Analysis

  • max time kernel
    46s
  • max time network
    150s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    10/08/2026, 18:15

General

  • Target
    alva.apk
  • Size 5.4MB
  • Sample260810-wv39ravcmc
  • SHA256 5eb21bc7936e7d5dc0dd2ce2aad19713f1745b992b0badd46b637ac19809c569
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • co.median.android.nwyjrw
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5060

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        INSTALLATION

        • Path /data/data/co.median.android.nwyjrw/files/INSTALLATION
        • Size 36B
        • SHA256 6cfddfb460fdc2433e9e915ea37d2eaa70dc2aedc22ad0d12d5950a02628dfa8
        • MD5 SHA1 SHA512

        regexintext.json

        • Path /data/data/co.median.android.nwyjrw/files/gonative-config/regexintext.json
        • Size 1KB
        • SHA256 3d0d4ad4c04126599e511d9ebf91996578967051fc9bc89479e5aa52092b4256
        • MD5 SHA1 SHA512 TLSH

        splashpage.json

        • Path /data/data/co.median.android.nwyjrw/files/gonative-config/splashpage.json
        • Size 3KB
        • SHA256 373f12295981a5d29f5f9aee1a8030c86a8826bb95f6e9a92cccff86a79236a2
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/co.median.android.nwyjrw/files/profileInstalled
        • Size 24B
        • SHA256 e5946cc624391e8d5666e2223a23d63eaa0ffe9fdb6d2ee7fa0e18f8d8a9c256
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/co.median.android.nwyjrw/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 6efc2f3a486fef30a6c912c5c9457989abd3eb74ca7015d018ae90b3ff5c62a6
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/co.median.android.nwyjrw/primary.prof
        • Size 3KB
        • SHA256 7fc78730ea5c3022b22a389ae9ecca28f3d176c32793ca4d8eb8047f60ead4d4
        • MD5 SHA1 SHA512 TLSH

        primary.prof

        • Path /data/misc/profiles/cur/0/co.median.android.nwyjrw/primary.prof
        • Size 7KB
        • SHA256 8def9cd1865ec7f372ce45b5102837bf9ec7364695305217c93754393fbb6e3d
        • MD5 SHA1 SHA512 SSDEEP TLSH