Analysis

  • max time kernel
    6s
  • max time network
    154s
  • platform
    android-14_x64
  • resource
    android-34-x64-arm64-20260325.1-en
  • resource tags

    arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
  • submitted
    10/08/2026, 17:35

General

  • Target
    ntm2616.apk
  • Size 121.6MB
  • Sample260810-v6aadayzgv
  • SHA256 cf15642a46d5213fcce8c760017993c1cb280d8b5c973c09a923175b4e627d98
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

Processes

  • com.toncho.nuclearthrone
    1⤵
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4454

Network

        MITRE ATT&CK Enterprise v16

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        base.4454.tmp

        • Path /data/user/0/com.toncho.nuclearthrone/cache/oat_primary/x86_64/base.4454.tmp
        • Size 72KB
        • SHA256 4ef1b6da091dcad582185631dabdb7e08f394faf09a8906acdb5cfe0dcd32dcc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        configs.ini

        • Path /storage/emulated/0/games/com.toncho.nuclearthrone/files/configs.ini
        • Size 64B
        • SHA256 1aab06ce71957383f16c90775bab7ff6a36ce610c0764b32a0e430be1693daf7
        • MD5 SHA1 SHA512 TLSH