Analysis

  • max time kernel
    46s
  • max time network
    154s
  • platform
    android-10_x64
  • resource
    android-x64-20260325-en
  • resource tags

    arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
  • submitted
    19/08/2026, 17:56

General

  • Target
    4e52f85b5be6cdcfc8a3493c0d56e99494a36871e53ef90ea915015a9fcbbdff.apk
  • Size 29.9MB
  • Sample260819-wh5l2sstd1
  • SHA256 4e52f85b5be6cdcfc8a3493c0d56e99494a36871e53ef90ea915015a9fcbbdff
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.jojo.sellfupdater
    1⤵
    • Loads dropped Dex/Jar
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5030

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        OArhW.web

        • Path /data/data/com.jojo.sellfupdater/app_behave/OArhW.web
        • Size 3.6MB
        • SHA256 a750dd7b6629c6bc56d623115b02c94263fc5fb7ebe13bf6c55ffecd55742342
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OArhW.web

        • Path /data/data/com.jojo.sellfupdater/app_behave/OArhW.web
        • Size 3.6MB
        • SHA256 efcccc35610dcf62c20f59258b319b3bf7c3a59f708da3643bf6ece1b50c95d5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        profileInstalled

        • Path /data/data/com.jojo.sellfupdater/files/profileInstalled
        • Size 24B
        • SHA256 ab54fc09c79a0d74ea21b918bc7e2979344c00fbbde4a0222c92b04bd9bc175e
        • MD5 SHA1 SHA512

        OArhW.web

        • Path /data/user/0/com.jojo.sellfupdater/app_behave/OArhW.web
        • Size 8.9MB
        • SHA256 f14035133064bad4a8dbccd4b683b6780155298822f44c5d92b93f8e4b23d965
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OArhW.web!classes2.dex

        • Path /data/user/0/com.jojo.sellfupdater/app_behave/OArhW.web!classes2.dex
        • Size 849KB
        • SHA256 bddddc355e6af0e007894940dc137c80bed6a4bbb91da0b3b6f7e3177120f1d7
        • MD5 SHA1 SHA512 SSDEEP TLSH