Analysis
- max time kernel
46s - max time network
152s - platform
android-9_x86 - resource
android-x86-arm-20260325-en - resource tags
arch:armarch:x86image:android-x86-arm-20260325-enlocale:en-usos:android-9-x86system - submitted
22/08/2026, 10:09
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
ht66.apk
Resource
android-x86-arm-20260325-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
ht66.apk
Resource
android-x64-20260325-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
ht66.apk
Resource
android-x64-arm64-20260325-en
4 signatures
150 seconds
General
- Target ht66.apk
- Size 2.8MB
- Sample260822-l7bedstanf
- SHA256 9e31b6d3085f6be9c270b7b107d43d56bb44b958ad60ddacb3e5a20a08d3b870
- MD5 e0dbe418c7940a03348af09108fb8df5
- SHA1 13c9a58ee4346600c4ee7b7997c2982f8b8b7bf8
- SHA512 0925be89803af1b496a0fde7791e13ccd9c226b713bce9a75ad08cdedf11c51f4dcf7b99328ed95679e39dcd92564ac56e7bc67a48a78ea5bf7e1fd15f335e14
- SSDEEP 49152:2/dSMkd4ICTIQD4i6gV50OHHm4aTW4cnCWA51N1caiCMSwmf2Hpe45r:2VSMO4IKPb3V50OVSdLjwF7SwYmr
- TLSH T1C0D50142FF29D92FC87781331D96473116169D1ECA82A74724DC376C687B6E80ED9BC8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Queries information about active data network 1 TTPs 2 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.howfuny.id.ht66 Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.howfuny.id.ht66:remote - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.howfuny.id.ht66 - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.howfuny.id.ht66 - Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.howfuny.id.ht66 - Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.howfuny.id.ht66
Processes
-
com.howfuny.id.ht661⤵
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:4323
-
com.howfuny.id.ht66:remote1⤵
- Queries information about active data network
PID:4382
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.howfuny.id.ht66/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- TLSH T1CD810441534000F1D05407F354D1130C1F47D1D5D5410F03351100C5DC415C40C70FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.howfuny.id.ht66/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 2bf7dd03e458764d9c512182cca1139280933c793b5950787c38a4cc99bf119e
- MD5 aad0c058d1f2bff52ea294ad0720311e
- SHA1 6a5e4bfcdd35a958e6fd57ccedac8e2fe193b9c3
- SHA512 e4e29b369b9d398a21960788703ebe27080826f8823ed4f0e2d6ac80ee06b7e4bd10c818b4c1d50d8deeff64e46f67990673a5a74da9d3b2c557ba0f434c6028
- MD5 SHA1 SHA512
- Path /data/data/com.howfuny.id.ht66/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.howfuny.id.ht66/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 c788915a4a683da096203b2714f420332f28e92a2f9dbb13e0c122c9525ee5f7
- MD5 efe7a0c45dc9a3ce4c0b3710719c5130
- SHA1 6199010f145ca01d0cae9af54ab01f4919a1087d
- SHA512 38e226423a7bcf542521a9ab5e1ad900ce9c5547f605b1361bec8f9e8146adf8b76fbfaabf832b94035886902e26cba05a7befa629d3ddbec6ba33575f05bb88
- SSDEEP 6:KsySY8E9yyS49FZdrlOERX4PBX4ogLugMBX4suuK+/6yS7l7CnpoCnHw+Ow2:KsDPEzdTRmBEyPbP/6/7CiCHw+Ow2
- TLSH T1E572C248938A0952D3D6437E58E5C3A12EB15318C392CB0717302428EC427ACA073D48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.howfuny.id.ht66/no_backup/androidx.work.workdb-wal
- Size 112KB
- SHA256 2c4a519e85a0a5fe2c92bddade005279b9e4cef9e5b800127a0244c3bec79c66
- MD5 c48e0591a023118d728ff21c2bdc038c
- SHA1 737a46987a74f76226acce79aaa4d353483c4aa3
- SHA512 12de1a96e40f6922b6621b75ad3e1d5e950852e8616af0ef13484d34031a40bb468f55612b19877b26712dec1d2faef5b009588d11c7819e6df9af01f53b9181
- SSDEEP 96:z01vWUDP6+hdjnHtDRgL/f8dKeKcK+zSXKM+6D86T0ExV:z01vVndjnHt9S/f8JzSV+6D86T0ED
- TLSH T1BFB3CC8E0F5E2640C5E964B499A00BF1793E452EC3D3E3D166B14075EDD2924EE3ACFA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.howfuny.id.ht66/no_backup/androidx.work.workdb-wal
- Size 120KB
- SHA256 0c2a27952522db377c3c16e190d706cd4ba4dcd7b5197b015eeff0114c4124b5
- MD5 be6c80fe37a6cae14884aa2565239319
- SHA1 74572619964f9d2d2a6d71c17c130c167d62746b
- SHA512 7638ffc6c25093b3ddaa0a14509551a5e5d6b39eb216203b0841a6eb1ad97d46656f2ace96af500adf96099edfa000e2687a92188cbca4131035fa7ff15f8086
- SSDEEP 3:RPyySkPT4OwzXtRKVjWWdZr9Po9lVd0XllgoqKXtRKVjWn:YySA+72V1ZpPo0p2Vq
- TLSH T107C392F7169E5823C19027BCFDAF96E41022DA0096C8A873593929A4690178C1A32400
- MD5 SHA1 SHA512 SSDEEP TLSH