Analysis
- max time kernel
46s - max time network
903s - platform
android-15_x64 - resource
android-35-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system - submitted
13/08/2026, 06:22
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
MT2.26.8.apk
Resource
android-35-x64-arm64-20260325-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
filetransfer.apk
Resource
android-35-x64-arm64-20260325-en
0 signatures
900 seconds
General
- Target MT2.26.8.apk
- Size 30.6MB
- Sample260813-g5c3zstdnc
- SHA256 e739b94ee11b420479b1c57237bb5cda796fccbaf5203b065662acd7355aba80
- MD5 c1bde7afe300976812acfaee5d57cf69
- SHA1 21c6581e42c99485f987300df60117943a7d0768
- SHA512 dd4aeda7d0c8a9a19884d29a128d5e6e9857bf3262cab4f96485c00b5c1b2892d66d66032ccff840df4e7a03891598b4da67e46d28032ccfbf11d1468cec9da4
- SSDEEP 786432:B+TpuNw1QsM+o4l4OuHChnPOv/pIFopydG1JvEUJxlZKgs+VE:B+uNw10+VKOZnPOvBIFYz15NxqgscE
- TLSH T1736723A2238854AEC5365176CC4A263B3AAB4CBD6767531315543B3E38F35F84F2DAC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo bin.mt.plus
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/bin.mt.plus/cache/oat_primary/x86_64/base.3266.tmp
- Size 377KB
- SHA256 a41e876f8504eab3e6ef0306e714b4790977ea560d55375803ebbb684c87140f
- MD5 5ed53b70fba6e3f135ec0d3efa810d21
- SHA1 885b3fdb1f3cf9ff26f758db3833d80f16420fcd
- SHA512 cf6fd790df71f7204375839356b200675eee5e2f899e3f8420c7dd68fe94e567f6c39b14436d5966cde988fba32844197c08b2324c97cc20eec8f55a6b1c9b90
- SSDEEP 6144:1dyYKHAWVFyJ03PQGlYXNf7sIMwcZg+bYGvMcmsqX/U7fiCs:1tKfsh+eqssfzs
- TLSH T139842B9FFA639011C1EBAEF79B8646ECF92DC015134B290494A1777EA427F14E760FA0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/bin.mt.plus/databases/exoplayer_internal.db
- Size 32KB
- SHA256 e095f12629f822125c13068f0c7d261657ec95292f66aa00fe7fec1b9a4b47ca
- MD5 45d9a4a28a0cea17402396f92f7a05ae
- SHA1 64be18450d94f0a17f0eb823344cf339442ce497
- SHA512 c8c26fa032e6f1f7c51a4e891a241d143e900f3acf1a8da859aa7a476096e72413ff55e16dad0d8b62ac7dc75395bd5a6de4ff7b346c1d694d437d99da0ebe05
- SSDEEP 24:TLYw8/iw8/Tw8/8FeZEvw8/tKrw8/xdNNe9Oy9vGoGIVyteGSZKVx:TsViVTVUKEvVt0VxdreooGEwSQ
- TLSH T197E2028E1F282372C0F90271B5C566A23EAC472F6711C20BF8D064576DC629E715289D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/bin.mt.plus/databases/exoplayer_internal.db-journal
- Size 512B
- SHA256 79dafb5c2303e1f48c03e531c66845ef58460d40503288ad396647b7e60dc198
- MD5 29b11ad105c5250f90521364326152f1
- SHA1 21a3642d8f536a56dabdb351e506463c692ee08c
- SHA512 4b8cc7bb8c26d9cc529e2784cb42018bd14c0729830cf1be9b860927cbc4e0f875bad3b73ae262ee9577bc3f0a6fc65251854ac41563b68c5032d92c2c55eee6
- MD5 SHA1 SHA512
- Path /data/data/bin.mt.plus/databases/exoplayer_internal.db-journal
- Size 8KB
- SHA256 181d1feb07ca69fffb2c11d4f1315c4bbd3e293c7977fcd46897f462e961e730
- MD5 5d96fb39c6dd21d506bc616233c58b10
- SHA1 a959abd3e895c9b0aa02a7203238c8ca1d9ca266
- SHA512 aee8d27ad0ba30be0c80901da14de45574b9076eb0c01d6fbf794105796e9f6d30e28b4b0746a340f4989c2ce9332e39f4416c91953e9cae54a569094dd73097
- SSDEEP 6:7+/l9Rlgn1Z9llng9bNFlEuWdkG4lWlOERX4PBX4ogLugMBX4suuKkr:7+tt89/nqLiuWdQoRmBEyPbv
- TLSH T10F02228867800812C82B56BBA0E68B590E20A7188A61CB07075008947C474CCACA0E08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/bin.mt.plus/databases/exoplayer_internal.db-journal
- Size 4KB
- SHA256 f13fcf4dadda0743c63c255ad56fad48187562e7ae388389a7f73b44fcfdfc6e
- MD5 4920e07865e581af2286724bb4fed98e
- SHA1 1e1e9e99d01177b99c4e0aa565dac5866b613cc9
- SHA512 cbe381b1c17036e4229f8b8de0ace49081e485f01adbc353affcb8c026da82d506976b4ce3b9545008a26588ee2cb43f7d0cd508bf303514ff41d60d16fb0f71
- SSDEEP 6:7+/lx1Pg9bNFlLdvlWlOERX4PBX4ogLugMBX4suuKE:7+trqLJdvloRmBEyPbb
- TLSH T10991808D77410913C5195B77B0D583591E10B719C373CB5715500C647D476CCEC94D48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/bin.mt.plus/databases/exoplayer_internal.db-journal
- Size 8KB
- SHA256 97dc0aaabbc198aa21164273ab82e0691570921e2a7f76f207856eafdcb845a0
- MD5 0b8d2f02e9642bed1d3f5912d08c2d77
- SHA1 fd153d35cd5d640728ea3cdb452ef9053ff21ad3
- SHA512 2a18380a72a223a6884b1a16a355161662550539b0f47c2c7d3076e77ad87dd6fd1e4e82eaa7597d07d7e0ffd1392f2e64e9037c5b94c908473dd77ea539d006
- SSDEEP 6:7+/l9W8HPg9bNFlqhO1SllWlOERX4PBX4ogLugMBX4suuKPK//4p:7+tg8vqLmqioRmBEyPb4KX4p
- TLSH T1B102228967800C23C01B167B90C883680E00A72C8121CB571560086CAC026CCBC94D44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/bin.mt.plus/databases/exoplayer_internal.db-journal
- Size 16KB
- SHA256 0fcd2ccfd759510e63e3f37c7a6ed8404fc394b14815c0faba9ffc6c928ed7e4
- MD5 ac538461f6706d160282874811b3943e
- SHA1 997e58f450f83308e94f5ce0adcc8ce810d54860
- SHA512 8e96c10695a24b78abf1bc4bab714dbcfc85df28e7aee5d403d5ab5a62242d2e8a82b42048c6dfe15ce123abfd14ded44e005dc8026b0b90f31c482b94a03c7a
- SSDEEP 12:7+t79/ZpDWnD/vqLs7EdNaWGmwf9AvDyAonAyGzBmGmrRM0yA2AKRmBEyPb/J:7+thGqLjdNNe9Oy9vGoGIVyteGSB
- TLSH T19B72498E0F382372C07642B6B1C753673FEC972A5352C25BB894B0576DC709D6055868
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/bin.mt.plus/files/default.ini/FMVSULROEQOSAIZDFATC6FR6EI4TA111.new
- Size 7B
- SHA256 a9a4c6ba42b5e8713abaedc0e2e9e057ccb707f279b27fd352b054bfea1f63a8
- MD5 455acdc51496cfd9f1c776ee62854fa3
- SHA1 26a66168d8aa74916ddded256d2c02a0b39f362d
- SHA512 711602dd46b7d7ce9b54a5072a80debbea7e1075562e41635ac5b28d20b5c889b8b07aaedae1953950982cf56a3aa5d968e1423ff9da74aad9b2f86bbed7a910
- MD5 SHA1 SHA512
- Path /data/data/bin.mt.plus/files/default.ini/FMVSULROEQOSAIZDFATC6FROFIQDI111.new
- Size 1KB
- SHA256 476a101ef41d997789462048344d27c45002e10187d5569c62135ed86c0f571b
- MD5 c24ebeb4ab82057a16836884bc883e2c
- SHA1 9eab1bd5137fa57b19c60a1b1ef00d4b6e7a23e9
- SHA512 f97cc4e1d7c3f04f962f49960f245ffb24b161716af4010b1aa1ba79ec3ef9e2ca4b5283c988b5bfc8626db68825070bdcc07bd867e1d4a2a56f3d374c9cabd2
- TLSH T1B03175A70EB042A66A1E539344FD0F7CD2098FAF8BC4E51A062356D6447818635F7A4E
- MD5 SHA1 SHA512 TLSH
- Path /data/data/bin.mt.plus/files/default.ini/FQWC2KJJEMNCOJBEF4QSQEJ3FEQSCOB7HE111111.new
- Size 7B
- SHA256 96dd7b320eaca76964048af9b9333e8403b635859c1ef36d2d1224a4d33cf1aa
- MD5 04fc736e1e401eec5c9cb1974adccaaf
- SHA1 d3f3c549f11d3a2a44d3ae37f9e14661eaf001a5
- SHA512 02278cd5800323c724f4003a3ed31dca1488ad26e40664464d83eb26e2b87c2ea725f7f7098f109699c67e426e8a3b5019e2aa3827d779407dd29897fa0da778
- MD5 SHA1 SHA512
- Path /data/data/bin.mt.plus/files/log/1786602215376.log
- Size 4KB
- SHA256 712c72d16e81c4c472cbd9b09d58fe6a221ab8def95b78a35042e4a2385d9aa5
- MD5 04c2fcd1f54164adafe275ea16a679fe
- SHA1 084e7b5ecd366d165a055b25419af4804fe14085
- SHA512 9e886bfa127d3564567e167e661ea8e1e818ee6fd74ccfb72c82276d7e1f1b0ab44147b65b3a421134f0cd618bb9be4b5dc0b92b8848e870174b7d979012bb65
- SSDEEP 96:Kl3/57JZNwFNwVHrNwVHVNGNsZNxN0NANwFNwVHrNwVHVNGNsZNxNsZNpNdNsZNk:s7Jg8RCR+8RCRIpl
- TLSH T1FB918ED9193627650A5FA05BF538834D4FC271D5E02B01B0BA4E899F97A748F42FCF89
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/bin.mt.plus/files/syntax/builtins.cache
- Size 5KB
- SHA256 5cb1e7103be38e01fa589edbc910fe1a9d02faa602dbc154bd01f983530d9483
- MD5 d38097627dbc48069338080da3c0e519
- SHA1 65784b6f2a927de6f62bbc58caa1871ae40d4ab4
- SHA512 9efeb0ef23279e73a639807b8b2507c594f495536ff843454bb2316557db1dbe4de2db1064098b1baa03d47723d122a345dde925d62cc5250da617224bbaac9e
- SSDEEP 96:TQK2gh9Y+SfXgKI+S8gMlJ7G/ugqYwXg3IwkgbrlImj8p85gKUY5og8I5tg+lvXs:TQ1gh2+SPgt+S8gOJ7GGgtwXgYwkgdIt
- TLSH T1F3B102524238278AF880943887E70BDF92E2F17BF1454E653DCED6949F864186DE1BCE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/bin.mt.plus/files/syntax/styles.cache
- Size 1KB
- SHA256 428256f47aa52e6b6f77997ed2866aeb23f16e38b291dda2d6ff6dc766fac666
- MD5 6c2cdfe825d7586eea9d0607284dd005
- SHA1 e1b8e85313a45843b8bfcba449338080434e670e
- SHA512 2d59dd315519b44338f60d757a456cd5eaae855b286aa2917d72dc1db419b39a060aaaff0b8b54491f9ef997da1009a11369e566db0b10eebe4b7eae8761de00
- TLSH T1C22163D0FE87DC6CFC65C27449E5A967E60C330389DB496DB8CCD28D4B0BA21488E496
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/bin.mt.plus/primary.prof.2qmYeD.tmp
- Size 7KB
- SHA256 ed7edc6955197f1f8945b0cd124250649a2e5aa98cb0fc834f2b2c88fbcf1b97
- MD5 dd9251568ccd1b95a74c41c039cc6c43
- SHA1 66dc7b380da681b62f6f872ad066d678257d122b
- SHA512 764cc4a9693d6f1bd413e558ace02e809429915639cbad77710239157f8371bfe7845f3a38dd3c009d3f3cb36a74f347508ba828e23045ab4bb1533cd772b1c1
- SSDEEP 96:L1csutiWUgwOZ0Z4O9SSKsNWmhf4efzm/utLGlpcAbqDg9uN73vRJZg2WBbkQwRI:LRuAgwFX95fLIutfquNrvPZgzbkz3hs3
- TLSH T174F17D01CA64D8B587036CBAFF949AB0A578D2593484BD1EAD43B9E593010EA798F790
- MD5 SHA1 SHA512 SSDEEP TLSH