viruz.zip
- SHA256 d70099d8ff83ba275638b6d1c5d38ca1c7e7010ed04d19dee7f462df7b00431f
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
viruz.zip
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
viruz/my-talking-tom-my-horror-store-4.1.apk
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
viruz/prondao.my.pepee-1.0.apk
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
viruz/prondaomytiky.apk
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
viruz/three-viruses.zip
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
900 seconds
Behavioral task
behavioral6
Sample
three viruses/forsakenchinese_release.unsigned.apk
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
900 seconds
Behavioral task
behavioral7
Sample
three viruses/labubu_sprunki_free_release.unsigned.apk
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
900 seconds
Behavioral task
behavioral8
Sample
three viruses/touchgrasssimulator_release.unsigned.apk
Resource
android-x86-arm-20260325-en
android-9-x86
0 signatures
900 seconds
General
- Target viruz.zip
- Size 15.7MB
- Sample260809-tk5cystzex
- SHA256 d70099d8ff83ba275638b6d1c5d38ca1c7e7010ed04d19dee7f462df7b00431f
- MD5 80a86dfaed23c4fba541ff5f9d561050
- SHA1 2b8bdd8ac9cc5882a7448faaa920afe428759101
- SHA512 c10057d309fbbb7645942a5a650480bd926e57d198d4859063524318dbdb6eaa880c61e60f0752bff90b4ddae77b20edf1c8d42200225258c269362abb20be60
- SSDEEP 393216:+tgPw4CccZ1oSsYGLhG8UjKyGlG0x+DJYx1mvasZ+O:+kw4cOSkhRaOE0O2xeasZ+O
- TLSH T1A2F633D855FFB97B400719279C1BBD0557D222AE6DA02D9E38C3E3C2452D26BEC90B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Requests dangerous framework permissions 2 IoCs
description ioc Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE - Unsigned APK 4 IoCs
Checks for missing APK codesign signature.
resource unpack001/viruz/my-talking-tom-my-horror-store-4.1.apk unpack001/viruz/prondao.my.pepee-1.0.apk unpack001/viruz/prondaomytiky.apk unpack002/three viruses/touchgrasssimulator_release.unsigned.apk - Untrusted Codesign Signers 3 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/viruz/my-talking-tom-my-horror-store-4.1.apk unpack001/viruz/prondao.my.pepee-1.0.apk unpack001/viruz/prondaomytiky.apk
File Explorer
-
viruz.zip.zip 15.7MB
-
viruz/my-talking-tom-my-horror-store-4.1.apk.apk 3.2MB
-
viruz/prondao.my.pepee-1.0.apk.apk 8.1MB
-
viruz/prondaomytiky.apk.apk 2.5MB
-
viruz/three-viruses.zip.zip 2.0MB
-
three viruses/forsakenchinese_release.unsigned.apk.apk 1.1MB
-
three viruses/labubu_sprunki_free_release.unsigned.apk.apk 402KB
-
three viruses/touchgrasssimulator_release.unsigned.apk.apk 522KB
viruz/my-talking-tom-my-horror-store-4.1.apk
- SHA256 260a421c3c6b898744d72fd5793274c3f0ca39ea5cbe0e82cfc3347021c3c060
- MD5 1b9f3b37e74127aa9688819dc91a1d6a
- SHA1 ec61b201c6269ff7ac2140dd10a7178f596b88e9
- SHA512 8f8b23745dc9be5e4a973664a5f06753b5cc39725fce6e1e35b89288547e5036fcb80e5e26236810c0e01b2da8fa256dbe185c7e4712c23633327a48a3295d59
- SSDEEP 98304:z8wYkybpyj+C/lst9HnwbW0p9utOgXUU3n9e:QPbojJKnHwbTytOgXUU3nM
- TLSH T125F51298BF81D422F76AD83E486AE65DD3F1E5D4E846D0DF9081A20109B7E954B3F2F0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned APK
Checks for missing APK codesign signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
d58e919413c78c9834d320d0e315b67a66e676dabda661b45a6b63df8c9cfa90
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Subject
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Serial Number
93:6e:ac:be:07:f2:01:df
Issuer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Revocation Status
Not revoked
Timespan
Feb 29, 2008 - Jul 17, 2035
com.my.newproject6
.MainActivity
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
.MainActivity
android.intent.action.MAIN
.Pack2Activity
.Pack3Activity
.Pack4Activity
.DebugActivity
viruz/prondao.my.pepee-1.0.apk
- SHA256 e42e0162b0b17f5556b83f9584bfbca628bf3bf1111a07abcce215a163a883f6
- MD5 1c12f8c6350be5cc018fc4693d183fb2
- SHA1 57c60255b35f5502da610004bbc382e875fb84c2
- SHA512 545927a75b3a18068fef978ab981bfd44778f1b3227e04e628fac9f43c2b1afaa340124faa6b2b1468d7c4346bb722dd125c154f8aaae315e6370bc081874c30
- SSDEEP 196608:TyczVBV0SQufW6yW5Pa8KXJ3WmogfFhVQbx604a6Y:TbVBV0SQuKxXJmmpdMbx60yY
- TLSH T1AC8633C32BFEA7A7C266053788D76F0677D0839479805BCB0597E3E911662639C90B8F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned APK
Checks for missing APK codesign signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
311979ae6f2202f4a74ee7e39624a2a3db82a74f77f648df16c32164228c8020
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Subject
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Serial Number
93:6e:ac:be:07:f2:01:df
Issuer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Revocation Status
Not revoked
Timespan
Feb 29, 2008 - Jul 17, 2035
prondao.my.pepee
.MainActivity
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.AMBIENT_WALLPAPER
android.permission.BIND_WALLPAPER
android.permission.BIND_WALLPAPER_EFFECTS_GENERATION_SERVICE
android.permission.READ_WALLPAPER_INTERNAL
android.permission.MANAGE_WALLPAPER_EFFECTS_GENERATION
android.permission.SET_WALLPAPER
android.permission.SET_WALLPAPER_COMPONENT
android.permission.SET_WALLPAPER_DIM_AMOUNT
android.permission.SET_WALLPAPER_HINTS
.MainActivity
android.intent.action.MAIN
.DebugActivity
viruz/prondaomytiky.apk
- SHA256 8003117d0d949ec386599c9b8c7fff7a42aca752504812953c3b926e7a5c3165
- MD5 5ca9e22da3ab7a83e3f9e732b953f447
- SHA1 6e89ad8694c0afb56d3c0677469bda2d109c8ca0
- SHA512 8c050f45711dc177953af1c323086ff7e7e38ef5e273a683e634a6214b88a568bffcee5c5a7d38fd3867885e7511162cc3bc3f81edd046dcfc122e3127c37d70
- SSDEEP 49152:T7Z99hZFnucTqn0CWd5fz3FxIUqU62T37hu3bzM2XbURJ:T7zXT+0CWnB62hybzMybq
- TLSH T1CAC5338A5E442BB0E0DACD3176E6CBA0D3571EB1B06CCB59FD05FB4122B7891AF5710A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned APK
Checks for missing APK codesign signature.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
File Signature issue
Digest
a2310d76060e04a8a73a29f7d625f9489d95f751267cda10f7a8e01e487b45b6
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Subject
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Serial Number
93:6e:ac:be:07:f2:01:df
Issuer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
Revocation Status
Not revoked
Timespan
Feb 29, 2008 - Jul 17, 2035
prondao.my.honor.tiky
.MainActivity
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.AMBIENT_WALLPAPER
android.permission.BIND_QUICK_ACCESS_WALLET_SERVICE
android.permission.SET_WALLPAPER
android.permission.READ_WALLPAPER_INTERNAL
android.permission.MANAGE_WALLPAPER_EFFECTS_GENERATION
android.permission.BIND_WALLPAPER_EFFECTS_GENERATION_SERVICE
android.permission.BIND_WALLPAPER
android.permission.SET_WALLPAPER_HINTS
android.permission.SET_WALLPAPER_COMPONENT
android.permission.SET_WALLPAPER_DIM_AMOUNT
.MainActivity
android.intent.action.MAIN
.DebugActivity
viruz/three-viruses.zip
- SHA256 07b03b67af655383d72152db90fd8000ac977d2e1e9fb40e38abdd59746a5307
- MD5 8dd3a882715eb9180889a11f5d97c876
- SHA1 b243539f890f1633e43c0b063a5a879d07b25e36
- SHA512 e2a56c50feee7a03b352969c7c7a18c0e62b50b2536393fd7470db04758cef0cc779d89a4265c9f84082749818b46a18f3e74e9ef1c80705bcb7f5bc775d8a5a
- SSDEEP 49152:gX9t4DyRYSEbzvA+kO7n5/8uQO7fFVc8/oDRZ+frg1DI:gEDtbzoo5/7c8/sZ+ec
- TLSH T111A533E8E1FB5634C15714449C498B493BE1136B8F221D2F39C6A7EA456F3A33A80BF5
- MD5 SHA1 SHA512 SSDEEP TLSH
three viruses/forsakenchinese_release.unsigned.apk
- SHA256 5e02ac74699d0a0bf34477593205bc2203caf88c804afe31366b72c8a8fb236e
- MD5 d446e409872c56cba1a9ddde8944f3f1
- SHA1 23e00ef6af2e927000551c1da961e0526811096a
- SHA512 bafb9762bde2cf254e37629ad05f971b289f16cca71a563708dce9e7fc0a9a63e27e8ac9f6a473638df1b45069392b5efdc89be97ba3f65f0c9e35cbbbb25ac4
- SSDEEP 24576:rNatU/+W1YvnSbHMk9Vt9b6E/7qWsCUlON8+fRZRofQZUow2D2fghbI:rN1mMUSLHD7mE/mtl/+fdoiUWag9I
- TLSH T1224533E4E0D942B2C3373039E99D860C3FA31DE38F21578D2C85A79B456E1267ED6B46
- MD5 SHA1 SHA512 SSDEEP TLSH
com.roblox.forsaken.chinese.app
.MainActivity
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_CACHE_FILESYSTEM
.MainActivity
android.intent.action.MAIN
.DebugActivity
three viruses/labubu_sprunki_free_release.unsigned.apk
- SHA256 9b1f4ba90409759f595f6695dbd53f6e2b8cd63d72fc578e101fd5466d045a5a
- MD5 60b82bf48452a5cc166bedd33af56b5c
- SHA1 95e1388c1060b53b684b46e7eec31b4b8555b6be
- SHA512 dc46cd06d185638c9adda822861a5dd4f0263deefca1e9a8caf4ae72b5522ab6aff51527aa1a77d2b533996adf2b45844217fd58d61e0d1633a66d5b84b24277
- SSDEEP 12288:kdHSa9BJTbGvgqAAYmmoKyQZQ/omTwA2Y3XndPKbeMsb:kdP9BwvWAdmoKyQZUow2YHnyeMa
- TLSH T1009423011092CF3EE5B1B277481B071272E15E86DA8363E47146E7A3B562EEA7CD4BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
com.labubu.sprunki.app
.MainActivity
android.permission.ACCESS_CACHE_FILESYSTEM
android.permission.BRICK
.MainActivity
android.intent.action.MAIN
.DebugActivity
three viruses/touchgrasssimulator_release.unsigned.apk
- SHA256 d353ac857356f3803127e2e73e1781912f852600d54008f9ba696e4d52f6f4bb
- MD5 5af0b035739416ffa6862e636debc3b9
- SHA1 c9b16fe01df956723ef33738571e03894ba3b843
- SHA512 d556ee3d1a4b9e56d879fef0217bb9883bb241ec4f091ed615a9284d9612ffb943727dbbaaaa71393cd02895a13182114e48fea99f0fea72c968aefe1c063e98
- SSDEEP 12288:LddANGOf7sDT7ltMdr6G91JUFNUMqQGs3viBsiiLK2epV8sXxV2:LLAf7sYVeF7rMsiA48sXxV2
- TLSH T195B423B8F6F81428EA862532D855CEC196D026B333775E6F4577E0560889B393370FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned APK
Checks for missing APK codesign signature.
com.ragequitgamesreal.grasssimulator
.MainActivity
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.ACCESS_CACHE_FILESYSTEM
android.permission.BRICK
android.permission.ADD_TRUSTED_DISPLAY
android.permission.ADD_ALWAYS_UNLOCKED_DISPLAY
.MainActivity
android.intent.action.MAIN