background

          • Path /data/data/com.urbandroid.lux/cache/logbuffer_com.urbandroid.lux:background
          • Size 558KB
          • SHA256 57b978a20e9233867ce9869076a76d76b4976ca41511f811877c09e3d2fe6d44
          • MD5 SHA1 SHA512 SSDEEP TLSH

          base.3415.tmp

          • Path /data/data/com.urbandroid.lux/cache/oat_primary/x86_64/base.3415.tmp
          • Size 48KB
          • SHA256 401fe5c405345bf184f909ecf28d59eb2d20dfdf70ecdbb2556c33a386e6cb2c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          profileInstalled

          • Path /data/data/com.urbandroid.lux/files/profileInstalled
          • Size 24B
          • SHA256 9ecab314ce8aaf021d24ea625d9efcd959f234ff1eadc373543ef8271ef3fabe
          • MD5 SHA1 SHA512

          profileinstaller_profileWrittenFor_lastUpdateTime.dat

          • Path /data/data/com.urbandroid.lux/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
          • Size 8B
          • SHA256 009b7f8e34637d83235e200be39feef5215b2420f410a85ab003dbbf6d55906e
          • MD5 SHA1 SHA512

          primary.prof

          • Path /data/misc/profiles/cur/0/com.urbandroid.lux/primary.prof
          • Size 3KB
          • SHA256 e58d077e1799932dfdfe1e504b59c2ca168aba46d581c8267ab710869a5fb74a
          • MD5 SHA1 SHA512 TLSH