3e8542e17476e5272ff503a6737801ae18af3445d091fc63539c533aaf78e4bb

Resubmissions

22/08/2026, 23:45

260822-3rns8a1bke

22/08/2026, 23:44

260822-3rhxzavygw6

22/08/2026, 23:39

260822-3nar7avyex7

Analysis

max time kernel
1s
max time network
35s
platform
android-14_x64
resource
android-34-x64-arm64-20260325.1-en
resource tags

arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
submitted
22/08/2026, 23:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Polar Patcher_1.0.apk
Size 8.4MB
Sample260822-3nar7avyex
SHA256 3e8542e17476e5272ff503a6737801ae18af3445d091fc63539c533aaf78e4bb
MD5 21b4ca21a7ea9ecb3d6d96020a08fefc
SHA1 c4e1cd17d1c404fc57af2e5e7128091445a41182
SHA512 04d0b40d2113bc355797a23b100975423ecff6ae451aa25a92e1059a2a6eda81396f8cbdfe0e36c3e6433d451767c4fb9314ff16d17ee167eb779f49049060db
SSDEEP 196608:MT8JMhvTixbYpOkrFTnRDGn+AH3tabYCmvxF5R7mpQFkmS9cs4c0ZV1n4aU:rJEpPTnBG+AX0kxQYkmUcVc0hn47
TLSH
T16196335AF268AB2BC937D132168917356166C9348B8793CB680937B9309FBFC0F513D5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/polarmods.patcher/[email protected]	4742	polarmods.patcher

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
24	pastebin.com
25	pastebin.com
23	pastebin.com

polarmods.patcher
1⤵
- Loads dropped Dex/Jar
PID:4742

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control