Overview
overview
7Static
static
6base.apk
android-9-x86
7base.apk
android-10-x64
7base.apk
android-11-x64
7split_conf...8a.jar
windows10-2004-x64
1split_conf...8a.jar
windows11-ltsc_2024-x64
1split_config.en.jar
windows10-2004-x64
1split_config.en.jar
windows11-ltsc_2024-x64
1split_config.es.jar
windows10-2004-x64
1split_config.es.jar
windows11-ltsc_2024-x64
1split_conf...pi.jar
windows10-2004-x64
1split_conf...pi.jar
windows11-ltsc_2024-x64
1Analysis
- max time kernel
1s - max time network
152s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
08/08/2026, 02:50
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
base.apk
Resource
android-x86-arm-20260325-en
android-9-x86
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
base.apk
Resource
android-x64-20260325-en
android-10-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
base.apk
Resource
android-x64-arm64-20260325-en
android-11-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
split_config.arm64_v8a.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
split_config.arm64_v8a.jar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
split_config.en.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
split_config.en.jar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
split_config.es.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
split_config.es.jar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
split_config.xxhdpi.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
split_config.xxhdpi.jar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target base.apk
- Size 70.4MB
- Sample260808-db2mps1yfx
- SHA256 db18d04340cda2157b5bb5fee85b3f68c3d73917e43847af95b6f788f892c6d3
- MD5 ee856817e65635959056f01ed78a0d80
- SHA1 5eeccb9bb600397c7fb9f65341dcadc91fab1ec3
- SHA512 24884e96e4254b8ffa52aab709aa6ba8132462344b7a9672276c519846e2f0ccf378a359a98b0b9e1bb8d17ef5e33a75f678ae36e022ab2941e8d10cfeabaf7a
- SSDEEP 1572864:DCU9rEx3EdKwFmLGn2L8WjDyGXuel3aW3hcFkFcFnFYFhFMFcFNF+FEFuF2FhFqU:DCUlE52KzLG2JjDvXuep3hcS6tSz6iHJ
- TLSH T17FF7339FE76608DDCEB548F04D3D82A24A625D592443BB3B352473583D332986EACFE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 16 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4889 com.rimac.rimac_surrogas /system_ext/framework/androidx.window.sidecar.jar 4889 com.rimac.rimac_surrogas /data/user/0/com.rimac.rimac_surrogas/[email protected] 4889 com.rimac.rimac_surrogas /data/user/0/com.rimac.rimac_surrogas/[email protected] 4889 com.rimac.rimac_surrogas /data/data/com.rimac.rimac_surrogas/code_cache/. 4889 com.rimac.rimac_surrogas /data/data/com.rimac.rimac_surrogas/code_cache/. 4889 com.rimac.rimac_surrogas /data/data/com.rimac.rimac_surrogas/. 4889 com.rimac.rimac_surrogas /data/data/com.rimac.rimac_surrogas/. 4889 com.rimac.rimac_surrogas /data/user/0/com.rimac.rimac_surrogas/cache/. 4889 com.rimac.rimac_surrogas /data/user/0/com.rimac.rimac_surrogas/cache/. 4889 com.rimac.rimac_surrogas /data/data/com.rimac.rimac_surrogas/code_cache/.CCvcyW 4889 com.rimac.rimac_surrogas /data/data/com.rimac.rimac_surrogas/code_cache/.ofPoH 4889 com.rimac.rimac_surrogas /data/data/com.rimac.rimac_surrogas/.jeWMIn 4889 com.rimac.rimac_surrogas /data/data/com.rimac.rimac_surrogas/.WNNgf 4889 com.rimac.rimac_surrogas /data/user/0/com.rimac.rimac_surrogas/cache/.NFYmre 4889 com.rimac.rimac_surrogas /data/user/0/com.rimac.rimac_surrogas/cache/.fVfXU 4889 com.rimac.rimac_surrogas
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.rimac.rimac_surrogas/code_cache/.
- Size 328KB
- SHA256 53236911a182990149cadabc9f0c1b1be89cba65a56edfa8680f38312ffc2173
- MD5 b4da88f8c18335b1c1ed35868c296fe2
- SHA1 3643280f038499b1b8eab495297c2b5088b9faea
- SHA512 f94aa7615871de18ee2ac0e397852d3f44dbf6b200a8a25fe5b1753666ed320b95e2eb4fbbe611679a1576656821fca77e404833d978bc79ab6b01df27c33687
- SSDEEP 6144:BLcZ0Vejhpo/iyS1YbXcgDPmUk8gD239D9b5yQqt1tXyGDggh0D85HFTrd+CdiOt:BLcZ0wjs/hbzcgbk8HRb8HXyGDggNNdj
- TLSH T10E64234B8B47713BC679D4AC057B882C1A83B6454A770E32E7E6769CE3DDC80B95280F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.rimac.rimac_surrogas/code_cache/.
- Size 23KB
- SHA256 6d404c65efdea3fd569d8f26fcfb5d5e63bd066cc7e8706f332f2c5539f2e373
- MD5 d5683723029681c58ceb7c7753e63b6b
- SHA1 834b468543d23621aeb40e4d527afa50cec93933
- SHA512 ec1eed94a0142b09360617b3dbc62601e19d18678357c9e0bb39a7588e99374293a2fb4e32fcd4663922336387cab82b12d256d5c3c673b5d581b4614fd7007f
- SSDEEP 384:KaHOYs+0+8ttqck5OX5nPeow+3L6iY+pVyvEPnxi713Oz00V/MO24tz5Tadk7FR8:KSOYZ8tHHnw+3LtFiE/47GheO2wxuaFQ
- TLSH T158B2E1AB3C2D56E985E8543D1A983177E2D60DEC8DA546394B23373DBB78825E0C061F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.rimac.rimac_surrogas/oat/x86_64/[email protected]
- Size 957B
- SHA256 827600d475b7d155a53dd1eea33a90861dd5cf74f22389db2f0d418ad108c4bb
- MD5 3b57e42e57b37433e72b4bdc80dc4e79
- SHA1 36f4f2efcb3de16e9bade8dca3f13de90452eb32
- SHA512 b73422843760ca794450c8ff146e589345c7dc447a42c4ed909254334a48de9cda5ddec009d8dbc973a70acd521a95d3649bf88f34c93dc3274324ec4f4051a7
- TLSH T1AE117F651ACF901D87C725945B3D6153FAC0394184C48A64ADA808A9BF05FB4B92A93E
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.rimac.rimac_surrogas/oat/x86_64/[email protected]
- Size 958B
- SHA256 63beb51413534970869b1dde78efa8e2f7595639ca42e8a9edf720c62efed7af
- MD5 dcc2038281e5a61511b6f7a3cbc7f3eb
- SHA1 c5e2a3cfee6bb6f72005d094509746f179d83a12
- SHA512 b6ab8136ab959f1e10294b032ebaf33b17630371c4d1c02a21086331c5481b19fbb7a3715353d5a3e1c31adb3cf790ba07d4653131690cbf129af321d4f4eb19
- TLSH T10611AF651ACF800D87C721946B3D6153FAC0394184C48A61ACA80CE9BF05FB4BD2A92E
- MD5 SHA1 SHA512 TLSH
- Path /data/user/0/com.rimac.rimac_surrogas/[email protected]
- Size 42KB
- SHA256 365b13c2a86ec8e7e6721b3867d449f1a944574097725314cb4a5c27e2ffe4f1
- MD5 8cfd91aa1357134e8558698583cc2c4c
- SHA1 ee42011d35185b01ece0b75811571fc76c14c4df
- SHA512 808ee35e5e2bcc4d71f622e5c6426eb10957b37aa6848c7506b6d5b41d4f707423445bf006779b0d83c847956bfb59f78203ee40e028103ca78875d23cc10b1a
- SSDEEP 768:taCBYF4TJm1K5/j/0F5wZ3DQIRrej1kO8WGDDHOYykpG3xVxV8T32lSBHnO1Jkw:tTBYFGJmw5/Afp3ED2P+w
- TLSH T12C132A8E50E03B71EE8E9574143BDFE1DE62ED38B50277114906AE10CDEE0679F2EA85
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/user/0/com.rimac.rimac_surrogas/[email protected]
- Size 606KB
- SHA256 fca4bd18cc45567f77b28c123d93baa227204a3a260a7e0b32e90b584bc4c771
- MD5 37d9900a20f5c0eb2d67702e65ab5181
- SHA1 5c5ef479ff01726e9f65846fc6bfa1dfcfa5e0fc
- SHA512 f270297835b31f4bb5d7de9e7762e6213bc0d247fd2f07570f7c843faaea30af65b79f15d1fe94708528a2f9f6ed40f2ce7c5eea27161a8edc55674790ae4132
- SSDEEP 12288:gsDOS3p4msygmBrTSgSZ0s5MGJr0CPUYt4/0woaag3Aybg3uegJ:gsOS3qmrmi6uG9g3rbg+1
- TLSH T1FFD4BF13F852DF3BF56B683615A783E61325D2AC51A2436785CECBA32CC97850BF4B48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /system_ext/framework/androidx.window.sidecar.jar
- Size 12KB
- SHA256 bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
- MD5 bdf3529e80318eb14e53a5bf3720c10d
- SHA1 25c9ace4b1af6e80ebb2572345972c56505969ba
- SHA512 48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b
- SSDEEP 384:6BDL3KyMB6PluKnxH1ybbC0t7dvBvi22OUHpR1H:C/8B6PluKXybbrZvBvi22OUHpRl
- TLSH T17D42C65B72100D27DAFED7BF696B074B4A388285A683176E1A14D1807DC23C7968F3DD
- MD5 SHA1 SHA512 SSDEEP TLSH