Overview

overview

7

Static

static

6

base.apk

android-9-x86

7

base.apk

android-10-x64

7

base.apk

android-11-x64

7

split_conf...8a.jar

windows10-2004-x64

1

split_conf...8a.jar

windows11-ltsc_2024-x64

1

split_config.en.jar

windows10-2004-x64

1

split_config.en.jar

windows11-ltsc_2024-x64

1

split_config.es.jar

windows10-2004-x64

1

split_config.es.jar

windows11-ltsc_2024-x64

1

split_conf...pi.jar

windows10-2004-x64

1

split_conf...pi.jar

windows11-ltsc_2024-x64

1

Analysis

  • max time kernel
    5s
  • max time network
    152s
  • platform
    android-9_x86
  • resource
    android-x86-arm-20260325-en
  • resource tags

    arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
  • submitted
    08/08/2026, 02:50

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    base.apk
  • Size 70.4MB
  • Sample260808-db2mps1yfx
  • SHA256 db18d04340cda2157b5bb5fee85b3f68c3d73917e43847af95b6f788f892c6d3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
evasion

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 26 IoCs

    Runs executable file dropped to the device during analysis.

    evasion

Processes

  • com.rimac.rimac_surrogas
    1⤵
    • Loads dropped Dex/Jar
    PID:4308
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.rimac.rimac_surrogas/code_cache/.     ​ --output-vdex-fd=43 --oat-fd=44 --oat-location=/data/data/com.rimac.rimac_surrogas/code_cache/oat/x86/.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4334
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.rimac.rimac_surrogas/code_cache/.      --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.rimac.rimac_surrogas/code_cache/oat/x86/.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4358
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.rimac.rimac_surrogas/.       --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.rimac.rimac_surrogas/oat/x86/.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4381
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.rimac.rimac_surrogas/.      --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.rimac.rimac_surrogas/oat/x86/.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4404
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.rimac.rimac_surrogas/cache/.       --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.rimac.rimac_surrogas/cache/oat/x86/.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4428
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.rimac.rimac_surrogas/cache/.      --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.rimac.rimac_surrogas/cache/oat/x86/.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4452
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.rimac.rimac_surrogas/code_cache/.dJaFId --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.rimac.rimac_surrogas/code_cache/oat/x86/.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4484
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.rimac.rimac_surrogas/code_cache/.HDcgv --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.rimac.rimac_surrogas/code_cache/oat/x86/.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4507
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.rimac.rimac_surrogas/.NgttFM --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.rimac.rimac_surrogas/oat/x86/.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4530
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.rimac.rimac_surrogas/.YuGvW --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.rimac.rimac_surrogas/oat/x86/.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4553
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.rimac.rimac_surrogas/cache/.FQOJex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.rimac.rimac_surrogas/cache/oat/x86/.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4576
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.rimac.rimac_surrogas/cache/.RIoBG --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/user/0/com.rimac.rimac_surrogas/cache/oat/x86/.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4599

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        .     ​
        • Path /data/data/com.rimac.rimac_surrogas/code_cache/.     ​
        • Size 23KB
        • SHA256 6d404c65efdea3fd569d8f26fcfb5d5e63bd066cc7e8706f332f2c5539f2e373
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        .     
        • Path /data/data/com.rimac.rimac_surrogas/code_cache/.     
        • Size 328KB
        • SHA256 53236911a182990149cadabc9f0c1b1be89cba65a56edfa8680f38312ffc2173
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Anonymous-DexFile@0xc43c6000-0xc445d800
        • Path Anonymous-DexFile@0xc43c6000-0xc445d800
        • Size 606KB
        • SHA256 fca4bd18cc45567f77b28c123d93baa227204a3a260a7e0b32e90b584bc4c771
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download

        Anonymous-DexFile@0xe1e02000-0xe1e0cbdc
        • Path Anonymous-DexFile@0xe1e02000-0xe1e0cbdc
        • Size 42KB
        • SHA256 365b13c2a86ec8e7e6721b3867d449f1a944574097725314cb4a5c27e2ffe4f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Download