6d1dbe2bd2637e438a911dcbab32d3625a448e9c5e0931f0ebf9257c4df7175c

Analysis

max time kernel
46s
max time network
152s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
09/08/2026, 03:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
6d1dbe2bd2637e438a911dcbab32d3625a448e9c5e0931f0ebf9257c4df7175c.apk
Size 4.6MB
Sample260809-dl2epagp6t
SHA256 6d1dbe2bd2637e438a911dcbab32d3625a448e9c5e0931f0ebf9257c4df7175c
MD5 9147e0e713076c4f276bfdabbe0b7360
SHA1 73b8e438c6be92843be9a955eaef3343dfdbd442
SHA512 c62d80bbc8434c8d3dadb089add372f7ec3f5841f88317370865859de721c7a1ccb0facad0e5d84619ec76a6115effa9af0ea1447ec2a5a43a650e3fd39d6ed4
SSDEEP 98304:q8eW1cyZAUsg3Mq3KSH+XBtmntgwQnaL130PO1Tt0rZM15:q84KFB8q3KY+RIgWhlr
TLSH
T11626E089F7589E2FC477503209AA5235525B4D12CE879B83A95C371C38BB6E80F4EBCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion

Malware Config

Signatures

Checks the application is allowed to request package installs through the package installer 1 TTPs 1 IoCs

Checks the application is allowed to install additional applications (Might try to install applications from unknown sources).

defense_evasion

Code Signing Policy Modification

T1632.001

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.canRequestPackageInstalls	com.mtf.app

com.mtf.app
1⤵
- Checks the application is allowed to request package installs through the package installer
PID:5086

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1632

Code Signing Policy Modification

T1632.001

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.mtf.app/files/profileInstalled
Size 24B
SHA256 c6e929eba61b49c0f0e2b14fe590c2c0c59a47068ddc11cd22dcb898f8df9ff0
MD5 d7a10ce3ed9e565d73eaf5faa8b474ce
SHA1 cef9be092426e1df2b0a2580f18cc50e2214de9e
SHA512 ebe308f97e8be3dbaf886c7121b3cdf354c3e5cf7f7d57dc3723a6b730bd2d6fb4eed57af666d053b1036852632843beed44c0df9fc782741c01e09ae0e339cb
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.mtf.app/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 388bdbf33a049a6dd75bf8e88140eb2b709815e779f13ae205ccd277acabba8f
MD5 651ae22a3232decb2802ea5ab5373866
SHA1 dff21ed3f2970b71aaa85472b6394c16b7e16b2d
SHA512 c02a32d34092c3346bc6845dada63432fbb0f96c5c3fe11338226c45c6f8c8b6db7412fb2096c2fc56d2f5a49a526794e2e8eeeb73e4827be6eb1c554a643ef7
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mtf.app/primary.prof
Size 2KB
SHA256 0c0a616a09c053d14872a09718c7c5d61e9d54b2cf8fa8f8a01454a0060442b6
MD5 22e1a36677fb7000550cdf85bc62aa82
SHA1 006b084b3027f0d8618c2ccc0b60b18b100d0d44
SHA512 fa0f54afc14482272173b8b793dd8fbc1ab19641d12e54f9c0d9fcb77765305a6b7dbbc9d31ae9f8bd35dcb3c55d0433ca5359a0a9b18e14624c553c9470f5ad
TLSH
T1E3514D6FB7E1B6965C669C1C7E6998C5367284F05F0B0DB8572CD2839300D3C746F652
MD5 SHA1 SHA512 TLSH

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.mtf.app/primary.prof
Size 8KB
SHA256 6b9ae6765ee2e9a696748daf641327456dd0463db396439b310a509563713820
MD5 55ed083af492499048f81ad98274b4fe
SHA1 aefa8c7a99b89464b8dab0597eb5aaf302af4414
SHA512 0fd02cca7643f848fafaf614b7718e1791ada8652982566eaba3e2ca249a43b9527d402ec6e6f12dcade7d4f7c541ac325c13202f9b3ef621361b035fb618d50
SSDEEP 192:zeIZBnGc5c8R0QIsmRVlTWI6i92K9ofTsHo1hJ:zeWBGc5fRYsF5K9ofTsgj
TLSH
T15602BFD7982B32EBDF32B604B9C19118986DD812BE8D0D9285EC665F09C4F8575C1634
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads