Analysis
- max time kernel
62s - max time network
151s - platform
android-11_x64 - resource
android-x64-arm64-20260325-en - resource tags
arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20260325-enlocale:en-usos:android-11-x64system - submitted
20/08/2026, 17:13
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
optic.apk
Resource
android-x64-arm64-20260325-en
1 signatures
150 seconds
General
- Target optic.apk
- Size 3.2MB
- Sample260820-vrml6aeg39
- SHA256 ebbfd272cf922a855768842fbd6e789f7750ea30c907e0d25b378401b528e802
- MD5 21c6d4c1aa4015dc2cf1df1a354451b6
- SHA1 98b8fc83da93cd661b65cefe9bc2f0992e87b20f
- SHA512 bddf158ad31009e106092b04f92c845e64264085146659fa97c1a4cf7bd2511c88f1c62df71838e5ee89eb9fbc172c2224c59e1701aafcf89880a5991b4466c7
- SSDEEP 49152:AI13gZGNILZf2j4N8FdQpCUAEFt2u4/QjczGopnSGE1lcCABQuZfgsWQoyfgehS:NGZGK9ujpT5LEFt2u45VSGOGC6Z4BH
- TLSH T1FAF51286F3E61D2FCCBB44360B5A433052669E52C367E38B8998762C6C776D85F48BC1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.piggy.optic
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.piggy.optic/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- Size 8B
- SHA256 d12ebc3d5611c35d285e3d3b1ee517ae39dd16a8af34f07bc22b34f820b64ee9
- MD5 65a9839b3ce44d20f477bb5497eb2058
- SHA1 fc9d78bc20de3733230e43de2efe99232c25f68c
- SHA512 4a19d4323d1eaaacbfa01aaa0d1d3ee1785d7f52aa39b632c1db6476c229debfb080f004ce1467d2ffb1ed025c6f7610b2278feed8763c8f9ece0f604460e419
- MD5 SHA1 SHA512
- Path /data/misc/profiles/cur/0/com.piggy.optic/primary.prof
- Size 415B
- SHA256 b0d79b50ad4cdba06814f8d27c236ba2b02a555d428294edf7b50aa193ee3f6b
- MD5 51479ab0f38b1146604eed9d5bb8de9f
- SHA1 5aa98f205a132cb39b305faecaaa451b5ecc0fe6
- SHA512 829795558027f6760c2c5e12804a7fb494bf6720ebca71e44673e64985aae389ab99d682fccef84a5aca6ad9d10da95750c7979afcac99da4cacb795530adbe8
- TLSH T1C8E0F1643F08E7F02F213F524F6F9E9927BC1827E99A13C0F0437018E8033A58B40412
- MD5 SHA1 SHA512 TLSH
- Path /data/misc/profiles/cur/0/com.piggy.optic/primary.prof
- Size 4KB
- SHA256 6e5a3155aa7523b760bf91496c48423be77beaed4815c20a79adf9a4d8d22cf8
- MD5 16f81a65ae850f70a9c4461925c893be
- SHA1 5b710e1d5b8ea155e826e6d721823039e9c84fc2
- SHA512 e459b2f5a8ebdeb4baeb4239b07cdbda22c0818e6cc85378d084aacad1de1291739e53f467fdc5cb61a84f56d487068bf50a0e385d8a3dbe873aba3e509af292
- SSDEEP 96:RCcGQ2HTd+Mpg+gJvzzPavG6uOSi4paHNS9ECLJDCvqnoW:P2HTdDpgHRijuO92RQ0
- TLSH T1C3917CB9A27B809F1907D0424A8C9F7A4BB6AE8374140039A25AC06C4C23B9A2E755B6
- MD5 SHA1 SHA512 SSDEEP TLSH