Analysis
- max time kernel
6s - max time network
154s - platform
android-14_x64 - resource
android-34-x64-arm64-20260325.1-en - resource tags
arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system - submitted
10/08/2026, 17:35
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ntm2616.apk
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ntm2616.apk
Resource
android-34-x64-arm64-20260325.1-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
ntm2616.apk
Resource
android-35-x64-arm64-20260325-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
ntm2616.apk
Resource
ubuntu2204-amd64-20260127-en
0 signatures
150 seconds
General
- Target ntm2616.apk
- Size 121.6MB
- Sample260810-v6aadayzgv
- SHA256 cf15642a46d5213fcce8c760017993c1cb280d8b5c973c09a923175b4e627d98
- MD5 5c9472ef94ca200d48dbbd92f29ff1df
- SHA1 2bc2f31bb1a3d66628648e18f55ed69280928957
- SHA512 09653d33ac4b07d075730addcdb3b5d01ec6ad91b8a676329338816554b2f332bb240ae6d6e45b87b3c54a39dbb40658399c112fc5e950aed711c6d4f6ce610c
- SSDEEP 3145728:W5gzTPeZJkuGeuqt/0OJMB4yI2xYbmOHc8MQYbsyYjG:Kg/eZeuGeuqDvyI2xE/EiG
- TLSH T1AF5833D1E1AC791DD8BA70B653770F5422ED8C1C97E2C58BA5A8333D48B7A91DB1038B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 18 raw.githubusercontent.com 16 raw.githubusercontent.com 17 raw.githubusercontent.com - Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.toncho.nuclearthrone
Processes
Network
MITRE ATT&CK Enterprise v16
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/com.toncho.nuclearthrone/cache/oat_primary/x86_64/base.4454.tmp
- Size 72KB
- SHA256 4ef1b6da091dcad582185631dabdb7e08f394faf09a8906acdb5cfe0dcd32dcc
- MD5 4ff9ae4ff5c4ea59651a812f6c7ae22f
- SHA1 12942447fbbdb8794135ff15f8ccfd57b3b51a9a
- SHA512 e82028b76f236d55c31dd5db065e677ed4c67bbde0bde4c8eee0c2a21d0f65a32f747ddc5ca620dbbef9a1f23509c65254e2152aa36110e9f022ad958712d5e5
- SSDEEP 1536:UVC3liDIFPMcVZEI9Wh3AhUFzpdj/Hi/:UVUcD2PMcUaS3wWpBa/
- TLSH T145734A9FF5E340D1C0EA7DF6DB8656DCEA6B803425562D1454B2B33EA432F00EBA4B94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /storage/emulated/0/games/com.toncho.nuclearthrone/files/configs.ini
- Size 64B
- SHA256 1aab06ce71957383f16c90775bab7ff6a36ce610c0764b32a0e430be1693daf7
- MD5 82e5036102f1567df343d329006b9705
- SHA1 6277cd4157bf3e577c747e2392c0ea77e3337edc
- SHA512 d64e097dca82f177d00cebb43fd98d4ba7e2e2def3677ebc7a713c2e3725b6a0175fa30574f59042c197c934c8a3eb6138702e31cd1d409542c1f55dbc519d8c
- TLSH T11BA0029F1E018254D1769D5B0F013660385ABB8DC9C1C40190D6C507998A5F4D24F080
- MD5 SHA1 SHA512 TLSH