Analysis

  • user interaction
    yes
  • max time kernel
    80s
  • max time network
    207s
  • platform
    android-15_x64
  • resource
    android-35-x64-arm64-20260325-en
  • resource tags

    arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
  • submitted
    14/08/2026, 01:00

General

  • Target
    https://github.com/gokadzev/Musify/releases/tag/10.2.0
  • Sample260814-bc5pmsed76
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Checks CPU information 2 TTPs 1 IoCs
  • Checks memory information 2 TTPs 3 IoCs

Processes

  • com.android.chrome
    1⤵
    • Checks CPU information
    • Checks memory information
    PID:3251
  • com.android.chrome
    1⤵
    • Checks memory information
    PID:3654
  • com.android.chrome
    1⤵
    • Checks memory information
    PID:4119

Network

        MITRE ATT&CK Enterprise v16

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        .com.google.Chrome.UvjJPF

        • Path /storage/emulated/0/Android/data/com.android.chrome/files/Download/.com.google.Chrome.UvjJPF
        • Size 109KB
        • SHA256 24fbbdbf297cafe632294d60b611cc966ab261c389b2b2e6d6d87a1780a3c5a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .pending-1787274107-Musify-arm64-v8a.apk

        • Path /storage/emulated/0/Download/.pending-1787274107-Musify-arm64-v8a.apk
        • Size 30.4MB
        • SHA256 62e1e75ceae4ac30757765509fae04ab5a21f291f0ea9ff9a3a92c3e2a9bc26a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .pending-1787274107-Musify-arm64-v8a.apk (deleted)

        • Path /storage/emulated/0/Download/.pending-1787274107-Musify-arm64-v8a.apk (deleted)
        • Size 621KB
        • SHA256 cc9b8b3897e5d54294d056d719c1d40192b0313f6db08a1cb750f2e5a7a07848
        • MD5 SHA1 SHA512 SSDEEP TLSH