d8ea0903235a578c388bdc7f379a364bf7833829017209fe526d46daeacdac52

Analysis

max time kernel
11s
max time network
152s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
24/08/2026, 21:44

Target
Ahmyth-aligned-debugSigned.apk
Size 293KB
Sample260824-1lfvbafb95
SHA256 d8ea0903235a578c388bdc7f379a364bf7833829017209fe526d46daeacdac52
MD5 249ad9bc9286d482d7e38021f4dd4060
SHA1 77ab7212a3033860719b9819c3fec3adf0305ae2
SHA512 cdb9fd7774cee4884828d256698ac76c50dede6a7f86a64e953dbcbad916470f2bd9515909fe938415bb49a6d9a7cdad1f3bdf4a86699f02606156653fb77b00
SSDEEP 6144:/fqis25+h6IwvDAL0K1E7eD/LkNbWPuYO:XqisU+h7wv0L91geD/fuP
TLSH
T1665401C7BB07E591DEE38133992B42D7253B2D68DE02A6A33946732C88F27C0DF15664
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

Foreground Persistence

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	ahmyth.mine.king.ahmyth

ahmyth.mine.king.ahmyth
1⤵
- Makes use of the framework's foreground persistence service
PID:5094

Initial Access

Execution

Persistence

Foreground Persistence

Privilege Escalation

Defense Evasion

Foreground Persistence

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact