hxxps://apkpure[.]com/hokage-ultimate-storm/com[.]ruqbp[.]lobnq

Resubmissions

17/08/2026, 01:00

260817-bcsebagg946

17/08/2026, 00:31

260817-avklragf798

17/08/2026, 00:30

260817-atvekazzd11

Analysis

user interaction
yes
max time kernel
33s
max time network
1028s
platform
android-11_x64
resource
android-x64-arm64-20260325-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
submitted
17/08/2026, 01:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://apkpure.com/hokage-ultimate-storm/com.ruqbp.lobnq
Sample260817-bcsebagg94

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by VPN services to bind with the system. Allows apps to provision VPN services.	android.permission.BIND_VPN_SERVICE

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read the user's calendar data.	android.permission.READ_CALENDAR
Allows an application to write the user's calendar data.	android.permission.WRITE_CALENDAR
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows applications to use exact alarm APIs.	android.permission.SCHEDULE_EXACT_ALARM
Allows an application a broad access to external storage in scoped storage.	android.permission.MANAGE_EXTERNAL_STORAGE

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4419

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

.pending-1787533248-APKPure_1.01.57_apkpure.com.apk

Path /storage/emulated/0/Download/.pending-1787533248-APKPure_1.01.57_apkpure.com.apk
Size 5.6MB
SHA256 ffe70071e805d87e29defa9e03a36a0044cbac5b1aaa716cb9ef959b464a4463
MD5 3ad40dd6c2a3a5dcdd181c9d641f3570
SHA1 6486fc72dd8d9eb172e796ff6bad4c5a6dcaf637
SHA512 d0e847f693fa44aa7fdc78466715ff0e1f825d3e088e2f1062d48d7823d940ed9d91734f52dc4673a22bcfa7f84ea79c66ceecddd8f8ad14d0cab7b9ec12a8dc
SSDEEP 98304:LGa/qJ+5jjT/5TY8pamu+gUW8/Ex12iGSwTHu4+8ROOOlVVd8CDP:N/qJIj35Tpashy12iGSG11ROlP
TLSH
T1C946F1C8BB45A81EC87754BA8C525772224A4C258F92D3577A0C331E3F779E84F69EC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.pending-1787533248-APKPure_1.01.57_apkpure.com.apk (deleted)

Path /storage/emulated/0/Download/.pending-1787533248-APKPure_1.01.57_apkpure.com.apk (deleted)
Size 536KB
SHA256 5c2f9b5f141cdad025fe6f0a0fabb71847acdeddcba81e05859aa3092ef57d92
MD5 b724e221d05640ed5bcf810a3be1ba97
SHA1 53acbeffd63a25647d7c82e554b78dd48e6afeb7
SHA512 378bff064ee0cf926eb527d90de3c01bd22f3871baa0ce6c597bbe983c05f50d82fe614c6eb72b6659a022ad7926aec0db8733a20939cf8ba0e778602c8dc7c5
SSDEEP 384:+JqdhNScz8KO1vLldl79e9gw+GiN5rVtaCAcOe5qPlkn1MS7zFJ+qh2KxIUhMAek:+qQczVkv3Lw+nVZ+iAlk2TKSJATE6
TLSH
T17AC47CE1FBFED532E65B96B5731B32152B5202C200949D5B7705FC8C76B888842B2EDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads