Analysis
- max time kernel
6s - max time network
249s - platform
android-15_x64 - resource
android-35-x64-arm64-20260325-en - resource tags
arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system - submitted
22/08/2026, 23:45
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
Polar Patcher_1.0.apk
Resource
android-35-x64-arm64-20260325-en
1 signatures
300 seconds
General
- Target Polar Patcher_1.0.apk
- Size 8.4MB
- Sample260822-3rtpgavygz
- SHA256 3e8542e17476e5272ff503a6737801ae18af3445d091fc63539c533aaf78e4bb
- MD5 21b4ca21a7ea9ecb3d6d96020a08fefc
- SHA1 c4e1cd17d1c404fc57af2e5e7128091445a41182
- SHA512 04d0b40d2113bc355797a23b100975423ecff6ae451aa25a92e1059a2a6eda81396f8cbdfe0e36c3e6433d451767c4fb9314ff16d17ee167eb779f49049060db
- SSDEEP 196608:MT8JMhvTixbYpOkrFTnRDGn+AH3tabYCmvxF5R7mpQFkmS9cs4c0ZV1n4aU:rJEpPTnBG+AX0kxQYkmUcVc0hn47
- TLSH T16196335AF268AB2BC937D132168917356166C9348B8793CB680937B9309FBFC0F513D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 21 pastebin.com 20 pastebin.com
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/polarmods.patcher/cache/oat_primary/x86_64/base.3309.tmp
- Size 16KB
- SHA256 d77022c91840a452414005fcaaf2ff46cd833db910c1a13423d93079224fa0f2
- MD5 82fa2918c29bfedb1c0f7b594f87c42e
- SHA1 39df0e4e7f481226e55d76220e6f77bd63fc0a72
- SHA512 3b249c1916bc519e08774d2e43f087780a4588b8e4e209a3a2e3e700e7d491d121efc0da9fa2bc215c3025188dee1d8c180e276b2022e58f1f40ca258277c00d
- SSDEEP 48:mpHkGe56I8NSa1A2kKNWX6EgZnbF4Q4qn1CTnS5Mlt9DzMULUd2Ve0Uweyd2cHNM:oHkdOSa6Y8ta27FO0DekZWGuJqGFGy
- TLSH T15472400FD7127121C1E9C8F9DAC7192AC53A17A6230E4423ADBC237FF5B4B48A329B41
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/polarmods.patcher/oat/x86_64/[email protected]
- Size 296B
- SHA256 bd747ad3cc376cb5fb60af1a97f410ff4858c84b21d386205994c49e0f0faafd
- MD5 6267a24535ed980ac66ad75b6ba10da5
- SHA1 f27ba9e8f6d267704aaf7356d49fe0e4a54598a4
- SHA512 a0345d902729ed00246ea906ca8a5169a6d377cd00fdc352a49fd9eb2bd877ab1d6ad058ed6cb22394b3ba6a9e2cdd0624af04e79f027bb28389b55564dcadfa
- TLSH T16BE0228AF1211842C2764078059783CAEDC12F69058BAE237090318CE8388F4F642200
- MD5 SHA1 SHA512 TLSH