Analysis

  • custom tags

    dropperobfuscated
  • max time kernel
    1s
  • max time network
    151s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20260325-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system
  • submitted
    17/08/2026, 03:48

General

  • Target
    8308bc9be359c4cfe85ab424e7684dfe8429619cdad8232d41f530649f7f34b2.apk
  • Size 9.9MB
  • Sample260817-ecttxssgkg
  • SHA256 8308bc9be359c4cfe85ab424e7684dfe8429619cdad8232d41f530649f7f34b2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10

Malware Config

Signatures

  • Encrypted or packed staged payload inside Android package 1 IoCs

    Extracted asset shows near-random entropy without a recognised container header, indicating an encrypted secondary payload staged for runtime decryption and loading. Correlate with any runtime class-loading detection on the same sample.

Processes

  • pom.laun.age.tran.llator
    1⤵
      PID:4762

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          0OO00l111l1l

          • Path /data/data/pom.laun.age.tran.llator/files/prodexdir/0OO00l111l1l
          • Size 5.8MB
          • SHA256 49ef3dc87fac2548eb3d86b336af00588535ffba138c987e1646dbbd099dafc7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          o0oooOO0ooOo.dat

          • Path /data/data/pom.laun.age.tran.llator/files/prodexdir/o0oooOO0ooOo.dat
          • Size 144B
          • SHA256 d987934f9710da26811eabfeae00e989704fd082b7ce9316fda8696942f831aa
          • MD5 SHA1 SHA512 TLSH

          tosversion

          • Path /data/data/pom.laun.age.tran.llator/files/prodexdir/tosversion
          • Size 31B
          • SHA256 afd10e437424e4de1552f06ea84d0804f570d53e47b7ba3cd41a0335d9fdfa0f
          • MD5 SHA1 SHA512