f1c7bec48b984fbf367db1431717a2c2d035c297c196c278bf981d21a88f2d43

Resubmissions

08/08/2026, 18:38

260808-w969yssfqf7

08/08/2026, 18:34

260808-w7snsacj517

Analysis

user interaction
yes
max time kernel
529s
max time network
902s
platform
android-9_x86
resource
android-x86-arm-20260325-en
resource tags

arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system
submitted
08/08/2026, 18:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fixed(SAFE)apk.exe (1.0).apk
Size 46.5MB
Sample260808-w969yssfqf
SHA256 f1c7bec48b984fbf367db1431717a2c2d035c297c196c278bf981d21a88f2d43
MD5 01d2685aff5c5543d9e0ce1101403622
SHA1 d4456ea1c049db9c65a86d712e94e6d8d8231089
SHA512 febbbad1924cef7aa4870e312e028f3ff863c1978c88802421c62fe20ce52ba30eb7446299786ca46a69a6cbd8a67bff4d1775f14d4eae357a3f1ac8414f6a1b
SSDEEP 786432:CMB4wdbliQ4VcTQlZB9OUWPXZGNP11z5CgWTAaKY4XuVdGMqhN1gE+yvtdvfTS:CMB4gYVlX9OUWPY/1UcY4MOhTf+yvXf2
TLSH
T185B73342AB84E02AFC772336C4BB4621E14B4D0A4E86DBD355547B085EBB7D02F5EACD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

banker defense_evasion discovery

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 2 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS

Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs

defense_evasion

User Evasion

T1628.002

description	ioc	Process
Intent action	android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	com.apk.exe

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.apk.exe

com.apk.exe
1⤵
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Checks CPU information
PID:4275
- logcat -c
  2⤵
  PID:4303

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1628

User Evasion

T1628.002

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

framework-res.apk

Path /data/data/com.apk.exe/cache/framework-res.apk
Size 41.5MB
SHA256 457113929a3deef64e2da697378f02ac7abe09287e060e43f7eb6957f716589f
MD5 fcba4c46df565773e5153a553cd2c636
SHA1 5c66f11b1ed9df443e0f969148cc923ff22060d7
SHA512 65ffb0c3a154f7ea92ed33e1d1b96248153639faaef6630eaa23595e60191b9fa79a418f1918bc732cd5860863f845b6d7d1a8b07eb57a850bebec867a287ff3
SSDEEP 393216:fmiKYRg44B/XOmOc+orHEXSmeqX9HyJigLyCr:+WM/OnorHEimeK9HyJpr
TLSH
T194979D8563ACE92CC87358328D1C163B57593D26EA42D397C939765C6CF7DE08E08BE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download