486f342122fb87c1ca53399ac9e9a6e258653c373609cdf19ec4c7c2c7cadc77

Analysis

max time kernel
6s
max time network
152s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
11/08/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
v2.apk
Size 31.7MB
Sample260811-pg217sec48
SHA256 486f342122fb87c1ca53399ac9e9a6e258653c373609cdf19ec4c7c2c7cadc77
MD5 0678c2e3699a20fe2b07544186c1e493
SHA1 9f7b96597b4e59a644b083786e759650a299641f
SHA512 1977d5e22e7284b22881ab69600e686e8b933c709a848af54b2e1e30dce1840685940c459edc6a77b6f68b1697ec9a758ce42dedc8111dff74578443386f8ad3
SSDEEP 786432:MsTwlkuEAvsO1KuuP3iS2dJWPr/WJcRv/VujBPW6:dTckuEAg/iB0P5F6BPW6
TLSH
T15C772387FB48EE6BC0F78331CA7A521231574C6087C392B75D1972783AB7AD44B49AC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery impact

Malware Config

Signatures

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.ibopro.ultra

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.ibopro.ultra

com.ibopro.ultra
1⤵
- Queries information about active data network
- Uses Crypto APIs (Might try to encrypt user data)
PID:4808

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

MTV.realm

Path /data/data/com.ibopro.ultra/files/MTV.realm
Size 16KB
SHA256 b48dff0aff2702a5c69d5d05efebac6efa553b89616fa94de4518aa481cf4a8b
MD5 247827cf189576a04acea86832a7c0b3
SHA1 3906919f9e9952f8e357aa556f0ddd6a4029e06c
SHA512 5faf4145065c681bfc3f18681e9e8f3de29119486583561a3646a50bce703614bb0032df66c4948c90251b8fb3896a63373db7fa9148eafcc087e85a7fb586de
SSDEEP 3:Yl//:Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MTV.realm.lock

Path /data/data/com.ibopro.ultra/files/MTV.realm.lock
Size 1KB
SHA256 7081ba3d8887be22551f56b5f50da675bda7dd02f40e9fcb150ac84fccbe387f
MD5 c3e4eefedd55eae4334456daa4aa0ad7
SHA1 ba9abe2d4d40bbd94530564b6eb178ec02a47204
SHA512 a302516427a81e59fe955f4316fd56b8e5207542b1abdd7eb3fc2e9dbc669849dce90d12d9160b59d45af233e63e2156f3a3f1e7807b7ae1b1225a94d472cea3
MD5 SHA1 SHA512

Submit Download

httpgby78ccgetphpusernameTESTEpasswordTESTEtypem3u_plusoutputts.m3u (deleted)

Path /storage/emulated/0/Android/data/com.ibopro.ultra/files/httpgby78ccgetphpusernameTESTEpasswordTESTEtypem3u_plusoutputts.m3u (deleted)
Size 1KB
SHA256 6d3c241581f462bfec762c9d66fc79a21b0f63124a26290163bf6188258dc6fe
MD5 8463b48cc10314afc61c2529692ee15f
SHA1 78d9f36b785221961cf035867ea00358415a3f51
SHA512 8c818f4540ea901fd996874993973597759abf91c0ab9c19d8edfeaf6bd458f6113f84df14ed5dbb7e3d963bfabb1727a1d090d9b6f557358eabd5c43156a46d
TLSH
T12831BD3B8475384CE13DB82BF5C66AB815CA43171D6209AEE2599BE783814CE137C6E5
MD5 SHA1 SHA512 TLSH

Submit Download

log.txt

Path /storage/emulated/0/Android/data/com.ibopro.ultra/files/log.txt
Size 242KB
SHA256 0b277a148cf8235364e8f5fa8a05823067c0fd238f0e6dda5a4128318c9eabae
MD5 e7f8a1979662293462612993cc4dc933
SHA1 babd47e6aaa957c6a74b8694d4372fa3f4e0306c
SHA512 0069b5562c346833cd4bd0d3b453f8638c77c8f98d6157ef3e9647be81c3f89d197aad329c86a997ac67b1657ca1f5be5df9b966aab05ae9e5b3f8330fec429f
SSDEEP 6144:ez60ugwXHQJaHceQoLiorvZewqmVRdTl7kxp2mv:ez6JgqH7HclsBrv3TjdTNM2mv
TLSH
T19F345DBB7F822EDDB4495E439EE82B245F05F292546A048B83881F8934617EF70DC56F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads