Analysis
- custom tags
dropperobfuscated - max time kernel
1s - max time network
152s - platform
android-10_x64 - resource
android-x64-20260325-en - resource tags
arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system - submitted
17/08/2026, 03:48
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
8308bc9be359c4cfe85ab424e7684dfe8429619cdad8232d41f530649f7f34b2.apk
Resource
android-x86-arm-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
8308bc9be359c4cfe85ab424e7684dfe8429619cdad8232d41f530649f7f34b2.apk
Resource
android-x64-20260325-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
8308bc9be359c4cfe85ab424e7684dfe8429619cdad8232d41f530649f7f34b2.apk
Resource
android-x64-arm64-20260325-en
1 signatures
150 seconds
General
- Target 8308bc9be359c4cfe85ab424e7684dfe8429619cdad8232d41f530649f7f34b2.apk
- Size 9.9MB
- Sample260817-ecttxssgkg
- SHA256 8308bc9be359c4cfe85ab424e7684dfe8429619cdad8232d41f530649f7f34b2
- MD5 c88dcc3fa3ab9f91b0725aecb4ba5e59
- SHA1 68a85f55d80c315a1e896459b6f164bb0a50c6ff
- SHA512 4cc9c7e16175782228cf30d1d351ebfbc62026f0120a4bddbd63a71c0dcab26dfca03a317ad3542cc2a0827cb78c5fce18c14bae5bc58fb08b55d86b01579784
- SSDEEP 196608:dcXUwuETMTQI7h9HJGTyMFklukK0zll+F1gazf37xPY:aXUxjTJh9HJGT1OJfzfm1g
- TLSH T157A6018BF798DA1EC433A032C96B573231470E555A4297B76A0CB72C28B79D14F4AFC9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Malware Config
Signatures
- Encrypted or packed staged payload inside Android package 1 IoCs
Extracted asset shows near-random entropy without a recognised container header, indicating an encrypted secondary payload staged for runtime decryption and loading. Correlate with any runtime class-loading detection on the same sample.
resource yara_rule behavioral2/files/fstream-2.dat ANDROID_Encrypted_Staged_Asset
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/pom.laun.age.tran.llator/files/prodexdir/0OO00l111l1l
- Size 5.8MB
- SHA256 49ef3dc87fac2548eb3d86b336af00588535ffba138c987e1646dbbd099dafc7
- MD5 c5aa2195cae4de472cc140a12c381663
- SHA1 c8a0cb986db826565472f86bcf51fc42bfec5eee
- SHA512 821fa7c95e98fd0745bbb0aaca134a75c6f0b4f0133d6c01ad1cbaffc8348669c8d031fafc27ae9e06d2d3ded2f19d7b44480f65a38558a9c2055462c2c9db69
- SSDEEP 98304:9qZcx5SZwAhETMTdRUISb3SEBm9Hr976TyMOzg7klBkHo+yARbkduqOhl:QcXUwuETMTQI7h9HJGTyMFklukKl
- TLSH T10E5633F36392A54C723B8081A20DEC7402E417DB97954E911EDF738A01A97A7DC1EF9D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/pom.laun.age.tran.llator/files/prodexdir/o0oooOO0ooOo.dat
- Size 144B
- SHA256 d987934f9710da26811eabfeae00e989704fd082b7ce9316fda8696942f831aa
- MD5 7e0bff9f284b36bdfd1c523fcb926233
- SHA1 bd7d76b29531d147b0da2c2e1611661c3933fac0
- SHA512 aa7af5d09e2ae5bad04c931dab5659216e33cf8e1a7c668849b0ace816b3b5589abeaa97c8eb46db6bcbbe20a3f1b9474866ea223288d2f955fc3353c8b9cbe0
- TLSH T13FC08C20408CAC5220062A2B18FC0104DCA8E20C19AB181D0D08496FE00B8081201C5A
- MD5 SHA1 SHA512 TLSH
- Path /data/data/pom.laun.age.tran.llator/files/prodexdir/tosversion
- Size 31B
- SHA256 afd10e437424e4de1552f06ea84d0804f570d53e47b7ba3cd41a0335d9fdfa0f
- MD5 6d4b7f6a10287a115aea1904662e0345
- SHA1 83a709c398d297fa831197c9161c1a4de50cc3d2
- SHA512 655def7678e86e41993210e5879ffae72020944d8cf0fa34d22d89fb96f148a887f2346724437f133693502c5821134c090d1b161252fec14bd80ca60267539e
- MD5 SHA1 SHA512