Analysis
- user interaction
yes - max time kernel
111s - max time network
96s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
09/08/2026, 18:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
xere1 (1).apk
Resource
android-x86-arm-20260325-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
xere1 (1).apk
Resource
android-x64-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
xere1 (1).apk
Resource
android-x64-arm64-20260325-en
1 signatures
150 seconds
General
- Target xere1 (1).apk
- Size 2.4MB
- Sample260809-wq19lashqg
- SHA256 6a79d836194b04d55b724e51e5421fd10231300e8e95184a4335e28377838c45
- MD5 d23a1167539fb51e0be95d5fd71b9338
- SHA1 e7e8c658bd4c5391a8f30893d41c8a7bd61c8d54
- SHA512 e7d8c4eac4cba6bedfd50aaa7f0cc1863103ef0881dbf700e2882358ef369a6d85d660cf69f908c44d2b9214f1b33a65052d178782eed4bfc0e37439998a7f9a
- SSDEEP 24576:haH2dEuLQKjCHNywiD+5fHADjRnYOD5SmsxFHIWR534VNuXw:ha2yhtywiD+5fgDlnYhvog3hw
- TLSH T1CAB55B03B40E6F32C64E52B1C2D36755B335666B6E97AF4A65E84C9C7C832D6E0CD0AC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.questcheat.overlay
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.questcheat.overlay/files/adb_priv.key
- Size 1KB
- SHA256 0f751c191f6a180cd09e4b4c9885c9de890f12dfb6d4bd1cfea720cb3d06171e
- MD5 6c9af973780ff4dbfc06bf5c3da8997c
- SHA1 bfa3c315a9e30f9b8ee8c75bf686f0244774a750
- SHA512 73464422409240c0ed6c82eb6cf6677d957d564824071e655c720e135becf1f2634b6deeecaf632feed67d1a54973221e5c6fbe8fa132b01ddb1508e4fb36d4b
- TLSH T14D211724AAD3F0CBE263A7C5CD0624E53A9459EAF88C840B6D6BAD005FDCCD4A8B1020
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.questcheat.overlay/files/adb_pub.key
- Size 294B
- SHA256 abc864e67847b1c21dd19a594c110fcb2f4c8612e710fd6ac8ad55da5d1965f8
- MD5 c3882258b643af7a634d4353e05c611b
- SHA1 e156b72d9049aa392f0fbdd06193888c87732821
- SHA512 5ff74b49fcb5b7e8575b6f1cc58954f7e4ad553f0c65aef7f54b225bb50c00786316d2d78751b226560bb07a14f41fd15f9c9675d082ab132cefb412cc563993
- TLSH T12BE07D220D8DF96455836ACA2E0011EA3180B6BECC99345D043144468F5DF98A911A10
- MD5 SHA1 SHA512 TLSH